 Andreas Steffen
|
b3f65304ba
|
check for installed aead algorithms in kernel
|
2010-06-27 22:26:00 +02:00 |
|
|
Andreas Steffen
|
f031e41bea
|
upgraded xfrm.h to linux-2.6.34
|
2010-06-27 11:23:35 +02:00 |
|
|
Andreas Steffen
|
5d4c258de7
|
refer to correct PLUTO_XAUTH_ID variable
|
2010-06-09 15:21:26 +02:00 |
|
|
Andreas Steffen
|
fcfd54acde
|
rename environment variable to PLUTO_XAUTH_ID
|
2010-06-08 23:18:51 +02:00 |
|
|
Andreas Steffen
|
611368339b
|
do not destroy xauth_id if phase2 equals phase1 connection
|
2010-06-08 23:18:00 +02:00 |
|
|
Andreas Steffen
|
964f6372cc
|
make an optional XAUTH user ID available in the updown script
|
2010-06-08 17:50:22 +02:00 |
|
|
Andreas Steffen
|
39e3b58fe4
|
use --addattr
|
2010-06-05 13:49:01 +02:00 |
|
|
Andreas Steffen
|
88613f159d
|
use --addattr
|
2010-06-05 13:47:23 +02:00 |
|
|
Andreas Steffen
|
4321d19d1e
|
added ikev2/nat-virtual-ip scenario
|
2010-06-05 13:42:28 +02:00 |
|
|
Andreas Steffen
|
b2be7dd621
|
remove stray carolReq.pem
|
2010-06-05 13:36:39 +02:00 |
|
|
Andreas Steffen
|
5a9a255ae5
|
share pool in ikev1/mode-config-multiple scenario
|
2010-06-05 13:17:51 +02:00 |
|
|
Andreas Steffen
|
6d989d356b
|
use --addattr
|
2010-06-05 13:15:03 +02:00 |
|
|
Andreas Steffen
|
bdd28aa9c5
|
remove stray scenario files
|
2010-06-05 13:10:39 +02:00 |
|
|
Andreas Steffen
|
c77f4b305e
|
fixed configuration attribute type determination
|
2010-06-02 11:52:17 +02:00 |
|
|
Andreas Steffen
|
616b13c7a5
|
ipsec pool --statusattr [--hexout] outputs attribute values in correct format if known
|
2010-06-01 16:47:56 +02:00 |
|
|
Andreas Steffen
|
185d8b7335
|
added unity_def_domain keyword tip ipsec pool
|
2010-05-31 16:47:06 +02:00 |
|
|
Andreas Steffen
|
d9c751daac
|
added --leases command line option to synopsis
|
2010-05-29 13:29:23 +02:00 |
|
|
Andreas Steffen
|
751379e5e8
|
added --showattr command line option to synopsys
|
2010-05-29 13:23:20 +02:00 |
|
|
Andreas Steffen
|
3561cc4b3b
|
added X.509 support by openssl plugin to NEWS
|
2010-05-29 11:22:36 +02:00 |
|
|
Andreas Steffen
|
5b6200888b
|
remove x509 plugin from openssl-ikev1 scenarios
|
2010-05-28 23:22:15 +02:00 |
|
|
Andreas Steffen
|
e8960c2a99
|
be lenient towards wrong attribute encodings
|
2010-05-28 15:07:21 +02:00 |
|
|
Andreas Steffen
|
bd371ccac7
|
remove x509 plugin from remaining openssl-ikev2 scenarios
|
2010-05-25 15:49:58 +02:00 |
|
|
Andreas Steffen
|
2996cb3163
|
openssl-ikev2/rw-cert scenario doesn't need x509 plugin any more
|
2010-05-25 15:26:46 +02:00 |
|
|
Andreas Steffen
|
e2bd6b616e
|
several subnets can be concatenated
|
2010-05-22 22:53:24 +02:00 |
|
|
Andreas Steffen
|
2111dc1b84
|
added --showattr command to usage()
|
2010-05-22 10:46:15 +02:00 |
|
|
Andreas Steffen
|
3e3059ba7c
|
oops, removed stray parenthesis
|
2010-05-20 17:39:10 +02:00 |
|
|
Andreas Steffen
|
36c1650b19
|
range check for configuration attribute types
|
2010-05-20 17:35:10 +02:00 |
|
|
Andreas Steffen
|
c2d10df6e7
|
implement ipsec pool -showattr function
|
2010-05-20 17:24:43 +02:00 |
|
|
Andreas Steffen
|
05f1096cd8
|
removed deprecated use of ipsec pool --attr|del dns|nbns from usage()
|
2010-05-20 16:30:15 +02:00 |
|
|
Andreas Steffen
|
c5c6f9b6da
|
added ipsec pool attribute support to NEWS
|
2010-05-19 21:53:55 +02:00 |
|
|
Andreas Steffen
|
ad6dbc41e5
|
management of any attribute by ipsec pool
|
2010-05-19 21:51:21 +02:00 |
|
|
Andreas Steffen
|
b596f4f260
|
updated ikev1/rw-cert scenario to support xauth integrity test
|
2010-05-19 08:31:39 +02:00 |
|
|
Andreas Steffen
|
f71cb4777e
|
checksum_builder() needs the pluto symbol
|
2010-05-19 08:02:22 +02:00 |
|
|
Andreas Steffen
|
73434ce9eb
|
updated ikev1/xauth-rsa-mode-config scenario to support xauth plugin
|
2010-05-18 22:57:12 +02:00 |
|
|
Andreas Steffen
|
1fe5d973cb
|
updated ikev1/xauth-psk-mode-config scenario to support xauth plugin
|
2010-05-18 22:56:42 +02:00 |
|
|
Andreas Steffen
|
17adc8d074
|
updated ikev1/xauth-psk-mode-config scenario to support xauth plugin
|
2010-05-18 22:48:37 +02:00 |
|
|
Andreas Steffen
|
ab0ecb7dd9
|
register virtual IPs under the XAUTH identity
|
2010-05-18 22:41:22 +02:00 |
|
|
Andreas Steffen
|
efde96b38e
|
updated ikev1/xauth-rsa-nosecret scenario to support xauth plugin
|
2010-05-18 20:20:55 +02:00 |
|
|
Andreas Steffen
|
4f1110ab7b
|
created ikev1/xauth-id-psk scenario
|
2010-05-18 20:04:52 +02:00 |
|
|
Andreas Steffen
|
dc5d63a599
|
updated ikev1/xauth-psk scenario to support xauth plugin
|
2010-05-18 20:04:02 +02:00 |
|
|
Andreas Steffen
|
8d7fffc942
|
clarified secret loading debug output
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
8ebc3da64c
|
updated ikev1/xauth-rsa-fail scenario to xauth plugin
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
2549ff7849
|
created ikev1/xauth-id-rsa scenario using XAUTH identities
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
0a6085b13e
|
updated ikev1/xauth-rsa scenario to xauth plugin
|
2010-05-18 16:54:25 +02:00 |
|
|
Andreas Steffen
|
26ec52a405
|
implemented xauth as a pluto plugin
|
2010-05-18 13:51:27 +02:00 |
|
|
Andreas Steffen
|
ee1bdd85d3
|
it's too late on Saturday evening
|
2010-05-15 18:52:59 +02:00 |
|
|
Andreas Steffen
|
3399c3dca0
|
roll back some changes
|
2010-05-15 18:48:35 +02:00 |
|
|
Andreas Steffen
|
31b39e5f7c
|
encoding of MODE_TUNNEL changed
|
2010-05-15 18:36:14 +02:00 |
|
|
Andreas Steffen
|
20ae6eccf5
|
the keyid is a subjectKeyIdentifier
|
2010-05-15 17:03:04 +02:00 |
|
|
Andreas Steffen
|
ccfd54e68d
|
fixed keyids in sql/rw-psk-rsa-split scenario
|
2010-05-15 16:55:08 +02:00 |
|
|
Andreas Steffen
|
4636f1579c
|
fixed keyids in sql/rw-eap-aka-rsa scenario
|
2010-05-15 16:44:53 +02:00 |
|
|
Andreas Steffen
|
88e180489a
|
fixed keyids in sql/rw-cert scenario
|
2010-05-15 16:34:50 +02:00 |
|
|
Andreas Steffen
|
829b790e5b
|
fixed keyids in sql/net2net-cert scenario
|
2010-05-15 16:20:34 +02:00 |
|
|
Andreas Steffen
|
d147de932e
|
inserted newline
|
2010-05-15 16:13:22 +02:00 |
|
|
Andreas Steffen
|
c572f93ed7
|
fixed keyids in sql/ip-split-pools-db-restart scenario
|
2010-05-15 16:11:08 +02:00 |
|
|
Andreas Steffen
|
2948e3d0c2
|
fixed keyids in sql/ip-split-pools-db scenario
|
2010-05-15 13:40:11 +02:00 |
|
|
Andreas Steffen
|
1ae9353d8a
|
fixed keyids in sql/ip-pool-db-restart scenario
|
2010-05-15 13:22:49 +02:00 |
|
|
Andreas Steffen
|
f2c84bd890
|
fixed keyids in sql/ip-pool-db-expired scenario
|
2010-05-15 13:07:22 +02:00 |
|
|
Andreas Steffen
|
0ee2c5e9be
|
fixed keyids in sql/ip-pool-db scenario
|
2010-05-15 13:06:48 +02:00 |
|
|
Andreas Steffen
|
8143f10914
|
introduced xauth_identity keyword
|
2010-05-15 10:18:29 +02:00 |
|
|
Andreas Steffen
|
b8520ad50d
|
adapted evaltest of ikev1/ip-pool-db-push scenario to resolve plugin
|
2010-05-14 17:26:59 +02:00 |
|
|
Andreas Steffen
|
9e229e284f
|
adapted evaltest of ikev1/ip-pool-db scenario to resolve plugin
|
2010-05-14 17:20:28 +02:00 |
|
|
Andreas Steffen
|
03b5e4d8d7
|
refactoring of Mode Config functionality allows transport and handling of any attribute
|
2010-05-14 17:07:03 +02:00 |
|
|
Andreas Steffen
|
a273546854
|
adapted evaltest of ikev1/mode-config-push scenario to resolve plugin
|
2010-05-14 15:12:03 +02:00 |
|
|
Andreas Steffen
|
3cbf6db653
|
adapted evaltest to resolve plugin
|
2010-05-14 11:07:26 +02:00 |
|
|
Andreas Steffen
|
fb7de3a8bf
|
implemented support of resolve plugin
|
2010-05-08 16:09:02 +02:00 |
|
|
Andreas Steffen
|
c2651ff13d
|
include demux.h only once
|
2010-05-06 21:55:19 +02:00 |
|
|
Andreas Steffen
|
c158df0f23
|
already defined in attributes/attributes.h
|
2010-05-06 21:44:15 +02:00 |
|
|
Andreas Steffen
|
4eee16354b
|
include state.h only once
|
2010-05-06 21:35:00 +02:00 |
|
|
Andreas Steffen
|
3baf4922e2
|
removed stray file
|
2010-05-06 10:35:25 +02:00 |
|
|
Andreas Steffen
|
9a0333fa62
|
moved resolve plugin from libcharon to libhydra
|
2010-05-04 23:53:08 +02:00 |
|
|
Andreas Steffen
|
0465d2c0b7
|
fixed typo
|
2010-05-04 16:17:32 +02:00 |
|
|
Andreas Steffen
|
93be4ac44d
|
delete release files
|
2010-05-03 09:31:22 +02:00 |
|
|
Andreas Steffen
|
a784c540e5
|
version bump to 4.4.1
|
2010-05-03 09:09:43 +02:00 |
|
|
Andreas Steffen
|
0ffedbfb46
|
added getprotobyname to whitelist
|
2010-05-02 21:13:10 +02:00 |
|
|
Andreas Steffen
|
fc753c1d3e
|
remove subnet from sourceip
|
2010-05-02 17:58:36 +02:00 |
|
|
Andreas Steffen
|
61e48488d9
|
final fix for cloning and deleting sourceip strings
|
2010-05-02 15:55:46 +02:00 |
|
|
Andreas Steffen
|
a48484322e
|
fixed end->sourceip memory leak in ipsec starter
|
2010-05-02 14:56:35 +02:00 |
|
|
Andreas Steffen
|
4c9b5e742a
|
updated options in testing.conf
|
2010-05-02 11:47:24 +02:00 |
|
|
Andreas Steffen
|
34f92dcfba
|
fixed flex parser memory leaks in ipsec starter
|
2010-05-02 11:40:46 +02:00 |
|
|
Andreas Steffen
|
2724ae521e
|
free config before exiting since library_deinit() calls leak detective
|
2010-05-02 11:00:21 +02:00 |
|
|
Andreas Steffen
|
dd8cb2b089
|
added AES-GMAC support to NEWS
|
2010-04-29 07:41:30 +02:00 |
|
|
Andreas Steffen
|
916fd45709
|
do not destroy whack_attr if it hasn't been initialized
|
2010-04-29 07:28:51 +02:00 |
|
|
Andreas Steffen
|
e20a494013
|
added debug output argument
|
2010-04-28 12:28:25 +02:00 |
|
|
Andreas Steffen
|
cb9c497a86
|
added ikev1/alg-esp-aes-gmac scenario
|
2010-04-27 13:48:37 +02:00 |
|
|
Andreas Steffen
|
af3be116cb
|
added AES_GMAC output string
|
2010-04-27 13:47:11 +02:00 |
|
|
Andreas Steffen
|
6f7dac0d72
|
added ikev2/alg-esp-aes-gmac scenario
|
2010-04-27 13:13:10 +02:00 |
|
|
Andreas Steffen
|
6207b63d76
|
added ikev1/alg-modp-subgroup scenario
|
2010-04-23 15:23:54 +02:00 |
|
|
Andreas Steffen
|
9239fc4a15
|
added ikev2/alg-modp-subgroup scenario
|
2010-04-23 15:03:16 +02:00 |
|
|
Andreas Steffen
|
12821bd674
|
include dhcp-client-identifier in the DHCP request
|
2010-04-23 12:57:43 +02:00 |
|
|
Andreas Steffen
|
2dbff1bf53
|
added ikev2/dhcp-static-client-id scenario
|
2010-04-23 12:56:59 +02:00 |
|
|
Andreas Steffen
|
55fe05d489
|
fixed optional dnsmasq.conf in the ikev2/dhcp-static-mac scenario
|
2010-04-23 12:38:30 +02:00 |
|
|
Andreas Steffen
|
837e9fda57
|
added ikev2/dhcp-static-mac scenario
|
2010-04-23 12:33:11 +02:00 |
|
|
Andreas Steffen
|
bcd20cc987
|
added ikev2/dhcp-dynamic scenario
|
2010-04-23 11:52:37 +02:00 |
|
|
Andreas Steffen
|
19d49af539
|
make DHCP debug messages consistent
|
2010-04-23 07:37:16 +02:00 |
|
|
Andreas Steffen
|
500a6d38ee
|
fixed typo
|
2010-04-23 00:02:13 +02:00 |
|
|
Andreas Steffen
|
054fd74658
|
fixed silly bug
|
2010-04-12 11:25:46 +02:00 |
|
|
Andreas Steffen
|
9391b485f7
|
updated DER versions of research and sales CAs
|
2010-04-11 22:00:01 +02:00 |
|
|
Andreas Steffen
|
d3d2b7390f
|
implemented inheritance of virtual IP assigned by Mode Config on the responder side
|
2010-04-11 19:19:20 +02:00 |
|
|
Andreas Steffen
|
6e939d2f94
|
added ikev1/ip-two-pools-mixed scenario
|
2010-04-11 17:05:42 +02:00 |
|