denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,452 Commits 1 Branch 0 Tags
38031878dd78e6010c65df85fa1ef3dac6c1f740
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 38031878dd moved .gitignore for pool 2009-10-15 14:58:09 +02:00
Andreas Steffen 1310fbd322 moved .gitignore for pool 2009-10-15 14:58:09 +02:00
Andreas Steffen ffe6f83272 added ikev1/ip-pool-db-push scenario 2009-10-14 21:35:43 +02:00
Andreas Steffen 628f023d59 NEWS for the 4.3.5dr3 release 2009-10-14 18:02:15 +02:00
Andreas Steffen f4c4e78296 added ikev1/ip-pool-db scenario 2009-10-14 14:51:12 +02:00
Andreas Steffen 668870be47 pool should be in th gitignore list 2009-10-14 14:37:03 +02:00
Andreas Steffen 270bb348e3 pluto now supports SQL-based virtual IP pools 2009-10-14 14:30:14 +02:00
Andreas Steffen 601bc1df20 pluto can now make use of the mysql and sqlite plugins 2009-10-14 12:43:54 +02:00
Andreas Steffen 32bc430591 fixed inconsistent triplets.dat files 2009-10-14 11:08:01 +02:00
Andreas Steffen 247794827e move SQL-based pool functionality to new attr-sql libstrongswan plugin 2009-10-13 17:02:29 +02:00
Andreas Steffen 4c8bb47abd check provenance of nameserver entry 2009-10-13 13:58:43 +02:00
Andreas Steffen 27f4dd33b2 use definitions from libstrongswan/attributes/attributes.h 2009-10-13 13:55:06 +02:00
Andreas Steffen 930443afff moved attribute_manager to libstrongswan 2009-10-13 13:46:27 +02:00
Andreas Steffen cb7817a64b scepclient now requires x509 plugin 2009-10-12 19:56:21 +02:00
Andreas Steffen 3fe152f275 sql/rw-eap-aka-rsa scenario requires eapaka-3gpp2 plugin 2009-10-12 19:50:44 +02:00
Andreas Steffen 63c75a98eb updated evaltest of ikev1/no-priv-key scenario 2009-10-12 19:48:20 +02:00
Andreas Steffen 88eb0a4235 INTERNAL_IP6_NETMASK needed for ModeConfig 2009-10-12 19:45:12 +02:00
Andreas Steffen a86d534b4c prepended all ISAKMP notification message types with ISAKMP_ 2009-10-12 13:47:22 +02:00
Andreas Steffen 509f70c132 added some pluto changes to NEWS 2009-10-12 08:05:48 +02:00
Andreas Steffen 295e92fe36 fixed output of offered CA 2009-10-11 21:24:39 +02:00
Andreas Steffen e8e2a147db fixed broken smartcard support (bug #91) 2009-10-11 21:14:05 +02:00
Andreas Steffen 1c75e3404d some missing refactoring changes 2009-10-11 20:14:18 +02:00
Andreas Steffen d4acf1dd3c myids might not be defined yet 2009-10-11 18:05:38 +02:00
Andreas Steffen 3197a20a87 adapted ikev2/rw-eap-aka scenarios to eapaka-3gpp2 plugin 2009-10-11 00:35:01 +02:00
Andreas Steffen 9ea23c8f91 corrected ikev1/nat-two-rw evaltest.dat 2009-10-11 00:14:20 +02:00
Andreas Steffen 40441ddd39 removed orphaned sha1.c 2009-10-10 22:05:59 +02:00
Andreas Steffen 0da24e7d46 corrected evaltest.dat 2009-10-10 21:41:36 +02:00
Andreas Steffen 17722d4489 replaced struct id by identification_t 2009-10-10 21:19:38 +02:00
Andreas Steffen c6b2b2aae2 corrected caption 2009-10-09 00:16:33 +02:00
Andreas Steffen 4b4f8bd732 created identification_create_from_sockaddr() function 2009-10-09 00:13:28 +02:00
Andreas Steffen 5026519057 medsrv.fcgi is not part of the git tree 2009-10-08 13:05:27 +02:00
Andreas Steffen 878fc472e9 hex_str() isn't used externally any more 2009-10-08 13:04:07 +02:00
Andreas Steffen e64b4e96c9 parsing of generalNames is not needed any more 2009-10-08 12:42:29 +02:00
Andreas Steffen 88212ee6e7 use of asn1_build_known_oid() 2009-10-08 12:35:36 +02:00
Andreas Steffen 0354d5703d migrated public key IDs to identification_t 2009-10-08 11:25:43 +02:00
Andreas Steffen 84e390fdc4 list subjectAltNames 2009-10-06 23:50:26 +02:00
Andreas Steffen 20afe5e9f5 some ipsec listall finetuning 2009-10-06 23:19:46 +02:00
Andreas Steffen ce2f2461e0 pluto and charon now have the same ipsec listall output format 2009-10-06 16:49:46 +02:00
Andreas Steffen f3e9eae283 the ikev1 scenarios need the x509 plugin 2009-10-06 14:38:34 +02:00
Andreas Steffen cf85e1319b streamlined output from get_validity() 2009-10-06 14:22:27 +02:00
Andreas Steffen afdaa9e5bf fixed serial number conversion from hex 2009-10-05 23:52:35 +02:00
Andreas Steffen 0da0f3fc3f delete group attributes after use 2009-10-05 23:17:36 +02:00
Andreas Steffen a9fe23cf53 stroke_list outputs group attributes 2009-10-05 23:13:51 +02:00
Andreas Steffen 408e46a324 ipsec pki --issue suports --flag authServer option 2009-10-05 22:44:01 +02:00
Andreas Steffen ce40bf5def ipsec pki --issue supports --flag ocspSigning option 2009-10-05 21:20:42 +02:00
Andreas Steffen fc12e3cd2e pluto now uses x509 plugin for attribute certificate handling 2009-10-05 07:24:28 +02:00
Andreas Steffen 0ea9cbc6e9 fixed output of authKeyID 2009-10-02 21:20:45 +02:00
Andreas Steffen 0aa5cea248 mark embedded parsing in debug mode 2009-10-02 20:54:15 +02:00
Andreas Steffen ec0abe4ab5 added some notBefore/notAfter debugging info 2009-10-02 20:14:09 +02:00
Andreas Steffen daaedcb9c2 verify correctness of X.509 versions 2009-10-02 17:49:51 +02:00
Andreas Steffen 6f2f08fb8d added all missing RFC 5280 OIDs 2009-10-02 14:10:27 +02:00
Andreas Steffen 03a52ce4e5 created ikev1/mode-config-multiple scenario 2009-10-01 09:42:35 +02:00
Andreas Steffen eb4544f773 fixes multiple IPsec SAs with IKEv1 Mode Config 2009-10-01 09:41:35 +02:00
Andreas Steffen 70e81857f9 generate known OIDs dynamically 2009-09-30 11:49:32 +02:00
Andreas Steffen 0c8d08068e pluto's crl handling now uses the x509 plugin 2009-09-30 09:29:15 +02:00
Andreas Steffen 5406c65702 scepclient uses pkcs10 from libstrongswan 2009-09-28 05:52:20 +02:00
Andreas Steffen c72080cea8 abbreviated struct connection by connection_t 2009-09-27 23:49:37 +02:00
Andreas Steffen 0eff9f6539 pluto and scepclient now use the x509 plugin for certificates 2009-09-27 23:09:30 +02:00
Andreas Steffen 727b0f11e2 whitelist Curl_client_write 2009-09-27 23:07:21 +02:00
Andreas Steffen 02bf410aa9 certificate subject DNs are in double quotes 2009-09-23 22:03:52 +02:00
Andreas Steffen b362cc2382 streamlining of credential loading debug output 2009-09-23 21:55:48 +02:00
Andreas Steffen 1806024105 added fix of PKCS#7 wrapped certificates to NEWS 2009-09-23 21:50:56 +02:00
Andreas Steffen 45cc7ba403 added and fixed debug output of version information 2009-09-23 16:21:18 +02:00
Andreas Steffen c0be0977e7 fixed PKCS#7 wrapped certificate parsing 2009-09-23 15:52:30 +02:00
Andreas Steffen 677322b1bf enforce coding rules 2009-09-22 21:50:28 +02:00
Andreas Steffen b62ce860c1 enforce coding rules 2009-09-22 20:55:10 +02:00
Andreas Steffen b88bbe8aa1 set XFRM_STATE_AF_UNSPEC flag 2009-09-22 20:55:10 +02:00
Andreas Steffen a28334720c adding additional flags to loaded X.509 certificates 2009-09-22 12:55:25 +02:00
Andreas Steffen b80fa9ca38 readying NEWS for the strongswan-4.3.5dr2 release 2009-09-22 12:44:58 +02:00
Andreas Steffen 4b15ee8cd9 shortened file loading debug output 2009-09-22 12:33:13 +02:00
Andreas Steffen 1271983ab9 computed hash-and-url for new certificates 2009-09-22 12:05:37 +02:00
Andreas Steffen 8153be823b plugin has been renamed to resolve 2009-09-20 22:03:23 +02:00
Andreas Steffen 399ce164ad delete resolv_conf_* files 2009-09-20 21:59:36 +02:00
Andreas Steffen af784261f5 all arguments must be read 2009-09-20 21:56:22 +02:00
Andreas Steffen 4819ec6a71 resolv_conf plugin renamed to resolve 2009-09-20 19:06:58 +02:00
Andreas Steffen 03f096df7e adapt evaltest.dat to changed debug output 2009-09-20 17:23:24 +02:00
Andreas Steffen d7f2ffcf11 renewed certs in dynamic-initiator/dynamic-responder scenarios 2009-09-19 08:18:42 +02:00
Andreas Steffen 6aa8d2c8bb use new certificates 2009-09-19 00:26:55 +02:00
Andreas Steffen 05a6a77d85 eliminated double library_deinit() 2009-09-19 00:00:56 +02:00
Andreas Steffen 309b8b3956 keyids of renewed keys 2009-09-18 21:44:57 +02:00
Andreas Steffen afcd0b9787 updated to renewed certs in SQL database 2009-09-18 21:22:37 +02:00
Andreas Steffen bdfe17c79b renewal of end entity certificates 2009-09-18 21:17:03 +02:00
Andreas Steffen ddbb34093f fixed --enable-eap-md5 and --enable-eap-gtc options 2009-09-18 18:23:26 +02:00
Andreas Steffen d78a0262d1 backwards compatibility with SQL format 2009-09-18 15:48:24 +02:00
Andreas Steffen d245f5cf33 some reformulations 2009-09-17 22:21:14 +02:00
Andreas Steffen 8101695b32 fixed typo 2009-09-15 16:48:13 +02:00
Andreas Steffen f561d6f2e9 changed prefix of crl_reason_t values from CRL_ to CRL_REASON_ 2009-08-31 23:21:50 +02:00
Andreas Steffen dc4aadc3f2 use crl_reason_t definition from <credentials/certificates/crl.h> 2009-08-31 23:05:45 +02:00
Andreas Steffen a63f62c03b use crl_reason_t definition from <credentials/certificates/crl.h> 2009-08-31 22:58:34 +02:00
Andreas Steffen 52673c4348 generation of keyid requires pkcs1 plugin 2009-08-30 22:55:40 +02:00
Andreas Steffen c9f74892cc clear RSA private key chunks after use 2009-08-30 19:12:29 +02:00
Andreas Steffen 1982096aa0 ASN.1 DER encoding of private key is not needed anymore 2009-08-30 19:05:43 +02:00
Andreas Steffen 26fa5a37d9 new UML scenario certs have SHA256 digest 2009-08-30 17:58:34 +02:00
Andreas Steffen 735628f3e3 removed position debug output 2009-08-30 17:37:27 +02:00
Andreas Steffen 2aa67d2636 .., but a comment might be helpful 2009-08-28 09:28:39 +02:00
Andreas Steffen 6be3f0f1d0 removed TODO reminder 2009-08-28 09:26:46 +02:00
Andreas Steffen be04eef270 allow choice of digest algorithm in certificate generation 2009-08-28 09:08:03 +02:00
Andreas Steffen e201f53e93 build_curve_signature() processes hash not data 2009-08-27 20:41:29 +02:00
Andreas Steffen 1dbaec2177 NID_hash and NID_ec_curve were interchanged 2009-08-27 20:28:41 +02:00
Andreas Steffen ac6a0d5038 verify_signature() now processes hash not data 2009-08-27 20:18:22 +02:00