denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,818 Commits 1 Branch 0 Tags
40f130dab3c42c3d2b0ab6221a91f2effa1123ed
Commit Graph
403 Commits
Author SHA1 Message Date
Martin Willi 40f130dab3 Implemented the PRF_KEYED_SHA1 algorithm in the openssl plugin 2010-03-08 13:16:12 +01:00
Andreas Steffen ceeb9bac8b critical keyUsage extension must be parsed 2010-03-07 20:51:34 +01:00
Andreas Steffen 1ec8f22de2 set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true 2010-03-07 17:27:53 +01:00
Tobias Brunner afb364fff9 Reverting eba28948a5 which was only necessary when cross-compiling the plugins for Android 2.0. 
With the coming monolithic build using Android.mk files this won't be
necessary anymore.
 2010-03-02 12:03:44 +01:00
Tobias Brunner 4e657051f7 Streamlined the source file list formatting in plugin makefiles. 2010-03-02 10:40:50 +01:00
Tobias Brunner 6ec60bb92b Link all enabled libstrongswan plugins into the library, link all enabled charon plugins into libcharon. 2010-03-02 10:38:52 +01:00
Tobias Brunner 3724668b3d Enabling the plugin loader to be able to load plugins without explicitly loading a shared object file first. 2010-03-02 09:10:32 +01:00
Tobias Brunner 9ce567f895 Changed plugin constructors from plugin_create to plugin_name_plugin_create. 2010-03-02 09:10:26 +01:00
Tobias Brunner 6cc13cd9c5 Removing the plugin constructor declarations from the header files. 2010-03-02 09:10:19 +01:00
Tobias Brunner eba28948a5 Link all plugins to libstrongswan. 2010-02-25 13:51:05 +01:00
Martin Willi 3e35a6e7a1 Use side-channel secured mpz_powm_sec of libgmp 5, if available 2010-02-18 17:38:59 +01:00
Andreas Steffen b917f49684 initialize variables to avoid compiler warning 2010-02-05 12:34:37 +01:00
Martin Willi 7eab4a1be6 Support TLS client authentication Extended Key Usage in x509 generation 2010-01-14 12:00:43 +01:00
Andreas Steffen 3e33ae1004 ipsec pki --self|issue supports --pathlen option setting a path length constraint 2009-12-31 15:13:35 +01:00
Tobias Brunner 4a5a5dd290 Using the thread wrapper in charon, libstrongswan and their plugins. 2009-12-23 17:03:41 +01:00
Tobias Brunner eba64cef41 Separated the public interfaces of the threading primitives. 2009-12-23 17:01:53 +01:00
Tobias Brunner 14f7091280 Moved mutex.c to a separate folder in order to cleanly wrap other threading primitives (and utils/mutex.h is now threading.h). 2009-12-23 17:00:58 +01:00
Andreas Steffen e16a01a5e6 X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension 2009-12-22 13:18:27 +01:00
Andreas Steffen 91e35b7c9e added create_ipAddrBlock_enumerator() method to x509_t 2009-12-22 11:58:30 +01:00
Andreas Steffen 157125e4c9 traffic_selector supports RFC 3779 address range format 2009-12-21 21:29:01 +01:00
Andreas Steffen 513eb95e60 parse RFC 3779 addressFamily 2009-12-20 19:26:28 +01:00
Andreas Steffen 7d379a786c plugin name is x509 2009-12-20 16:01:35 +01:00
Andreas Steffen 28c25485ba discard certificate with unknown critical extensions 2009-12-20 15:53:39 +01:00
Andreas Steffen f3e366a9a0 use traffic_selector_t object to represent ipAddrBlocks 2009-12-20 15:15:02 +01:00
Andreas Steffen ad858aee15 parse ipAddrBlocks 2009-12-17 17:32:55 +01:00
Martin Willi 83b760cb42 Migrated curl_fetcher to INIT/METHOD macros 2009-12-17 13:53:25 +01:00
Andreas Steffen 645f3865b2 ipsec pool manages dns and nbns servers 2009-12-16 18:11:57 +01:00
Andreas Steffen 3747f0f2e7 cosmetics 2009-12-16 13:33:09 +01:00
Andreas Steffen a461e20dd8 provide attributes from SQL database 2009-12-16 12:31:41 +01:00
Martin Willi 4e90d9de9f Removed obsolete curl interface specific destructor 2009-12-08 16:21:58 +01:00
Martin Willi b5a2055fb1 Give plugins more control of which configuration attributes to request, and pass received attributes back to the requesting handler 2009-11-17 14:51:50 +01:00
Martin Willi ee3d4ef801 Prefer MODP2048/1536 over ECP Diffie-Hellman groups 2009-11-12 13:10:30 +00:00
Andreas Steffen bb7ae382fd added some debugging to pgp certificate parsing 2009-11-10 10:04:55 +01:00
Andreas Steffen 262af16179 accept PGP v3 or v4 fingerprint as alternative to PGP user_id 2009-11-09 23:15:17 +01:00
Andreas Steffen ab5762e32a list v3 or v4 fingerprint 2009-11-08 23:21:03 +01:00
Andreas Steffen 9f0327e652 define TIME_32_BITS_SIGNED_MAX in utils.h 2009-11-08 18:55:52 +01:00
Andreas Steffen 4c68a85a75 implemented path length constraint checkinf for IKEv2 2009-11-04 23:37:15 +01:00
Andreas Steffen fae322219f output optional pathLenConstraint in ipsec listcacerts 2009-11-04 07:30:07 +01:00
Andreas Steffen 00aa027503 implemented parsing of pathLenConstraint 2009-11-04 00:03:10 +01:00
Martin Willi 4952dc11da Fixed all doxygen warnings 2009-10-22 14:34:10 +02:00
Andreas Steffen 38031878dd moved .gitignore for pool 2009-10-15 14:58:09 +02:00
Martin Willi d38eb3355e Migrated the lease_history option to the new libstrongswan plugin namespace 2009-10-15 10:14:10 +02:00
Andreas Steffen 668870be47 pool should be in th gitignore list 2009-10-14 14:37:03 +02:00
Andreas Steffen 270bb348e3 pluto now supports SQL-based virtual IP pools 2009-10-14 14:30:14 +02:00
Andreas Steffen 247794827e move SQL-based pool functionality to new attr-sql libstrongswan plugin 2009-10-13 17:02:29 +02:00
Andreas Steffen cf85e1319b streamlined output from get_validity() 2009-10-06 14:22:27 +02:00
Andreas Steffen 408e46a324 ipsec pki --issue suports --flag authServer option 2009-10-05 22:44:01 +02:00
Andreas Steffen ce40bf5def ipsec pki --issue supports --flag ocspSigning option 2009-10-05 21:20:42 +02:00
Andreas Steffen fc12e3cd2e pluto now uses x509 plugin for attribute certificate handling 2009-10-05 07:24:28 +02:00
Andreas Steffen 0aa5cea248 mark embedded parsing in debug mode 2009-10-02 20:54:15 +02:00