Andreas Steffen
|
5c7c23cc03
|
set Id keyword
|
2008-04-28 18:44:21 +00:00 |
|
Andreas Steffen
|
e8a680d94a
|
cosmetics
|
2008-04-28 16:02:53 +00:00 |
|
Andreas Steffen
|
460025e253
|
introduced ASN1_EXIT command in ASN.1 object syntax definition
|
2008-04-28 16:00:52 +00:00 |
|
Andreas Steffen
|
475a01de35
|
some scenario fixes
|
2008-04-27 14:15:29 +00:00 |
|
Andreas Steffen
|
77b9c3a214
|
end->srcip string must be removed if it contains %config
|
2008-04-27 11:28:58 +00:00 |
|
Andreas Steffen
|
2988273b3a
|
fixed starter_cmp_end()
|
2008-04-27 11:04:13 +00:00 |
|
Andreas Steffen
|
937eb2db00
|
fixed memory corruption problem in starter
|
2008-04-27 10:49:31 +00:00 |
|
Andreas Steffen
|
c3628ebc35
|
optimized parser->success()
|
2008-04-26 11:08:36 +00:00 |
|
Andreas Steffen
|
df231f5488
|
ported ASN.1 changes to pkcs7
|
2008-04-26 10:20:51 +00:00 |
|
Andreas Steffen
|
f27e13e80f
|
doxygen fix for fips.h
|
2008-04-26 09:40:22 +00:00 |
|
Andreas Steffen
|
d3d7e46b8c
|
refactoring of the ASN.1 parser
|
2008-04-26 09:24:14 +00:00 |
|
Andreas Steffen
|
33eb3d4ab6
|
extract_token() now handles whitespace
|
2008-04-25 07:04:59 +00:00 |
|
Andreas Steffen
|
36fecdb8a3
|
chunk_to_hex() adaptations
|
2008-04-25 06:39:41 +00:00 |
|
Andreas Steffen
|
f6ef204a9e
|
'Hash and URL' certificates of research and sales CAs
|
2008-04-22 20:36:44 +00:00 |
|
Andreas Steffen
|
7c0c0aac01
|
version bump to 4.2.2
|
2008-04-19 10:07:32 +00:00 |
|
Andreas Steffen
|
c306dfb15a
|
edited NEWS
|
2008-04-19 09:49:06 +00:00 |
|
Andreas Steffen
|
8d7e4dec55
|
updated testing.conf
|
2008-04-19 07:57:24 +00:00 |
|
Andreas Steffen
|
ab40f2edc7
|
add symbolic link to hash-and-url certs
|
2008-04-19 07:48:53 +00:00 |
|
Andreas Steffen
|
734e81bbd6
|
fixed iptables/ip6tables switch
|
2008-04-19 07:47:00 +00:00 |
|
Andreas Steffen
|
544f8f6380
|
added hash-and-url certs
|
2008-04-18 21:46:26 +00:00 |
|
Andreas Steffen
|
2eaf8db41a
|
added ikev2/rw-hash-and-url scenario
|
2008-04-18 21:43:05 +00:00 |
|
Andreas Steffen
|
466abb49fc
|
updated NEWS: support of AES_XCBC_MAC and CAMELLIA
|
2008-04-18 21:42:31 +00:00 |
|
Andreas Steffen
|
1d5d6f9667
|
Hash and URL cosmetics
|
2008-04-18 21:27:08 +00:00 |
|
Andreas Steffen
|
4e8670c557
|
added ikev1/esp-alg-camellia scenario
|
2008-04-18 20:02:42 +00:00 |
|
Andreas Steffen
|
e92b5bc0ed
|
fixed cbc(camellia) netlink configuration error
|
2008-04-18 20:01:49 +00:00 |
|
Andreas Steffen
|
540628bc38
|
use ip xfrm state in crypto evaltests
|
2008-04-18 19:07:46 +00:00 |
|
Andreas Steffen
|
7ae8e2bcd9
|
added ikev1/esp-alg-aesxcbc scenario
|
2008-04-18 19:06:43 +00:00 |
|
Andreas Steffen
|
228025c2c4
|
fixed aes-xcbc netlink configuration error
|
2008-04-18 18:37:57 +00:00 |
|
Andreas Steffen
|
1da277f045
|
support of AES_XCBC and CAMELLIA ESP cipher by pluto
|
2008-04-18 17:01:45 +00:00 |
|
Andreas Steffen
|
855c9a9089
|
fixed AES default key length
|
2008-04-18 17:00:30 +00:00 |
|
Andreas Steffen
|
bb2a529870
|
updated pfkeyv2.h
|
2008-04-18 12:27:50 +00:00 |
|
Andreas Steffen
|
be2e5b48cd
|
updated list of ESP and AH algorithms
|
2008-04-18 11:25:37 +00:00 |
|
Andreas Steffen
|
a11274a856
|
corrected description
|
2008-04-18 07:44:39 +00:00 |
|
Andreas Steffen
|
6927d37c2c
|
fixed another transport mode evaltest
|
2008-04-18 07:42:57 +00:00 |
|
Andreas Steffen
|
c2fc3379ac
|
added ipv6/net2net-ipv4-ikev2 scenario
|
2008-04-18 07:24:01 +00:00 |
|
Andreas Steffen
|
0d6e4d7137
|
fixed two evaltests
|
2008-04-18 07:21:49 +00:00 |
|
Andreas Steffen
|
5c5d67d6ae
|
updated NEWS
|
2008-04-17 20:38:47 +00:00 |
|
Andreas Steffen
|
8eeb796a51
|
changed logging of crl writing to old style
|
2008-04-17 20:23:31 +00:00 |
|
Andreas Steffen
|
5434d5f7e9
|
corrected variable name
|
2008-04-17 18:56:55 +00:00 |
|
Andreas Steffen
|
f45411c045
|
set long-forgotten DPD defaults
|
2008-04-15 11:27:45 +00:00 |
|
Andreas Steffen
|
fa89d4457a
|
use ip6tables in sql/rw-psk-ipv6 scenario
|
2008-04-14 06:10:10 +00:00 |
|
Andreas Steffen
|
acda610cbb
|
fixed suppression of cert requests in eap-sim and eap-aka scenarios
|
2008-04-14 04:33:17 +00:00 |
|
Andreas Steffen
|
ff41ca0dc4
|
host_srcip was not properly initialized in starterwhack.c
|
2008-04-13 21:42:44 +00:00 |
|
Andreas Steffen
|
743d9c7b20
|
added sql/rw-psk-ipv6 scenario
|
2008-04-13 19:50:15 +00:00 |
|
Andreas Steffen
|
09a01b5e51
|
added sql/rw-psk-rsa-split scenario
|
2008-04-13 19:49:20 +00:00 |
|
Andreas Steffen
|
b1bdfa4890
|
fixed disabling the sending of cert requests
|
2008-04-13 17:31:07 +00:00 |
|
Andreas Steffen
|
571ad29507
|
wildcard matching in shared secrets not implemented yet
|
2008-04-07 10:29:08 +00:00 |
|
Andreas Steffen
|
e44612c878
|
added sql/rw-psk-ipv4 scenario
|
2008-04-07 10:24:49 +00:00 |
|
Andreas Steffen
|
af9e3954e2
|
set accelerated rekeying defaults in ipsec.sql for UML scenarios
|
2008-04-07 09:10:58 +00:00 |
|
Andreas Steffen
|
2c0df332a9
|
added sql/rw-cert scenario
|
2008-04-07 08:57:46 +00:00 |
|
Andreas Steffen
|
6fbd3f1738
|
fixed path to ipsec.sql
|
2008-04-07 07:57:38 +00:00 |
|
Andreas Steffen
|
56bcc343ff
|
ipsec.sql remains in /etc/ipsec.d
|
2008-04-07 07:25:04 +00:00 |
|
Andreas Steffen
|
decfd8e546
|
moved strongswan.conf to /etc
|
2008-04-07 07:21:06 +00:00 |
|
Andreas Steffen
|
480297b883
|
cosmetics
|
2008-04-07 07:02:47 +00:00 |
|
Andreas Steffen
|
096b7f6889
|
do-tests now lists strongswan.conf and ip xfrm policy|state
|
2008-04-07 06:14:21 +00:00 |
|
Andreas Steffen
|
84fc1abf7a
|
added sql/net2net-psk scenario
|
2008-04-06 18:11:19 +00:00 |
|
Andreas Steffen
|
b6032b2400
|
corrected description
|
2008-04-06 18:10:57 +00:00 |
|
Andreas Steffen
|
f8ab4a8f76
|
log shared secret with debug level 4
|
2008-04-06 17:51:29 +00:00 |
|
Andreas Steffen
|
b26fecefa0
|
disable mobike in sql/net2net-cert scenario
|
2008-04-06 12:53:57 +00:00 |
|
Andreas Steffen
|
1b247314fd
|
default is hostaccess=no
|
2008-04-06 12:15:05 +00:00 |
|
Andreas Steffen
|
bc722433be
|
version bump to 4.2.1
|
2008-04-06 12:12:13 +00:00 |
|
Andreas Steffen
|
69813bd27f
|
added sql/net2net-cert scenario
|
2008-04-06 12:06:33 +00:00 |
|
Andreas Steffen
|
babaaa3c11
|
support of SQL databases in UML scenarios
|
2008-04-06 12:05:42 +00:00 |
|
Andreas Steffen
|
196b28a470
|
demoted more notify debug messages to level 2
|
2008-04-02 19:15:05 +00:00 |
|
Andreas Steffen
|
f342cc08c0
|
make peer IP address and peer IP available to the xauth_module.verify_secret() method
|
2008-04-02 19:04:45 +00:00 |
|
Andreas Steffen
|
97da3d2de0
|
renamed AES_cbc_encrypt to SS_AES_cbc_encrypt due to name collision with OpenSSL library
|
2008-04-02 18:51:10 +00:00 |
|
Andreas Steffen
|
7a9d3ae471
|
support of force_keepalive parameter
|
2008-04-02 18:35:23 +00:00 |
|
Andreas Steffen
|
1ee637d8b1
|
generate debug output if ocsp response does not contain status information for a given certificate
|
2008-04-02 14:28:17 +00:00 |
|
Andreas Steffen
|
281d04502e
|
additional debug line makes certificate status checking more understandable
|
2008-04-02 06:25:59 +00:00 |
|
Andreas Steffen
|
9372f44c67
|
workaround for parsing IPv6 PSKs requires extract_last_token()
|
2008-04-01 20:40:29 +00:00 |
|
Andreas Steffen
|
080555e76a
|
demoted received notify debug message to level 2
|
2008-04-01 20:22:38 +00:00 |
|
Andreas Steffen
|
158a62c326
|
adapted ikev2 uml scenarios for the 4.2 version
|
2008-04-01 20:05:02 +00:00 |
|
Andreas Steffen
|
392f4e17c2
|
minimal stroke_list_ocsp() implementation
|
2008-04-01 12:11:09 +00:00 |
|
Andreas Steffen
|
946d1ecd59
|
stroke_list groups certificates by issuer
|
2008-04-01 10:26:27 +00:00 |
|
Andreas Steffen
|
c096472605
|
minor changes in debug output
|
2008-03-31 21:59:32 +00:00 |
|
Andreas Steffen
|
aaa7643b73
|
put DN in double quotes
|
2008-03-31 21:08:56 +00:00 |
|
Andreas Steffen
|
a92ea0ccb3
|
output error message if maximum ca path length is reached
|
2008-03-31 20:42:57 +00:00 |
|
Andreas Steffen
|
eafc0654ca
|
ipsec list suppresses duplicates
|
2008-03-31 20:21:24 +00:00 |
|
Andreas Steffen
|
58a05045cc
|
utc argument in %#T was missing
|
2008-03-31 14:36:00 +00:00 |
|
Andreas Steffen
|
681d56b1bb
|
disabled build of outdated dbus interface
|
2008-03-31 12:59:39 +00:00 |
|
Andreas Steffen
|
1c65129148
|
adapted configure options in testing.conf and build-umlrootfs
|
2008-03-29 19:33:02 +00:00 |
|
Andreas Steffen
|
dcc777652e
|
changed error message
|
2008-03-29 13:26:53 +00:00 |
|
Andreas Steffen
|
40f9006845
|
output uptime in status in local time
|
2008-03-29 08:55:09 +00:00 |
|
Andreas Steffen
|
d2aa6fcaeb
|
shortened menu item
|
2008-03-28 22:46:09 +00:00 |
|
Andreas Steffen
|
c63dc50f15
|
demoted ldap debug output to level 2
|
2008-03-28 22:44:45 +00:00 |
|
Andreas Steffen
|
95ef5db5c3
|
remove xml directory
|
2008-03-28 19:49:59 +00:00 |
|
Andreas Steffen
|
d61bd27a9a
|
fixed plugin/stroke Makefile
|
2008-03-26 20:24:55 +00:00 |
|
Andreas Steffen
|
1aad8bdfad
|
makeshift fix of --enable-integrity-test option
|
2008-03-26 20:16:42 +00:00 |
|
Andreas Steffen
|
5298777ad8
|
treat sig_alg and algorithm comparison in a consistent way over all certificate types
|
2008-03-26 13:10:36 +00:00 |
|
Andreas Steffen
|
26930a8c3e
|
certificate factory can load certs from file
|
2008-03-25 22:28:27 +00:00 |
|
Andreas Steffen
|
ff98c85b57
|
added component BUILD_FROM_FILE
|
2008-03-25 13:26:33 +00:00 |
|
Andreas Steffen
|
13bec89740
|
renamed certificate field in x509_cert.c to encoding
|
2008-03-25 12:22:12 +00:00 |
|
Andreas Steffen
|
84a5c6a679
|
added ac.c
|
2008-03-25 10:13:57 +00:00 |
|
Andreas Steffen
|
3e6ee16478
|
defined *_create_from_file() constructors in libstrongswan/credentials/certificates
|
2008-03-25 10:12:45 +00:00 |
|
Andreas Steffen
|
63cb8a7fee
|
fixed refence counts before calling attribute certificate factory
|
2008-03-25 09:39:23 +00:00 |
|
Andreas Steffen
|
9bb8d23e17
|
corrected some doxygen entries
|
2008-03-22 08:15:18 +00:00 |
|
Andreas Steffen
|
855606efd4
|
optimized self-signed certificate detection
|
2008-03-21 20:37:08 +00:00 |
|
Andreas Steffen
|
36617c1ad5
|
shortened debug output
|
2008-03-21 20:36:19 +00:00 |
|
Andreas Steffen
|
02fd225ea5
|
detect trusted self-signed before trust chain verification
|
2008-03-21 19:10:55 +00:00 |
|
Andreas Steffen
|
ffce5db1b7
|
self-signed certificates were not marked by x509_cert.c
|
2008-03-21 19:07:12 +00:00 |
|