Tobias Brunner
345e5330b5
pluto: Added fallback to ipsec.secrets parser if glob(3) is not available.
2011-10-14 17:36:20 +02:00
Tobias Brunner
5108d9507d
pluto: Include fixed.
2011-10-14 17:36:20 +02:00
Tobias Brunner
d52c37790e
pluto: Option added to disable adns.
...
This basically disables opportunistic encryption.
2011-10-14 17:36:20 +02:00
Tobias Brunner
2b9c3642e4
pluto: lwdnsq is not supported.
2011-10-14 17:36:20 +02:00
Martin Willi
fa7c8338ca
Plugin enumerator enumerates over loaded features, too
2011-10-14 10:05:44 +02:00
Tobias Brunner
c27c9529b7
Enable XAUTH plugin on Android.
2011-10-13 18:39:01 +02:00
Tobias Brunner
9227a3b3fa
Use separate plugin lists for pluto and charon on Android.
2011-10-13 18:34:43 +02:00
Tobias Brunner
4490804f13
Build pluto on Android.
...
Does not fully compile.
2011-10-13 18:29:36 +02:00
Tobias Brunner
21ee300d5c
pluto: Handle SIGINT to terminate properly when run with --nofork in a console.
2011-09-28 13:57:59 +02:00
Tobias Brunner
192f714076
pluto: Check for processes with the PID stored in pluto.pid.
2011-09-28 13:57:59 +02:00
Tobias Brunner
19e12db79c
pluto: Some whitespace cleanup.
2011-08-15 15:53:26 +02:00
Tobias Brunner
fbedc6a45b
Remove policies in kernel interfaces based on their priority.
...
This allows to unroute a connection while the same connection is
currently established. In this case both CHILD_SAs share the same
reqid but the installed policies have different priorities.
2011-07-27 13:41:35 +02:00
Tobias Brunner
f3bb1bd039
Fixed common misspellings.
...
Mostly found by 'codespell'.
2011-07-20 16:14:10 +02:00
Tobias Brunner
328f22e1d3
Add the reqid to kernel_ipsec_t.del_policy.
2011-07-06 09:43:45 +02:00
Tobias Brunner
c74ece334d
pluto: Made helper functions in event_queue static.
2011-05-24 19:23:45 +02:00
Thomas Egerer
59965aaf96
pluto: Securely wipe quick mode keys from memory.
...
Keying material is derived in two separate steps for local and remote
endpoint. This allows us to securely wipe local/remote secrets
separately, too -- a precondition to wipe quick mode keys from memory in
a secure fashion.
2011-05-10 15:39:00 +02:00
Thomas Egerer
9e6bb93ab9
pluto: Securely wipe sensitive data from memory.
2011-05-10 15:19:46 +02:00
Andreas Steffen
8af1e3606b
fixed loop error in parsing of OCSP basic responses
2011-04-26 12:32:19 +02:00
Martin Willi
4778655726
Cast size_t len arguments to %.*s to int
2011-04-20 13:08:32 +02:00
Martin Willi
4876d4f3b3
Added an esn parameter to the kernel interface add_sa functions
2011-04-20 12:26:57 +02:00
Tobias Brunner
6e0c82141f
pluto: Replaced some strcpy usages with strncpy.
2011-04-19 17:35:57 +02:00
Tobias Brunner
2653c08513
pluto: Make sure connection name is null-terminated during DPD restart.
2011-04-19 13:48:51 +02:00
Tobias Brunner
75cf0cc012
pluto: Clarified parsing of long durations.
2011-04-19 13:48:50 +02:00
Tobias Brunner
73ac1f2040
pluto: Avoid potential null-pointer dereference when checking CRLs.
2011-04-19 13:48:50 +02:00
Tobias Brunner
82017bf417
pluto: from_state is strictly lower than STATE_IKE_ROOF.
2011-04-19 13:48:50 +02:00
Martin Willi
c55818ebb0
Added a (not yet implemented) plugin_t method to reload plugin configuration
2011-04-15 10:07:13 +02:00
Martin Willi
787b5884aa
Added a get_name() function to plugin_t, create_plugin_enumerator enumerates over plugin_t
2011-04-15 10:07:12 +02:00
Martin Willi
6e2791715b
Migrated remaining plugin_t implementations to INIT/METHOD macros
2011-04-15 10:07:12 +02:00
Tobias Brunner
823d2f5035
pluto: Fixed check for NAT-T keepalives.
2011-04-14 18:11:47 +02:00
Tobias Brunner
3bec23d88c
pluto: Properly initialize constants.
2011-04-14 18:11:46 +02:00
Tobias Brunner
7223229924
pluto: Avoid hiding outer parameter.
2011-04-14 18:11:46 +02:00
Tobias Brunner
33c9e8b28d
pluto: Use %zu to print values of type size_t.
2011-04-14 18:11:46 +02:00
Tobias Brunner
809750d72b
pluto: Fixed potential memory leak when processing requested virtual IPs.
2011-04-14 18:10:52 +02:00
Tobias Brunner
267d47d6f2
pluto: Properly free buffer in error cases in read_packet.
2011-04-14 18:10:27 +02:00
Tobias Brunner
e51cae33a9
Fix compiler warnings at creation of CRL cache filenames.
...
This was not really a problem because ptr is the first member of a chunk_t
and it contains a null-terminated string at that point. But it's clearer
this way.
2011-04-14 18:10:27 +02:00
Tobias Brunner
64f4237b1e
Fix "set nexthop to him when instantiating rightallowyes template with leftnexthop == right"
...
This fixes commit 280f6b1ab2
2011-04-14 18:10:26 +02:00
Tobias Brunner
e54a2bd20e
pluto: Properly initialize a.continuation.
2011-04-12 17:39:11 +02:00
Tobias Brunner
2cec32e8eb
pluto: Properly initialize ta.encrypter.
2011-04-12 17:22:50 +02:00
Tobias Brunner
7f1fb6b69d
pluto: Fixed off by one error when reading private keys.
2011-04-12 15:54:29 +02:00
Tobias Brunner
24e0595437
Removed unused variables.
2011-04-12 14:44:49 +02:00
Tobias Brunner
c38877b395
pluto: Properly free secrets in error cases.
2011-02-10 16:49:42 +01:00
Tobias Brunner
84545f6e7c
Some typos fixed.
2011-02-07 11:39:41 +01:00
Tobias Brunner
2b2eecb6ec
Fixed whatis entry of pluto manpage.
2011-02-07 11:39:41 +01:00
Tobias Brunner
189cb3a1de
Escape - in manpages when used as minus sign.
2011-02-07 11:39:41 +01:00
Martin Willi
b3d359e58f
Use a generic getter for all numerical X.509 constraints
2011-01-05 16:46:05 +01:00
Martin Willi
a6478a0402
Simplified format of x509 CRL URI parsing/enumerator
2011-01-05 16:46:03 +01:00
Martin Willi
5dba5852fc
Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too
2011-01-05 16:46:02 +01:00
Martin Willi
4e508517d7
Added support for CRL Issuers to x509 and OpenSSL plugins
2011-01-05 16:45:55 +01:00
Andreas Steffen
27a66f9393
implemented wrap around of registered IKEv1 algorithm names
2010-12-26 17:11:02 +01:00
Martin Willi
d86bb6ef4d
Implemented Traffic Flow Confidentiality padding in kernel_interface
2010-12-20 09:45:39 +01:00
Tobias Brunner