Andreas Steffen
a3316c2b9f
setting the two most significant bits assures an RSA modulus of maximum bit size
2010-03-15 15:13:26 +01:00
Andreas Steffen
d12ad4748a
fix 64bit issue with time_t from database
2010-03-10 10:46:49 +01:00
Tobias Brunner
908d571796
Provide the Diffie Hellman parameters from a central location, so that we do not have to replicate them in every plugin that implements the DH interface.
...
The main reason for this change is that Android's libcrypto does not
include the get_rfcX_prime_Y functions by default. Therefore we would
have had to replicate the primes a third time.
2010-03-09 17:15:16 +01:00
Tobias Brunner
d543d9cadf
Adding a helper function that translates single characters in a string.
2010-03-08 15:34:38 +01:00
Tobias Brunner
d14203b009
Replaced the deprecated RSA_generate_key with RSA_generate_key_ex.
2010-03-08 15:34:38 +01:00
Martin Willi
40f130dab3
Implemented the PRF_KEYED_SHA1 algorithm in the openssl plugin
2010-03-08 13:16:12 +01:00
Andreas Steffen
ceeb9bac8b
critical keyUsage extension must be parsed
2010-03-07 20:51:34 +01:00
Andreas Steffen
1ec8f22de2
set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true
2010-03-07 17:27:53 +01:00
Tobias Brunner
afb364fff9
Reverting eba28948a5 which was only necessary when cross-compiling the plugins for Android 2.0.
...
With the coming monolithic build using Android.mk files this won't be
necessary anymore.
2010-03-02 12:03:44 +01:00
Tobias Brunner
4e657051f7
Streamlined the source file list formatting in plugin makefiles.
2010-03-02 10:40:50 +01:00
Tobias Brunner
6ec60bb92b
Link all enabled libstrongswan plugins into the library, link all enabled charon plugins into libcharon.
2010-03-02 10:38:52 +01:00
Tobias Brunner
3724668b3d
Enabling the plugin loader to be able to load plugins without explicitly loading a shared object file first.
2010-03-02 09:10:32 +01:00
Tobias Brunner
9ce567f895
Changed plugin constructors from plugin_create to plugin_name_plugin_create.
2010-03-02 09:10:26 +01:00
Tobias Brunner
6cc13cd9c5
Removing the plugin constructor declarations from the header files.
2010-03-02 09:10:19 +01:00
Tobias Brunner
eba28948a5
Link all plugins to libstrongswan.
2010-02-25 13:51:05 +01:00
Martin Willi
3e35a6e7a1
Use side-channel secured mpz_powm_sec of libgmp 5, if available
2010-02-18 17:38:59 +01:00
Andreas Steffen
b917f49684
initialize variables to avoid compiler warning
2010-02-05 12:34:37 +01:00
Martin Willi
7eab4a1be6
Support TLS client authentication Extended Key Usage in x509 generation
2010-01-14 12:00:43 +01:00
Andreas Steffen
3e33ae1004
ipsec pki --self|issue supports --pathlen option setting a path length constraint
2009-12-31 15:13:35 +01:00
Tobias Brunner
4a5a5dd290
Using the thread wrapper in charon, libstrongswan and their plugins.
2009-12-23 17:03:41 +01:00
Tobias Brunner
eba64cef41
Separated the public interfaces of the threading primitives.
2009-12-23 17:01:53 +01:00
Tobias Brunner
14f7091280
Moved mutex.c to a separate folder in order to cleanly wrap other threading primitives (and utils/mutex.h is now threading.h).
2009-12-23 17:00:58 +01:00
Andreas Steffen
e16a01a5e6
X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension
2009-12-22 13:18:27 +01:00
Andreas Steffen
91e35b7c9e
added create_ipAddrBlock_enumerator() method to x509_t
2009-12-22 11:58:30 +01:00
Andreas Steffen
157125e4c9
traffic_selector supports RFC 3779 address range format
2009-12-21 21:29:01 +01:00
Andreas Steffen
513eb95e60
parse RFC 3779 addressFamily
2009-12-20 19:26:28 +01:00
Andreas Steffen
7d379a786c
plugin name is x509
2009-12-20 16:01:35 +01:00
Andreas Steffen
28c25485ba
discard certificate with unknown critical extensions
2009-12-20 15:53:39 +01:00
Andreas Steffen
f3e366a9a0
use traffic_selector_t object to represent ipAddrBlocks
2009-12-20 15:15:02 +01:00
Andreas Steffen
ad858aee15
parse ipAddrBlocks
2009-12-17 17:32:55 +01:00
Martin Willi
83b760cb42
Migrated curl_fetcher to INIT/METHOD macros
2009-12-17 13:53:25 +01:00
Andreas Steffen
645f3865b2
ipsec pool manages dns and nbns servers
2009-12-16 18:11:57 +01:00
Andreas Steffen
3747f0f2e7
cosmetics
2009-12-16 13:33:09 +01:00
Andreas Steffen
a461e20dd8
provide attributes from SQL database
2009-12-16 12:31:41 +01:00
Martin Willi
4e90d9de9f
Removed obsolete curl interface specific destructor
2009-12-08 16:21:58 +01:00
Martin Willi
b5a2055fb1
Give plugins more control of which configuration attributes to request, and pass received attributes back to the requesting handler
2009-11-17 14:51:50 +01:00
Martin Willi
ee3d4ef801
Prefer MODP2048/1536 over ECP Diffie-Hellman groups
2009-11-12 13:10:30 +00:00
Andreas Steffen
bb7ae382fd
added some debugging to pgp certificate parsing
2009-11-10 10:04:55 +01:00
Andreas Steffen
262af16179
accept PGP v3 or v4 fingerprint as alternative to PGP user_id
2009-11-09 23:15:17 +01:00
Andreas Steffen
ab5762e32a
list v3 or v4 fingerprint
2009-11-08 23:21:03 +01:00
Andreas Steffen
9f0327e652
define TIME_32_BITS_SIGNED_MAX in utils.h
2009-11-08 18:55:52 +01:00
Andreas Steffen
4c68a85a75
implemented path length constraint checkinf for IKEv2
2009-11-04 23:37:15 +01:00
Andreas Steffen
fae322219f
output optional pathLenConstraint in ipsec listcacerts
2009-11-04 07:30:07 +01:00
Andreas Steffen
00aa027503
implemented parsing of pathLenConstraint
2009-11-04 00:03:10 +01:00
Martin Willi
4952dc11da
Fixed all doxygen warnings
2009-10-22 14:34:10 +02:00
Andreas Steffen
38031878dd
moved .gitignore for pool
2009-10-15 14:58:09 +02:00
Martin Willi
d38eb3355e
Migrated the lease_history option to the new libstrongswan plugin namespace
2009-10-15 10:14:10 +02:00
Andreas Steffen
668870be47
pool should be in th gitignore list
2009-10-14 14:37:03 +02:00
Andreas Steffen
270bb348e3
pluto now supports SQL-based virtual IP pools
2009-10-14 14:30:14 +02:00
Andreas Steffen
247794827e
move SQL-based pool functionality to new attr-sql libstrongswan plugin
2009-10-13 17:02:29 +02:00
Andreas Steffen