Commit Graph
100 Commits
Author SHA1 Message Date
Andreas Steffen f9a73bee9c delay OCSP response by 5 seconds 2007-03-20 04:35:16 +00:00
Andreas Steffen 4a82b49126 Shortened distribution string 2007-03-16 11:48:29 +00:00
Andreas Steffen 59097f9db1 Shortened distribution string 2007-03-16 11:47:48 +00:00
Andreas Steffen 85877eabdf shortened distribution string 2007-03-16 11:41:54 +00:00
Andreas Steffen 114c6646af add daemon.log to web page 2007-03-15 15:01:36 +00:00
Andreas Steffen 4ebaa476f1 remove /etc/resolv.conf 2007-03-15 15:00:51 +00:00
Andreas Steffen 34bbd0c32e version bump to 4.1.0 2007-03-15 14:28:47 +00:00
Andreas Steffen 28bd885e03 added apache2/ocsp log directory to winnetou 2007-03-15 14:18:26 +00:00
Andreas Steffen 037ce7862f removed killall openssl 2007-03-15 13:56:35 +00:00
Andreas Steffen ab0d19ae66 removed killall openssl 2007-03-15 13:56:09 +00:00
Andreas Steffen e280f65f58 deleted 2007-03-15 13:54:22 +00:00
Andreas Steffen efdcd4bf10 deleted 2007-03-15 13:52:32 +00:00
Andreas Steffen 564c7a684b create apach2/ocsp/ logging directory on winnetou 2007-03-15 13:49:59 +00:00
Andreas Steffen 80f174bd3c do not check for type of dpd action any more 2007-03-15 13:34:42 +00:00
Andreas Steffen d4f0e636b5 create /var/log/apache2/ocsp on winnetou 2007-03-15 13:33:42 +00:00
Andreas Steffen bcee8816a5 added 2007-03-15 13:30:55 +00:00
Andreas Steffen 328453863a added 2007-03-15 13:29:56 +00:00
Andreas Steffen 6f1ae5d21c added 2007-03-15 13:29:02 +00:00
Andreas Steffen 7f6b9853cf delete virtual IP addresses after use 2007-03-14 23:02:44 +00:00
Andreas Steffen f2a121f4df deleted 2007-03-14 22:08:55 +00:00
Andreas Steffen 66c85c4b40 added 2007-03-14 22:07:18 +00:00
Andreas Steffen 448d8789d5 fixed case of missing subjectKeyID 2007-03-14 21:06:57 +00:00
Andreas Steffen 889feb978b corrected typo 2007-03-14 19:33:34 +00:00
Andreas Steffen fd91053fbe version bump to 4.1.0 2007-03-14 18:31:47 +00:00
Andreas Steffen bd46337cb0 added 2007-03-14 15:42:40 +00:00
Andreas Steffen ab3c5171d6 use CURLOPT_NOSIGNAL 2007-03-14 15:41:58 +00:00
Andreas Steffen aa407a6b28 log reception of trusted signer certificate 2007-03-14 15:11:58 +00:00
Andreas Steffen 5e079e25e7 version bump to 4.1.0 2007-03-14 15:11:00 +00:00
Andreas Steffen a521abad4e deleted 2007-03-14 15:10:12 +00:00
Andreas Steffen 4bd0d7e1d9 added 2007-03-14 15:09:00 +00:00
Andreas Steffen 3a7b69e699 changed OCSPSigner to OCSPSigning 2007-03-14 15:08:23 +00:00
Andreas Steffen 2f264a311b user standard cert 2007-03-14 14:52:13 +00:00
Andreas Steffen 19e071d54c deleted 2007-03-14 14:51:57 +00:00
Andreas Steffen f7ddccd988 deleted 2007-03-14 14:51:05 +00:00
Andreas Steffen 3f2cc77ac1 added 2007-03-14 14:02:39 +00:00
Andreas Steffen ae21d486c9 added 2007-03-14 13:04:56 +00:00
Andreas Steffen b1894cdd92 modified description.txt and evaltest.dat 2007-03-14 13:00:55 +00:00
Andreas Steffen 108d07181d added 2007-03-14 09:05:27 +00:00
Andreas Steffen 19808f71ec added 2007-03-14 08:17:27 +00:00
Andreas Steffen 2eab924979 version bump to strongswan-4.1.0 and linux-2.6.20.3 2007-03-14 08:15:36 +00:00
Andreas Steffen 220e51d27a cosmetics 2007-03-14 08:01:47 +00:00
Andreas Steffen d46a73288d increased control debugging output 2007-03-14 07:22:37 +00:00
Andreas Steffen db0f828413 results from the single responses is stored in the corresponding certinfo_t structs 2007-03-12 13:42:31 +00:00
Andreas Steffen 7c1b9ab784 moved credential_store.h from charon/config/credentials to libstrongswan 2007-03-09 16:50:19 +00:00
Andreas Steffen 9619b5fa90 last patch removed, changed CURLOPT_FILE to CURLOPT_WRITEDATA 2007-03-09 16:12:51 +00:00
Andreas Steffen bda09299fc fixed memory leak by calling curl_slist_free_all(headers) 2007-03-09 16:09:49 +00:00
Andreas Steffen dbc45e90d4 fixed memory leak by calling curl_slist_free_all(headers) 2007-03-09 16:08:28 +00:00
Andreas Steffen bb225522c7 whitelisting static Curl_getaddrinfo() memory leak 2007-03-09 16:07:22 +00:00
Andreas Steffen 5455cf230f fixed a certinfo_t memory leak in verify() 2007-03-09 14:59:28 +00:00
Andreas Steffen d45d2f1e21 fixed a memory leak in response_t 2007-03-09 14:44:34 +00:00
Andreas Steffen 1bcb84605f ocsp signer certificate and ocsp response signature can be verified 2007-03-08 23:29:04 +00:00
Andreas Steffen 162afac75f fixed call of add_auth_certificate() 2007-03-08 19:44:14 +00:00
Andreas Steffen 33d108de22 generalized get_ca_certificate() to get_auth_certificate(auth_flags) 2007-03-08 18:56:43 +00:00
Andreas Steffen 54645fb275 added fetcher_finalize() to clean up libcurl 2007-03-08 17:00:32 +00:00
Andreas Steffen 8d0cd21a01 support of setting and getting authority flags 2007-03-08 16:48:16 +00:00
Andreas Steffen 9149635ffa support if ocsp signing certificates 2007-03-08 16:47:18 +00:00
Andreas Steffen 9f4039755d support if ocsp signing certificates 2007-03-08 16:46:50 +00:00
Andreas Steffen 95f6a18fc7 added ocsp_parse_single_response 2007-03-08 00:35:20 +00:00
Andreas Steffen 40695383ae parsing basic ocsp response 2007-03-08 00:13:15 +00:00
Andreas Steffen 08d42d3994 forgot to assign public.is_ocsp_signer() method 2007-03-07 23:31:03 +00:00
Andreas Steffen 4eacb268a0 added parsing level to x509_create_from_chunk() 2007-03-07 22:58:25 +00:00
Andreas Steffen 8dfb0a31b5 added parsing level to x509_create_from_chunk() and added is_ocsp_signer() method 2007-03-07 22:57:50 +00:00
Andreas Steffen 78703918aa http post fetching using libcurl implemented 2007-03-07 19:28:03 +00:00
Andreas Steffen bdfff62db9 added fetcher.h and fetcher.c 2007-03-07 14:13:01 +00:00
Andreas Steffen 6a65758a80 added 2007-03-07 14:12:36 +00:00
Andreas Steffen a7d67e77a1 corrected @ingroup to utils 2007-03-07 14:11:47 +00:00
Andreas Steffen 62a8ee10c3 corrected comment 2007-03-07 14:11:02 +00:00
Andreas Steffen dd82ca4dcc start ocsp checking only if there are any ocspuris present 2007-03-07 13:22:07 +00:00
Andreas Steffen 0d1f911065 conntrack -F is used to flush the NAT states 2007-03-07 04:45:12 +00:00
Andreas Steffen 26ad49c8e7 the hostaccess=yes parameters are not needed anymore 2007-03-07 04:44:25 +00:00
Andreas Steffen 854b4e4460 use conntrack -F to flush NAT states 2007-03-07 04:29:13 +00:00
Andreas Steffen 764804739f replaced actual virtual IP addresses by symbolic ones 2007-03-07 04:28:34 +00:00
Andreas Steffen 74d1b5e5b0 removed unnecessary double quotes 2007-03-07 04:27:32 +00:00
Andreas Steffen 817fecddc9 nonce in ocsp_t was not properly initialized 2007-03-07 04:22:21 +00:00
Andreas Steffen 7687c463da ocsp request is now fully built but without requestor signature 2007-03-07 03:39:40 +00:00
Andreas Steffen 45fe480e87 starting to build ocsp request 2007-03-06 23:05:44 +00:00
Andreas Steffen 69351da14d add crl and ocsp uris to linked list after partial verification 2007-03-06 18:51:56 +00:00
Andreas Steffen fd8819e06f added print hook for certinfo_t printing 2007-03-06 14:27:34 +00:00
Andreas Steffen aa3af83a80 fixed typo 2007-03-06 14:26:03 +00:00
Andreas Steffen ce7fdaca71 iterate certinfos linked list for matching serialNumber 2007-03-05 22:08:48 +00:00
Andreas Steffen 0b0eb65573 added 2007-03-05 19:15:33 +00:00
Andreas Steffen 03ffdf7526 moved listing of crls to local_credential_store and ca 2007-03-03 21:10:22 +00:00
Andreas Steffen 81020aaefd refactored ca_info_t 2007-03-03 21:08:07 +00:00
Andreas Steffen e5b0570a02 refactored ca_info_t 2007-03-03 21:07:23 +00:00
Andreas Steffen 671a54e9ab config-payload scenario fixes 2007-03-01 08:20:50 +00:00
Andreas Steffen 9b1f4540c6 preparations for PLUTO_MY_SOURCEIP 2007-03-01 07:45:43 +00:00
Andreas Steffen 7493cd0b6b corrected typo 2007-03-01 00:00:35 +00:00
Andreas Steffen 83c3750ac3 added cert with OCSP access info 2007-02-28 23:25:13 +00:00
Andreas Steffen b62f2fc895 dpd now takes 180 s and 5 retransmits 2007-02-28 23:19:20 +00:00
Andreas Steffen 1b44633cbc changed grep to creating aquire job for CHILD SA 2007-02-28 23:02:40 +00:00
Andreas Steffen 501fac0c88 replaced actual virtual IPs by place holders 2007-02-28 22:38:49 +00:00
Andreas Steffen f4d7dec384 virtual-ip scenario has been replaces by config-payload scenario 2007-02-28 22:21:58 +00:00
Andreas Steffen bc92caaabf added 2007-02-28 22:16:23 +00:00
Andreas Steffen 63b97bda3f added 2007-02-28 22:16:16 +00:00
Andreas Steffen 05bda56556 added ocsp.h and ocsp.c 2007-02-28 20:31:07 +00:00
Andreas Steffen eb8aaa6747 added 2007-02-28 20:30:44 +00:00
Andreas Steffen e6b1066edc cosmetics 2007-02-27 22:05:49 +00:00
Andreas Steffen 2ddcc33e16 added once flag to certinfo_t 2007-02-27 21:23:51 +00:00
Andreas Steffen bc5c21baac cosmetics 2007-02-27 21:22:57 +00:00
Andreas Steffen 87dabcbd1e added certinfos linked list 2007-02-27 21:21:54 +00:00