 Andreas Steffen
|
e6e8eb09dd
|
fixed ikev1/protoport-route timing
|
2010-04-07 13:24:58 +02:00 |
|
|
Andreas Steffen
|
c3379af391
|
removed whitespace
|
2010-04-07 13:07:11 +02:00 |
|
|
Andreas Steffen
|
ef4aa67bf7
|
generated new research and sales CA certs for carol and dave, respectively
|
2010-04-07 13:05:17 +02:00 |
|
|
Andreas Steffen
|
586c137016
|
prolonged Research and Sales CA certs
|
2010-04-06 12:05:39 +02:00 |
|
|
Andreas Steffen
|
7d00ebfb54
|
wait one second before running evaluations
|
2010-04-06 10:55:59 +02:00 |
|
|
Andreas Steffen
|
efd16e405a
|
increase UML root file system to 700 MB
|
2010-04-05 20:23:20 +02:00 |
|
|
Andreas Steffen
|
d6457833ec
|
added support of PEM output by ipsec pki --gen|pub commands to NEWS
|
2010-04-05 14:08:06 +02:00 |
|
|
Andreas Steffen
|
5ee07585aa
|
added ikev2/nat-virtual-ip scenario
|
2010-04-05 14:03:38 +02:00 |
|
|
Andreas Steffen
|
a287bdd46c
|
farp scenario requires logging of arp packets
|
2010-04-05 14:01:29 +02:00 |
|
|
Andreas Steffen
|
eb11d1c58c
|
added ikev2/farp scenario
|
2010-04-05 12:50:32 +02:00 |
|
|
Andreas Steffen
|
b49cbd68a6
|
added dave2 and carol2 entries to /etc/hosts
|
2010-04-05 12:50:07 +02:00 |
|
|
Andreas Steffen
|
29cf15a919
|
PEM encoding for OpenSSL RSA and EC public and private keys
|
2010-04-04 23:59:24 +02:00 |
|
|
Andreas Steffen
|
cea2857263
|
PEM encoding for GMP RSA public and private keys
|
2010-04-04 19:11:18 +02:00 |
|
|
Andreas Steffen
|
e3943f5559
|
fixed short option name
|
2010-04-04 10:30:08 +02:00 |
|
|
Andreas Steffen
|
b2be771ad8
|
fixed typo
|
2010-04-04 10:29:36 +02:00 |
|
|
Andreas Steffen
|
efcd3c7a63
|
fixed doxygen group
|
2010-04-03 21:55:30 +02:00 |
|
|
Andreas Steffen
|
0dee20d958
|
change #define to PEM_BUILDER_H_
|
2010-04-03 21:43:27 +02:00 |
|
|
Andreas Steffen
|
061c95b449
|
fixed pluto crash caused by expired leftcert and rightca=%same
|
2010-03-29 17:44:37 +02:00 |
|
|
Andreas Steffen
|
3ad78f0239
|
compile dhcp and farp plugins in UMLs
|
2010-03-28 22:40:20 +02:00 |
|
|
Andreas Steffen
|
5d91d4c6d7
|
moved attr-sql plugin to libhydra in pool scenarios
|
2010-03-28 22:33:30 +02:00 |
|
|
Andreas Steffen
|
a3316c2b9f
|
setting the two most significant bits assures an RSA modulus of maximum bit size
|
2010-03-15 15:13:26 +01:00 |
|
|
Andreas Steffen
|
c0df187cb4
|
we don't accept a serial number with leading zeroes
|
2010-03-14 19:41:40 +01:00 |
|
|
Andreas Steffen
|
4cedab5ad7
|
deleted old strongSwan VIDs
|
2010-03-12 03:29:18 +01:00 |
|
|
Andreas Steffen
|
0ef84e5e4d
|
enable build of socket-default plugin
|
2010-03-11 21:53:18 +01:00 |
|
|
Andreas Steffen
|
44f1024705
|
mixed IKEv1/IKEv2 scenarios require socket-raw
|
2010-03-11 21:32:36 +01:00 |
|
|
Andreas Steffen
|
d12ad4748a
|
fix 64bit issue with time_t from database
|
2010-03-10 10:46:49 +01:00 |
|
|
Andreas Steffen
|
31bd75ec64
|
removed unwanted commits
|
2010-03-07 21:11:57 +01:00 |
|
|
Andreas Steffen
|
ceeb9bac8b
|
critical keyUsage extension must be parsed
|
2010-03-07 20:51:34 +01:00 |
|
|
Andreas Steffen
|
469d448333
|
recognize strongSwan VID
|
2010-03-07 17:52:04 +01:00 |
|
|
Andreas Steffen
|
1ec8f22de2
|
set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true
|
2010-03-07 17:27:53 +01:00 |
|
|
Andreas Steffen
|
3cfbc91a98
|
renewed Authorization Authority certificate
|
2010-02-27 22:16:36 +01:00 |
|
|
Andreas Steffen
|
b65d7f8a15
|
version bump to 4.4.0
|
2010-02-15 20:58:41 +01:00 |
|
|
Andreas Steffen
|
2d07095e01
|
hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6
|
2010-02-06 12:34:41 +01:00 |
|
|
Andreas Steffen
|
dd0b1b9a16
|
generated hash-and-url files for rfc3779 certs
|
2010-02-06 11:41:44 +01:00 |
|
|
Andreas Steffen
|
76fe5500c4
|
hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6
|
2010-02-06 11:39:33 +01:00 |
|
|
Andreas Steffen
|
5094bfd85f
|
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
|
2010-02-05 20:39:13 +01:00 |
|
|
Andreas Steffen
|
61d7ff0c19
|
IPv6 fragment and http access are not needed in PSK scenario
|
2010-02-05 20:27:03 +01:00 |
|
|
Andreas Steffen
|
699c47a9be
|
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
|
2010-02-05 20:16:26 +01:00 |
|
|
Andreas Steffen
|
1f2da75069
|
IPv6 frag netfilter rule not needed anymore
|
2010-02-05 20:04:01 +01:00 |
|
|
Andreas Steffen
|
563a177830
|
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
|
2010-02-05 19:58:42 +01:00 |
|
|
Andreas Steffen
|
b917f49684
|
initialize variables to avoid compiler warning
|
2010-02-05 12:34:37 +01:00 |
|
|
Andreas Steffen
|
6c9c0baee9
|
init_fetch() changed to fetch_initialize()
|
2010-02-05 06:17:02 +01:00 |
|
|
Andreas Steffen
|
52719d719c
|
use static IPsec policy netfilter rules in MOBIKE scenarios
|
2010-02-04 10:05:44 +01:00 |
|
|
Andreas Steffen
|
8501181925
|
remove any charon.pid files remaining at the end of each scenario
|
2010-02-04 08:53:52 +01:00 |
|
|
Andreas Steffen
|
00eb9267ad
|
IPSEC_ROUTING_TABLE is now called routing_table
|
2010-02-03 19:32:50 +01:00 |
|
|
Andreas Steffen
|
ec37b04732
|
differentiate between executed and displayed iptables commands
|
2010-02-03 19:21:55 +01:00 |
|
|
Andreas Steffen
|
0d8bdf24ff
|
added ikev2/inactivity-timeout scenario
|
2010-02-03 10:28:30 +01:00 |
|
|
Andreas Steffen
|
889ff9389b
|
renamed init_fetch() to fetch_initialize()
|
2010-02-02 19:44:34 +01:00 |
|
|
Andreas Steffen
|
b7fd2ea76c
|
corrected captions
|
2010-02-01 12:44:44 +01:00 |
|
|
Andreas Steffen
|
bf1e0df7c5
|
warn if loaded local certificate is invalid
|
2010-02-01 12:29:32 +01:00 |
|
|
Andreas Steffen
|
8fb389b299
|
added ikev2/rw-eap-sim-only-radius scenario
|
2010-01-11 11:20:45 +01:00 |
|
|
Andreas Steffen
|
b979032088
|
log EAP-only authentication proposal
|
2010-01-11 11:17:40 +01:00 |
|
|
Andreas Steffen
|
87eb27681a
|
send strongSwan Vendor ID in ikev2/alg-sha256-96 scenario
|
2010-01-11 00:54:33 +01:00 |
|
|
Andreas Steffen
|
dd37fa8620
|
pluto and charon are using the same strongSwan Vendor ID
|
2010-01-11 00:43:46 +01:00 |
|
|
Andreas Steffen
|
580063971b
|
added some recent new attributes registered with IANA
|
2010-01-07 07:49:16 +01:00 |
|
|
Andreas Steffen
|
7eaec999ca
|
make error message about missing MD4 hasher more explicit
|
2009-12-30 23:32:03 +01:00 |
|
|
Andreas Steffen
|
83c282ebb4
|
differentiate EAP method initialization errors
|
2009-12-30 21:34:59 +01:00 |
|
|
Andreas Steffen
|
a2847740d2
|
removed charon-specific load statement in pluto scenario
|
2009-12-26 17:13:53 +01:00 |
|
|
Andreas Steffen
|
c5454eaf61
|
added RFC 3779 CA
|
2009-12-25 11:20:59 +01:00 |
|
|
Andreas Steffen
|
7c697964d3
|
added three RFC 3779 scenarios
|
2009-12-25 11:20:59 +01:00 |
|
|
Andreas Steffen
|
e98a4d8028
|
Added RFC 3779 support to NEWS
|
2009-12-25 11:20:58 +01:00 |
|
|
Andreas Steffen
|
d002c62347
|
enforce RFC 3779 address constraints on traffic selectors
|
2009-12-25 11:20:58 +01:00 |
|
|
Andreas Steffen
|
32d8f44229
|
verify RFC3779 IP address blocks along X.509 certificate trust chain
|
2009-12-23 14:21:31 +01:00 |
|
|
Andreas Steffen
|
925eadba5f
|
do not recalculate netbits for true subnets
|
2009-12-22 17:07:08 +01:00 |
|
|
Andreas Steffen
|
e16a01a5e6
|
X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension
|
2009-12-22 13:18:27 +01:00 |
|
|
Andreas Steffen
|
91e35b7c9e
|
added create_ipAddrBlock_enumerator() method to x509_t
|
2009-12-22 11:58:30 +01:00 |
|
|
Andreas Steffen
|
7686f981a4
|
cosmetics
|
2009-12-22 09:53:53 +01:00 |
|
|
Andreas Steffen
|
194c3cedc5
|
fixed IPv6 bug in calc_range()
|
2009-12-22 00:49:23 +01:00 |
|
|
Andreas Steffen
|
3f4d8815a4
|
fixed initialization of netbits
|
2009-12-21 23:03:14 +01:00 |
|
|
Andreas Steffen
|
252f38f6f8
|
fixed distribution list
|
2009-12-21 22:28:08 +01:00 |
|
|
Andreas Steffen
|
157125e4c9
|
traffic_selector supports RFC 3779 address range format
|
2009-12-21 21:29:01 +01:00 |
|
|
Andreas Steffen
|
678aab7850
|
this->type is set by traffic_selector_create()
|
2009-12-20 20:01:18 +01:00 |
|
|
Andreas Steffen
|
513eb95e60
|
parse RFC 3779 addressFamily
|
2009-12-20 19:26:28 +01:00 |
|
|
Andreas Steffen
|
7d379a786c
|
plugin name is x509
|
2009-12-20 16:01:35 +01:00 |
|
|
Andreas Steffen
|
28c25485ba
|
discard certificate with unknown critical extensions
|
2009-12-20 15:53:39 +01:00 |
|
|
Andreas Steffen
|
f3e366a9a0
|
use traffic_selector_t object to represent ipAddrBlocks
|
2009-12-20 15:15:02 +01:00 |
|
|
Andreas Steffen
|
1125a0be81
|
moved traffic_selectors from charon to libstrongswan
|
2009-12-20 14:57:38 +01:00 |
|
|
Andreas Steffen
|
92f0aa9736
|
firewall-enabled ipv6/net2net-ip6-in-ip4-ikev2 scenario
|
2009-12-17 19:43:33 +01:00 |
|
|
Andreas Steffen
|
02ee613325
|
firewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario
|
2009-12-17 18:50:45 +01:00 |
|
|
Andreas Steffen
|
ad858aee15
|
parse ipAddrBlocks
|
2009-12-17 17:32:55 +01:00 |
|
|
Andreas Steffen
|
9789d3a9b9
|
fixed updown plugin for mixed IPv4/IPv6 tunnels
|
2009-12-17 17:32:55 +01:00 |
|
|
Andreas Steffen
|
f721e0fb5f
|
added IKEv1 Camellia support to NEWS
|
2009-12-16 21:52:32 +01:00 |
|
|
Andreas Steffen
|
98b0657c0a
|
ikev1/ip-pool-db-push scenario tests DNS and NBNS server support
|
2009-12-16 21:50:39 +01:00 |
|
|
Andreas Steffen
|
b6623e87b4
|
IKEv1 daemon supports DNS and NBNS server assignment from database
|
2009-12-16 21:49:51 +01:00 |
|
|
Andreas Steffen
|
4d64cbbc4e
|
ikev1/ip-pool-db scenario tests DNS and NBNS server support
|
2009-12-16 21:22:13 +01:00 |
|
|
Andreas Steffen
|
c236049850
|
sql/ip-pool-db scenario tests DNS and NBNS server support
|
2009-12-16 19:02:23 +01:00 |
|
|
Andreas Steffen
|
42eb4951f9
|
ikev2/ip-pool-db scenario tests DNS and NBNS server support
|
2009-12-16 18:45:29 +01:00 |
|
|
Andreas Steffen
|
a71556060a
|
added ipsec pool DNS and NBNS support to NEWS
|
2009-12-16 18:20:07 +01:00 |
|
|
Andreas Steffen
|
645f3865b2
|
ipsec pool manages dns and nbns servers
|
2009-12-16 18:11:57 +01:00 |
|
|
Andreas Steffen
|
3747f0f2e7
|
cosmetics
|
2009-12-16 13:33:09 +01:00 |
|
|
Andreas Steffen
|
a461e20dd8
|
provide attributes from SQL database
|
2009-12-16 12:31:41 +01:00 |
|
|
Andreas Steffen
|
b75002bc95
|
added openssl-ikev1/alg-camellia scenario
|
2009-12-15 19:55:58 +01:00 |
|
|
Andreas Steffen
|
1191779744
|
removed superfluous ikev1/esp-alg-camellia scenario
|
2009-12-15 19:16:28 +01:00 |
|
|
Andreas Steffen
|
cbcd91314b
|
added gcrypt-ikev1/alg-camellia scenario
|
2009-12-15 19:15:44 +01:00 |
|
|
Andreas Steffen
|
de962d6e7d
|
add IKEv1 support for the Camellia cipher
|
2009-12-15 19:13:06 +01:00 |
|
|
Andreas Steffen
|
25df6196df
|
activate tcpdump in ikev1/esp-alg-des scenario
|
2009-12-10 22:37:43 +01:00 |
|
|
Andreas Steffen
|
982596e427
|
shuffled output order to achieve consistence
|
2009-12-09 17:26:35 +01:00 |
|
|
Andreas Steffen
|
4d025314c8
|
added pfkey/alg-sha384 and pfkey/alg-sha512 scenarios
|
2009-12-09 17:25:12 +01:00 |
|
|
Andreas Steffen
|
3e4b1010b0
|
adapted openssl-ikev2/alg scenarios
|
2009-12-09 15:51:43 +01:00 |
|
|
Andreas Steffen
|
4ab5874ccd
|
adapted gcrypt-ikev2/alg-camellia scenario
|
2009-12-09 15:48:03 +01:00 |
|