 Andreas Steffen
|
55fe05d489
|
fixed optional dnsmasq.conf in the ikev2/dhcp-static-mac scenario
|
2010-04-23 12:38:30 +02:00 |
|
|
Andreas Steffen
|
837e9fda57
|
added ikev2/dhcp-static-mac scenario
|
2010-04-23 12:33:11 +02:00 |
|
|
Andreas Steffen
|
bcd20cc987
|
added ikev2/dhcp-dynamic scenario
|
2010-04-23 11:52:37 +02:00 |
|
|
Andreas Steffen
|
19d49af539
|
make DHCP debug messages consistent
|
2010-04-23 07:37:16 +02:00 |
|
|
Andreas Steffen
|
500a6d38ee
|
fixed typo
|
2010-04-23 00:02:13 +02:00 |
|
|
Andreas Steffen
|
054fd74658
|
fixed silly bug
|
2010-04-12 11:25:46 +02:00 |
|
|
Andreas Steffen
|
9391b485f7
|
updated DER versions of research and sales CAs
|
2010-04-11 22:00:01 +02:00 |
|
|
Andreas Steffen
|
d3d2b7390f
|
implemented inheritance of virtual IP assigned by Mode Config on the responder side
|
2010-04-11 19:19:20 +02:00 |
|
|
Andreas Steffen
|
6e939d2f94
|
added ikev1/ip-two-pools-mixed scenario
|
2010-04-11 17:05:42 +02:00 |
|
|
Andreas Steffen
|
9235edc276
|
added support of RAM-based pools to NEWS
|
2010-04-11 16:29:39 +02:00 |
|
|
Andreas Steffen
|
2544e08ec7
|
IKEv1 uses Mode Config payload
|
2010-04-11 16:09:09 +02:00 |
|
|
Andreas Steffen
|
b87edeaade
|
added ikev1/ip-two-pools scenario
|
2010-04-11 16:05:54 +02:00 |
|
|
Andreas Steffen
|
a4b2332fd2
|
remove virtual interfaces after scenario
|
2010-04-11 16:05:04 +02:00 |
|
|
Andreas Steffen
|
b516382cc9
|
added ikev1/ip-pool scenario
|
2010-04-11 14:40:04 +02:00 |
|
|
Andreas Steffen
|
ec96692c38
|
show in-memory pools in ipsec statusall
|
2010-04-11 11:46:47 +02:00 |
|
|
Andreas Steffen
|
b1701d097c
|
added missing curly brackets
|
2010-04-11 00:49:04 +02:00 |
|
|
Andreas Steffen
|
b3127b42f9
|
support in-memory pools in swapped connection definitions
|
2010-04-11 00:27:04 +02:00 |
|
|
Andreas Steffen
|
b74cd9573d
|
pluto now requires attr plugin for dns and nbns server loading from strongswan.conf
|
2010-04-09 21:03:44 +02:00 |
|
|
Andreas Steffen
|
6c1dc87551
|
recovered private keys of no CDP certificates
|
2010-04-07 19:38:10 +02:00 |
|
|
Andreas Steffen
|
589d175a05
|
recovered lost Duck CA certificates
|
2010-04-07 19:38:10 +02:00 |
|
|
Andreas Steffen
|
e6e8eb09dd
|
fixed ikev1/protoport-route timing
|
2010-04-07 13:24:58 +02:00 |
|
|
Andreas Steffen
|
c3379af391
|
removed whitespace
|
2010-04-07 13:07:11 +02:00 |
|
|
Andreas Steffen
|
ef4aa67bf7
|
generated new research and sales CA certs for carol and dave, respectively
|
2010-04-07 13:05:17 +02:00 |
|
|
Andreas Steffen
|
586c137016
|
prolonged Research and Sales CA certs
|
2010-04-06 12:05:39 +02:00 |
|
|
Andreas Steffen
|
7d00ebfb54
|
wait one second before running evaluations
|
2010-04-06 10:55:59 +02:00 |
|
|
Andreas Steffen
|
efd16e405a
|
increase UML root file system to 700 MB
|
2010-04-05 20:23:20 +02:00 |
|
|
Andreas Steffen
|
d6457833ec
|
added support of PEM output by ipsec pki --gen|pub commands to NEWS
|
2010-04-05 14:08:06 +02:00 |
|
|
Andreas Steffen
|
5ee07585aa
|
added ikev2/nat-virtual-ip scenario
|
2010-04-05 14:03:38 +02:00 |
|
|
Andreas Steffen
|
a287bdd46c
|
farp scenario requires logging of arp packets
|
2010-04-05 14:01:29 +02:00 |
|
|
Andreas Steffen
|
eb11d1c58c
|
added ikev2/farp scenario
|
2010-04-05 12:50:32 +02:00 |
|
|
Andreas Steffen
|
b49cbd68a6
|
added dave2 and carol2 entries to /etc/hosts
|
2010-04-05 12:50:07 +02:00 |
|
|
Andreas Steffen
|
29cf15a919
|
PEM encoding for OpenSSL RSA and EC public and private keys
|
2010-04-04 23:59:24 +02:00 |
|
|
Andreas Steffen
|
cea2857263
|
PEM encoding for GMP RSA public and private keys
|
2010-04-04 19:11:18 +02:00 |
|
|
Andreas Steffen
|
e3943f5559
|
fixed short option name
|
2010-04-04 10:30:08 +02:00 |
|
|
Andreas Steffen
|
b2be771ad8
|
fixed typo
|
2010-04-04 10:29:36 +02:00 |
|
|
Andreas Steffen
|
efcd3c7a63
|
fixed doxygen group
|
2010-04-03 21:55:30 +02:00 |
|
|
Andreas Steffen
|
0dee20d958
|
change #define to PEM_BUILDER_H_
|
2010-04-03 21:43:27 +02:00 |
|
|
Andreas Steffen
|
061c95b449
|
fixed pluto crash caused by expired leftcert and rightca=%same
|
2010-03-29 17:44:37 +02:00 |
|
|
Andreas Steffen
|
3ad78f0239
|
compile dhcp and farp plugins in UMLs
|
2010-03-28 22:40:20 +02:00 |
|
|
Andreas Steffen
|
5d91d4c6d7
|
moved attr-sql plugin to libhydra in pool scenarios
|
2010-03-28 22:33:30 +02:00 |
|
|
Andreas Steffen
|
a3316c2b9f
|
setting the two most significant bits assures an RSA modulus of maximum bit size
|
2010-03-15 15:13:26 +01:00 |
|
|
Andreas Steffen
|
c0df187cb4
|
we don't accept a serial number with leading zeroes
|
2010-03-14 19:41:40 +01:00 |
|
|
Andreas Steffen
|
4cedab5ad7
|
deleted old strongSwan VIDs
|
2010-03-12 03:29:18 +01:00 |
|
|
Andreas Steffen
|
0ef84e5e4d
|
enable build of socket-default plugin
|
2010-03-11 21:53:18 +01:00 |
|
|
Andreas Steffen
|
44f1024705
|
mixed IKEv1/IKEv2 scenarios require socket-raw
|
2010-03-11 21:32:36 +01:00 |
|
|
Andreas Steffen
|
d12ad4748a
|
fix 64bit issue with time_t from database
|
2010-03-10 10:46:49 +01:00 |
|
|
Andreas Steffen
|
31bd75ec64
|
removed unwanted commits
|
2010-03-07 21:11:57 +01:00 |
|
|
Andreas Steffen
|
ceeb9bac8b
|
critical keyUsage extension must be parsed
|
2010-03-07 20:51:34 +01:00 |
|
|
Andreas Steffen
|
469d448333
|
recognize strongSwan VID
|
2010-03-07 17:52:04 +01:00 |
|
|
Andreas Steffen
|
1ec8f22de2
|
set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true
|
2010-03-07 17:27:53 +01:00 |
|
|
Andreas Steffen
|
3cfbc91a98
|
renewed Authorization Authority certificate
|
2010-02-27 22:16:36 +01:00 |
|
|
Andreas Steffen
|
b65d7f8a15
|
version bump to 4.4.0
|
2010-02-15 20:58:41 +01:00 |
|
|
Andreas Steffen
|
2d07095e01
|
hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6
|
2010-02-06 12:34:41 +01:00 |
|
|
Andreas Steffen
|
dd0b1b9a16
|
generated hash-and-url files for rfc3779 certs
|
2010-02-06 11:41:44 +01:00 |
|
|
Andreas Steffen
|
76fe5500c4
|
hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6
|
2010-02-06 11:39:33 +01:00 |
|
|
Andreas Steffen
|
5094bfd85f
|
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
|
2010-02-05 20:39:13 +01:00 |
|
|
Andreas Steffen
|
61d7ff0c19
|
IPv6 fragment and http access are not needed in PSK scenario
|
2010-02-05 20:27:03 +01:00 |
|
|
Andreas Steffen
|
699c47a9be
|
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
|
2010-02-05 20:16:26 +01:00 |
|
|
Andreas Steffen
|
1f2da75069
|
IPv6 frag netfilter rule not needed anymore
|
2010-02-05 20:04:01 +01:00 |
|
|
Andreas Steffen
|
563a177830
|
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
|
2010-02-05 19:58:42 +01:00 |
|
|
Andreas Steffen
|
b917f49684
|
initialize variables to avoid compiler warning
|
2010-02-05 12:34:37 +01:00 |
|
|
Andreas Steffen
|
6c9c0baee9
|
init_fetch() changed to fetch_initialize()
|
2010-02-05 06:17:02 +01:00 |
|
|
Andreas Steffen
|
52719d719c
|
use static IPsec policy netfilter rules in MOBIKE scenarios
|
2010-02-04 10:05:44 +01:00 |
|
|
Andreas Steffen
|
8501181925
|
remove any charon.pid files remaining at the end of each scenario
|
2010-02-04 08:53:52 +01:00 |
|
|
Andreas Steffen
|
00eb9267ad
|
IPSEC_ROUTING_TABLE is now called routing_table
|
2010-02-03 19:32:50 +01:00 |
|
|
Andreas Steffen
|
ec37b04732
|
differentiate between executed and displayed iptables commands
|
2010-02-03 19:21:55 +01:00 |
|
|
Andreas Steffen
|
0d8bdf24ff
|
added ikev2/inactivity-timeout scenario
|
2010-02-03 10:28:30 +01:00 |
|
|
Andreas Steffen
|
889ff9389b
|
renamed init_fetch() to fetch_initialize()
|
2010-02-02 19:44:34 +01:00 |
|
|
Andreas Steffen
|
b7fd2ea76c
|
corrected captions
|
2010-02-01 12:44:44 +01:00 |
|
|
Andreas Steffen
|
bf1e0df7c5
|
warn if loaded local certificate is invalid
|
2010-02-01 12:29:32 +01:00 |
|
|
Andreas Steffen
|
8fb389b299
|
added ikev2/rw-eap-sim-only-radius scenario
|
2010-01-11 11:20:45 +01:00 |
|
|
Andreas Steffen
|
b979032088
|
log EAP-only authentication proposal
|
2010-01-11 11:17:40 +01:00 |
|
|
Andreas Steffen
|
87eb27681a
|
send strongSwan Vendor ID in ikev2/alg-sha256-96 scenario
|
2010-01-11 00:54:33 +01:00 |
|
|
Andreas Steffen
|
dd37fa8620
|
pluto and charon are using the same strongSwan Vendor ID
|
2010-01-11 00:43:46 +01:00 |
|
|
Andreas Steffen
|
580063971b
|
added some recent new attributes registered with IANA
|
2010-01-07 07:49:16 +01:00 |
|
|
Andreas Steffen
|
7eaec999ca
|
make error message about missing MD4 hasher more explicit
|
2009-12-30 23:32:03 +01:00 |
|
|
Andreas Steffen
|
83c282ebb4
|
differentiate EAP method initialization errors
|
2009-12-30 21:34:59 +01:00 |
|
|
Andreas Steffen
|
a2847740d2
|
removed charon-specific load statement in pluto scenario
|
2009-12-26 17:13:53 +01:00 |
|
|
Andreas Steffen
|
c5454eaf61
|
added RFC 3779 CA
|
2009-12-25 11:20:59 +01:00 |
|
|
Andreas Steffen
|
7c697964d3
|
added three RFC 3779 scenarios
|
2009-12-25 11:20:59 +01:00 |
|
|
Andreas Steffen
|
e98a4d8028
|
Added RFC 3779 support to NEWS
|
2009-12-25 11:20:58 +01:00 |
|
|
Andreas Steffen
|
d002c62347
|
enforce RFC 3779 address constraints on traffic selectors
|
2009-12-25 11:20:58 +01:00 |
|
|
Andreas Steffen
|
32d8f44229
|
verify RFC3779 IP address blocks along X.509 certificate trust chain
|
2009-12-23 14:21:31 +01:00 |
|
|
Andreas Steffen
|
925eadba5f
|
do not recalculate netbits for true subnets
|
2009-12-22 17:07:08 +01:00 |
|
|
Andreas Steffen
|
e16a01a5e6
|
X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension
|
2009-12-22 13:18:27 +01:00 |
|
|
Andreas Steffen
|
91e35b7c9e
|
added create_ipAddrBlock_enumerator() method to x509_t
|
2009-12-22 11:58:30 +01:00 |
|
|
Andreas Steffen
|
7686f981a4
|
cosmetics
|
2009-12-22 09:53:53 +01:00 |
|
|
Andreas Steffen
|
194c3cedc5
|
fixed IPv6 bug in calc_range()
|
2009-12-22 00:49:23 +01:00 |
|
|
Andreas Steffen
|
3f4d8815a4
|
fixed initialization of netbits
|
2009-12-21 23:03:14 +01:00 |
|
|
Andreas Steffen
|
252f38f6f8
|
fixed distribution list
|
2009-12-21 22:28:08 +01:00 |
|
|
Andreas Steffen
|
157125e4c9
|
traffic_selector supports RFC 3779 address range format
|
2009-12-21 21:29:01 +01:00 |
|
|
Andreas Steffen
|
678aab7850
|
this->type is set by traffic_selector_create()
|
2009-12-20 20:01:18 +01:00 |
|
|
Andreas Steffen
|
513eb95e60
|
parse RFC 3779 addressFamily
|
2009-12-20 19:26:28 +01:00 |
|
|
Andreas Steffen
|
7d379a786c
|
plugin name is x509
|
2009-12-20 16:01:35 +01:00 |
|
|
Andreas Steffen
|
28c25485ba
|
discard certificate with unknown critical extensions
|
2009-12-20 15:53:39 +01:00 |
|
|
Andreas Steffen
|
f3e366a9a0
|
use traffic_selector_t object to represent ipAddrBlocks
|
2009-12-20 15:15:02 +01:00 |
|
|
Andreas Steffen
|
1125a0be81
|
moved traffic_selectors from charon to libstrongswan
|
2009-12-20 14:57:38 +01:00 |
|
|
Andreas Steffen
|
92f0aa9736
|
firewall-enabled ipv6/net2net-ip6-in-ip4-ikev2 scenario
|
2009-12-17 19:43:33 +01:00 |
|
|
Andreas Steffen
|
02ee613325
|
firewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario
|
2009-12-17 18:50:45 +01:00 |
|
|
Andreas Steffen
|
ad858aee15
|
parse ipAddrBlocks
|
2009-12-17 17:32:55 +01:00 |
|