denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
9,193 Commits 1 Branch 0 Tags
7399119e58f613ec5d446bc9dffd9fed4335ac4e
Commit Graph
1902 Commits
Author SHA1 Message Date
Tobias Brunner 5a367e99c3 Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled. 
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_EC.
 2010-06-22 11:55:33 +02:00
Tobias Brunner 9b6db5cd2e Fixed plugin checks in Android.mk files. 2010-06-22 10:40:34 +02:00
Tobias Brunner b2ddaf0775 Adding a remove_at method to the hash table. 
This allows to remove key-value pairs while enumerating them.
 2010-06-07 16:36:26 +02:00
Tobias Brunner 88b6f14143 Migrated hashtable_t to INIT/METHOD macros. 2010-06-07 15:53:36 +02:00
Martin Willi 5493ffde0b traffic_selector_t is gone into libstrongswan, migrate printf hook registration, too. 2010-06-07 15:06:09 +02:00
Martin Willi f00a101590 Unwrap subjectKeyIdentifier from OCTET_STRING 2010-05-26 16:09:50 +02:00
Martin Willi 09f38ebe54 Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier 2010-05-21 16:38:19 +02:00
Martin Willi 13c593f126 Added support for CRL generation to x509 plugin 2010-05-21 16:25:51 +02:00
Martin Willi aab861608a Removed is_newer() from certificate_t, obsoleting all implementations 2010-05-21 16:25:51 +02:00
Martin Willi 8029e5efd2 Added generic implementations for crl_is_newer/certificate_is_newer 2010-05-21 16:25:51 +02:00
Martin Willi 654218a31b Migrated x509_crl_t to INIT/METHOD macros 2010-05-21 16:25:51 +02:00
Martin Willi 6d7eed9a37 Implemented X.509 CRL reading using OpenSSL 2010-05-21 16:25:51 +02:00
Martin Willi 5728c6aa7e Implemented X.509 certificate reading using OpenSSL 2010-05-21 16:25:51 +02:00
Martin Willi 9806381322 Fixed doxygen group 2010-05-20 17:37:18 +02:00
Martin Willi 40b2be16e3 Whitelist OpenSSLs ERR_put_error() in leak-detective 
As we do not invoke ERR_get/clear_error() in all error cases, the
error codes are not removed from the error queue. But it is save
to whitelist the put function, as it uses a circular buffer that
does not grow beyond ERR_NUM_ERRORS errors (16 by default).
 2010-05-20 17:37:18 +02:00
Martin Willi 091d178060 Option to skip slow addr2line resolution in leak-detective 2010-05-20 17:37:18 +02:00
Martin Willi 42df8beeb6 Explicitly link gpg-error to gcrypt plugin 2010-05-17 12:36:30 +02:00
Martin Willi 026b0058d5 Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin 2010-05-05 13:49:56 +02:00
Martin Willi 75d4322d68 Do not check pointer, but length of a chunk 2010-05-05 11:35:54 +02:00
Martin Willi 37c2aac89d Double-check that a blob passed to is_asn1() is not empty 2010-05-05 11:35:53 +02:00
Martin Willi c60b69e4bf Do not print filename twice if plugin loading fails, dlerror() contains the filename 2010-05-05 11:16:32 +02:00
Martin Willi b019c38fa2 Implemented base32 encoding of chunks. 2010-05-05 10:41:11 +02:00
Andreas Steffen 0ffedbfb46 added getprotobyname to whitelist 2010-05-02 21:13:10 +02:00
Tobias Brunner 726c0ae9d3 We have to rename thread_create on Mac OS X because it conflicts with a syscall. 2010-04-29 14:52:20 +02:00
Tobias Brunner 361f416d2c The mutex of a thread has to be locked when destroying it. 2010-04-29 13:30:51 +02:00
Martin Willi eadbc3da2f Fixed RSA key generation with gcrypt 2010-04-29 09:51:37 +02:00
Martin Willi dd04a68f22 PEM encoder supports encoding from RSA components directly, allowing gcrypt plugin to encode in PEM 2010-04-29 09:36:45 +02:00
Martin Willi 4590260b2d Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten 2010-04-19 14:41:20 +02:00
Tobias Brunner 6edbe1652b Integrating libhydra into the Android build system. 2010-04-12 16:47:47 +02:00
Andreas Steffen 054fd74658 fixed silly bug 2010-04-12 11:25:46 +02:00
Tobias Brunner 9f4b02e31d Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan. 2010-04-10 12:10:04 +02:00
Martin Willi b34b93dbf7 Store DH generator in a chunk, hide non-public data in a private struct 2010-04-08 15:08:35 +02:00
Martin Willi f7c32feec0 Renamed clone function to avoid name clash with uclibc 2010-04-07 14:54:22 +02:00
Tobias Brunner 0a4dc78755 Some whitespace fixes. 2010-04-06 12:56:06 +02:00
Tobias Brunner 8b0e09103b Adding DBG_LIB to all calls of libstrongswan's version of DBG*. 2010-04-06 12:47:40 +02:00
Tobias Brunner 9ed6341d3f Adding support for debug groups in libstrongswan's logger. 2010-04-06 12:47:40 +02:00
Tobias Brunner 3fdee23f18 Move debug groups from charon's bus.h to libstrongswan's debug.h. 2010-04-06 12:47:40 +02:00
Andreas Steffen 29cf15a919 PEM encoding for OpenSSL RSA and EC public and private keys 2010-04-04 23:59:24 +02:00
Andreas Steffen cea2857263 PEM encoding for GMP RSA public and private keys 2010-04-04 19:11:18 +02:00
Andreas Steffen b2be771ad8 fixed typo 2010-04-04 10:29:36 +02:00
Andreas Steffen efcd3c7a63 fixed doxygen group 2010-04-03 21:55:30 +02:00
Andreas Steffen 0dee20d958 change #define to PEM_BUILDER_H_ 2010-04-03 21:43:27 +02:00
Tobias Brunner 567d3f1463 Attributes moved from libstrongswan to libhydra. 
The attribute_manager_t instance is now located on the new hydra object
instead of the lib object.
 2010-03-24 18:53:10 +01:00
Tobias Brunner 75dc019252 Moving attr-sql plugin from libstrongswan to libhydra. 2010-03-24 18:53:09 +01:00
Tobias Brunner d7e977aced Fixed some Doxygen warnings. 2010-03-24 15:45:06 +01:00
Heiko Hund 0d59713dd9 Fixed ipsec pool --batch command 
--batch mode has shown to be buggy in very obscure ways in the first real
life tests. For example a batch file

       --del pool1
       --replace pool2 --addresses file1

returned the error "/usr/libexec/ipsec/pool: unrecognized option '--lace'"
which was gone after moving the --del behind --replace. With the patch
from below applied everything works like a charm. From the info on the
man page it seem to be unrelated to this problem, though:

       A program that scans multiple  argument  vectors,  or
       rescans  the same vector more than once, and wants to
       make use of GNU extensions such as '+' and '-' at the
       start   of   optstring,   or  changes  the  value  of
       POSIXLY_CORRECT  between  scans,  must   reinitialize
       getopt()  by  resetting  optind to 0, rather than the
       traditional value of 1.  (Resetting to 0  forces  the
       invocation of an internal initialization routine that
       rechecks POSIXLY_CORRECT and checks  for  GNU  exten-
       sions in optstring.)

Signed-off-by: Heiko Hund <[email protected]>
 2010-03-24 08:21:36 +01:00
Tobias Brunner cf46ff6875 Use vstr/gmp as shared libraries in the Android build. 2010-03-23 11:39:58 +01:00
Tobias Brunner d92b337fe9 Do not indent the source file lists in Android.mk files so we can easily compare them to the lists in the Makefile.am files. 2010-03-19 13:34:53 +01:00
Tobias Brunner 0f5a043989 Use wildcards to gather plugin source files. 2010-03-19 13:34:53 +01:00
Martin Willi 7c11d10eb8 Removed strayed code fragment 2010-03-19 10:25:12 +01:00