denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,110 Commits 1 Branch 0 Tags
a5e3153a36524c1689573cd04adc2125f879412f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi a5e3153a36 updated x509/CRL/AC API to align with public key, authKeyIdentifier is a chunk 2009-08-26 11:23:52 +02:00
Martin Willi e35c3e2a03 updated openssl plugin to new private/public key API, use encoder framework 2009-08-26 11:23:52 +02:00
Martin Willi cbd5138948 updated gcrypt plugin to new private/public key API, use encoder framework 2009-08-26 11:23:52 +02:00
Martin Willi 741680d179 updated gmp plugin to new private/public key API, use encoder framework 2009-08-26 11:23:52 +02:00
Martin Willi 1384a42e1b changed get_id/get_encoding API of private/public key to use new encoding framework 2009-08-26 11:23:52 +02:00
Martin Willi 1ef69b01ab removed obsolete fingerprint identification types 2009-08-26 11:23:52 +02:00
Martin Willi edd354db6f added generic implementation helpers for private_key_t.equals/belongs_to, public_key_t.equals 2009-08-26 11:23:52 +02:00
Martin Willi 0dd2defc5a added a seperate chache lookup, as encode() requires arguments expensive to build 2009-08-26 11:23:52 +02:00
Martin Willi 64e77e8fbb use credential builder API to parse trusted public keys 2009-08-26 11:23:52 +02:00
Martin Willi d1b3e8607e implemented PGP fingerprinting 2009-08-26 11:23:51 +02:00
Martin Willi e773fe4cab implemented pkcs1 private/public key encoding and fingerprinting 2009-08-26 11:23:51 +02:00
Martin Willi 934d49a4f9 chunk_cat/cata/create_cat/length accept the sensitive data clearing mode 's' 2009-08-26 11:23:51 +02:00
Martin Willi 957d116328 in addition to 'm'/'c' mode, asn1_wrap accepts a 's' mode clearing sensitive information 2009-08-26 11:23:51 +02:00
Martin Willi d9b24887a4 added a facility to hand out fingerprinting/key encoding to the pkcs1/pgp/... plugins 2009-08-26 11:23:51 +02:00
Martin Willi 831520d895 gmp uses component builder to build public- from private-key 2009-08-26 11:23:51 +02:00
Martin Willi 8380503168 gcrypt uses component builder to build public- from private-key 2009-08-26 11:23:51 +02:00
Martin Willi b457e08fca moved PGP code to pluto and gpg plugin 2009-08-26 11:23:51 +02:00
Martin Willi 7033a70fd0 gmp plugin makes use of pkcs1/pgp/dnskey plugins 2009-08-26 11:23:51 +02:00
Martin Willi cbfafc1125 enforce RSA_PRIME1 > RSA_PRIME2 (p > q) in PGP 2009-08-26 11:23:51 +02:00
Martin Willi 5ef478aaee implemented RFC3110 key builder in a plugin, added generic DNSKEY RR parsing 2009-08-26 11:23:51 +02:00
Martin Willi 3addf4e937 renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support other key types 2009-08-26 11:23:51 +02:00
Martin Willi caa00e7ab7 pluto uses KEY_ANY builder to parse PGP public keys 2009-08-26 11:23:50 +02:00
Martin Willi 9493dd2ce0 implemented a pgp plugin providing PGP key parsing builders 2009-08-26 11:23:50 +02:00
Martin Willi 4e3d1e804e make use of the pkcs1 plugin in gcrypt rsa key parsing 2009-08-26 11:23:50 +02:00
Martin Willi 3044774323 removed subjectPublicKeyInfo parsing, provided by pkcs1 plugin 2009-08-26 11:23:50 +02:00
Martin Willi 1e0f69373a implemented a pkcs1 plugin providing PKCS#1 key parsing builders 2009-08-26 11:23:50 +02:00
Martin Willi 750bbcf9a8 added support for %prompt-ing private key passhprases in strokes "ipsec secrets" 2009-08-26 11:23:50 +02:00
Martin Willi 7c2d883af7 show more information if building a credential fails 2009-08-26 11:23:50 +02:00
Martin Willi 833dcfa530 log loaded private key/certificates 2009-08-26 11:23:50 +02:00
Martin Willi 3f9ec06f6f added getnetbyname/gethostbyname2 to leak detective whitelist, used by pluto 2009-08-26 11:23:50 +02:00
Martin Willi d47dc6d170 clone blobs passed to parse functions, check before free 2009-08-26 11:23:50 +02:00
Martin Willi 89556140d0 fixed builder signature 2009-08-26 11:23:50 +02:00
Martin Willi ddf7c6ac7b do not enumerate builders returning NULL 2009-08-26 11:23:50 +02:00
Martin Willi 2b7e085dea updated pubkey_speed test to use pem plugin 2009-08-26 11:23:49 +02:00
Martin Willi cbb62e8f4c handle pluto specific certificates under CRED_CERTIFICATE, not as own credential kind 2009-08-26 11:23:49 +02:00
Martin Willi f11a78f10a unified pluto builder implementations 2009-08-26 11:23:49 +02:00
Martin Willi 94463a33b4 removed obsolete PEM code in pluto/libstrongswan 2009-08-26 11:23:49 +02:00
Martin Willi ccd0a624b6 use credential builder to build crls 2009-08-26 11:23:49 +02:00
Martin Willi 37f5a0da2c use credential builder to build attribute certificates 2009-08-26 11:23:49 +02:00
Martin Willi a5dc4a9585 moved builder hooks to a separate file 2009-08-26 11:23:49 +02:00
Martin Willi 11aa7e7869 use a pluto specific credential builder to build pluto cert_t's 2009-08-26 11:23:49 +02:00
Martin Willi c486fa8158 removed obsolete pgp private key parsing, done by libstrongswan 2009-08-26 11:23:49 +02:00
Martin Willi dc816eacdf use libstrongswan for private key loading, whack callback to read passphrase 2009-08-26 11:23:49 +02:00
Martin Willi 4d15129160 pass along X509 flags when loading PEM encoded data 2009-08-26 11:23:49 +02:00
Martin Willi 280469923d make use of the pem helper plugin to load credentials 2009-08-26 11:23:49 +02:00
Martin Willi c9db16b7dd added file loading support to pem plugin, using mmap() 2009-08-26 11:23:48 +02:00
Martin Willi 160f4c225d moved PEM parsing functionality to its own plugin 2009-08-26 11:23:48 +02:00
Martin Willi eb641993d4 set stroke connection flags to a clear TRUE/FALSE 2009-08-25 19:57:36 +02:00
Martin Willi 469083cc7d disable lifetimes of allocated SPIs 
The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine.
 2009-08-25 18:15:25 +02:00
Martin Willi 1bc0b4f795 remove incomplete SAs with PROTO_ESP 2009-08-25 18:12:55 +02:00
Martin Willi 625b48b558 added URL for git repository served over git:// protocol 2009-08-21 10:52:39 +02:00
Martin Willi dd4c14f37c set protocol to ESP for policies installed as a trap 2009-08-07 16:05:32 +02:00
Martin Willi d9796a4311 fixed printf fromat for length limited string 2009-08-07 10:31:21 +02:00
Martin Willi 51c037cc71 added support for ipsec.secrets "include" directive 2009-08-06 11:48:19 +02:00
Martin Willi 3d2f73b92f parse RDNs in multiple SEQUENCEs in all SETs of a DN 2009-08-03 15:24:48 +02:00
Martin Willi 5cb300e795 compare IKE config when reusing an existing IKE_SA to initiate a CHILD_SA 2009-08-03 14:37:24 +02:00
Martin Willi fcac8f6571 filter objects for segment checksumming by dlpi_name, excludes rare false positives 2009-07-21 15:10:24 +02:00
Martin Willi 7655843ab5 enumerate executable sections only to build checksum 2009-07-21 15:00:18 +02:00
Martin Willi acd4afc997 announce integrity testing only once 2009-07-21 14:58:14 +02:00
Martin Willi e0964e2e26 fixed memleak in SQL config lookup 2009-07-16 15:59:56 +02:00
Martin Willi 88957f54f2 raise an alert() if the RADIUS server is not responding 2009-07-16 15:15:39 +02:00
Martin Willi e85b83c737 added an alert() bus hook to raise critical system errors and notifications 2009-07-16 15:15:39 +02:00
Martin Willi f5410905ac moved the CFLAGS mangling AC_LIB_PREFIX macro behind CFLAG test 2009-07-15 16:04:37 +02:00
Martin Willi 449e90e1af updated debian package 2009-07-15 15:37:23 +02:00
Martin Willi 0a1d168752 updated Standards-Version to 3.8.2 2009-07-15 14:01:47 +02:00
Martin Willi e04c5d9371 added ${misc:Depends} dependency, fixes debhelper-but-no-misc-depends lintian warning 2009-07-15 14:00:42 +02:00
Martin Willi 426e1c3d0f added copyright information, fixes copyright-without-copyright-notice lintian warning 2009-07-15 13:59:25 +02:00
Martin Willi 74b14b4008 cast pointers to uintptr_t for alignement check 2009-07-15 10:39:45 +02:00
Martin Willi 69b8058925 use the configured NM connection id as configuration/IKE_SA name 2009-07-10 11:01:44 +02:00
Martin Willi ce741aa649 fixed state check if establishing the CHILD_SA fails 2009-07-10 09:40:02 +02:00
Martin Willi bad99d5aff use the new updown()/rekey() hooks to track the state of NetworkManager connections 2009-07-10 09:37:27 +02:00
Martin Willi 977ec0c316 implemented ike_down() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi fa1d3c6629 implemented ike_up() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi f5f37cc7fa implemented child_down() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi f669f45333 implemented child_up() bus hook 2009-07-09 15:25:15 +02:00
Martin Willi 622b56a52e implemented ike_rekey()/child_rekey() bus hooks 2009-07-09 15:25:15 +02:00
Martin Willi 7527f43c76 added new listener callbacks to track SAs 2009-07-09 15:25:15 +02:00
Martin Willi a40cc76bc7 moved listener_t interface definition to a separate file 2009-07-09 15:25:14 +02:00
Martin Willi 3f67126226 added a RADIUS id_prefix option to prefix the IMSI 2009-07-09 11:19:41 +02:00
Martin Willi 2eac2578a5 updated ikev2bis draft from 03 to 04 2009-07-09 11:18:32 +02:00
Martin Willi 01e43e3183 memxor does not access unaligned words anymore, but still uses words if possible 2009-07-08 17:19:49 +02:00
Martin Willi 751a65f9da fixed doxygen section pgp 2009-07-08 10:29:12 +02:00
Martin Willi d7b965e931 fixed two doxygen warnings 2009-07-08 10:28:54 +02:00
Martin Willi c99227630c updated HACKING info 2009-07-07 17:26:16 +02:00
Martin Willi efb4bb248f remove obsolete child_cfg_t.equal_traffic_selectors() method 2009-07-07 14:38:55 +02:00
Martin Willi 20188fcad4 child_cfg matching code prefers a config containing the first proposed TS 2009-07-07 14:38:19 +02:00
Martin Willi 2d00984d73 added missing equals() method assignment for ID_ANY identities 2009-07-07 13:42:22 +02:00
Martin Willi 92a65c506a use architecture specific Elf header 2009-07-06 16:36:01 +02:00
Martin Willi 0c31b9db84 centralized ID type specific method assignement in generic constructor 2009-07-06 13:15:29 +02:00
Martin Willi bbf6a4c0ff removed obsolete init_rdn()/get_next_rdn() functions 2009-07-06 13:15:29 +02:00
Martin Willi 8309798fae reimplemented dnota() using RDN enumerator 2009-07-06 13:15:29 +02:00
Martin Willi f48c3c72f4 added a chunk_printable() function (replaces sanitize_chunk) 2009-07-06 13:15:29 +02:00
Martin Willi d692557298 replaced {same,match}_dn() by compare_dn(), using the RDN enumerator 2009-07-06 13:15:29 +02:00
Martin Willi ed680e33c0 fixed memleak if RND parsing fails 2009-07-06 13:15:29 +02:00
Martin Willi dca2eee92a added unit test for identification_t.matches() 2009-07-06 13:15:29 +02:00
Martin Willi 05fe0a7d25 added unit test for identification_t.equals() 2009-07-06 13:15:29 +02:00
Martin Willi 01da687f78 contains_wildcard() for DNs uses RDN enumerator 2009-07-06 13:15:28 +02:00
Martin Willi d35650115b added unit test for identification_t.contains_wildcard() 2009-07-06 13:15:28 +02:00
Martin Willi 2147da40a5 simplified identification_t.clone() using memcpy 2009-07-06 13:15:28 +02:00
Martin Willi 6bdd79d86c use an enumerator to parse RDNs, based on asn1_unwrap() function 2009-07-06 13:15:28 +02:00