Andreas Steffen
2e324229c0
support of multiple certificates with same peer id
2007-05-15 12:46:05 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi
a4a3884c83
extended interface_manager (more work needed here)
2007-05-03 14:22:52 +00:00
Martin Willi
0ccb275a93
added more API documentation to backends/interfaces
2007-04-30 10:23:01 +00:00
Martin Willi
a84fb01b96
restructuring of configuration backends
...
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
configuration backends
control interfaces
using pluggable modules as in EAP
2007-04-27 14:25:08 +00:00
Martin Willi
c80e8ba11a
added support for AES-XCBC in kernel using e.g. esp=aes128-aesxcbc (>=linux-2.6.20)
2007-04-23 13:00:20 +00:00
Martin Willi
17712ea866
fixed CHILD_SA proposal selection when not using DH exchange
2007-04-23 12:59:10 +00:00
Andreas Steffen
4841189b72
implementation of strictcrlpolicy=ifuri
2007-04-20 11:12:08 +00:00
Martin Willi
1fd5383e61
added PDF support for CHILD_SAs
...
support for INVALID_KE_PAYLOAD negotiation for rekeying
2007-04-19 08:02:19 +00:00
Andreas Steffen
f880eb2dca
started support of X.509 attribute certificates
2007-04-12 17:49:33 +00:00
Martin Willi
1dad08b035
fixed DPD delay in peer_cfg
2007-04-12 06:20:42 +00:00
Martin Willi
3b138b8422
cleaned up apidoc
...
added some comments
removed configuration.[ch], as it does not make sense like it is
2007-04-11 07:20:39 +00:00
Martin Willi
de55c6895f
accepting stroke initiation by a name of a child_cfg
2007-04-11 05:58:38 +00:00
Andreas Steffen
4876f521d6
best must be initialized to 2*MAX_WILDCARDS+1
2007-04-10 22:35:45 +00:00
Martin Willi
e0fe765152
restructured file layout
...
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00
Andreas Steffen
4c56bd64e5
removed list_crls() and list_ocsp() methods
2007-04-06 09:43:20 +00:00
Andreas Steffen
8883eef7b8
support cachecrls=yes
2007-04-05 17:07:14 +00:00
Andreas Steffen
a0eaa59b50
implemented dynamic http-based CRL fetching
2007-04-03 21:11:23 +00:00
Martin Willi
9179ac9667
merged changes from eap-aka trunk
2007-03-28 07:32:54 +00:00
Andreas Steffen
9d9c72e317
is_trusted() adds cert_status to cert_to_be_trusted
2007-03-28 05:38:42 +00:00
Andreas Steffen
1bf8530507
implemented ipsec listocsp function
2007-03-27 04:40:25 +00:00
Martin Willi
ddd1b31595
adjusted rekey-retry delay and jitter
2007-03-21 16:12:16 +00:00
Martin Willi
4315f5c88b
fixed some rekey collision issues
...
added retry with jitter when rekeying fails
2007-03-21 16:11:14 +00:00
Martin Willi
a1e5881c42
renamed keyingtries attribute
2007-03-20 08:14:18 +00:00
Martin Willi
7cec30ad8d
added AES-192/256 proposals to IKE
2007-03-13 14:55:03 +00:00
Andreas Steffen
db0f828413
results from the single responses is stored in the corresponding certinfo_t structs
2007-03-12 13:42:31 +00:00
Andreas Steffen
7c1b9ab784
moved credential_store.h from charon/config/credentials to libstrongswan
2007-03-09 16:50:19 +00:00
Andreas Steffen
5455cf230f
fixed a certinfo_t memory leak in verify()
2007-03-09 14:59:28 +00:00
Andreas Steffen
1bcb84605f
ocsp signer certificate and ocsp response signature can be verified
2007-03-08 23:29:04 +00:00
Andreas Steffen
162afac75f
fixed call of add_auth_certificate()
2007-03-08 19:44:14 +00:00
Andreas Steffen
33d108de22
generalized get_ca_certificate() to get_auth_certificate(auth_flags)
2007-03-08 18:56:43 +00:00
Andreas Steffen
9f4039755d
support if ocsp signing certificates
2007-03-08 16:46:50 +00:00
Martin Willi
069f01cfef
removed SHA2 kernel proposals from default, the kernel doesn't support them yet
2007-03-08 15:18:51 +00:00
Martin Willi
0cde6c412b
added more debugging output for policy lookup
...
returning a (dummy) policy even when TS does not match, so we can properly send a TS_UNACCEPTABLE
2007-03-08 14:40:15 +00:00
Martin Willi
9aa20fdae8
added SHA2 MAC and PRF to default proposal
2007-03-08 00:16:33 +00:00
Martin Willi
9de7540eee
fixed traffic selector redundancy removal code (not completely tested)
2007-03-06 20:55:19 +00:00
Andreas Steffen
69351da14d
add crl and ocsp uris to linked list after partial verification
2007-03-06 18:51:56 +00:00
Martin Willi
6e1be42744
some cleanups
...
not assigning %any virtual IPs to peer anymore
2007-03-05 22:07:36 +00:00
Martin Willi
02b3101b67
fixed double free bug
2007-03-05 22:02:14 +00:00
Andreas Steffen
81020aaefd
refactored ca_info_t
2007-03-03 21:08:07 +00:00
Martin Willi
0c8aba6771
added support for 0.0.0.0/0 traffic selectors
...
fixed routing to make correct 0.0.0.0/0 routes
2007-03-01 11:42:08 +00:00
Martin Willi
c60c7694d2
merged tasking branch into trunk
2007-02-28 14:04:36 +00:00
Andreas Steffen
7d119253f6
added support of OCSP accessLocations
2007-02-25 08:14:50 +00:00
Andreas Steffen
b3e4211fc3
full support of ca info records
2007-02-24 23:18:31 +00:00
Andreas Steffen
182d20e94e
support of ca info records
2007-02-23 15:15:31 +00:00
Martin Willi
f27f6296e6
merged EAP framework from branch into trunk
...
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Andreas Steffen
6fda18d99d
%T requires time_t ptr
2007-02-08 17:59:37 +00:00
Martin Willi
7995489a6d
added support for NULL encryption in ESP
2007-02-08 13:54:42 +00:00
Martin Willi
9425da1816
include NO_EXT_SEQUENCE_NUMBER in default proposal
2007-02-08 13:31:31 +00:00
Martin Willi
21f42524e0
support for transport in create_child_sa
...
include TRANSPORT/TUNNEL information in statusall
2007-01-08 06:55:50 +00:00
Andreas Steffen