Martin Willi
de7062a280
removed unimplemented private/public key function declarations
2008-03-19 14:21:56 +00:00
Martin Willi
cfede7f6e2
The introduced SHA1_NOFINAL hasher was not sufficient for EAP-AKA,
...
as it requires to XOR the key into the hashers state.
A new SHA1 based keyed hash function, implemented as PRF, enables EAP-AKA
and the FIPS-PRF function to properly use the existing SHA1 implementation.
2008-03-19 14:02:52 +00:00
Andreas Steffen
c912c3d382
log nextUpdate of crls and ocsp responses
2008-03-19 13:11:29 +00:00
Andreas Steffen
2590faa330
fixed stupid bug in fetch_ocsp()
2008-03-19 12:36:15 +00:00
Andreas Steffen
ae8715f956
attempt to achieve consistent debugging output
2008-03-19 12:06:38 +00:00
Martin Willi
d3a6993777
fixed shared key lookup in stroke
2008-03-19 10:24:51 +00:00
Martin Willi
3c448f019b
fixed peer_cfg lookup when omitting IDr
2008-03-19 10:08:59 +00:00
Martin Willi
081ae2eb61
fixed CRL check return value on revoked certificates
...
fixed possible refcounting bugs
generic return_null() implementation
2008-03-19 09:44:47 +00:00
Martin Willi
a40708e511
fixed compiler warning
2008-03-18 14:06:11 +00:00
Martin Willi
bed94c8aeb
added generic payload order rules for notifies
2008-03-18 12:45:23 +00:00
Martin Willi
7162be5772
fixed ike_cfg lookup in stroke
2008-03-18 12:40:41 +00:00
Martin Willi
4bfa63ed25
added false positive signature check
2008-03-18 12:25:39 +00:00
Martin Willi
18be601fcd
added missing test case file ([3607])
2008-03-18 12:16:36 +00:00
Martin Willi
d7c529f5a6
creating public key from RSA private key
...
RSA key generation and signature test
2008-03-18 12:13:51 +00:00
Andreas Steffen
8d49b51f8b
made is_newer() a certificate_t method
2008-03-18 10:36:08 +00:00
Martin Willi
50045c3b14
better normalized tables for SQL plugin (IDs)
2008-03-18 09:07:04 +00:00
Martin Willi
34e281ed32
enforcing x509_flags on certificate construction
2008-03-17 08:06:49 +00:00
Martin Willi
d4ba109c9c
fixed CRL revoked certs enumeration
2008-03-17 07:25:32 +00:00
Martin Willi
933f80c391
logging to SQL database
2008-03-15 14:17:09 +00:00
Martin Willi
72d68379dc
correctly unregister IKE_SA at the bus
2008-03-15 14:08:43 +00:00
Martin Willi
8d04f78d07
removed X509_PEER flag; flags are meant to read cert, not to store additional state in cert
...
removed x509_t.set_flags for the reason above
implemented a simple, generic shared_key_t
2008-03-14 15:11:29 +00:00
Martin Willi
39ea88f694
credential lookup in mysql/sqlite database
2008-03-14 15:06:42 +00:00
Martin Willi
9c410a8806
refactored buggy trustchain building, fixed refcount bug
2008-03-14 15:04:16 +00:00
Martin Willi
dbcf4e7451
reduced mysql pool verbosity
2008-03-14 15:03:19 +00:00
Martin Willi
8f1596d606
SQL schema for MySQL and SQLite, test data
2008-03-14 07:39:01 +00:00
Tobias Brunner
df3462ddbe
two small fixes
2008-03-13 15:03:06 +00:00
Martin Willi
e42db695e2
fixed apidoc grouping
2008-03-13 14:53:57 +00:00
Martin Willi
419ee1072e
added NetworkManager prototype DBUS policy, applet config
2008-03-13 14:41:27 +00:00
Martin Willi
2d94fdfab7
added old and unmaintained prototype of NetworkManager applet and authenticator
2008-03-13 14:37:11 +00:00
Martin Willi
552cc11b1f
merged the modularization branch (credentials) back to trunk
2008-03-13 14:14:44 +00:00
Andreas Steffen
b48bdac20b
improved P2P_NAT debugging
2008-02-27 20:30:39 +00:00
Martin Willi
e633b1998f
creating sysconfdir if it does not exist
...
moved all directory creations into starters Makefile
2008-02-22 14:50:38 +00:00
Andreas Steffen
a11ea97db8
version bump to 4.2.0
2008-02-15 18:44:29 +00:00
Andreas Steffen
6859f760d9
release of 4.1.11 bug fix version
2008-02-14 21:26:21 +00:00
Tobias Brunner
fb7e7dc484
refactored connect_manager_t to use the find functions on linked lists
2008-02-14 13:42:36 +00:00
Tobias Brunner
e3311a40f0
find methods for linked lists
2008-02-14 12:29:29 +00:00
Andreas Steffen
298c9c8eed
some websites append a newline character to a DER-encoded binary blob
2008-02-05 19:27:05 +00:00
Martin Willi
5bbac9ffff
split connections with different virtual IPs in different peer_cfgs
...
respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA
2008-02-05 12:39:30 +00:00
Tobias Brunner
cdd33ec665
* replaced __thread with pthread_key_t/pthread_setspecific
...
* use pthread_once to initialize the request handler
2008-02-05 09:31:21 +00:00
Andreas Steffen
663fedbe44
implemented IKEV2 EAP-SIM server and client test module that use triplets stored in a file. For details see the scenario 'ikev2/rw-eap-sim-rsa'
2008-02-04 14:52:06 +00:00
Andreas Steffen
7094e840bf
use the new options_t class
2008-02-04 14:46:43 +00:00
Andreas Steffen
b388a81848
fixed tabs
2008-02-04 14:45:50 +00:00
Andreas Steffen
0730fec464
refactored optionsfrom as in an object-oriented way using the options_t class. Eliminated all memory leaks
2008-02-04 14:44:14 +00:00
Martin Willi
3b1692c058
use identifiers in EAP_SUCCESS/EAP_FAILURE payloads
2008-02-04 11:43:10 +00:00
Andreas Steffen
9514d26c5c
parse signedData object with empty content
2008-02-02 00:29:03 +00:00
Andreas Steffen
f4a459473e
build_signedData() now computes messageDigest attribute
2008-02-01 22:26:01 +00:00
Andreas Steffen
7734c01677
added set_messageDigest() and get_messageDigest() methods
2008-02-01 22:24:51 +00:00
Andreas Steffen
e8bfe74289
extended and debugged PKCS#7 signedData support
2008-02-01 14:19:26 +00:00
Andreas Steffen
daccbee77e
added S/MIME capabilities OID
2008-02-01 10:40:03 +00:00
Andreas Steffen
26e9e2ecd9
changed tabs to 4 spaces
2008-02-01 01:01:17 +00:00
Martin Willi