Andreas Steffen
392f4e17c2
minimal stroke_list_ocsp() implementation
2008-04-01 12:11:09 +00:00
Tobias Brunner
9c2a905d63
stopping connectivity checks on the responders side after receiving an IKE_SA_INIT request with the proper ME_CONNECTID
2008-04-01 11:38:18 +00:00
Martin Willi
45d66f5af6
some simplifications to trusted_enumerator_t
2008-04-01 10:56:08 +00:00
Martin Willi
1bb85edffe
checking pretrusted but bad certificates only once
2008-04-01 10:43:44 +00:00
Andreas Steffen
946d1ecd59
stroke_list groups certificates by issuer
2008-04-01 10:26:27 +00:00
Andreas Steffen
c096472605
minor changes in debug output
2008-03-31 21:59:32 +00:00
Andreas Steffen
aaa7643b73
put DN in double quotes
2008-03-31 21:08:56 +00:00
Andreas Steffen
a92ea0ccb3
output error message if maximum ca path length is reached
2008-03-31 20:42:57 +00:00
Andreas Steffen
eafc0654ca
ipsec list suppresses duplicates
2008-03-31 20:21:24 +00:00
Tobias Brunner
e5ab32a7ee
timing of connectivity checks adjusted
2008-03-31 15:04:38 +00:00
Martin Willi
9e72d3bcaf
defining ME globally, as we need it in plugins
2008-03-31 15:01:43 +00:00
Andreas Steffen
58a05045cc
utc argument in %#T was missing
2008-03-31 14:36:00 +00:00
Tobias Brunner
9e183cd5b8
signal fixed
2008-03-31 14:27:16 +00:00
Tobias Brunner
f98736aee6
changed order of server and peer reflexive endpoints (and also the priorities)
2008-03-31 10:56:49 +00:00
Martin Willi
0f7ef3d2a0
received certificates have least priority
...
fixed manager unlocking
2008-03-31 08:43:18 +00:00
Martin Willi
d69b267d58
fixed refcounting in certificate trustchain validation
2008-03-31 07:16:12 +00:00
Andreas Steffen
dcc777652e
changed error message
2008-03-29 13:26:53 +00:00
Andreas Steffen
40f9006845
output uptime in status in local time
2008-03-29 08:55:09 +00:00
Martin Willi
6b9290ff12
renamed xml plugin to smp to avoid confusion
...
added some dependency checks to configure
configure checks ClearSilver and fastcgi
cleanups in the build system here and there
2008-03-28 12:44:01 +00:00
Martin Willi
35b6e2301f
fixed crash if crl fetching fails
2008-03-28 12:00:51 +00:00
Martin Willi
d55fa9aff7
reentrant save cert_cache
2008-03-28 08:38:51 +00:00
Martin Willi
ac1fefc2de
caching of CRLs
2008-03-28 08:14:47 +00:00
Martin Willi
d20e5c6ab5
replaced get_public() by create_public_enumerator() to try multiple public keys for signature verification
2008-03-27 19:07:23 +00:00
Martin Willi
0d30ba3343
use trusted self-signed root CA certificates as trust anchor only
2008-03-27 13:38:02 +00:00
Tobias Brunner
e74bc8e51d
changed external interface to the mediation extension.
2008-03-27 12:31:35 +00:00
Tobias Brunner
b42421a04c
corrected ME_ENDPOINT length check
2008-03-27 12:29:51 +00:00
Martin Willi
52a61742e7
reusing generic shared_key_t implementation in med_db
2008-03-27 11:45:49 +00:00
Tobias Brunner
54150b3f13
checking the size of ME_* notify payloads
2008-03-27 10:17:29 +00:00
Tobias Brunner
b0dee635d2
replaced the COOKIE notify payload in connectivity checks with a ME_CONNECTAUTH notify payload
2008-03-27 09:54:09 +00:00
Martin Willi
f957f7dfb3
implemented cert cache flushing, ipsec purgeocsp
2008-03-27 06:37:29 +00:00
Andreas Steffen
d61bd27a9a
fixed plugin/stroke Makefile
2008-03-26 20:24:55 +00:00
Tobias Brunner
dc04b7c743
mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed
2008-03-26 18:40:19 +00:00
Martin Willi
685232670a
added uptime statistics to statusall
2008-03-26 16:13:14 +00:00
Martin Willi
7b88a983d8
caching of ocsp responses (experimental), no crl caching yet
2008-03-26 15:21:50 +00:00
Martin Willi
391abda082
fixed compile error if --enable-p2p is set
2008-03-26 14:45:24 +00:00
Martin Willi
e37f7715bf
fixed rightca= constraint checking
...
implemented rightca= for intermediate CAs we do not have the certificate at config load
2008-03-26 12:23:46 +00:00
Martin Willi
2d84da89b9
fixed auth_info_t.equals()
2008-03-26 10:58:19 +00:00
Martin Willi
0b14fdb92b
splitted stroke plugin to several files:
...
socket: reads messages from socket, dispatching
config: process add/del conn, serves configs through backend_t
control: controlling of the daemon (up/down/route/...(
cred: credential loading, serves creds through credential_set_t
ca: ca sections from ipsec.conf, serves cdp's through credential_set_t
list: log status information to stroke console (status/statusall/list*)
shared_key: shared key implementation for keys read from ipsec.secrets
plugin: registers stroke plugin and starts socket w/ thread
2008-03-26 10:10:40 +00:00
Martin Willi
3c7e72f5b0
added equals() method to peer_cfg, ike_cfg, proposals, auth_info
...
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
2008-03-26 10:06:45 +00:00
Andreas Steffen
26930a8c3e
certificate factory can load certs from file
2008-03-25 22:28:27 +00:00
Andreas Steffen
3e6ee16478
defined *_create_from_file() constructors in libstrongswan/credentials/certificates
2008-03-25 10:12:45 +00:00
Andreas Steffen
36617c1ad5
shortened debug output
2008-03-21 20:36:19 +00:00
Andreas Steffen
02fd225ea5
detect trusted self-signed before trust chain verification
2008-03-21 19:10:55 +00:00
Andreas Steffen
112482d3f4
optimized debug output of credential_manager.c
2008-03-21 09:28:25 +00:00
Andreas Steffen
25c9637222
modified debug text
2008-03-20 15:22:26 +00:00
Martin Willi
dfd5cdcb88
cert_cache_t caches subject-issuer relations and subject certificates
...
ocsp/crl do not benefit yet due missing lookup function
2008-03-20 14:31:36 +00:00
Martin Willi
fe8f7626d1
fallback to random end entity certificate if trustchain building fails
2008-03-20 13:14:55 +00:00
Martin Willi
629e55434a
2008-03-20 11:38:51 +00:00
Martin Willi
36524c4844
added support for certificate requests for not yet known CAs
2008-03-20 10:09:56 +00:00
Martin Willi
9be0dc922e
fixed verification of preinstalled certificates
2008-03-20 09:30:02 +00:00
Andreas Steffen