Martin Willi
8029e5efd2
Added generic implementations for crl_is_newer/certificate_is_newer
2010-05-21 16:25:51 +02:00
Martin Willi
654218a31b
Migrated x509_crl_t to INIT/METHOD macros
2010-05-21 16:25:51 +02:00
Martin Willi
6d7eed9a37
Implemented X.509 CRL reading using OpenSSL
2010-05-21 16:25:51 +02:00
Martin Willi
5728c6aa7e
Implemented X.509 certificate reading using OpenSSL
2010-05-21 16:25:51 +02:00
Andreas Steffen
3e3059ba7c
oops, removed stray parenthesis
2010-05-20 17:39:10 +02:00
Martin Willi
9806381322
Fixed doxygen group
2010-05-20 17:37:18 +02:00
Martin Willi
40b2be16e3
Whitelist OpenSSLs ERR_put_error() in leak-detective
...
As we do not invoke ERR_get/clear_error() in all error cases, the
error codes are not removed from the error queue. But it is save
to whitelist the put function, as it uses a circular buffer that
does not grow beyond ERR_NUM_ERRORS errors (16 by default).
2010-05-20 17:37:18 +02:00
Martin Willi
2e57b21252
Added a --print command to pki that dumps different credentials
2010-05-20 17:37:18 +02:00
Martin Willi
091d178060
Option to skip slow addr2line resolution in leak-detective
2010-05-20 17:37:18 +02:00
Andreas Steffen
36c1650b19
range check for configuration attribute types
2010-05-20 17:35:10 +02:00
Andreas Steffen
c2d10df6e7
implement ipsec pool -showattr function
2010-05-20 17:24:43 +02:00
Andreas Steffen
05f1096cd8
removed deprecated use of ipsec pool --attr|del dns|nbns from usage()
2010-05-20 16:30:15 +02:00
Andreas Steffen
ad6dbc41e5
management of any attribute by ipsec pool
2010-05-19 21:51:21 +02:00
Andreas Steffen
f71cb4777e
checksum_builder() needs the pluto symbol
2010-05-19 08:02:22 +02:00
Andreas Steffen
ab0ecb7dd9
register virtual IPs under the XAUTH identity
2010-05-18 22:41:22 +02:00
Andreas Steffen
8d7fffc942
clarified secret loading debug output
2010-05-18 16:54:25 +02:00
Tobias Brunner
9ffb475e5d
Typo fixed.
2010-05-18 13:59:23 +02:00
Andreas Steffen
26ec52a405
implemented xauth as a pluto plugin
2010-05-18 13:51:27 +02:00
Martin Willi
ea409980b9
Handle collisions between rekey and the following delete properly
2010-05-18 12:21:38 +02:00
Martin Willi
d235274486
Added simple conditional packet receive delay
2010-05-18 12:21:05 +02:00
Martin Willi
45def2147b
Added simple conditional packet send delay
2010-05-18 12:20:32 +02:00
Martin Willi
42df8beeb6
Explicitly link gpg-error to gcrypt plugin
2010-05-17 12:36:30 +02:00
Andreas Steffen
31b39e5f7c
encoding of MODE_TUNNEL changed
2010-05-15 18:36:14 +02:00
Andreas Steffen
8143f10914
introduced xauth_identity keyword
2010-05-15 10:18:29 +02:00
Andreas Steffen
03b5e4d8d7
refactoring of Mode Config functionality allows transport and handling of any attribute
2010-05-14 17:07:03 +02:00
Andreas Steffen
fb7de3a8bf
implemented support of resolve plugin
2010-05-08 16:09:02 +02:00
Andreas Steffen
c2651ff13d
include demux.h only once
2010-05-06 21:55:19 +02:00
Andreas Steffen
c158df0f23
already defined in attributes/attributes.h
2010-05-06 21:44:15 +02:00
Andreas Steffen
4eee16354b
include state.h only once
2010-05-06 21:35:00 +02:00
Andreas Steffen
3baf4922e2
removed stray file
2010-05-06 10:35:25 +02:00
Martin Willi
026b0058d5
Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin
2010-05-05 13:49:56 +02:00
Martin Willi
75d4322d68
Do not check pointer, but length of a chunk
2010-05-05 11:35:54 +02:00
Martin Willi
37c2aac89d
Double-check that a blob passed to is_asn1() is not empty
2010-05-05 11:35:53 +02:00
Martin Willi
c60b69e4bf
Do not print filename twice if plugin loading fails, dlerror() contains the filename
2010-05-05 11:16:32 +02:00
Martin Willi
b019c38fa2
Implemented base32 encoding of chunks.
2010-05-05 10:41:11 +02:00
Andreas Steffen
9a0333fa62
moved resolve plugin from libcharon to libhydra
2010-05-04 23:53:08 +02:00
Tobias Brunner
9d843ee6fa
Do a proper cleanup when printing usage info.
2010-05-04 18:34:27 +02:00
Tobias Brunner
6d7f4e0653
Moved syslog.h include.
2010-05-04 18:34:20 +02:00
Tobias Brunner
6b57f5edff
Compiler warning fixed.
2010-05-04 18:28:28 +02:00
Adrian-Ken Rueegsegger
17a02ff1b0
Add 'flush_line' option to filelog section.
...
The new boolean 'flush_line' option in the filelog section of
strongswan.conf specifies if log messages should be flushed to the given
file for each new line.
2010-05-04 14:47:56 +02:00
Reto Buerki
71a66a623e
Use reqid from connection config if present.
2010-05-04 14:38:34 +02:00
Reto Buerki
277fcf9f86
Add reqid field and getter function to child_cfg_t.
2010-05-04 14:38:34 +02:00
Reto Buerki
1f83541d7b
Include reqid in stroke add connection message.
2010-05-04 14:38:34 +02:00
Reto Buerki
2b26a9c30d
Add reqid keyword to config connection section.
2010-05-04 14:38:34 +02:00
Andreas Steffen
0ffedbfb46
added getprotobyname to whitelist
2010-05-02 21:13:10 +02:00
Andreas Steffen
fc753c1d3e
remove subnet from sourceip
2010-05-02 17:58:36 +02:00
Andreas Steffen
61e48488d9
final fix for cloning and deleting sourceip strings
2010-05-02 15:55:46 +02:00
Andreas Steffen
a48484322e
fixed end->sourceip memory leak in ipsec starter
2010-05-02 14:56:35 +02:00
Andreas Steffen
34f92dcfba
fixed flex parser memory leaks in ipsec starter
2010-05-02 11:40:46 +02:00
Andreas Steffen
2724ae521e
free config before exiting since library_deinit() calls leak detective
2010-05-02 11:00:21 +02:00
Martin Willi