 Andreas Steffen
|
a07531250e
|
IKEv1 support of ESP SHA2_HMAC with correct truncation
|
2009-12-09 00:24:42 +01:00 |
|
|
Andreas Steffen
|
4b615edab4
|
some code optimizations
|
2009-12-09 00:24:42 +01:00 |
|
|
Andreas Steffen
|
e1573b3fe8
|
added ipAddrBlocks OID
|
2009-12-09 00:24:41 +01:00 |
|
|
Andreas Steffen
|
7747210f26
|
removed redundant ikev2/esp-alg-camellia scenario
|
2009-12-09 00:24:41 +01:00 |
|
|
Andreas Steffen
|
04933ea74e
|
added ikev2/alg-3des-md5 scenario
|
2009-12-08 12:54:42 +01:00 |
|
|
Andreas Steffen
|
7868162b35
|
added RFC-conforming ikev2/sha2 scenarios
|
2009-11-26 23:48:29 +01:00 |
|
|
Andreas Steffen
|
68db91ca32
|
adapted ikev2/alg-aes-xcbc scenario
|
2009-11-26 23:46:27 +01:00 |
|
|
Andreas Steffen
|
4b55cf5d09
|
put identities in single quotes
|
2009-11-25 09:02:09 +01:00 |
|
|
Andreas Steffen
|
653da7c907
|
added more debugging in configuration attribute handling
|
2009-11-24 23:17:07 +01:00 |
|
|
Andreas Steffen
|
eba568563c
|
changed error messages in the case of faulty esp and ike strings
|
2009-11-24 16:45:52 +01:00 |
|
|
Andreas Steffen
|
2eeab939a0
|
do not send all available kernel algorithms if esp string is faulty
|
2009-11-24 16:38:10 +01:00 |
|
|
Andreas Steffen
|
cda8ec7afc
|
added some parentheses
|
2009-11-24 14:36:17 +01:00 |
|
|
Andreas Steffen
|
93e2377c7f
|
allow ECP DH groups in pfsgroup definition
|
2009-11-24 14:35:25 +01:00 |
|
|
Andreas Steffen
|
17d52fbba1
|
renewed OCSP Signing certificate
|
2009-11-24 13:55:38 +01:00 |
|
|
Andreas Steffen
|
c4570d188e
|
issue error message for expired certificates in OCSP trust chain checking
|
2009-11-24 12:37:38 +01:00 |
|
|
Andreas Steffen
|
227583ba59
|
updated IKEv2 notification messages assigned by IANA
|
2009-11-24 09:21:00 +01:00 |
|
|
Andreas Steffen
|
44e41c4c6e
|
updated NEWS for 4.3.6dr2
|
2009-11-24 09:18:41 +01:00 |
|
|
Andreas Steffen
|
6ae43b9333
|
mixed fingerprint / userid
|
2009-11-11 11:17:59 +01:00 |
|
|
Andreas Steffen
|
209f52cb63
|
fixed 4.3.6 ocsp regression
|
2009-11-11 11:06:07 +01:00 |
|
|
Andreas Steffen
|
ee8486afdb
|
adapted log message
|
2009-11-10 23:55:55 +01:00 |
|
|
Andreas Steffen
|
a618e33e8b
|
merged pluto's PGP certificate parsing with charon's
|
2009-11-10 23:54:51 +01:00 |
|
|
Andreas Steffen
|
f565d0c575
|
merged pluto's PGP certificate parsing with charon's
|
2009-11-10 23:54:04 +01:00 |
|
|
Andreas Steffen
|
cc543182bc
|
added separating line
|
2009-11-10 21:50:34 +01:00 |
|
|
Andreas Steffen
|
bb7ae382fd
|
added some debugging to pgp certificate parsing
|
2009-11-10 10:04:55 +01:00 |
|
|
Andreas Steffen
|
262af16179
|
accept PGP v3 or v4 fingerprint as alternative to PGP user_id
|
2009-11-09 23:15:17 +01:00 |
|
|
Andreas Steffen
|
8a650a2bc8
|
put PGP userid in single quotes
|
2009-11-08 23:58:41 +01:00 |
|
|
Andreas Steffen
|
b25311fbe2
|
added ikev2/net2net-pgp-v3 scenario
|
2009-11-08 23:49:04 +01:00 |
|
|
Andreas Steffen
|
bc662125c2
|
removed nocrsend=yes statement
|
2009-11-08 23:48:26 +01:00 |
|
|
Andreas Steffen
|
2846e51a5b
|
added ikev2/net2net-pgp-v4 scenario
|
2009-11-08 23:23:45 +01:00 |
|
|
Andreas Steffen
|
ab5762e32a
|
list v3 or v4 fingerprint
|
2009-11-08 23:21:03 +01:00 |
|
|
Andreas Steffen
|
9a127590ac
|
stroke_list supports listing of PGP certificates
|
2009-11-08 21:01:12 +01:00 |
|
|
Andreas Steffen
|
9f0327e652
|
define TIME_32_BITS_SIGNED_MAX in utils.h
|
2009-11-08 18:55:52 +01:00 |
|
|
Andreas Steffen
|
e92e19c177
|
pluto ignores proprietary Juniper SRX notification 40001
|
2009-11-05 08:38:00 +01:00 |
|
|
Andreas Steffen
|
16dca5c2f2
|
moved multi-level-ca-pathlen scenario
|
2009-11-04 23:43:43 +01:00 |
|
|
Andreas Steffen
|
4c68a85a75
|
implemented path length constraint checkinf for IKEv2
|
2009-11-04 23:37:15 +01:00 |
|
|
Andreas Steffen
|
fef3b0b7fd
|
display printable characters in dntoa()
|
2009-11-04 20:17:12 +01:00 |
|
|
Andreas Steffen
|
8fac84bcdd
|
check if acerts linked_list has been initialized before destroying it
|
2009-11-04 19:36:02 +01:00 |
|
|
Andreas Steffen
|
32c8b1847b
|
renamed multi-level-pathlen scenario to multi-level-ca-pathlen
|
2009-11-04 18:18:43 +01:00 |
|
|
Andreas Steffen
|
cd36095e38
|
added ikev1/multi-level-pathlen scenario
|
2009-11-04 18:15:26 +01:00 |
|
|
Andreas Steffen
|
28c554088d
|
added a subsidiary Duck Research CA
|
2009-11-04 18:13:06 +01:00 |
|
|
Andreas Steffen
|
c95671cec2
|
implemented path length constraint checking for IKEv1
|
2009-11-04 18:10:31 +01:00 |
|
|
Andreas Steffen
|
fae322219f
|
output optional pathLenConstraint in ipsec listcacerts
|
2009-11-04 07:30:07 +01:00 |
|
|
Andreas Steffen
|
5d1d7e82b5
|
refreshened and fortified strongSwan Root CA certificate
|
2009-11-04 00:16:48 +01:00 |
|
|
Andreas Steffen
|
00aa027503
|
implemented parsing of pathLenConstraint
|
2009-11-04 00:03:10 +01:00 |
|
|
Andreas Steffen
|
f893bce3e7
|
fixed a memory leak in OCSP fetching
|
2009-10-29 10:00:19 +01:00 |
|
|
Andreas Steffen
|
c51b78eb2a
|
hyphenate eap-radius
|
2009-10-17 09:23:09 +02:00 |
|
|
Andreas Steffen
|
cea4bd8ff5
|
added IKEv1 mixed tunnel fix to NEWS
|
2009-10-16 17:57:42 +02:00 |
|
|
Andreas Steffen
|
601e2a6986
|
added ipv6/net2net-ip4-in-ip6-ikev1 and ipv6/net2net-ip4-in-ip6-ikev1 scenarios
|
2009-10-16 15:04:17 +02:00 |
|
|
Andreas Steffen
|
215b0402b3
|
use directory enumerator to load authcerts
|
2009-10-15 18:01:10 +02:00 |
|
|
Andreas Steffen
|
ff1ca9a8a3
|
cleaned out some bugs in refactoring of ac.c
|
2009-10-15 17:30:04 +02:00 |
|
|
Andreas Steffen
|
50a82b419e
|
corrected description of ikev1/ip-pool-db scenario
|
2009-10-15 15:25:36 +02:00 |
|
|
Andreas Steffen
|
bc3162d806
|
build eap-aka-3gpp2 plugin in UML scenarios
|
2009-10-15 15:22:48 +02:00 |
|
|
Andreas Steffen
|
38031878dd
|
moved .gitignore for pool
|
2009-10-15 14:58:09 +02:00 |
|
|
Andreas Steffen
|
1310fbd322
|
moved .gitignore for pool
|
2009-10-15 14:58:09 +02:00 |
|
|
Andreas Steffen
|
ffe6f83272
|
added ikev1/ip-pool-db-push scenario
|
2009-10-14 21:35:43 +02:00 |
|
|
Andreas Steffen
|
628f023d59
|
NEWS for the 4.3.5dr3 release
|
2009-10-14 18:02:15 +02:00 |
|
|
Andreas Steffen
|
f4c4e78296
|
added ikev1/ip-pool-db scenario
|
2009-10-14 14:51:12 +02:00 |
|
|
Andreas Steffen
|
668870be47
|
pool should be in th gitignore list
|
2009-10-14 14:37:03 +02:00 |
|
|
Andreas Steffen
|
270bb348e3
|
pluto now supports SQL-based virtual IP pools
|
2009-10-14 14:30:14 +02:00 |
|
|
Andreas Steffen
|
601bc1df20
|
pluto can now make use of the mysql and sqlite plugins
|
2009-10-14 12:43:54 +02:00 |
|
|
Andreas Steffen
|
32bc430591
|
fixed inconsistent triplets.dat files
|
2009-10-14 11:08:01 +02:00 |
|
|
Andreas Steffen
|
247794827e
|
move SQL-based pool functionality to new attr-sql libstrongswan plugin
|
2009-10-13 17:02:29 +02:00 |
|
|
Andreas Steffen
|
4c8bb47abd
|
check provenance of nameserver entry
|
2009-10-13 13:58:43 +02:00 |
|
|
Andreas Steffen
|
27f4dd33b2
|
use definitions from libstrongswan/attributes/attributes.h
|
2009-10-13 13:55:06 +02:00 |
|
|
Andreas Steffen
|
930443afff
|
moved attribute_manager to libstrongswan
|
2009-10-13 13:46:27 +02:00 |
|
|
Andreas Steffen
|
cb7817a64b
|
scepclient now requires x509 plugin
|
2009-10-12 19:56:21 +02:00 |
|
|
Andreas Steffen
|
3fe152f275
|
sql/rw-eap-aka-rsa scenario requires eapaka-3gpp2 plugin
|
2009-10-12 19:50:44 +02:00 |
|
|
Andreas Steffen
|
63c75a98eb
|
updated evaltest of ikev1/no-priv-key scenario
|
2009-10-12 19:48:20 +02:00 |
|
|
Andreas Steffen
|
88eb0a4235
|
INTERNAL_IP6_NETMASK needed for ModeConfig
|
2009-10-12 19:45:12 +02:00 |
|
|
Andreas Steffen
|
a86d534b4c
|
prepended all ISAKMP notification message types with ISAKMP_
|
2009-10-12 13:47:22 +02:00 |
|
|
Andreas Steffen
|
509f70c132
|
added some pluto changes to NEWS
|
2009-10-12 08:05:48 +02:00 |
|
|
Andreas Steffen
|
295e92fe36
|
fixed output of offered CA
|
2009-10-11 21:24:39 +02:00 |
|
|
Andreas Steffen
|
e8e2a147db
|
fixed broken smartcard support (bug #91)
|
2009-10-11 21:14:05 +02:00 |
|
|
Andreas Steffen
|
1c75e3404d
|
some missing refactoring changes
|
2009-10-11 20:14:18 +02:00 |
|
|
Andreas Steffen
|
d4acf1dd3c
|
myids might not be defined yet
|
2009-10-11 18:05:38 +02:00 |
|
|
Andreas Steffen
|
3197a20a87
|
adapted ikev2/rw-eap-aka scenarios to eapaka-3gpp2 plugin
|
2009-10-11 00:35:01 +02:00 |
|
|
Andreas Steffen
|
9ea23c8f91
|
corrected ikev1/nat-two-rw evaltest.dat
|
2009-10-11 00:14:20 +02:00 |
|
|
Andreas Steffen
|
40441ddd39
|
removed orphaned sha1.c
|
2009-10-10 22:05:59 +02:00 |
|
|
Andreas Steffen
|
0da24e7d46
|
corrected evaltest.dat
|
2009-10-10 21:41:36 +02:00 |
|
|
Andreas Steffen
|
17722d4489
|
replaced struct id by identification_t
|
2009-10-10 21:19:38 +02:00 |
|
|
Andreas Steffen
|
c6b2b2aae2
|
corrected caption
|
2009-10-09 00:16:33 +02:00 |
|
|
Andreas Steffen
|
4b4f8bd732
|
created identification_create_from_sockaddr() function
|
2009-10-09 00:13:28 +02:00 |
|
|
Andreas Steffen
|
5026519057
|
medsrv.fcgi is not part of the git tree
|
2009-10-08 13:05:27 +02:00 |
|
|
Andreas Steffen
|
878fc472e9
|
hex_str() isn't used externally any more
|
2009-10-08 13:04:07 +02:00 |
|
|
Andreas Steffen
|
e64b4e96c9
|
parsing of generalNames is not needed any more
|
2009-10-08 12:42:29 +02:00 |
|
|
Andreas Steffen
|
88212ee6e7
|
use of asn1_build_known_oid()
|
2009-10-08 12:35:36 +02:00 |
|
|
Andreas Steffen
|
0354d5703d
|
migrated public key IDs to identification_t
|
2009-10-08 11:25:43 +02:00 |
|
|
Andreas Steffen
|
84e390fdc4
|
list subjectAltNames
|
2009-10-06 23:50:26 +02:00 |
|
|
Andreas Steffen
|
20afe5e9f5
|
some ipsec listall finetuning
|
2009-10-06 23:19:46 +02:00 |
|
|
Andreas Steffen
|
ce2f2461e0
|
pluto and charon now have the same ipsec listall output format
|
2009-10-06 16:49:46 +02:00 |
|
|
Andreas Steffen
|
f3e9eae283
|
the ikev1 scenarios need the x509 plugin
|
2009-10-06 14:38:34 +02:00 |
|
|
Andreas Steffen
|
cf85e1319b
|
streamlined output from get_validity()
|
2009-10-06 14:22:27 +02:00 |
|
|
Andreas Steffen
|
afdaa9e5bf
|
fixed serial number conversion from hex
|
2009-10-05 23:52:35 +02:00 |
|
|
Andreas Steffen
|
0da0f3fc3f
|
delete group attributes after use
|
2009-10-05 23:17:36 +02:00 |
|
|
Andreas Steffen
|
a9fe23cf53
|
stroke_list outputs group attributes
|
2009-10-05 23:13:51 +02:00 |
|
|
Andreas Steffen
|
408e46a324
|
ipsec pki --issue suports --flag authServer option
|
2009-10-05 22:44:01 +02:00 |
|
|
Andreas Steffen
|
ce40bf5def
|
ipsec pki --issue supports --flag ocspSigning option
|
2009-10-05 21:20:42 +02:00 |
|
|
Andreas Steffen
|
fc12e3cd2e
|
pluto now uses x509 plugin for attribute certificate handling
|
2009-10-05 07:24:28 +02:00 |
|
|
Andreas Steffen
|
0ea9cbc6e9
|
fixed output of authKeyID
|
2009-10-02 21:20:45 +02:00 |
|
|
Andreas Steffen
|
0aa5cea248
|
mark embedded parsing in debug mode
|
2009-10-02 20:54:15 +02:00 |
|