denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,398 Commits 1 Branch 0 Tags
4b4f8bd732de4eddf2bfd418695e6391bd791f95
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi a4eb37eed0 Added medsrv.fcgi to gitignore 2009-10-08 13:10:02 +02:00
Martin Willi 4b1cd5a367 Reenabled acq_expires SA timer using rekey timeout 
While not using a SA expiration for allocating SPIs works fine,
the situation is much more problematic for kernel-created temporary
SAs from acquires. If the negotiation of such a CHILD_SA fails,
the created temporary SA can not be deleted.
 2009-10-07 13:09:59 +02:00
Martin Willi 991f7ccd6c Catch CHILD_SA state changes during acquire 
If an acquire fails due to a TS_UNACCEPTABLE or other CHILD_SA only errors,
we have to reset the pending state in the trap manager.
 2009-10-07 13:09:59 +02:00
Martin Willi 6eacaffc72 Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word reads 2009-10-05 14:06:32 +02:00
Martin Willi 3b836fc759 Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word reads 2009-10-05 13:32:41 +02:00
Martin Willi 587ebae722 Distinguish invalid free()s between corrupted magic and invalid pointer 2009-10-05 11:02:54 +02:00
Martin Willi f12d8cf719 Do not increase the invalid-KE/Cookie retry counter for additional keyingtry attempts 2009-09-24 14:49:41 +02:00
Martin Willi cf76c42903 Do not create a replacement IKE_SA if we have CHILD_SAs to route only 2009-09-24 14:49:41 +02:00
Martin Willi 17859fe6cf Right-align short options in pki usage 2009-09-24 11:28:53 +02:00
Martin Willi 840743479a Use mysql_config to query MySQL LIBS and CFLAGS 2009-09-23 12:45:03 +02:00
Martin Willi 0406ed7a16 Fixed a crash in source address lookup 2009-09-23 11:18:30 +02:00
Martin Willi a7f79ee9c1 Define ME for all charon plugins 2009-09-23 11:13:27 +02:00
Martin Willi e20b792108 Correctly handle --enable-mediation option 2009-09-23 10:50:00 +02:00
Martin Willi b262680175 Emit a ALERT_SHUTDOWN_SIGNAL before shutting down the daemon 2009-09-22 17:00:00 +02:00
Martin Willi f1092e20f4 Fixed encoding of hash-and-url cert payload 2009-09-22 10:07:04 +02:00
Martin Willi cb64b21217 Do not assign SIM version to a volatile buffer on stack 2009-09-22 09:11:35 +02:00
Martin Willi 91cb348cc2 CA certificates are looked up using the subjectPublicKeyInfo keyid 2009-09-21 18:13:25 +02:00
Martin Willi c84b139a87 Credential backends use has_fingerprint() methods to select keys/certificates 2009-09-21 17:03:00 +02:00
Martin Willi 640ed4d5a5 Public/Private keys implement a has_fingerprint() method 2009-09-21 16:47:25 +02:00
Martin Willi fde7f5abf8 Correctly serve certificates if CERT_ANY requested 2009-09-21 15:34:29 +02:00
Martin Willi c6a8990bc5 Enforce a local address of the same family as remote address 2009-09-21 15:30:40 +02:00
Martin Willi c331bce51d Return certificates of requested kind only 2009-09-21 14:43:57 +02:00
Martin Willi c7a64d6f41 Use helper functions to handle (non-)skippable attributes 2009-09-18 15:08:43 +02:00
Martin Willi e466139c91 Clients can handle AKA-Identity requests by sending the full identity 2009-09-18 14:51:35 +02:00
Martin Willi 85af7a89c6 nm uses the distributions trusted root CAs if none is explicitly specified 2009-09-18 14:34:27 +02:00
Martin Willi 7aa495d9d0 get_private() in listcacerts requires a valid auth cfg 2009-09-17 12:47:03 +02:00
Martin Willi 4a03e85b37 Fixed nexthop lookup, used by source route installation 2009-09-16 13:55:32 +02:00
Martin Willi 36b7ba5ee3 Use continue to advance to next iteration 2009-09-16 13:32:47 +02:00
Martin Willi 075448fbc8 Complain about missing %defaultroute support only if one is actually used 2009-09-16 13:27:49 +02:00
Martin Willi b538b606da Use the default debug hook if possible 2009-09-16 13:16:00 +02:00
Martin Willi 5289249449 Default logger implementation can be modified by dbg_default_set_level/stream 2009-09-16 13:06:16 +02:00
Martin Willi a474081f1f Removed obsolete per-command debug level option 2009-09-16 12:52:56 +02:00
Martin Willi 4e1cade52f Fixed loading of DER encoded certificate files 2009-09-16 11:24:35 +02:00
Martin Willi 88fdf88a1f Disable rtnetlink defaultroute lookup if pluto is disabled 
As we do not support Pluto on BSD/Mac, exclude the Linux specific
rtnetlink routing lookup; Charon doesn't require it anyway.
 2009-09-15 13:16:39 +02:00
Martin Willi ae7452e87c Handle pki --debug and --options in a generic way for all command 2009-09-15 11:53:46 +02:00
Martin Willi 4fdb9f6f74 pki tool supports single letter short options 2009-09-15 10:20:22 +02:00
Martin Willi 012f62a820 Exponents of a RSA key in openssl are optional (for PGP) 2009-09-15 09:33:00 +02:00
Martin Willi b6b90b68a1 Added some NEWS 2009-09-15 09:13:31 +02:00
Martin Willi 9f45b19fe7 Use ID_KEY_ID as PGP user id, as it can contain any string 2009-09-15 08:45:08 +02:00
Martin Willi e4be5ef8fb Fall back to default credential set lookup if fingerprint lookup fails 2009-09-15 08:44:10 +02:00
Martin Willi 79c6f16212 Implemented support for preinstalled PGP certificates in charon 2009-09-15 08:23:48 +02:00
Martin Willi 4cb0e1bb76 Added basic support for PGP certificates (no trust relationships yet) 2009-09-15 08:23:48 +02:00
Martin Willi 88f3ffa1b1 Moved generic PGP parsing functions to pgp_utils.[ch] 2009-09-15 08:23:47 +02:00
Martin Willi 0912f0d2bc replaced the missed ${confdir} by ${sysconfdir} 2009-09-14 21:38:36 +02:00
Martin Willi af0dfe4987 Fixed pluto certificate parsing 2009-09-14 17:18:43 +02:00
Martin Willi b9fbd66587 Added support to build RSA keys from components in openssl 2009-09-14 14:29:10 +02:00
Martin Willi 06a8df11d9 pki tool can issue/self-sign certificates with OCSP URIs 2009-09-11 17:17:56 +02:00
Martin Willi 6dc57cd02e x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations 2009-09-11 17:16:22 +02:00
Martin Willi 6d24a5d746 added lost session cookie buffer 2009-09-11 16:23:15 +02:00
Martin Willi 3b878dae7e Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro 2009-09-11 15:39:35 +02:00
Martin Willi 3a7bd9bd49 pki tool can issue certificates with CRL distribution points 2009-09-11 15:36:22 +02:00
Martin Willi 881b259943 x509 plugin supports encoding of CRL distribution points 2009-09-11 15:36:22 +02:00
Martin Willi 31f87c29c7 double check session id has been initialized 2009-09-10 20:51:43 +02:00
Martin Willi 356b2b2780 pass NULL to library_init() to load settings from default file 2009-09-10 18:52:42 +02:00
Martin Willi 5b03a350fc use NULL to load plugins from default plugin directory 2009-09-10 18:52:42 +02:00
Martin Willi 6de28173f0 remove obsolete @brief doxygen tags 2009-09-10 18:52:42 +02:00
Martin Willi 6d8e913ab6 Use wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t 2009-09-10 18:52:42 +02:00
Martin Willi 48a606b5ff libfast uses enumerator instead of deprecated iterator 2009-09-10 18:52:42 +02:00
Martin Willi d73f453c29 Updated x509 plugin to the new builder API 2009-09-10 16:20:21 +02:00
Martin Willi 91ef5c66ab Updated pubkey plugin to the new builder API 2009-09-10 16:20:20 +02:00
Martin Willi 872176d350 Updated pkcs1 plugin to the new builder API 2009-09-10 16:20:20 +02:00
Martin Willi 43224e9527 Updated pgp plugin to the new builder API 2009-09-10 16:20:20 +02:00
Martin Willi de408caf93 Updated pem plugin to the new builder API 2009-09-10 16:20:19 +02:00
Martin Willi 30c06407c6 Updated openssl plugin to the new builder API 2009-09-10 16:20:19 +02:00
Martin Willi 1086d00e41 Updated gmp plugin to the new builder API 2009-09-10 16:20:19 +02:00
Martin Willi a94acb58a2 Updated gcrypt plugin to the new builder API 2009-09-10 16:20:18 +02:00
Martin Willi 26135ed9bb Updated dnskey plugin to the new builder API 2009-09-10 16:20:18 +02:00
Martin Willi 0a139eeac9 Updated agent plugin to the new builder API 2009-09-10 16:20:18 +02:00
Martin Willi d3674e25a7 Updated pluto to the new builder API 2009-09-10 16:20:18 +02:00
Martin Willi f678f5c77e Replaced builder_t objects by simple builder_function_t functions 2009-09-10 16:20:17 +02:00
Martin Willi 3ce9438b60 Use dynamic registration/usage invocation of command types 2009-09-10 16:18:30 +02:00
Martin Willi 6be68cc1c7 splitted PKI tool to a file per command 2009-09-10 12:31:40 +02:00
Martin Willi e5e6c6f43c use generic option parsing with usage information 2009-09-10 11:18:41 +02:00
Martin Willi 63ee88745a fixed memleak 2009-09-09 17:16:00 +02:00
Martin Willi 1080a51fd2 evaluate arguments of chunk_clone/clonea/alloc/alloca only once 2009-09-09 16:24:21 +02:00
Martin Willi b5d31b3e56 pki tool supports subjectAltNames in certificates 2009-09-08 13:27:35 +02:00
Martin Willi 7631aac20c x509 certificates support encoding of email, DNS and IP subjectAltNames 2009-09-08 13:17:41 +02:00
Martin Willi d7be290643 non self-signed x509 certificates are encoded with authorityKeyIdentifier 2009-09-08 11:26:05 +02:00
Martin Willi 5c92524449 x509 CA certificates are encoded with a subjectKeyIdentifier 2009-09-08 11:02:49 +02:00
Martin Willi 8871e59c11 pki tool --issue/--verify operations require a CA with CA basicConstraint 2009-09-08 10:44:08 +02:00
Martin Willi e4a4589606 pki tool can set CA basicConstraint on --self/--issued certificates 2009-09-08 10:39:04 +02:00
Martin Willi 8ab900dee9 x509 plugin supports encoding of CA basicConstraint extension 2009-09-08 10:38:02 +02:00
Martin Willi 58f34613e0 pki tool can issue certificates 2009-09-07 16:04:30 +02:00
Martin Willi faa4bd49fb use sysconfdir, no need for an additional confdir variable 2009-09-07 15:10:30 +02:00
Martin Willi c0e56a663e only add generated m4 files to include path 2009-09-07 15:10:01 +02:00
Martin Willi b7b5653386 Use macros to define --with options 2009-09-07 15:00:45 +02:00
Martin Willi b803bc82f4 Use macros to define --enable/--disable options 2009-09-07 15:00:45 +02:00
Martin Willi e5efb5a03b Added a .gitignore for generated m4 scripts 2009-09-07 15:00:44 +02:00
Martin Willi e455ae1343 use m4/ autoconf subdirectory 2009-09-07 15:00:32 +02:00
Martin Willi 8b3b4a244e Removed trailing whitespaces in configure.in/Makefile.am 2009-09-07 11:48:03 +02:00
Martin Willi 7b3814f75d remove spaces before tabs at the beginning of lines (^( )+\t) 2009-09-04 15:02:11 +02:00
Martin Willi b9b8a98f47 remove spaces within tabs (\t( )+\t) 2009-09-04 15:00:19 +02:00
Martin Willi 323f9f990f replaces four spaces by tabs, where appropriate 2009-09-04 14:50:23 +02:00
Martin Willi 7daf5226b7 removed trailing spaces ([[:space:]]+$) 2009-09-04 13:46:09 +02:00
Martin Willi dd2b6f3073 fixed memleak in rekey collissions 2009-09-03 18:09:29 +02:00
Martin Willi 72e2faf291 Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL 2009-09-03 17:32:41 +02:00
Martin Willi 9beb83868f Use get_notify() to look up single notifies 2009-09-03 17:32:01 +02:00
Martin Willi 3e15f99189 accept octet strings in is_asn1() check 2009-09-03 15:35:05 +02:00
Martin Willi d176994235 Use recursive source address lookup if we get a gateway only 2009-09-03 14:46:39 +02:00
Martin Willi 12a230ddb4 Complain about rw(un)lock errors 2009-09-03 14:46:28 +02:00