Commit Graph
100 Commits
Author SHA1 Message Date
Andreas Steffen 55434a1ba5 started implementation of libstrongswan code integrity check 2007-08-29 00:37:10 +00:00
Andreas Steffen 0e54968584 defined ietfAttr_create_from_string() 2007-08-29 00:35:51 +00:00
Andreas Steffen bf422b1664 fixed typo 2007-08-28 09:59:53 +00:00
Andreas Steffen 12fe0e60df set ignore properties 2007-08-28 07:02:51 +00:00
Andreas Steffen 52d39feb81 set ignore properties 2007-08-28 07:02:23 +00:00
Andreas Steffen 8234dd1216 testing/do-tests is made from do-tests.in by inserting actual routing table 2007-08-28 06:40:39 +00:00
Andreas Steffen 35800a11ee testing/do-tests is made from do-tests.in by inserting actual routing table 2007-08-28 06:38:04 +00:00
Andreas Steffen 9ee1111d8b added --enable-integrity-test and --disable-self-test options 2007-08-28 06:36:31 +00:00
Andreas Steffen 9a63ddd84d initiated support of caIssuers accessLocation 2007-08-17 08:01:10 +00:00
Andreas Steffen 2a48f47406 required CA is that.ca not this.ca 2007-08-17 07:22:04 +00:00
Andreas Steffen 2133593696 matching_request instead of matching_trust must go into the metric 2007-08-17 07:21:26 +00:00
Andreas Steffen 0f9f19f54e fixed maximum path length info in match_requested_ca() 2007-08-17 07:20:27 +00:00
Andreas Steffen 6a85215809 sort attributes alphabetically 2007-08-15 22:58:15 +00:00
Andreas Steffen cd15679122 added caIssuers OID 2007-08-15 09:46:40 +00:00
Andreas Steffen 1bce8ec70d corrected typo 2007-08-15 09:46:14 +00:00
Andreas Steffen 7cbe4a33e9 use symbolic shell variables in library paths 2007-08-15 08:40:16 +00:00
Andreas Steffen 96cc677c96 removed oid.txt and oid.pl in pluto subdir 2007-08-15 08:29:55 +00:00
Andreas Steffen 683d66fe93 aligned pluto/oid.txt to libstrongswan/asn1/oid.txt 2007-08-14 21:21:21 +00:00
Andreas Steffen 2d064166db added Microsof Encrypting File System Extended Key Usage OID 2007-08-14 21:13:53 +00:00
Andreas Steffen b086f62ca1 added Microsof Smartcard Logon Extended Key Usage OID 2007-08-14 21:05:40 +00:00
Andreas Steffen bb70071b26 finetuning of phase1 matching metrics 2007-08-14 19:15:01 +00:00
Andreas Steffen 929b9e367a append new attribute certs at the end 2007-08-14 13:04:36 +00:00
Andreas Steffen 06faefe43d adding attribute certficates to a chained list 2007-08-14 12:27:02 +00:00
Andreas Steffen efddbcb0b5 soft-limit treatment of unmatched certificate requests using a priority metric 2007-08-14 12:26:22 +00:00
Andreas Steffen 3c1100187f replaced hex_str() by fprintf(#B) for printing unknown OIDs 2007-08-14 12:24:35 +00:00
Andreas Steffen 9148e44b39 fixed bug occuring with multiple occurences of the same cacert on a smartcard 2007-08-13 07:47:47 +00:00
Andreas Steffen 8f687a7591 has_rsa_private_key() must also be protected by keys_mutex 2007-08-10 12:10:36 +00:00
Andreas Steffen c045d90a8e corrected debug output 2007-08-10 11:23:45 +00:00
Andreas Steffen dc481855bb set default to uml=false 2007-08-10 10:47:48 +00:00
Andreas Steffen 0dbc039ab5 added listaacerts,listacerts,rereadsecerts,rereadocspcerts,rereadaacerts,rereadacerts to stroke 2007-08-10 10:19:53 +00:00
Andreas Steffen 3f343ad67a fixed typo stroke keyword list 2007-08-10 10:00:59 +00:00
Andreas Steffen f872f9d17d ipsec stroke rereadsecrets|rereadaacerts|rereadacerts|listacerts supported 2007-08-10 09:19:58 +00:00
Andreas Steffen 8ff58b051c ipsec stroke rereadaacerts|rereadacerts supported 2007-08-10 09:17:34 +00:00
Andreas Steffen a74be4f7eb set STROKE_REREAD_FIRST to STROKE_REREAD_SECRETS 2007-08-10 08:49:20 +00:00
Andreas Steffen a027d51106 set STROKE_REREAD_FIRST to STROKE_REREAD_SECRETS 2007-08-10 08:49:03 +00:00
Andreas Steffen 138d7f9a79 added rereadsecrets keyword to stroke 2007-08-10 08:05:03 +00:00
Andreas Steffen 84db83336b support of ipsec rereadsecrets for stroke 2007-08-10 07:16:32 +00:00
Andreas Steffen 3dcf9dbd70 version bump to 4.1.6 2007-08-08 08:17:48 +00:00
Andreas Steffen 037575682a bug fix in linked_list deletion - instead of acerts destroyed certs twice 2007-08-08 06:02:59 +00:00
Andreas Steffen dce4600015 version bumps 2007-08-07 21:14:06 +00:00
Andreas Steffen f51d505e5e implemented listing of attribute certificates 2007-08-07 20:32:11 +00:00
Andreas Steffen 7ad634a2ef tolerate DNS lookup failures 2007-08-06 12:02:12 +00:00
Andreas Steffen d9f129eb1d separate the PSK IDs by spaces 2007-08-06 11:52:21 +00:00
Andreas Steffen afc51a247f debug info on preshared secrets 2007-08-06 11:05:11 +00:00
Andreas Steffen 1eef2ae8d2 added doxygen comments 2007-08-04 10:54:26 +00:00
Andreas Steffen 2b49135d5e doxygen cosmetics 2007-08-04 07:32:37 +00:00
Andreas Steffen ca694c614d improved source routing table creation 2007-08-03 17:59:13 +00:00
Andreas Steffen f7b49faa51 ID_FQDN lost its @ prefix 2007-08-03 13:36:28 +00:00
Andreas Steffen dfcdae0335 recognize strongswan-2.8.7 VID 2007-08-03 11:34:44 +00:00
Andreas Steffen a263d322a1 re-introduced listing of nexthop in ipsec status 2007-08-03 11:16:43 +00:00
Andreas Steffen 90b21fde11 use cgecho for green output 2007-08-03 10:58:45 +00:00
Andreas Steffen d49cc7b383 check source routing table 100 2007-08-03 10:57:37 +00:00
Andreas Steffen 0698d91c31 re-introduced leftnexthop=%direct 2007-08-03 10:57:08 +00:00
Andreas Steffen 1f4357ca4d added routing table 50 for passthrough routes 2007-08-03 10:56:40 +00:00
Andreas Steffen f6f55adb3a use table 100 for source routing 2007-08-03 10:05:15 +00:00
Andreas Steffen ec11518d1b handle dns lookup failures 2007-08-02 18:38:28 +00:00
Andreas Steffen 70c5c34da7 corrected typo 2007-07-30 10:55:09 +00:00
Andreas Steffen db61efdbbb include default route also in src address evaluation 2007-07-13 09:00:39 +00:00
Andreas Steffen 018219ae3a include default route with missing dst field into route evaluation 2007-07-13 06:13:14 +00:00
Andreas Steffen 0761886051 added to ipsec.conf installation path 2007-07-11 16:22:02 +00:00
Andreas Steffen 92901c74f2 version bump to 4.1.5 2007-07-08 19:40:11 +00:00
Andreas Steffen c520944800 version bump to 4.1.5 2007-07-08 19:08:31 +00:00
Andreas Steffen 1fb704404b execute conntrack -F at the outset 2007-07-04 18:55:54 +00:00
Andreas Steffen 13763a385c suppress stderr in start-switches script 2007-07-04 18:50:21 +00:00
Andreas Steffen 0a46e963ff added three mobike scenarios 2007-07-04 17:39:10 +00:00
Andreas Steffen 01a08cb2e7 output crl uri as a printable string instead of a binary blob 2007-07-04 13:36:41 +00:00
Andreas Steffen ed0d8e8008 added entrustVersInfo OID 2007-07-04 12:11:38 +00:00
Andreas Steffen eea626ed25 describe eap option in ipsec.conf.5 man page 2007-07-04 05:42:58 +00:00
Andreas Steffen ae4388dca0 cosmetics 2007-07-04 05:42:09 +00:00
Andreas Steffen 4f22a3e339 removed the ipsec.conf version number 2007-07-04 05:41:51 +00:00
Andreas Steffen 959b01aca5 version bumps 2007-07-03 13:08:13 +00:00
Andreas Steffen 3ba90600f2 recognize strongswan-2.8.6 VID 2007-07-03 13:06:27 +00:00
Andreas Steffen a0a0bdd727 starter bug fix and pkcs11initargs patch by Robert Varga 2007-07-03 12:51:29 +00:00
Andreas Steffen dd0ee786db support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga 2007-07-03 09:33:02 +00:00
Andreas Steffen e0e6137dd3 support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga 2007-07-03 09:26:44 +00:00
Andreas Steffen bcac22f3a6 DBG1 level for 'peer supports MOBIKE' debug message 2007-07-02 20:13:15 +00:00
Andreas Steffen 561f88e306 fixed typo 2007-07-02 20:10:26 +00:00
Andreas Steffen 066518270f cosmetics 2007-07-02 17:56:04 +00:00
Andreas Steffen fdd32ee6e5 fix of the bug fix, courtesy of Robert Varga 2007-07-02 17:48:30 +00:00
Andreas Steffen 2f806bd866 bug fix courtesy of Robert Varga 2007-07-02 17:42:16 +00:00
Andreas Steffen c598ac6360 changes in uml configuration to allow mobike 2007-07-02 09:52:20 +00:00
Andreas Steffen cea6634fde MobIKE requires iptables to open udp/4500 2007-06-28 21:33:51 +00:00
Andreas Steffen b9212e5a93 MobIKE requires iptables to open udp/4500 2007-06-28 21:33:13 +00:00
Andreas Steffen c2bc2b2782 alphabetical order 2007-06-27 21:49:09 +00:00
Andreas Steffen e0e7ef070d separated pluto, charon, and klips setup config section parameters 2007-06-27 15:42:11 +00:00
Andreas Steffen 6a39bc4061 added passthrough scenario 2007-06-27 14:25:15 +00:00
Andreas Steffen 487fe29ee3 added lefthostaccess and leftprotoport parameters 2007-06-27 14:03:56 +00:00
Andreas Steffen 1fbdab8507 right=%<fqdn> wildcard added 2007-06-27 13:31:16 +00:00
Andreas Steffen 7900ab1b7a update ipsec.conf man page 2007-06-27 13:29:36 +00:00
Andreas Steffen c4c916f90a add starter.8 man page to distribution 2007-06-27 13:29:20 +00:00
Andreas Steffen 6fa8bd61c1 cosmetics 2007-06-27 10:04:02 +00:00
Andreas Steffen 2f153a2263 recognize wildcard keyingtries=%forever 2007-06-27 08:11:22 +00:00
Andreas Steffen a80521d13e recognize wildcards right=%group and keyingtries=%forever 2007-06-27 08:11:08 +00:00
Andreas Steffen cae8f3e9b6 updated copyright statement 2007-06-27 07:36:44 +00:00
Andreas Steffen 31302718ff fixed distro and copyright information 2007-06-27 07:25:19 +00:00
Andreas Steffen 361712fe37 use of the right=%<fqdn> wildcard 2007-06-26 10:46:30 +00:00
Andreas Steffen 3f946e1c90 support of right=%<FQDN> wildcard 2007-06-25 11:28:39 +00:00
Andreas Steffen e6a22d8728 discarded unused functions 2007-06-25 09:06:13 +00:00
Andreas Steffen 3345c0a1ed make starter behave more gracefully in the presence of non-fatal errors 2007-06-25 07:10:23 +00:00
Andreas Steffen 078ce348ae IKEv1 rightallowany flag introduced 2007-06-20 09:46:54 +00:00