denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,883 Commits 1 Branch 0 Tags
67a7bb02ef539154fc187fa17c024d380a665b09
Commit Graph
794 Commits
Author SHA1 Message Date
Martin Willi 7de6da0c88 added locking mechanism for multithreaded use of OpenSSL 2008-11-03 16:14:12 +00:00
Martin Willi ee66fa625e removed accidently checked in debug code 2008-11-03 12:40:42 +00:00
Martin Willi d6dc9db5ef reverted 4541, does not fix the problem 2008-11-03 09:44:20 +00:00
Martin Willi e301a69d6c removed 0-byte truncation, fixes random Openssl RSA signature verification failures 2008-10-31 17:07:04 +00:00
Martin Willi a13862be61 fixed crash in openssl signature verification if sizeof(size_t) != sizeof(int) (64bit) 2008-10-31 17:05:40 +00:00
Martin Willi 19aff61b19 reverted changeset 4529: 
Camellia is 22 in IKEv1, but not-yet defined in IKEv2
	in IKEv2, 22 is reserved for AES-XTS
 2008-10-30 13:21:21 +00:00
Andreas Steffen fdaed5289a added Camellia CBC to list of encryption algorithms 2008-10-30 03:31:36 +00:00
Martin Willi f65ba4e978 prf handles zero-length allocations graceful 2008-10-29 14:12:54 +00:00
Andreas Steffen f5ab7f5f57 refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key 2008-10-28 01:59:01 +00:00
Andreas Steffen aeaa6a9b45 remove unused local DH_EXPONENT_ENTROPY definition 2008-10-27 00:02:22 +00:00
Andreas Steffen 21a45f2f2d use 512 bits of entropy for secret DH exponents 2008-10-26 23:53:52 +00:00
Martin Willi 104c28d603 fixed perl oid generation 2008-10-16 15:38:48 +00:00
Martin Willi f868dc0ca2 condvar->wait() can handle recursive mutex 2008-10-16 11:29:42 +00:00
Tobias Brunner 1adaa02bb2 merging kernel_pfkey plugin back from kernel-interface branch 2008-10-14 08:46:31 +00:00
Andreas Steffen d1cbe55127 implemented ipsec listalgs as a stroke command 2008-10-08 07:00:13 +00:00
Andreas Steffen af09048e35 get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 hash consistent with the IKEv2 keyid philosophy 2008-10-08 03:35:52 +00:00
Andreas Steffen 95fd1dedb3 Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype 2008-10-08 01:19:26 +00:00
Martin Willi 0592212f23 fixed builder_cancel macro to return NULL on failed build 2008-10-06 13:08:49 +00:00
Martin Willi ceff3064fe using signed return value for read() 2008-09-30 06:27:50 +00:00
Martin Willi cdaf57ec34 fixed DH value range testing 2008-09-17 09:02:30 +00:00
Martin Willi 73f6886a50 checking mpz_export return value properly 
fixes a potential DoS attack if a DH value of zero gets processed
 2008-09-17 08:10:48 +00:00
Andreas Steffen b33c11b6c7 stroke parses and lists AC groups 2008-09-17 02:17:01 +00:00
Andreas Steffen 07d7f9a402 time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s) 2008-09-04 16:19:46 +00:00
Martin Willi 6af6f88a79 agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific private key from the agent 2008-09-04 08:35:11 +00:00
Martin Willi 21c9546321 libstrongswan agent plugin to use ssh-agent for RSA signatures 2008-09-02 11:04:26 +00:00
Martin Willi f7c17aa15c refactored credential builder 
allow enumeration of matching builders
	try a second builder if the first one fails
	builder clones resources internally on demand
	caller frees added resources on failure and success
	stricter handling of non-supported build parts
 2008-09-02 11:00:13 +00:00
Andreas Steffen 4da0116d78 OIDs used by strongSwan 2008-09-01 11:38:03 +00:00
Martin Willi e609b1cda2 capability API to allow plugin-controlled capability set 2008-08-28 16:27:48 +00:00
Martin Willi e577ad3985 creating default IKE proposals dynamically using algorithm enumeration API 2008-08-28 11:07:57 +00:00
Martin Willi f1b014b9a3 separated sha1_prf implementation from sha1_hasher 2008-08-28 10:57:24 +00:00
Martin Willi 9482208633 crypto_factory algorithm enumeration API 
implementation of "ipsec listalgs"
 2008-08-28 09:24:42 +00:00
Tobias Brunner 6c20579a43 mkdir_p: utility function to create a directory and all required parent directories 2008-08-28 07:47:55 +00:00
Martin Willi 822901061b ported parts of two-sim branch 
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
 2008-08-22 10:44:51 +00:00
Martin Willi 1caa265c61 a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM 2008-08-21 12:10:07 +00:00
Andreas Steffen dc6a2edd0d corrected caption 2008-08-21 11:58:58 +00:00
Martin Willi 2d6559b107 added sqlite busy handler: retries on locking conflicts 2008-08-21 09:25:06 +00:00
Andreas Steffen af165431d2 fixed libstrongswan integrity test 2008-08-19 18:51:30 +00:00
Martin Willi 092a9b88ad added options for virtual IP, UDP encapsulation, IPComp 
proper handling of libstrongswan/glib TRUE/FALSE conflict
 2008-07-31 14:32:11 +00:00
Martin Willi fc861b0b7e added a driver type getter for database implementations 2008-07-21 11:13:06 +00:00
Martin Willi 11e855179e using token enumerator to parser plugin list 2008-07-02 08:19:43 +00:00
Martin Willi fca4d3ee03 implementation of a simple "token enumerator" 2008-07-02 08:09:07 +00:00
Martin Willi fe5d7c43be whitelisting leaks of ENGINE_load_builtin_engines 2008-07-01 07:53:03 +00:00
Martin Willi 7da767f773 sqlite plugin requires libsqlite3 => 3.3.1 to share connections 
use recursive locking if libsqlite3 < 3.5.0
 2008-06-30 11:06:18 +00:00
Martin Willi 854a2e1760 fixed ifndef typo for MYSQL_DATA_TRUNCATED check 2008-06-26 07:31:52 +00:00
Martin Willi 236083cb56 fixed plugin loader destruction 2008-06-25 14:53:49 +00:00
Tobias Brunner 1b7d2e31a6 enabling support for hardware accelerators in OpenSSL 2008-06-25 12:39:32 +00:00
Martin Willi fae6e24dad reintroducing MYSQL_DATA_TRUNCATED if supported on that mysql version 2008-06-24 14:30:14 +00:00
Martin Willi eec675bf8c enumerating loaded plugins in "ipsec statusall" 2008-06-24 12:49:04 +00:00
Andreas Steffen 0d12006def support of ECDSA signatures for all certificate types 2008-06-22 17:41:07 +00:00
Martin Willi 1345ebad0f removed unused MYSQL_DATA_TRUNCATED check for compatibility with older mysql versions 2008-06-20 07:37:55 +00:00