Tobias Brunner
e5ab32a7ee
timing of connectivity checks adjusted
2008-03-31 15:04:38 +00:00
Martin Willi
9e72d3bcaf
defining ME globally, as we need it in plugins
2008-03-31 15:01:43 +00:00
Andreas Steffen
58a05045cc
utc argument in %#T was missing
2008-03-31 14:36:00 +00:00
Tobias Brunner
9e183cd5b8
signal fixed
2008-03-31 14:27:16 +00:00
Andreas Steffen
681d56b1bb
disabled build of outdated dbus interface
2008-03-31 12:59:39 +00:00
Tobias Brunner
f98736aee6
changed order of server and peer reflexive endpoints (and also the priorities)
2008-03-31 10:56:49 +00:00
Martin Willi
0f7ef3d2a0
received certificates have least priority
...
fixed manager unlocking
2008-03-31 08:43:18 +00:00
Martin Willi
d69b267d58
fixed refcounting in certificate trustchain validation
2008-03-31 07:16:12 +00:00
Andreas Steffen
1c65129148
adapted configure options in testing.conf and build-umlrootfs
2008-03-29 19:33:02 +00:00
Andreas Steffen
dcc777652e
changed error message
2008-03-29 13:26:53 +00:00
Andreas Steffen
40f9006845
output uptime in status in local time
2008-03-29 08:55:09 +00:00
Andreas Steffen
d2aa6fcaeb
shortened menu item
2008-03-28 22:46:09 +00:00
Andreas Steffen
c63dc50f15
demoted ldap debug output to level 2
2008-03-28 22:44:45 +00:00
Andreas Steffen
95ef5db5c3
remove xml directory
2008-03-28 19:49:59 +00:00
Martin Willi
b7ef3f625d
leak detective detects heap over- and underflow
2008-03-28 14:51:26 +00:00
Martin Willi
7939864dec
updated leak_detective whitelist: libxml and clearsilver functions
2008-03-28 13:16:36 +00:00
Martin Willi
6b9290ff12
renamed xml plugin to smp to avoid confusion
...
added some dependency checks to configure
configure checks ClearSilver and fastcgi
cleanups in the build system here and there
2008-03-28 12:44:01 +00:00
Martin Willi
892fb43b12
fixed manager plugin loading
...
manager uses strongswan.conf to read its configuration
2008-03-28 12:41:05 +00:00
Martin Willi
35b6e2301f
fixed crash if crl fetching fails
2008-03-28 12:00:51 +00:00
Martin Willi
dca40a9483
fixed all pluto compiler warnings
2008-03-28 11:48:14 +00:00
Martin Willi
7539b1d1aa
fixed compiler warning in openace
...
fixed pem loading bug
2008-03-28 11:47:11 +00:00
Martin Willi
acf7956c68
fixed compiler warning in libfreeswan
2008-03-28 11:46:30 +00:00
Martin Willi
a43eb5aa3f
fixed compiler warning in scepclient
2008-03-28 11:45:56 +00:00
Martin Willi
0d2670e7e6
removed unused yynuput to fix compiler warning
2008-03-28 11:45:01 +00:00
Martin Willi
15e21c5cba
fixed compiler warning
2008-03-28 10:21:04 +00:00
Martin Willi
d55fa9aff7
reentrant save cert_cache
2008-03-28 08:38:51 +00:00
Martin Willi
ac1fefc2de
caching of CRLs
2008-03-28 08:14:47 +00:00
Martin Willi
d20e5c6ab5
replaced get_public() by create_public_enumerator() to try multiple public keys for signature verification
2008-03-27 19:07:23 +00:00
Martin Willi
0d30ba3343
use trusted self-signed root CA certificates as trust anchor only
2008-03-27 13:38:02 +00:00
Tobias Brunner
e74bc8e51d
changed external interface to the mediation extension.
2008-03-27 12:31:35 +00:00
Tobias Brunner
b42421a04c
corrected ME_ENDPOINT length check
2008-03-27 12:29:51 +00:00
Martin Willi
52a61742e7
reusing generic shared_key_t implementation in med_db
2008-03-27 11:45:49 +00:00
Martin Willi
cf4caefab1
whitelisted FCGX_Init
...
reporting count of leaks suppressed by whitelist
2008-03-27 11:42:35 +00:00
Martin Willi
4204db116b
fixed memory leak in dispatcher
2008-03-27 10:24:37 +00:00
Tobias Brunner
54150b3f13
checking the size of ME_* notify payloads
2008-03-27 10:17:29 +00:00
Tobias Brunner
b0dee635d2
replaced the COOKIE notify payload in connectivity checks with a ME_CONNECTAUTH notify payload
2008-03-27 09:54:09 +00:00
Martin Willi
f957f7dfb3
implemented cert cache flushing, ipsec purgeocsp
2008-03-27 06:37:29 +00:00
Andreas Steffen
d61bd27a9a
fixed plugin/stroke Makefile
2008-03-26 20:24:55 +00:00
Andreas Steffen
1aad8bdfad
makeshift fix of --enable-integrity-test option
2008-03-26 20:16:42 +00:00
Tobias Brunner
dc04b7c743
mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed
2008-03-26 18:40:19 +00:00
Martin Willi
685232670a
added uptime statistics to statusall
2008-03-26 16:13:14 +00:00
Martin Willi
7b88a983d8
caching of ocsp responses (experimental), no crl caching yet
2008-03-26 15:21:50 +00:00
Martin Willi
391abda082
fixed compile error if --enable-p2p is set
2008-03-26 14:45:24 +00:00
Andreas Steffen
5298777ad8
treat sig_alg and algorithm comparison in a consistent way over all certificate types
2008-03-26 13:10:36 +00:00
Martin Willi
e37f7715bf
fixed rightca= constraint checking
...
implemented rightca= for intermediate CAs we do not have the certificate at config load
2008-03-26 12:23:46 +00:00
Martin Willi
2d84da89b9
fixed auth_info_t.equals()
2008-03-26 10:58:19 +00:00
Martin Willi
0b14fdb92b
splitted stroke plugin to several files:
...
socket: reads messages from socket, dispatching
config: process add/del conn, serves configs through backend_t
control: controlling of the daemon (up/down/route/...(
cred: credential loading, serves creds through credential_set_t
ca: ca sections from ipsec.conf, serves cdp's through credential_set_t
list: log status information to stroke console (status/statusall/list*)
shared_key: shared key implementation for keys read from ipsec.secrets
plugin: registers stroke plugin and starts socket w/ thread
2008-03-26 10:10:40 +00:00
Martin Willi
3c7e72f5b0
added equals() method to peer_cfg, ike_cfg, proposals, auth_info
...
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
2008-03-26 10:06:45 +00:00
Martin Willi
a852928a6f
fixed compiler warnings
2008-03-26 09:29:30 +00:00
Andreas Steffen
26930a8c3e
certificate factory can load certs from file
2008-03-25 22:28:27 +00:00
Tobias Brunner