 Andreas Steffen
|
513eb95e60
|
parse RFC 3779 addressFamily
|
2009-12-20 19:26:28 +01:00 |
|
|
Andreas Steffen
|
7d379a786c
|
plugin name is x509
|
2009-12-20 16:01:35 +01:00 |
|
|
Andreas Steffen
|
28c25485ba
|
discard certificate with unknown critical extensions
|
2009-12-20 15:53:39 +01:00 |
|
|
Andreas Steffen
|
f3e366a9a0
|
use traffic_selector_t object to represent ipAddrBlocks
|
2009-12-20 15:15:02 +01:00 |
|
|
Andreas Steffen
|
1125a0be81
|
moved traffic_selectors from charon to libstrongswan
|
2009-12-20 14:57:38 +01:00 |
|
|
Andreas Steffen
|
92f0aa9736
|
firewall-enabled ipv6/net2net-ip6-in-ip4-ikev2 scenario
|
2009-12-17 19:43:33 +01:00 |
|
|
Andreas Steffen
|
02ee613325
|
firewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario
|
2009-12-17 18:50:45 +01:00 |
|
|
Andreas Steffen
|
ad858aee15
|
parse ipAddrBlocks
|
2009-12-17 17:32:55 +01:00 |
|
|
Andreas Steffen
|
9789d3a9b9
|
fixed updown plugin for mixed IPv4/IPv6 tunnels
|
2009-12-17 17:32:55 +01:00 |
|
|
Andreas Steffen
|
f721e0fb5f
|
added IKEv1 Camellia support to NEWS
|
2009-12-16 21:52:32 +01:00 |
|
|
Andreas Steffen
|
98b0657c0a
|
ikev1/ip-pool-db-push scenario tests DNS and NBNS server support
|
2009-12-16 21:50:39 +01:00 |
|
|
Andreas Steffen
|
b6623e87b4
|
IKEv1 daemon supports DNS and NBNS server assignment from database
|
2009-12-16 21:49:51 +01:00 |
|
|
Andreas Steffen
|
4d64cbbc4e
|
ikev1/ip-pool-db scenario tests DNS and NBNS server support
|
2009-12-16 21:22:13 +01:00 |
|
|
Andreas Steffen
|
c236049850
|
sql/ip-pool-db scenario tests DNS and NBNS server support
|
2009-12-16 19:02:23 +01:00 |
|
|
Andreas Steffen
|
42eb4951f9
|
ikev2/ip-pool-db scenario tests DNS and NBNS server support
|
2009-12-16 18:45:29 +01:00 |
|
|
Andreas Steffen
|
a71556060a
|
added ipsec pool DNS and NBNS support to NEWS
|
2009-12-16 18:20:07 +01:00 |
|
|
Andreas Steffen
|
645f3865b2
|
ipsec pool manages dns and nbns servers
|
2009-12-16 18:11:57 +01:00 |
|
|
Andreas Steffen
|
3747f0f2e7
|
cosmetics
|
2009-12-16 13:33:09 +01:00 |
|
|
Andreas Steffen
|
a461e20dd8
|
provide attributes from SQL database
|
2009-12-16 12:31:41 +01:00 |
|
|
Andreas Steffen
|
b75002bc95
|
added openssl-ikev1/alg-camellia scenario
|
2009-12-15 19:55:58 +01:00 |
|
|
Andreas Steffen
|
1191779744
|
removed superfluous ikev1/esp-alg-camellia scenario
|
2009-12-15 19:16:28 +01:00 |
|
|
Andreas Steffen
|
cbcd91314b
|
added gcrypt-ikev1/alg-camellia scenario
|
2009-12-15 19:15:44 +01:00 |
|
|
Andreas Steffen
|
de962d6e7d
|
add IKEv1 support for the Camellia cipher
|
2009-12-15 19:13:06 +01:00 |
|
|
Andreas Steffen
|
25df6196df
|
activate tcpdump in ikev1/esp-alg-des scenario
|
2009-12-10 22:37:43 +01:00 |
|
|
Andreas Steffen
|
982596e427
|
shuffled output order to achieve consistence
|
2009-12-09 17:26:35 +01:00 |
|
|
Andreas Steffen
|
4d025314c8
|
added pfkey/alg-sha384 and pfkey/alg-sha512 scenarios
|
2009-12-09 17:25:12 +01:00 |
|
|
Andreas Steffen
|
3e4b1010b0
|
adapted openssl-ikev2/alg scenarios
|
2009-12-09 15:51:43 +01:00 |
|
|
Andreas Steffen
|
4ab5874ccd
|
adapted gcrypt-ikev2/alg-camellia scenario
|
2009-12-09 15:48:03 +01:00 |
|
|
Andreas Steffen
|
fcca5b5caf
|
adapted gcrypt-ikev1 alg scenarios
|
2009-12-09 15:45:45 +01:00 |
|
|
Andreas Steffen
|
8603d1d76c
|
adapted ikev1 alg and esp scenarios
|
2009-12-09 15:41:54 +01:00 |
|
|
Andreas Steffen
|
4c8f3dff9c
|
adapted pfkey alg and esp scenarios
|
2009-12-09 15:38:17 +01:00 |
|
|
Andreas Steffen
|
8e7e81451b
|
remove again the ikev2/esp-alg-camellia scenario
|
2009-12-09 15:26:43 +01:00 |
|
|
Andreas Steffen
|
99133d3086
|
adapted ikev2 alg and esp scenarios
|
2009-12-09 15:19:10 +01:00 |
|
|
Andreas Steffen
|
344061ebce
|
removed redundant ikev1/ike-alg-sha2 scenarios
|
2009-12-09 10:11:03 +01:00 |
|
|
Andreas Steffen
|
01a8af1b1b
|
added ikev1/alg-sha512 scenario
|
2009-12-09 09:51:54 +01:00 |
|
|
Andreas Steffen
|
cb7e304d33
|
added ikev1/alg-sha384 scenario
|
2009-12-09 09:46:40 +01:00 |
|
|
Andreas Steffen
|
5d9d779808
|
renamed ikev1/alg-sha2_256 scenario to ikev1/alg-sha256
|
2009-12-09 09:36:16 +01:00 |
|
|
Andreas Steffen
|
05ffbc6e59
|
added ikev1/alg-sha256-96 scenario
|
2009-12-09 09:35:17 +01:00 |
|
|
Andreas Steffen
|
353b829177
|
fixed IKEv1 support of HMAC_SHA2_256_96
|
2009-12-09 09:33:32 +01:00 |
|
|
Andreas Steffen
|
0a975307f1
|
added Juniper SRX support to NEWS
|
2009-12-09 08:00:19 +01:00 |
|
|
Andreas Steffen
|
ee2679ec25
|
if end id is missing assign IP address to raw public key
|
2009-12-09 07:24:43 +01:00 |
|
|
Andreas Steffen
|
a07531250e
|
IKEv1 support of ESP SHA2_HMAC with correct truncation
|
2009-12-09 00:24:42 +01:00 |
|
|
Andreas Steffen
|
4b615edab4
|
some code optimizations
|
2009-12-09 00:24:42 +01:00 |
|
|
Andreas Steffen
|
e1573b3fe8
|
added ipAddrBlocks OID
|
2009-12-09 00:24:41 +01:00 |
|
|
Andreas Steffen
|
7747210f26
|
removed redundant ikev2/esp-alg-camellia scenario
|
2009-12-09 00:24:41 +01:00 |
|
|
Andreas Steffen
|
04933ea74e
|
added ikev2/alg-3des-md5 scenario
|
2009-12-08 12:54:42 +01:00 |
|
|
Andreas Steffen
|
7868162b35
|
added RFC-conforming ikev2/sha2 scenarios
|
2009-11-26 23:48:29 +01:00 |
|
|
Andreas Steffen
|
68db91ca32
|
adapted ikev2/alg-aes-xcbc scenario
|
2009-11-26 23:46:27 +01:00 |
|
|
Andreas Steffen
|
4b55cf5d09
|
put identities in single quotes
|
2009-11-25 09:02:09 +01:00 |
|
|
Andreas Steffen
|
653da7c907
|
added more debugging in configuration attribute handling
|
2009-11-24 23:17:07 +01:00 |
|
|
Andreas Steffen
|
eba568563c
|
changed error messages in the case of faulty esp and ike strings
|
2009-11-24 16:45:52 +01:00 |
|
|
Andreas Steffen
|
2eeab939a0
|
do not send all available kernel algorithms if esp string is faulty
|
2009-11-24 16:38:10 +01:00 |
|
|
Andreas Steffen
|
cda8ec7afc
|
added some parentheses
|
2009-11-24 14:36:17 +01:00 |
|
|
Andreas Steffen
|
93e2377c7f
|
allow ECP DH groups in pfsgroup definition
|
2009-11-24 14:35:25 +01:00 |
|
|
Andreas Steffen
|
17d52fbba1
|
renewed OCSP Signing certificate
|
2009-11-24 13:55:38 +01:00 |
|
|
Andreas Steffen
|
c4570d188e
|
issue error message for expired certificates in OCSP trust chain checking
|
2009-11-24 12:37:38 +01:00 |
|
|
Andreas Steffen
|
227583ba59
|
updated IKEv2 notification messages assigned by IANA
|
2009-11-24 09:21:00 +01:00 |
|
|
Andreas Steffen
|
44e41c4c6e
|
updated NEWS for 4.3.6dr2
|
2009-11-24 09:18:41 +01:00 |
|
|
Andreas Steffen
|
6ae43b9333
|
mixed fingerprint / userid
|
2009-11-11 11:17:59 +01:00 |
|
|
Andreas Steffen
|
209f52cb63
|
fixed 4.3.6 ocsp regression
|
2009-11-11 11:06:07 +01:00 |
|
|
Andreas Steffen
|
ee8486afdb
|
adapted log message
|
2009-11-10 23:55:55 +01:00 |
|
|
Andreas Steffen
|
a618e33e8b
|
merged pluto's PGP certificate parsing with charon's
|
2009-11-10 23:54:51 +01:00 |
|
|
Andreas Steffen
|
f565d0c575
|
merged pluto's PGP certificate parsing with charon's
|
2009-11-10 23:54:04 +01:00 |
|
|
Andreas Steffen
|
cc543182bc
|
added separating line
|
2009-11-10 21:50:34 +01:00 |
|
|
Andreas Steffen
|
bb7ae382fd
|
added some debugging to pgp certificate parsing
|
2009-11-10 10:04:55 +01:00 |
|
|
Andreas Steffen
|
262af16179
|
accept PGP v3 or v4 fingerprint as alternative to PGP user_id
|
2009-11-09 23:15:17 +01:00 |
|
|
Andreas Steffen
|
8a650a2bc8
|
put PGP userid in single quotes
|
2009-11-08 23:58:41 +01:00 |
|
|
Andreas Steffen
|
b25311fbe2
|
added ikev2/net2net-pgp-v3 scenario
|
2009-11-08 23:49:04 +01:00 |
|
|
Andreas Steffen
|
bc662125c2
|
removed nocrsend=yes statement
|
2009-11-08 23:48:26 +01:00 |
|
|
Andreas Steffen
|
2846e51a5b
|
added ikev2/net2net-pgp-v4 scenario
|
2009-11-08 23:23:45 +01:00 |
|
|
Andreas Steffen
|
ab5762e32a
|
list v3 or v4 fingerprint
|
2009-11-08 23:21:03 +01:00 |
|
|
Andreas Steffen
|
9a127590ac
|
stroke_list supports listing of PGP certificates
|
2009-11-08 21:01:12 +01:00 |
|
|
Andreas Steffen
|
9f0327e652
|
define TIME_32_BITS_SIGNED_MAX in utils.h
|
2009-11-08 18:55:52 +01:00 |
|
|
Andreas Steffen
|
e92e19c177
|
pluto ignores proprietary Juniper SRX notification 40001
|
2009-11-05 08:38:00 +01:00 |
|
|
Andreas Steffen
|
16dca5c2f2
|
moved multi-level-ca-pathlen scenario
|
2009-11-04 23:43:43 +01:00 |
|
|
Andreas Steffen
|
4c68a85a75
|
implemented path length constraint checkinf for IKEv2
|
2009-11-04 23:37:15 +01:00 |
|
|
Andreas Steffen
|
fef3b0b7fd
|
display printable characters in dntoa()
|
2009-11-04 20:17:12 +01:00 |
|
|
Andreas Steffen
|
8fac84bcdd
|
check if acerts linked_list has been initialized before destroying it
|
2009-11-04 19:36:02 +01:00 |
|
|
Andreas Steffen
|
32c8b1847b
|
renamed multi-level-pathlen scenario to multi-level-ca-pathlen
|
2009-11-04 18:18:43 +01:00 |
|
|
Andreas Steffen
|
cd36095e38
|
added ikev1/multi-level-pathlen scenario
|
2009-11-04 18:15:26 +01:00 |
|
|
Andreas Steffen
|
28c554088d
|
added a subsidiary Duck Research CA
|
2009-11-04 18:13:06 +01:00 |
|
|
Andreas Steffen
|
c95671cec2
|
implemented path length constraint checking for IKEv1
|
2009-11-04 18:10:31 +01:00 |
|
|
Andreas Steffen
|
fae322219f
|
output optional pathLenConstraint in ipsec listcacerts
|
2009-11-04 07:30:07 +01:00 |
|
|
Andreas Steffen
|
5d1d7e82b5
|
refreshened and fortified strongSwan Root CA certificate
|
2009-11-04 00:16:48 +01:00 |
|
|
Andreas Steffen
|
00aa027503
|
implemented parsing of pathLenConstraint
|
2009-11-04 00:03:10 +01:00 |
|
|
Andreas Steffen
|
f893bce3e7
|
fixed a memory leak in OCSP fetching
|
2009-10-29 10:00:19 +01:00 |
|
|
Andreas Steffen
|
c51b78eb2a
|
hyphenate eap-radius
|
2009-10-17 09:23:09 +02:00 |
|
|
Andreas Steffen
|
cea4bd8ff5
|
added IKEv1 mixed tunnel fix to NEWS
|
2009-10-16 17:57:42 +02:00 |
|
|
Andreas Steffen
|
601e2a6986
|
added ipv6/net2net-ip4-in-ip6-ikev1 and ipv6/net2net-ip4-in-ip6-ikev1 scenarios
|
2009-10-16 15:04:17 +02:00 |
|
|
Andreas Steffen
|
215b0402b3
|
use directory enumerator to load authcerts
|
2009-10-15 18:01:10 +02:00 |
|
|
Andreas Steffen
|
ff1ca9a8a3
|
cleaned out some bugs in refactoring of ac.c
|
2009-10-15 17:30:04 +02:00 |
|
|
Andreas Steffen
|
50a82b419e
|
corrected description of ikev1/ip-pool-db scenario
|
2009-10-15 15:25:36 +02:00 |
|
|
Andreas Steffen
|
bc3162d806
|
build eap-aka-3gpp2 plugin in UML scenarios
|
2009-10-15 15:22:48 +02:00 |
|
|
Andreas Steffen
|
38031878dd
|
moved .gitignore for pool
|
2009-10-15 14:58:09 +02:00 |
|
|
Andreas Steffen
|
1310fbd322
|
moved .gitignore for pool
|
2009-10-15 14:58:09 +02:00 |
|
|
Andreas Steffen
|
ffe6f83272
|
added ikev1/ip-pool-db-push scenario
|
2009-10-14 21:35:43 +02:00 |
|
|
Andreas Steffen
|
628f023d59
|
NEWS for the 4.3.5dr3 release
|
2009-10-14 18:02:15 +02:00 |
|
|
Andreas Steffen
|
f4c4e78296
|
added ikev1/ip-pool-db scenario
|
2009-10-14 14:51:12 +02:00 |
|
|
Andreas Steffen
|
668870be47
|
pool should be in th gitignore list
|
2009-10-14 14:37:03 +02:00 |
|
|
Andreas Steffen
|
270bb348e3
|
pluto now supports SQL-based virtual IP pools
|
2009-10-14 14:30:14 +02:00 |
|