Martin Willi
cdaf57ec34
fixed DH value range testing
2008-09-17 09:02:30 +00:00
Martin Willi
73f6886a50
checking mpz_export return value properly
...
fixes a potential DoS attack if a DH value of zero gets processed
2008-09-17 08:10:48 +00:00
Martin Willi
6af6f88a79
agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific private key from the agent
2008-09-04 08:35:11 +00:00
Martin Willi
21c9546321
libstrongswan agent plugin to use ssh-agent for RSA signatures
2008-09-02 11:04:26 +00:00
Martin Willi
f7c17aa15c
refactored credential builder
...
allow enumeration of matching builders
try a second builder if the first one fails
builder clones resources internally on demand
caller frees added resources on failure and success
stricter handling of non-supported build parts
2008-09-02 11:00:13 +00:00
Martin Willi
e577ad3985
creating default IKE proposals dynamically using algorithm enumeration API
2008-08-28 11:07:57 +00:00
Martin Willi
f1b014b9a3
separated sha1_prf implementation from sha1_hasher
2008-08-28 10:57:24 +00:00
Andreas Steffen
dc6a2edd0d
corrected caption
2008-08-21 11:58:58 +00:00
Martin Willi
2d6559b107
added sqlite busy handler: retries on locking conflicts
2008-08-21 09:25:06 +00:00
Martin Willi
fc861b0b7e
added a driver type getter for database implementations
2008-07-21 11:13:06 +00:00
Martin Willi
11e855179e
using token enumerator to parser plugin list
2008-07-02 08:19:43 +00:00
Martin Willi
7da767f773
sqlite plugin requires libsqlite3 => 3.3.1 to share connections
...
use recursive locking if libsqlite3 < 3.5.0
2008-06-30 11:06:18 +00:00
Martin Willi
854a2e1760
fixed ifndef typo for MYSQL_DATA_TRUNCATED check
2008-06-26 07:31:52 +00:00
Martin Willi
236083cb56
fixed plugin loader destruction
2008-06-25 14:53:49 +00:00
Tobias Brunner
1b7d2e31a6
enabling support for hardware accelerators in OpenSSL
2008-06-25 12:39:32 +00:00
Martin Willi
fae6e24dad
reintroducing MYSQL_DATA_TRUNCATED if supported on that mysql version
2008-06-24 14:30:14 +00:00
Martin Willi
eec675bf8c
enumerating loaded plugins in "ipsec statusall"
2008-06-24 12:49:04 +00:00
Andreas Steffen
0d12006def
support of ECDSA signatures for all certificate types
2008-06-22 17:41:07 +00:00
Martin Willi
1345ebad0f
removed unused MYSQL_DATA_TRUNCATED check for compatibility with older mysql versions
2008-06-20 07:37:55 +00:00
Martin Willi
66860d3b8f
loading PEM encoded public keys
2008-06-11 14:10:02 +00:00
Tobias Brunner
a57e0580f6
refactoring
2008-06-10 09:19:18 +00:00
Tobias Brunner
ea0823dffd
ECDSA with OpenSSL
2008-06-10 09:08:27 +00:00
Tobias Brunner
2904403e96
parsing of subjectPublicKeyInfo of x509 certificates extracted
2008-06-10 09:00:42 +00:00
Martin Willi
e581a31d6a
link against openssl crypto library only
2008-06-06 08:04:42 +00:00
Martin Willi
0f7aecf402
fixed NULL string mysql parameter
2008-06-05 08:24:55 +00:00
Andreas Steffen
7fe3ae88e4
handle default key sizes in openssl_crypter
2008-05-28 12:20:38 +00:00
Andreas Steffen
ed26207d08
fixed copy-and-paste error
2008-05-23 19:23:04 +00:00
Andreas Steffen
49b2395e3b
check if parsing of the RSA public key in an X.509 certificate was successful
2008-05-23 19:22:37 +00:00
Martin Willi
5e17e35c8d
fixed some compiler warnings
2008-05-23 15:49:43 +00:00
Andreas Steffen
0672aa7b0e
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
2008-05-23 14:24:24 +00:00
Andreas Steffen
7199d22e77
implement basic listing of attribute certificates
2008-05-22 21:58:22 +00:00
Tobias Brunner
17188f20dd
Id and typo
2008-05-22 12:13:10 +00:00
Tobias Brunner
346e9c5712
added the ECP groups from RFC 5114
2008-05-22 11:55:05 +00:00
Tobias Brunner
fc1a31d54b
added ECDH with OpenSSL (see RFC 4753)
2008-05-22 11:39:17 +00:00
Andreas Steffen
58ac5e2ff4
fixed segmentation fault caused by malformed attribute certificates
2008-05-21 22:53:45 +00:00
Martin Willi
4f23ec78d1
added more verbosity if signature hash OID is unknown
2008-05-21 13:01:58 +00:00
Andreas Steffen
49aeafc502
removed debug statement
2008-05-20 16:23:58 +00:00
Andreas Steffen
7f02156ebf
fixed whitespace eating in plugin loader
2008-05-20 15:03:15 +00:00
Andreas Steffen
367cc86f4a
added missing break in case statement
2008-05-19 20:10:26 +00:00
Martin Willi
0b0fba9e0d
fixed warning if plugin list has trailing whitespaces
2008-05-16 13:48:58 +00:00
Martin Willi
1ba62b5562
loading default modules depending on configure options
2008-05-16 08:52:32 +00:00
Martin Willi
a3d92a3745
plugin load configuration in strongswan.conf
...
some components accept a "component.load" option with a space separated list of plugins to load
libcharon- plugins are now handled the same way as libstrongswan- plugins
2008-05-15 14:01:26 +00:00
Tobias Brunner
84770ded1e
RSA with OpenSSL
2008-05-15 12:41:06 +00:00
Tobias Brunner
144274ab20
corrected deinitialisation of public key factory
2008-05-15 12:39:35 +00:00
Tobias Brunner
c1571b34fd
generic public key factory moved
2008-05-15 12:33:00 +00:00
Tobias Brunner
1d56d328fd
typo
2008-05-14 11:10:37 +00:00
Martin Willi
f3884f6da6
reverted [3945], proper fix for zero value ASN1 integer
2008-05-13 14:15:12 +00:00
Martin Willi
7af8995cde
fixed unsave calculation of mpz_export length
2008-05-13 13:52:45 +00:00
Martin Willi
02ffd89642
decreased plugin load verbosity
2008-05-13 09:14:36 +00:00
Martin Willi
0f074a4344
implemented append mode for xcbc, testcase
2008-05-08 14:51:37 +00:00