Andreas Steffen
db0f828413
results from the single responses is stored in the corresponding certinfo_t structs
2007-03-12 13:42:31 +00:00
Andreas Steffen
7c1b9ab784
moved credential_store.h from charon/config/credentials to libstrongswan
2007-03-09 16:50:19 +00:00
Andreas Steffen
5455cf230f
fixed a certinfo_t memory leak in verify()
2007-03-09 14:59:28 +00:00
Andreas Steffen
1bcb84605f
ocsp signer certificate and ocsp response signature can be verified
2007-03-08 23:29:04 +00:00
Andreas Steffen
162afac75f
fixed call of add_auth_certificate()
2007-03-08 19:44:14 +00:00
Andreas Steffen
33d108de22
generalized get_ca_certificate() to get_auth_certificate(auth_flags)
2007-03-08 18:56:43 +00:00
Andreas Steffen
9f4039755d
support if ocsp signing certificates
2007-03-08 16:46:50 +00:00
Andreas Steffen
69351da14d
add crl and ocsp uris to linked list after partial verification
2007-03-06 18:51:56 +00:00
Andreas Steffen
81020aaefd
refactored ca_info_t
2007-03-03 21:08:07 +00:00
Martin Willi
0c8aba6771
added support for 0.0.0.0/0 traffic selectors
...
fixed routing to make correct 0.0.0.0/0 routes
2007-03-01 11:42:08 +00:00
Andreas Steffen
7d119253f6
added support of OCSP accessLocations
2007-02-25 08:14:50 +00:00
Andreas Steffen
b3e4211fc3
full support of ca info records
2007-02-24 23:18:31 +00:00
Andreas Steffen
182d20e94e
support of ca info records
2007-02-23 15:15:31 +00:00
Andreas Steffen
6fda18d99d
%T requires time_t ptr
2007-02-08 17:59:37 +00:00
Martin Willi
db7ef62494
better split up of library files "types.h" & "definitions.h"
...
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
2006-10-31 12:27:59 +00:00
Martin Willi
382b481795
moved typedefs to beginning of files to solve some include problems
...
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
2006-10-30 14:07:05 +00:00
Andreas Steffen
a702b731cb
support of certreq payload in IKE_AUTH messages
2006-10-28 20:02:26 +00:00
Andreas Steffen
6ae7d265fb
added method get_ca_certificate()
2006-10-28 15:32:30 +00:00
Martin Willi
b83806d83d
improved signal handling and emitting
2006-10-26 09:46:56 +00:00
Martin Willi
191a26a6a7
removed deprecated iterator methods (has_next & current)
...
added iterator hook to manipulate iterator the clean way
2006-10-24 14:20:45 +00:00
Martin Willi
55bbff11ec
linked list cleanups
...
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
2006-10-24 08:46:17 +00:00
Martin Willi
60356f3375
introduced new logging subsystem using bus:
...
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
2006-10-18 11:46:13 +00:00
Martin Willi
47f5027807
introduced printf() specifiers for:
...
host_t (%H)
identification_t (%D)
chunk pointers (%B)
memory pointer/length (%b)
added a signaling bus:
receives event and debug messages, sends them to its listeners
stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
2006-09-27 14:14:44 +00:00
Andreas Steffen
833a7cbc50
support of encrypted private key files
2006-09-20 05:48:27 +00:00
Andreas Steffen
43ead00a2f
fixed the ids parsing bug
2006-09-19 06:16:48 +00:00
Martin Willi
e63c4d8b8b
fixed memleak
...
fixed proper handling of id parsing errors
proper return value when no PSK found
2006-09-18 11:39:53 +00:00
Andreas Steffen
e2de376c74
added PSK support
2006-09-18 07:42:57 +00:00
Martin Willi
c71d53ba4e
updated copyright information
2006-07-07 08:49:06 +00:00
Andreas Steffen
971218c3ae
support of cert payloads
2006-07-03 06:27:45 +00:00
Andreas Steffen
6f74bfd6ac
added X.509 trust chain verification
2006-06-27 08:48:28 +00:00
Martin Willi
aed58dcc93
readded local_credential_store
...
added sendcert policy to connection
some other cleanups
2006-06-20 08:43:57 +00:00
Andreas Steffen
21b433c641
implemented rereadcrls rereadcacerts
2006-06-20 06:05:01 +00:00
Andreas Steffen
db959e6ea3
removed local_credential_store
2006-06-20 05:57:52 +00:00
Andreas Steffen
21e7a724d0
added crl support
2006-06-16 05:55:30 +00:00
Martin Willi
147fe5095d
fixed aes code, we support now aes128, aes192, aes256 in IKE
2006-06-15 13:14:09 +00:00
Andreas Steffen
bc35460db7
add_certificate() now returns pointer to added cert
2006-06-12 07:57:14 +00:00
Andreas Steffen
ac427e3677
discard cert if CA basic constraints flag is not set and warn if cert is not valide
2006-06-09 05:48:49 +00:00
Martin Willi
5238c9afef
fixed compile warnings when using -Wall
...
further CHILD_SA rekeying work done:
creation of a new CHILD_SA on a expire from a kernel works
delete of old CHILD_SA still missing
some issues when both initiate rekeing
2006-06-08 14:20:05 +00:00
Andreas Steffen
fa896e9a21
new functions to add certificates and retrieve private and public keys
2006-05-30 07:52:25 +00:00
Martin Willi
86a7937b45
- applied patch from andreas, which allows certificate listing via stroke
2006-05-19 06:44:08 +00:00
Martin Willi
f2c2d395ff
- introduced autotools
...
- first working version
- make dist should work
- things to do:
- UML testing!
- more cleanups
2006-05-16 14:24:03 +00:00
Martin Willi
b8577029d1
2006-05-10 08:02:49 +00:00