Andreas Steffen
56352fca2f
replace cert by this in parse_certificate()
2007-04-12 18:57:33 +00:00
Andreas Steffen
f5ce017b0d
parse_authorityKeyIdentifier() is made available externally
2007-04-12 18:56:46 +00:00
Andreas Steffen
34ee184a2d
external functions are defined in asn1.h and x509.h now
2007-04-12 18:55:44 +00:00
Andreas Steffen
f880eb2dca
started support of X.509 attribute certificates
2007-04-12 17:49:33 +00:00
Andreas Steffen
0dbe579a51
added AA and AATR cert paths
2007-04-12 16:43:21 +00:00
Andreas Steffen
4cda602393
fixed output of list_auth_certificates()
2007-04-12 16:42:07 +00:00
Andreas Steffen
f865d34b35
fixed output of list_certinfos()
2007-04-12 16:36:12 +00:00
Andreas Steffen
6a132a53e5
corrected copyright statement
2007-04-12 16:21:02 +00:00
Martin Willi
c4d9504a6b
added missing #include
2007-04-12 11:33:43 +00:00
Martin Willi
a1b2d82db0
removed %Q, %Y, %W, %U printf handlers
2007-04-12 09:44:26 +00:00
Martin Willi
db97fd8298
not using %m printf handler, as late errno interpration over bus may be problematic
2007-04-12 08:52:36 +00:00
Martin Willi
1dad08b035
fixed DPD delay in peer_cfg
2007-04-12 06:20:42 +00:00
Martin Willi
092958c89d
fixed payload debug message
2007-04-12 06:20:14 +00:00
Martin Willi
5f088665ad
removed IKE_SA_ID (%J) printf hook, two more to go
2007-04-11 13:01:08 +00:00
Martin Willi
3c662c30ee
cleanup and fixes for status & statusall
2007-04-11 12:43:52 +00:00
Martin Willi
015912016c
using %V time delta for rekeying times
2007-04-11 12:33:02 +00:00
Martin Willi
a3ce4bc214
removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to go
2007-04-11 12:14:51 +00:00
Martin Willi
cd08b6880b
removed %M printf handler, five more to go
2007-04-11 09:12:21 +00:00
Martin Willi
82240938ca
fixed virtual ip configuration bug introduced with the previous commit
2007-04-11 08:34:21 +00:00
Martin Willi
f925b42a5d
two %any IDs are equal
2007-04-11 07:43:23 +00:00
Martin Willi
3b138b8422
cleaned up apidoc
...
added some comments
removed configuration.[ch], as it does not make sense like it is
2007-04-11 07:20:39 +00:00
Martin Willi
de55c6895f
accepting stroke initiation by a name of a child_cfg
2007-04-11 05:58:38 +00:00
Andreas Steffen
86b7215627
fixed bug with roadwarrior and wildcard IDs
2007-04-10 22:39:09 +00:00
Andreas Steffen
a07aad39dc
edited comment and debug output
2007-04-10 22:38:06 +00:00
Andreas Steffen
4876f521d6
best must be initialized to 2*MAX_WILDCARDS+1
2007-04-10 22:35:45 +00:00
Andreas Steffen
241ab32c10
changed tab spacing from 8 to 4
2007-04-10 19:31:42 +00:00
Martin Willi
00ccb87671
requesting the same virtual IP on reauthentication
2007-04-10 15:02:57 +00:00
Martin Willi
d3e1da2378
proper notification handling
2007-04-10 15:00:51 +00:00
Martin Willi
e0fe765152
restructured file layout
...
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00
Andreas Steffen
babdde4fa4
cosmetics in debug output
2007-04-06 10:35:13 +00:00
Andreas Steffen
241d2ff3bc
support of ldap-based crl fetching
2007-04-06 09:44:06 +00:00
Andreas Steffen
4c56bd64e5
removed list_crls() and list_ocsp() methods
2007-04-06 09:43:20 +00:00
Andreas Steffen
3c5c3431b3
removed list_crls() and list_ocsp() methods
2007-04-06 09:42:45 +00:00
Andreas Steffen
8883eef7b8
support cachecrls=yes
2007-04-05 17:07:14 +00:00
Andreas Steffen
e58afb1a0a
support of crlcheckinterval=0 to disable IKEv2 CRL fetching
2007-04-04 07:49:05 +00:00
Martin Willi
80b7162531
improved log output for checkout_by_message()
2007-04-04 07:11:12 +00:00
Andreas Steffen
d15d1cc4f3
recognize strongSwan 2.8.4 VID
2007-04-04 05:25:06 +00:00
Andreas Steffen
3d62a7d225
fixed crl fetching bug
2007-04-03 22:02:17 +00:00
Andreas Steffen
a0eaa59b50
implemented dynamic http-based CRL fetching
2007-04-03 21:11:23 +00:00
Andreas Steffen
5d6dc162f2
send VID_NATT_IETF_02_N for Windows 2003 server support
2007-04-03 21:10:08 +00:00
Andreas Steffen
a8f02ad5f5
implemented dynamic http-based CRL fetching
2007-04-03 21:09:11 +00:00
Andreas Steffen
f166af2c0a
implemented http get method
2007-04-03 19:46:50 +00:00
Andreas Steffen
b0f9f02ca4
added --enable-nat-transport and --disable-vendor-id configuration options
2007-04-03 07:58:34 +00:00
Andreas Steffen
a0c15611a4
bug fix: check existence of encryption key before sending encrypted notification
2007-04-02 19:04:51 +00:00
Martin Willi
73390cce24
removed unneded includes
2007-03-30 12:24:31 +00:00
Martin Willi
3374c8b1c8
using IFA_LOCAL for interface enumeration to support ppp links
2007-03-30 09:21:48 +00:00
Martin Willi
b9e363f86f
added IKE_SA_INIT retransmission detection
...
fixed thread exhaustion when IKE_SA is blocked for a longer time
2007-03-29 14:20:10 +00:00
Martin Willi
891e69944f
implemented DoS protection with cookies and IP filter
2007-03-29 11:26:55 +00:00
Martin Willi
361e6df8c1
fixed task manager message id bug for cookies
2007-03-29 11:08:30 +00:00
Martin Willi
a6bdc731b1
added retry limit for IKE_SA_INIT (give up after 5 cookie failures)
2007-03-29 11:07:49 +00:00
Andreas Steffen