Commit Graph
100 Commits
Author SHA1 Message Date
Andreas Steffen 475a01de35 some scenario fixes 2008-04-27 14:15:29 +00:00
Andreas Steffen 77b9c3a214 end->srcip string must be removed if it contains %config 2008-04-27 11:28:58 +00:00
Andreas Steffen 2988273b3a fixed starter_cmp_end() 2008-04-27 11:04:13 +00:00
Andreas Steffen 937eb2db00 fixed memory corruption problem in starter 2008-04-27 10:49:31 +00:00
Andreas Steffen c3628ebc35 optimized parser->success() 2008-04-26 11:08:36 +00:00
Andreas Steffen df231f5488 ported ASN.1 changes to pkcs7 2008-04-26 10:20:51 +00:00
Andreas Steffen f27e13e80f doxygen fix for fips.h 2008-04-26 09:40:22 +00:00
Andreas Steffen d3d7e46b8c refactoring of the ASN.1 parser 2008-04-26 09:24:14 +00:00
Andreas Steffen 33eb3d4ab6 extract_token() now handles whitespace 2008-04-25 07:04:59 +00:00
Andreas Steffen 36fecdb8a3 chunk_to_hex() adaptations 2008-04-25 06:39:41 +00:00
Andreas Steffen f6ef204a9e 'Hash and URL' certificates of research and sales CAs 2008-04-22 20:36:44 +00:00
Andreas Steffen 7c0c0aac01 version bump to 4.2.2 2008-04-19 10:07:32 +00:00
Andreas Steffen c306dfb15a edited NEWS 2008-04-19 09:49:06 +00:00
Andreas Steffen 8d7e4dec55 updated testing.conf 2008-04-19 07:57:24 +00:00
Andreas Steffen ab40f2edc7 add symbolic link to hash-and-url certs 2008-04-19 07:48:53 +00:00
Andreas Steffen 734e81bbd6 fixed iptables/ip6tables switch 2008-04-19 07:47:00 +00:00
Andreas Steffen 544f8f6380 added hash-and-url certs 2008-04-18 21:46:26 +00:00
Andreas Steffen 2eaf8db41a added ikev2/rw-hash-and-url scenario 2008-04-18 21:43:05 +00:00
Andreas Steffen 466abb49fc updated NEWS: support of AES_XCBC_MAC and CAMELLIA 2008-04-18 21:42:31 +00:00
Andreas Steffen 1d5d6f9667 Hash and URL cosmetics 2008-04-18 21:27:08 +00:00
Andreas Steffen 4e8670c557 added ikev1/esp-alg-camellia scenario 2008-04-18 20:02:42 +00:00
Andreas Steffen e92b5bc0ed fixed cbc(camellia) netlink configuration error 2008-04-18 20:01:49 +00:00
Andreas Steffen 540628bc38 use ip xfrm state in crypto evaltests 2008-04-18 19:07:46 +00:00
Andreas Steffen 7ae8e2bcd9 added ikev1/esp-alg-aesxcbc scenario 2008-04-18 19:06:43 +00:00
Andreas Steffen 228025c2c4 fixed aes-xcbc netlink configuration error 2008-04-18 18:37:57 +00:00
Andreas Steffen 1da277f045 support of AES_XCBC and CAMELLIA ESP cipher by pluto 2008-04-18 17:01:45 +00:00
Andreas Steffen 855c9a9089 fixed AES default key length 2008-04-18 17:00:30 +00:00
Andreas Steffen bb2a529870 updated pfkeyv2.h 2008-04-18 12:27:50 +00:00
Andreas Steffen be2e5b48cd updated list of ESP and AH algorithms 2008-04-18 11:25:37 +00:00
Andreas Steffen a11274a856 corrected description 2008-04-18 07:44:39 +00:00
Andreas Steffen 6927d37c2c fixed another transport mode evaltest 2008-04-18 07:42:57 +00:00
Andreas Steffen c2fc3379ac added ipv6/net2net-ipv4-ikev2 scenario 2008-04-18 07:24:01 +00:00
Andreas Steffen 0d6e4d7137 fixed two evaltests 2008-04-18 07:21:49 +00:00
Andreas Steffen 5c5d67d6ae updated NEWS 2008-04-17 20:38:47 +00:00
Andreas Steffen 8eeb796a51 changed logging of crl writing to old style 2008-04-17 20:23:31 +00:00
Andreas Steffen 5434d5f7e9 corrected variable name 2008-04-17 18:56:55 +00:00
Andreas Steffen f45411c045 set long-forgotten DPD defaults 2008-04-15 11:27:45 +00:00
Andreas Steffen fa89d4457a use ip6tables in sql/rw-psk-ipv6 scenario 2008-04-14 06:10:10 +00:00
Andreas Steffen acda610cbb fixed suppression of cert requests in eap-sim and eap-aka scenarios 2008-04-14 04:33:17 +00:00
Andreas Steffen ff41ca0dc4 host_srcip was not properly initialized in starterwhack.c 2008-04-13 21:42:44 +00:00
Andreas Steffen 743d9c7b20 added sql/rw-psk-ipv6 scenario 2008-04-13 19:50:15 +00:00
Andreas Steffen 09a01b5e51 added sql/rw-psk-rsa-split scenario 2008-04-13 19:49:20 +00:00
Andreas Steffen b1bdfa4890 fixed disabling the sending of cert requests 2008-04-13 17:31:07 +00:00
Andreas Steffen 571ad29507 wildcard matching in shared secrets not implemented yet 2008-04-07 10:29:08 +00:00
Andreas Steffen e44612c878 added sql/rw-psk-ipv4 scenario 2008-04-07 10:24:49 +00:00
Andreas Steffen af9e3954e2 set accelerated rekeying defaults in ipsec.sql for UML scenarios 2008-04-07 09:10:58 +00:00
Andreas Steffen 2c0df332a9 added sql/rw-cert scenario 2008-04-07 08:57:46 +00:00
Andreas Steffen 6fbd3f1738 fixed path to ipsec.sql 2008-04-07 07:57:38 +00:00
Andreas Steffen 56bcc343ff ipsec.sql remains in /etc/ipsec.d 2008-04-07 07:25:04 +00:00
Andreas Steffen decfd8e546 moved strongswan.conf to /etc 2008-04-07 07:21:06 +00:00
Andreas Steffen 480297b883 cosmetics 2008-04-07 07:02:47 +00:00
Andreas Steffen 096b7f6889 do-tests now lists strongswan.conf and ip xfrm policy|state 2008-04-07 06:14:21 +00:00
Andreas Steffen 84fc1abf7a added sql/net2net-psk scenario 2008-04-06 18:11:19 +00:00
Andreas Steffen b6032b2400 corrected description 2008-04-06 18:10:57 +00:00
Andreas Steffen f8ab4a8f76 log shared secret with debug level 4 2008-04-06 17:51:29 +00:00
Andreas Steffen b26fecefa0 disable mobike in sql/net2net-cert scenario 2008-04-06 12:53:57 +00:00
Andreas Steffen 1b247314fd default is hostaccess=no 2008-04-06 12:15:05 +00:00
Andreas Steffen bc722433be version bump to 4.2.1 2008-04-06 12:12:13 +00:00
Andreas Steffen 69813bd27f added sql/net2net-cert scenario 2008-04-06 12:06:33 +00:00
Andreas Steffen babaaa3c11 support of SQL databases in UML scenarios 2008-04-06 12:05:42 +00:00
Andreas Steffen 196b28a470 demoted more notify debug messages to level 2 2008-04-02 19:15:05 +00:00
Andreas Steffen f342cc08c0 make peer IP address and peer IP available to the xauth_module.verify_secret() method 2008-04-02 19:04:45 +00:00
Andreas Steffen 97da3d2de0 renamed AES_cbc_encrypt to SS_AES_cbc_encrypt due to name collision with OpenSSL library 2008-04-02 18:51:10 +00:00
Andreas Steffen 7a9d3ae471 support of force_keepalive parameter 2008-04-02 18:35:23 +00:00
Andreas Steffen 1ee637d8b1 generate debug output if ocsp response does not contain status information for a given certificate 2008-04-02 14:28:17 +00:00
Andreas Steffen 281d04502e additional debug line makes certificate status checking more understandable 2008-04-02 06:25:59 +00:00
Andreas Steffen 9372f44c67 workaround for parsing IPv6 PSKs requires extract_last_token() 2008-04-01 20:40:29 +00:00
Andreas Steffen 080555e76a demoted received notify debug message to level 2 2008-04-01 20:22:38 +00:00
Andreas Steffen 158a62c326 adapted ikev2 uml scenarios for the 4.2 version 2008-04-01 20:05:02 +00:00
Andreas Steffen 392f4e17c2 minimal stroke_list_ocsp() implementation 2008-04-01 12:11:09 +00:00
Andreas Steffen 946d1ecd59 stroke_list groups certificates by issuer 2008-04-01 10:26:27 +00:00
Andreas Steffen c096472605 minor changes in debug output 2008-03-31 21:59:32 +00:00
Andreas Steffen aaa7643b73 put DN in double quotes 2008-03-31 21:08:56 +00:00
Andreas Steffen a92ea0ccb3 output error message if maximum ca path length is reached 2008-03-31 20:42:57 +00:00
Andreas Steffen eafc0654ca ipsec list suppresses duplicates 2008-03-31 20:21:24 +00:00
Andreas Steffen 58a05045cc utc argument in %#T was missing 2008-03-31 14:36:00 +00:00
Andreas Steffen 681d56b1bb disabled build of outdated dbus interface 2008-03-31 12:59:39 +00:00
Andreas Steffen 1c65129148 adapted configure options in testing.conf and build-umlrootfs 2008-03-29 19:33:02 +00:00
Andreas Steffen dcc777652e changed error message 2008-03-29 13:26:53 +00:00
Andreas Steffen 40f9006845 output uptime in status in local time 2008-03-29 08:55:09 +00:00
Andreas Steffen d2aa6fcaeb shortened menu item 2008-03-28 22:46:09 +00:00
Andreas Steffen c63dc50f15 demoted ldap debug output to level 2 2008-03-28 22:44:45 +00:00
Andreas Steffen 95ef5db5c3 remove xml directory 2008-03-28 19:49:59 +00:00
Andreas Steffen d61bd27a9a fixed plugin/stroke Makefile 2008-03-26 20:24:55 +00:00
Andreas Steffen 1aad8bdfad makeshift fix of --enable-integrity-test option 2008-03-26 20:16:42 +00:00
Andreas Steffen 5298777ad8 treat sig_alg and algorithm comparison in a consistent way over all certificate types 2008-03-26 13:10:36 +00:00
Andreas Steffen 26930a8c3e certificate factory can load certs from file 2008-03-25 22:28:27 +00:00
Andreas Steffen ff98c85b57 added component BUILD_FROM_FILE 2008-03-25 13:26:33 +00:00
Andreas Steffen 13bec89740 renamed certificate field in x509_cert.c to encoding 2008-03-25 12:22:12 +00:00
Andreas Steffen 84a5c6a679 added ac.c 2008-03-25 10:13:57 +00:00
Andreas Steffen 3e6ee16478 defined *_create_from_file() constructors in libstrongswan/credentials/certificates 2008-03-25 10:12:45 +00:00
Andreas Steffen 63cb8a7fee fixed refence counts before calling attribute certificate factory 2008-03-25 09:39:23 +00:00
Andreas Steffen 9bb8d23e17 corrected some doxygen entries 2008-03-22 08:15:18 +00:00
Andreas Steffen 855606efd4 optimized self-signed certificate detection 2008-03-21 20:37:08 +00:00
Andreas Steffen 36617c1ad5 shortened debug output 2008-03-21 20:36:19 +00:00
Andreas Steffen 02fd225ea5 detect trusted self-signed before trust chain verification 2008-03-21 19:10:55 +00:00
Andreas Steffen ffce5db1b7 self-signed certificates were not marked by x509_cert.c 2008-03-21 19:07:12 +00:00
Andreas Steffen c081a9bfe6 added ietf group attribute support to attibute certificate factory 2008-03-21 16:59:21 +00:00
Andreas Steffen 93da2684b6 fixed memory allocation problem in openac 2008-03-21 15:58:48 +00:00
Andreas Steffen 104c96a63c added BUILD_SERIAL component and fixed several ac bugs 2008-03-21 12:44:15 +00:00