denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,373 Commits 1 Branch 0 Tags
281d04502eb37292ef534ee020ce8ffbdc193ae2
Commit Graph
661 Commits
Author SHA1 Message Date
Andreas Steffen 281d04502e additional debug line makes certificate status checking more understandable 2008-04-02 06:25:59 +00:00
Andreas Steffen 9372f44c67 workaround for parsing IPv6 PSKs requires extract_last_token() 2008-04-01 20:40:29 +00:00
Andreas Steffen 080555e76a demoted received notify debug message to level 2 2008-04-01 20:22:38 +00:00
Martin Willi 9d1c384b4b loading of subjectPublicKeyInfo wrapped keys using KEY_ANY (openssl format) 
testcase
 2008-04-01 14:51:31 +00:00
Andreas Steffen 392f4e17c2 minimal stroke_list_ocsp() implementation 2008-04-01 12:11:09 +00:00
Tobias Brunner 9c2a905d63 stopping connectivity checks on the responders side after receiving an IKE_SA_INIT request with the proper ME_CONNECTID 2008-04-01 11:38:18 +00:00
Martin Willi 45d66f5af6 some simplifications to trusted_enumerator_t 2008-04-01 10:56:08 +00:00
Martin Willi 1bb85edffe checking pretrusted but bad certificates only once 2008-04-01 10:43:44 +00:00
Andreas Steffen 946d1ecd59 stroke_list groups certificates by issuer 2008-04-01 10:26:27 +00:00
Andreas Steffen c096472605 minor changes in debug output 2008-03-31 21:59:32 +00:00
Andreas Steffen aaa7643b73 put DN in double quotes 2008-03-31 21:08:56 +00:00
Andreas Steffen a92ea0ccb3 output error message if maximum ca path length is reached 2008-03-31 20:42:57 +00:00
Andreas Steffen eafc0654ca ipsec list suppresses duplicates 2008-03-31 20:21:24 +00:00
Tobias Brunner e5ab32a7ee timing of connectivity checks adjusted 2008-03-31 15:04:38 +00:00
Martin Willi 9e72d3bcaf defining ME globally, as we need it in plugins 2008-03-31 15:01:43 +00:00
Andreas Steffen 58a05045cc utc argument in %#T was missing 2008-03-31 14:36:00 +00:00
Tobias Brunner 9e183cd5b8 signal fixed 2008-03-31 14:27:16 +00:00
Tobias Brunner f98736aee6 changed order of server and peer reflexive endpoints (and also the priorities) 2008-03-31 10:56:49 +00:00
Martin Willi 0f7ef3d2a0 received certificates have least priority 
fixed manager unlocking
 2008-03-31 08:43:18 +00:00
Martin Willi d69b267d58 fixed refcounting in certificate trustchain validation 2008-03-31 07:16:12 +00:00
Andreas Steffen dcc777652e changed error message 2008-03-29 13:26:53 +00:00
Andreas Steffen 40f9006845 output uptime in status in local time 2008-03-29 08:55:09 +00:00
Martin Willi 6b9290ff12 renamed xml plugin to smp to avoid confusion 
added some dependency checks to configure
configure checks ClearSilver and fastcgi
cleanups in the build system here and there
 2008-03-28 12:44:01 +00:00
Martin Willi 35b6e2301f fixed crash if crl fetching fails 2008-03-28 12:00:51 +00:00
Martin Willi d55fa9aff7 reentrant save cert_cache 2008-03-28 08:38:51 +00:00
Martin Willi ac1fefc2de caching of CRLs 2008-03-28 08:14:47 +00:00
Martin Willi d20e5c6ab5 replaced get_public() by create_public_enumerator() to try multiple public keys for signature verification 2008-03-27 19:07:23 +00:00
Martin Willi 0d30ba3343 use trusted self-signed root CA certificates as trust anchor only 2008-03-27 13:38:02 +00:00
Tobias Brunner e74bc8e51d changed external interface to the mediation extension. 2008-03-27 12:31:35 +00:00
Tobias Brunner b42421a04c corrected ME_ENDPOINT length check 2008-03-27 12:29:51 +00:00
Martin Willi 52a61742e7 reusing generic shared_key_t implementation in med_db 2008-03-27 11:45:49 +00:00
Tobias Brunner 54150b3f13 checking the size of ME_* notify payloads 2008-03-27 10:17:29 +00:00
Tobias Brunner b0dee635d2 replaced the COOKIE notify payload in connectivity checks with a ME_CONNECTAUTH notify payload 2008-03-27 09:54:09 +00:00
Martin Willi f957f7dfb3 implemented cert cache flushing, ipsec purgeocsp 2008-03-27 06:37:29 +00:00
Andreas Steffen d61bd27a9a fixed plugin/stroke Makefile 2008-03-26 20:24:55 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Martin Willi 685232670a added uptime statistics to statusall 2008-03-26 16:13:14 +00:00
Martin Willi 7b88a983d8 caching of ocsp responses (experimental), no crl caching yet 2008-03-26 15:21:50 +00:00
Martin Willi 391abda082 fixed compile error if --enable-p2p is set 2008-03-26 14:45:24 +00:00
Martin Willi e37f7715bf fixed rightca= constraint checking 
implemented rightca= for intermediate CAs we do not have the certificate at config load
 2008-03-26 12:23:46 +00:00
Martin Willi 2d84da89b9 fixed auth_info_t.equals() 2008-03-26 10:58:19 +00:00
Martin Willi 0b14fdb92b splitted stroke plugin to several files: 
socket: reads messages from socket, dispatching
  config: process add/del conn, serves configs through backend_t
  control: controlling of the daemon (up/down/route/...(
  cred: credential loading, serves creds through credential_set_t
  ca: ca sections from ipsec.conf, serves cdp's through credential_set_t
  list: log status information to stroke console (status/statusall/list*)
  shared_key: shared key implementation for keys read from ipsec.secrets
  plugin: registers stroke plugin and starts socket w/ thread
 2008-03-26 10:10:40 +00:00
Martin Willi 3c7e72f5b0 added equals() method to peer_cfg, ike_cfg, proposals, auth_info 
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
 2008-03-26 10:06:45 +00:00
Andreas Steffen 26930a8c3e certificate factory can load certs from file 2008-03-25 22:28:27 +00:00
Andreas Steffen 3e6ee16478 defined *_create_from_file() constructors in libstrongswan/credentials/certificates 2008-03-25 10:12:45 +00:00
Andreas Steffen 36617c1ad5 shortened debug output 2008-03-21 20:36:19 +00:00
Andreas Steffen 02fd225ea5 detect trusted self-signed before trust chain verification 2008-03-21 19:10:55 +00:00
Andreas Steffen 112482d3f4 optimized debug output of credential_manager.c 2008-03-21 09:28:25 +00:00
Andreas Steffen 25c9637222 modified debug text 2008-03-20 15:22:26 +00:00
Martin Willi dfd5cdcb88 cert_cache_t caches subject-issuer relations and subject certificates 
ocsp/crl do not benefit yet due missing lookup function
 2008-03-20 14:31:36 +00:00