Andreas Steffen
|
55434a1ba5
|
started implementation of libstrongswan code integrity check
|
2007-08-29 00:37:10 +00:00 |
|
Andreas Steffen
|
0e54968584
|
defined ietfAttr_create_from_string()
|
2007-08-29 00:35:51 +00:00 |
|
Andreas Steffen
|
bf422b1664
|
fixed typo
|
2007-08-28 09:59:53 +00:00 |
|
Andreas Steffen
|
12fe0e60df
|
set ignore properties
|
2007-08-28 07:02:51 +00:00 |
|
Andreas Steffen
|
52d39feb81
|
set ignore properties
|
2007-08-28 07:02:23 +00:00 |
|
Andreas Steffen
|
8234dd1216
|
testing/do-tests is made from do-tests.in by inserting actual routing table
|
2007-08-28 06:40:39 +00:00 |
|
Andreas Steffen
|
35800a11ee
|
testing/do-tests is made from do-tests.in by inserting actual routing table
|
2007-08-28 06:38:04 +00:00 |
|
Andreas Steffen
|
9ee1111d8b
|
added --enable-integrity-test and --disable-self-test options
|
2007-08-28 06:36:31 +00:00 |
|
Andreas Steffen
|
9a63ddd84d
|
initiated support of caIssuers accessLocation
|
2007-08-17 08:01:10 +00:00 |
|
Andreas Steffen
|
2a48f47406
|
required CA is that.ca not this.ca
|
2007-08-17 07:22:04 +00:00 |
|
Andreas Steffen
|
2133593696
|
matching_request instead of matching_trust must go into the metric
|
2007-08-17 07:21:26 +00:00 |
|
Andreas Steffen
|
0f9f19f54e
|
fixed maximum path length info in match_requested_ca()
|
2007-08-17 07:20:27 +00:00 |
|
Andreas Steffen
|
6a85215809
|
sort attributes alphabetically
|
2007-08-15 22:58:15 +00:00 |
|
Andreas Steffen
|
cd15679122
|
added caIssuers OID
|
2007-08-15 09:46:40 +00:00 |
|
Andreas Steffen
|
1bce8ec70d
|
corrected typo
|
2007-08-15 09:46:14 +00:00 |
|
Andreas Steffen
|
7cbe4a33e9
|
use symbolic shell variables in library paths
|
2007-08-15 08:40:16 +00:00 |
|
Andreas Steffen
|
96cc677c96
|
removed oid.txt and oid.pl in pluto subdir
|
2007-08-15 08:29:55 +00:00 |
|
Andreas Steffen
|
683d66fe93
|
aligned pluto/oid.txt to libstrongswan/asn1/oid.txt
|
2007-08-14 21:21:21 +00:00 |
|
Andreas Steffen
|
2d064166db
|
added Microsof Encrypting File System Extended Key Usage OID
|
2007-08-14 21:13:53 +00:00 |
|
Andreas Steffen
|
b086f62ca1
|
added Microsof Smartcard Logon Extended Key Usage OID
|
2007-08-14 21:05:40 +00:00 |
|
Andreas Steffen
|
bb70071b26
|
finetuning of phase1 matching metrics
|
2007-08-14 19:15:01 +00:00 |
|
Andreas Steffen
|
929b9e367a
|
append new attribute certs at the end
|
2007-08-14 13:04:36 +00:00 |
|
Andreas Steffen
|
06faefe43d
|
adding attribute certficates to a chained list
|
2007-08-14 12:27:02 +00:00 |
|
Andreas Steffen
|
efddbcb0b5
|
soft-limit treatment of unmatched certificate requests using a priority metric
|
2007-08-14 12:26:22 +00:00 |
|
Andreas Steffen
|
3c1100187f
|
replaced hex_str() by fprintf(#B) for printing unknown OIDs
|
2007-08-14 12:24:35 +00:00 |
|
Andreas Steffen
|
9148e44b39
|
fixed bug occuring with multiple occurences of the same cacert on a smartcard
|
2007-08-13 07:47:47 +00:00 |
|
Andreas Steffen
|
8f687a7591
|
has_rsa_private_key() must also be protected by keys_mutex
|
2007-08-10 12:10:36 +00:00 |
|
Andreas Steffen
|
c045d90a8e
|
corrected debug output
|
2007-08-10 11:23:45 +00:00 |
|
Andreas Steffen
|
dc481855bb
|
set default to uml=false
|
2007-08-10 10:47:48 +00:00 |
|
Andreas Steffen
|
0dbc039ab5
|
added listaacerts,listacerts,rereadsecerts,rereadocspcerts,rereadaacerts,rereadacerts to stroke
|
2007-08-10 10:19:53 +00:00 |
|
Andreas Steffen
|
3f343ad67a
|
fixed typo stroke keyword list
|
2007-08-10 10:00:59 +00:00 |
|
Andreas Steffen
|
f872f9d17d
|
ipsec stroke rereadsecrets|rereadaacerts|rereadacerts|listacerts supported
|
2007-08-10 09:19:58 +00:00 |
|
Andreas Steffen
|
8ff58b051c
|
ipsec stroke rereadaacerts|rereadacerts supported
|
2007-08-10 09:17:34 +00:00 |
|
Andreas Steffen
|
a74be4f7eb
|
set STROKE_REREAD_FIRST to STROKE_REREAD_SECRETS
|
2007-08-10 08:49:20 +00:00 |
|
Andreas Steffen
|
a027d51106
|
set STROKE_REREAD_FIRST to STROKE_REREAD_SECRETS
|
2007-08-10 08:49:03 +00:00 |
|
Andreas Steffen
|
138d7f9a79
|
added rereadsecrets keyword to stroke
|
2007-08-10 08:05:03 +00:00 |
|
Andreas Steffen
|
84db83336b
|
support of ipsec rereadsecrets for stroke
|
2007-08-10 07:16:32 +00:00 |
|
Andreas Steffen
|
3dcf9dbd70
|
version bump to 4.1.6
|
2007-08-08 08:17:48 +00:00 |
|
Andreas Steffen
|
037575682a
|
bug fix in linked_list deletion - instead of acerts destroyed certs twice
|
2007-08-08 06:02:59 +00:00 |
|
Andreas Steffen
|
dce4600015
|
version bumps
|
2007-08-07 21:14:06 +00:00 |
|
Andreas Steffen
|
f51d505e5e
|
implemented listing of attribute certificates
|
2007-08-07 20:32:11 +00:00 |
|
Andreas Steffen
|
7ad634a2ef
|
tolerate DNS lookup failures
|
2007-08-06 12:02:12 +00:00 |
|
Andreas Steffen
|
d9f129eb1d
|
separate the PSK IDs by spaces
|
2007-08-06 11:52:21 +00:00 |
|
Andreas Steffen
|
afc51a247f
|
debug info on preshared secrets
|
2007-08-06 11:05:11 +00:00 |
|
Andreas Steffen
|
1eef2ae8d2
|
added doxygen comments
|
2007-08-04 10:54:26 +00:00 |
|
Andreas Steffen
|
2b49135d5e
|
doxygen cosmetics
|
2007-08-04 07:32:37 +00:00 |
|
Andreas Steffen
|
ca694c614d
|
improved source routing table creation
|
2007-08-03 17:59:13 +00:00 |
|
Andreas Steffen
|
f7b49faa51
|
ID_FQDN lost its @ prefix
|
2007-08-03 13:36:28 +00:00 |
|
Andreas Steffen
|
dfcdae0335
|
recognize strongswan-2.8.7 VID
|
2007-08-03 11:34:44 +00:00 |
|
Andreas Steffen
|
a263d322a1
|
re-introduced listing of nexthop in ipsec status
|
2007-08-03 11:16:43 +00:00 |
|
Andreas Steffen
|
90b21fde11
|
use cgecho for green output
|
2007-08-03 10:58:45 +00:00 |
|
Andreas Steffen
|
d49cc7b383
|
check source routing table 100
|
2007-08-03 10:57:37 +00:00 |
|
Andreas Steffen
|
0698d91c31
|
re-introduced leftnexthop=%direct
|
2007-08-03 10:57:08 +00:00 |
|
Andreas Steffen
|
1f4357ca4d
|
added routing table 50 for passthrough routes
|
2007-08-03 10:56:40 +00:00 |
|
Andreas Steffen
|
f6f55adb3a
|
use table 100 for source routing
|
2007-08-03 10:05:15 +00:00 |
|
Andreas Steffen
|
ec11518d1b
|
handle dns lookup failures
|
2007-08-02 18:38:28 +00:00 |
|
Andreas Steffen
|
70c5c34da7
|
corrected typo
|
2007-07-30 10:55:09 +00:00 |
|
Andreas Steffen
|
db61efdbbb
|
include default route also in src address evaluation
|
2007-07-13 09:00:39 +00:00 |
|
Andreas Steffen
|
018219ae3a
|
include default route with missing dst field into route evaluation
|
2007-07-13 06:13:14 +00:00 |
|
Andreas Steffen
|
0761886051
|
added to ipsec.conf installation path
|
2007-07-11 16:22:02 +00:00 |
|
Andreas Steffen
|
92901c74f2
|
version bump to 4.1.5
|
2007-07-08 19:40:11 +00:00 |
|
Andreas Steffen
|
c520944800
|
version bump to 4.1.5
|
2007-07-08 19:08:31 +00:00 |
|
Andreas Steffen
|
1fb704404b
|
execute conntrack -F at the outset
|
2007-07-04 18:55:54 +00:00 |
|
Andreas Steffen
|
13763a385c
|
suppress stderr in start-switches script
|
2007-07-04 18:50:21 +00:00 |
|
Andreas Steffen
|
0a46e963ff
|
added three mobike scenarios
|
2007-07-04 17:39:10 +00:00 |
|
Andreas Steffen
|
01a08cb2e7
|
output crl uri as a printable string instead of a binary blob
|
2007-07-04 13:36:41 +00:00 |
|
Andreas Steffen
|
ed0d8e8008
|
added entrustVersInfo OID
|
2007-07-04 12:11:38 +00:00 |
|
Andreas Steffen
|
eea626ed25
|
describe eap option in ipsec.conf.5 man page
|
2007-07-04 05:42:58 +00:00 |
|
Andreas Steffen
|
ae4388dca0
|
cosmetics
|
2007-07-04 05:42:09 +00:00 |
|
Andreas Steffen
|
4f22a3e339
|
removed the ipsec.conf version number
|
2007-07-04 05:41:51 +00:00 |
|
Andreas Steffen
|
959b01aca5
|
version bumps
|
2007-07-03 13:08:13 +00:00 |
|
Andreas Steffen
|
3ba90600f2
|
recognize strongswan-2.8.6 VID
|
2007-07-03 13:06:27 +00:00 |
|
Andreas Steffen
|
a0a0bdd727
|
starter bug fix and pkcs11initargs patch by Robert Varga
|
2007-07-03 12:51:29 +00:00 |
|
Andreas Steffen
|
dd0ee786db
|
support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga
|
2007-07-03 09:33:02 +00:00 |
|
Andreas Steffen
|
e0e6137dd3
|
support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga
|
2007-07-03 09:26:44 +00:00 |
|
Andreas Steffen
|
bcac22f3a6
|
DBG1 level for 'peer supports MOBIKE' debug message
|
2007-07-02 20:13:15 +00:00 |
|
Andreas Steffen
|
561f88e306
|
fixed typo
|
2007-07-02 20:10:26 +00:00 |
|
Andreas Steffen
|
066518270f
|
cosmetics
|
2007-07-02 17:56:04 +00:00 |
|
Andreas Steffen
|
fdd32ee6e5
|
fix of the bug fix, courtesy of Robert Varga
|
2007-07-02 17:48:30 +00:00 |
|
Andreas Steffen
|
2f806bd866
|
bug fix courtesy of Robert Varga
|
2007-07-02 17:42:16 +00:00 |
|
Andreas Steffen
|
c598ac6360
|
changes in uml configuration to allow mobike
|
2007-07-02 09:52:20 +00:00 |
|
Andreas Steffen
|
cea6634fde
|
MobIKE requires iptables to open udp/4500
|
2007-06-28 21:33:51 +00:00 |
|
Andreas Steffen
|
b9212e5a93
|
MobIKE requires iptables to open udp/4500
|
2007-06-28 21:33:13 +00:00 |
|
Andreas Steffen
|
c2bc2b2782
|
alphabetical order
|
2007-06-27 21:49:09 +00:00 |
|
Andreas Steffen
|
e0e7ef070d
|
separated pluto, charon, and klips setup config section parameters
|
2007-06-27 15:42:11 +00:00 |
|
Andreas Steffen
|
6a39bc4061
|
added passthrough scenario
|
2007-06-27 14:25:15 +00:00 |
|
Andreas Steffen
|
487fe29ee3
|
added lefthostaccess and leftprotoport parameters
|
2007-06-27 14:03:56 +00:00 |
|
Andreas Steffen
|
1fbdab8507
|
right=%<fqdn> wildcard added
|
2007-06-27 13:31:16 +00:00 |
|
Andreas Steffen
|
7900ab1b7a
|
update ipsec.conf man page
|
2007-06-27 13:29:36 +00:00 |
|
Andreas Steffen
|
c4c916f90a
|
add starter.8 man page to distribution
|
2007-06-27 13:29:20 +00:00 |
|
Andreas Steffen
|
6fa8bd61c1
|
cosmetics
|
2007-06-27 10:04:02 +00:00 |
|
Andreas Steffen
|
2f153a2263
|
recognize wildcard keyingtries=%forever
|
2007-06-27 08:11:22 +00:00 |
|
Andreas Steffen
|
a80521d13e
|
recognize wildcards right=%group and keyingtries=%forever
|
2007-06-27 08:11:08 +00:00 |
|
Andreas Steffen
|
cae8f3e9b6
|
updated copyright statement
|
2007-06-27 07:36:44 +00:00 |
|
Andreas Steffen
|
31302718ff
|
fixed distro and copyright information
|
2007-06-27 07:25:19 +00:00 |
|
Andreas Steffen
|
361712fe37
|
use of the right=%<fqdn> wildcard
|
2007-06-26 10:46:30 +00:00 |
|
Andreas Steffen
|
3f946e1c90
|
support of right=%<FQDN> wildcard
|
2007-06-25 11:28:39 +00:00 |
|
Andreas Steffen
|
e6a22d8728
|
discarded unused functions
|
2007-06-25 09:06:13 +00:00 |
|
Andreas Steffen
|
3345c0a1ed
|
make starter behave more gracefully in the presence of non-fatal errors
|
2007-06-25 07:10:23 +00:00 |
|
Andreas Steffen
|
078ce348ae
|
IKEv1 rightallowany flag introduced
|
2007-06-20 09:46:54 +00:00 |
|