Martin Willi
5e17e35c8d
fixed some compiler warnings
2008-05-23 15:49:43 +00:00
Andreas Steffen
c7d81ad12c
added --utc option to ipsec pool
2008-05-23 15:46:25 +00:00
Andreas Steffen
0672aa7b0e
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
2008-05-23 14:24:24 +00:00
Andreas Steffen
eaa1399812
fixed the strongswan.conf path
2008-05-22 21:59:30 +00:00
Andreas Steffen
7199d22e77
implement basic listing of attribute certificates
2008-05-22 21:58:22 +00:00
Andreas Steffen
a327ee9589
suppress listing of integrity algorithm if it is undefined
2008-05-17 21:52:58 +00:00
Martin Willi
1ba62b5562
loading default modules depending on configure options
2008-05-16 08:52:32 +00:00
Martin Willi
a3d92a3745
plugin load configuration in strongswan.conf
...
some components accept a "component.load" option with a space separated list of plugins to load
libcharon- plugins are now handled the same way as libstrongswan- plugins
2008-05-15 14:01:26 +00:00
Martin Willi
89658f6d6c
static leases use 0, not NULL timeout
...
fixed static leases
2008-05-15 09:26:47 +00:00
Martin Willi
782db7edd1
prototype of mediation client database plugin
2008-05-14 07:26:19 +00:00
Martin Willi
0fd4caea66
handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication
2008-05-14 06:49:31 +00:00
Martin Willi
4d4fc2eaa1
fixed "pool --purge" on mysql
2008-05-13 07:39:24 +00:00
Martin Willi
5373f2a642
fixed lookup for expired leases
...
initializing database if in inconsistent state
2008-05-13 07:24:53 +00:00
Andreas Steffen
f85d02a419
fixed typos
2008-05-11 20:36:14 +00:00
Andreas Steffen
95c297b580
added missing ipcomp DB type definition
2008-05-11 16:41:51 +00:00
Martin Willi
6cf1215e3c
ported IP pool to mysql
2008-05-09 15:01:22 +00:00
Martin Willi
7051ef4091
usable prototype of "ipsec pool" tool
2008-05-09 12:55:41 +00:00
Martin Willi
f3bcd7f041
correctly reassigning valid leases
2008-05-09 12:22:20 +00:00
Tobias Brunner
d4aad55434
IPComp for IKEv2
2008-05-08 16:19:11 +00:00
Martin Willi
0f074a4344
implemented append mode for xcbc, testcase
2008-05-08 14:51:37 +00:00
Martin Willi
affd7a90ba
moved RAW public key support to a separate plugin (pubkey)
2008-05-08 13:16:42 +00:00
Martin Willi
5b7ec6d4e0
renamed med_db plugin to medsrv, as we will introduce an additional medcli client plugin
2008-05-08 12:11:30 +00:00
Martin Willi
25b12c696b
replaced --with-gid/uid by --with-group/user
...
using named users, groups
fixed capability dropping in pluto
2008-05-08 10:58:04 +00:00
Martin Willi
5302703407
prototype of sql pool administration utility
2008-05-07 09:37:08 +00:00
Martin Willi
bc1f02a860
providing medation configuration through med_db plugin
2008-05-06 13:44:14 +00:00
Martin Willi
27d04e055d
implemented XCBC algorithms (signer, prf) for IKE on top of a crypter
...
supporting ike=...-aesxcbc-... in ipsec.conf
added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal
AES XCBC testcase
2008-04-30 14:26:24 +00:00
Martin Willi
3444390241
supporting multiple comma seperated subnets in left/rightsubnet definition
...
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
2008-04-25 12:41:37 +00:00
Martin Willi
5e6bbf4f77
added _GNU_SOURCE and limits.h to build against glibc-2.8
2008-04-24 13:49:20 +00:00
Martin Willi
c624081a7f
added missing base64 chunk test
2008-04-24 13:28:18 +00:00
Martin Willi
9213ad27c2
replaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions
2008-04-24 13:26:22 +00:00
Martin Willi
8570c648f1
fixed AES-128 test
2008-04-22 09:00:27 +00:00
Martin Willi
65456bfe33
added AES-128 unit test
2008-04-22 08:33:55 +00:00
Andreas Steffen
1d5d6f9667
Hash and URL cosmetics
2008-04-18 21:27:08 +00:00
Martin Willi
fa3fe3c1cf
sql pool prototype
2008-04-18 11:51:58 +00:00
Tobias Brunner
6439267a8c
support for hash and URL encoded certificate payloads in charon
2008-04-18 11:24:45 +00:00
Andreas Steffen
8eeb796a51
changed logging of crl writing to old style
2008-04-17 20:23:31 +00:00
Martin Willi
c4ec8c9d18
fixed compiler warning
2008-04-17 15:08:48 +00:00
Martin Willi
b360e3933d
respecting ipsec.conf cachecrls= option
2008-04-17 15:01:57 +00:00
Martin Willi
d33fa48bc7
caching of CRLs to /etc/ipsec.d/crls
2008-04-17 14:08:38 +00:00
Martin Willi
2270b396b3
added missing credential_set method to stroke_ca
2008-04-17 13:00:05 +00:00
Martin Willi
233b853dfa
extended credential_set_t interface by a cache_cert() method
...
allows persistent or in-memory caching of fetched certificates
2008-04-17 11:22:37 +00:00
Martin Willi
e5617e40d1
adding rightsourceip=%poolname properly to peer config
2008-04-17 08:55:32 +00:00
Martin Willi
140ed97c0c
disable DPD if dpddelay is set but dpdaction=none
2008-04-16 05:50:56 +00:00
Martin Willi
02e4180e48
updated sql plugin to respect config changes
2008-04-15 15:13:53 +00:00
Martin Willi
1822ca740b
disabled SQL logging by default, as tests scenarios do not have a logging table
2008-04-15 15:13:08 +00:00
Martin Willi
0dab0f1d5d
fixed build of smp plugin
2008-04-15 11:51:46 +00:00
Martin Willi
6a365f0740
added API for random number generators, served through credential factory
...
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
2008-04-15 05:56:35 +00:00
Martin Willi
0644ebd3de
implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater
...
additionally supports a "keep" value to keep the old IKE_SA
2008-04-14 13:23:24 +00:00
Martin Willi
a593db5d35
ike_sa_manager enumerable, not iterable
2008-04-14 11:37:46 +00:00
Martin Willi
348af092ac
added close_action as a seperate config option to dpd_action
2008-04-14 08:17:18 +00:00
Martin Willi