Andreas Steffen
aeaa6a9b45
remove unused local DH_EXPONENT_ENTROPY definition
2008-10-27 00:02:22 +00:00
Andreas Steffen
21a45f2f2d
use 512 bits of entropy for secret DH exponents
2008-10-26 23:53:52 +00:00
Martin Willi
104c28d603
fixed perl oid generation
2008-10-16 15:38:48 +00:00
Martin Willi
f868dc0ca2
condvar->wait() can handle recursive mutex
2008-10-16 11:29:42 +00:00
Tobias Brunner
1adaa02bb2
merging kernel_pfkey plugin back from kernel-interface branch
2008-10-14 08:46:31 +00:00
Andreas Steffen
d1cbe55127
implemented ipsec listalgs as a stroke command
2008-10-08 07:00:13 +00:00
Andreas Steffen
af09048e35
get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 hash consistent with the IKEv2 keyid philosophy
2008-10-08 03:35:52 +00:00
Andreas Steffen
95fd1dedb3
Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype
2008-10-08 01:19:26 +00:00
Martin Willi
0592212f23
fixed builder_cancel macro to return NULL on failed build
2008-10-06 13:08:49 +00:00
Martin Willi
ceff3064fe
using signed return value for read()
2008-09-30 06:27:50 +00:00
Martin Willi
cdaf57ec34
fixed DH value range testing
2008-09-17 09:02:30 +00:00
Martin Willi
73f6886a50
checking mpz_export return value properly
...
fixes a potential DoS attack if a DH value of zero gets processed
2008-09-17 08:10:48 +00:00
Andreas Steffen
b33c11b6c7
stroke parses and lists AC groups
2008-09-17 02:17:01 +00:00
Andreas Steffen
07d7f9a402
time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s)
2008-09-04 16:19:46 +00:00
Martin Willi
6af6f88a79
agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific private key from the agent
2008-09-04 08:35:11 +00:00
Martin Willi
21c9546321
libstrongswan agent plugin to use ssh-agent for RSA signatures
2008-09-02 11:04:26 +00:00
Martin Willi
f7c17aa15c
refactored credential builder
...
allow enumeration of matching builders
try a second builder if the first one fails
builder clones resources internally on demand
caller frees added resources on failure and success
stricter handling of non-supported build parts
2008-09-02 11:00:13 +00:00
Andreas Steffen
4da0116d78
OIDs used by strongSwan
2008-09-01 11:38:03 +00:00
Martin Willi
e609b1cda2
capability API to allow plugin-controlled capability set
2008-08-28 16:27:48 +00:00
Martin Willi
e577ad3985
creating default IKE proposals dynamically using algorithm enumeration API
2008-08-28 11:07:57 +00:00
Martin Willi
f1b014b9a3
separated sha1_prf implementation from sha1_hasher
2008-08-28 10:57:24 +00:00
Martin Willi
9482208633
crypto_factory algorithm enumeration API
...
implementation of "ipsec listalgs"
2008-08-28 09:24:42 +00:00
Tobias Brunner
6c20579a43
mkdir_p: utility function to create a directory and all required parent directories
2008-08-28 07:47:55 +00:00
Martin Willi
822901061b
ported parts of two-sim branch
...
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
2008-08-22 10:44:51 +00:00
Martin Willi
1caa265c61
a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM
2008-08-21 12:10:07 +00:00
Andreas Steffen
dc6a2edd0d
corrected caption
2008-08-21 11:58:58 +00:00
Martin Willi
2d6559b107
added sqlite busy handler: retries on locking conflicts
2008-08-21 09:25:06 +00:00
Andreas Steffen
af165431d2
fixed libstrongswan integrity test
2008-08-19 18:51:30 +00:00
Martin Willi
092a9b88ad
added options for virtual IP, UDP encapsulation, IPComp
...
proper handling of libstrongswan/glib TRUE/FALSE conflict
2008-07-31 14:32:11 +00:00
Martin Willi
fc861b0b7e
added a driver type getter for database implementations
2008-07-21 11:13:06 +00:00
Martin Willi
11e855179e
using token enumerator to parser plugin list
2008-07-02 08:19:43 +00:00
Martin Willi
fca4d3ee03
implementation of a simple "token enumerator"
2008-07-02 08:09:07 +00:00
Martin Willi
fe5d7c43be
whitelisting leaks of ENGINE_load_builtin_engines
2008-07-01 07:53:03 +00:00
Martin Willi
7da767f773
sqlite plugin requires libsqlite3 => 3.3.1 to share connections
...
use recursive locking if libsqlite3 < 3.5.0
2008-06-30 11:06:18 +00:00
Martin Willi
854a2e1760
fixed ifndef typo for MYSQL_DATA_TRUNCATED check
2008-06-26 07:31:52 +00:00
Martin Willi
236083cb56
fixed plugin loader destruction
2008-06-25 14:53:49 +00:00
Tobias Brunner
1b7d2e31a6
enabling support for hardware accelerators in OpenSSL
2008-06-25 12:39:32 +00:00
Martin Willi
fae6e24dad
reintroducing MYSQL_DATA_TRUNCATED if supported on that mysql version
2008-06-24 14:30:14 +00:00
Martin Willi
eec675bf8c
enumerating loaded plugins in "ipsec statusall"
2008-06-24 12:49:04 +00:00
Andreas Steffen
0d12006def
support of ECDSA signatures for all certificate types
2008-06-22 17:41:07 +00:00
Martin Willi
1345ebad0f
removed unused MYSQL_DATA_TRUNCATED check for compatibility with older mysql versions
2008-06-20 07:37:55 +00:00
Martin Willi
eab63e8476
fixed matches() check for RFC822/FQDN without wildcards
2008-06-13 15:10:01 +00:00
Martin Willi
1726ca1027
implemented identification_t.match() case insensitive for RFC822/FQDN
2008-06-12 14:17:37 +00:00
Martin Willi
66860d3b8f
loading PEM encoded public keys
2008-06-11 14:10:02 +00:00
Martin Willi
d1ebd5de22
reduced default debug hook verbosity
2008-06-11 14:09:46 +00:00
Martin Willi
e484f7f3dd
fixed resolving numerical IPv6 addresses in host_create_from_dns()
2008-06-11 07:44:23 +00:00
Martin Willi
d35effa89b
fixed resolving numerical addresses in host_create_from_dns()
2008-06-11 07:31:24 +00:00
Tobias Brunner
a57e0580f6
refactoring
2008-06-10 09:19:18 +00:00
Tobias Brunner
ea0823dffd
ECDSA with OpenSSL
2008-06-10 09:08:27 +00:00
Tobias Brunner
2904403e96
parsing of subjectPublicKeyInfo of x509 certificates extracted
2008-06-10 09:00:42 +00:00
Andreas Steffen