Martin Willi
de55c6895f
accepting stroke initiation by a name of a child_cfg
2007-04-11 05:58:38 +00:00
Andreas Steffen
4876f521d6
best must be initialized to 2*MAX_WILDCARDS+1
2007-04-10 22:35:45 +00:00
Martin Willi
e0fe765152
restructured file layout
...
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00
Andreas Steffen
4c56bd64e5
removed list_crls() and list_ocsp() methods
2007-04-06 09:43:20 +00:00
Andreas Steffen
8883eef7b8
support cachecrls=yes
2007-04-05 17:07:14 +00:00
Andreas Steffen
a0eaa59b50
implemented dynamic http-based CRL fetching
2007-04-03 21:11:23 +00:00
Martin Willi
9179ac9667
merged changes from eap-aka trunk
2007-03-28 07:32:54 +00:00
Andreas Steffen
9d9c72e317
is_trusted() adds cert_status to cert_to_be_trusted
2007-03-28 05:38:42 +00:00
Andreas Steffen
1bf8530507
implemented ipsec listocsp function
2007-03-27 04:40:25 +00:00
Martin Willi
ddd1b31595
adjusted rekey-retry delay and jitter
2007-03-21 16:12:16 +00:00
Martin Willi
4315f5c88b
fixed some rekey collision issues
...
added retry with jitter when rekeying fails
2007-03-21 16:11:14 +00:00
Martin Willi
a1e5881c42
renamed keyingtries attribute
2007-03-20 08:14:18 +00:00
Martin Willi
7cec30ad8d
added AES-192/256 proposals to IKE
2007-03-13 14:55:03 +00:00
Andreas Steffen
db0f828413
results from the single responses is stored in the corresponding certinfo_t structs
2007-03-12 13:42:31 +00:00
Andreas Steffen
7c1b9ab784
moved credential_store.h from charon/config/credentials to libstrongswan
2007-03-09 16:50:19 +00:00
Andreas Steffen
5455cf230f
fixed a certinfo_t memory leak in verify()
2007-03-09 14:59:28 +00:00
Andreas Steffen
1bcb84605f
ocsp signer certificate and ocsp response signature can be verified
2007-03-08 23:29:04 +00:00
Andreas Steffen
162afac75f
fixed call of add_auth_certificate()
2007-03-08 19:44:14 +00:00
Andreas Steffen
33d108de22
generalized get_ca_certificate() to get_auth_certificate(auth_flags)
2007-03-08 18:56:43 +00:00
Andreas Steffen
9f4039755d
support if ocsp signing certificates
2007-03-08 16:46:50 +00:00
Martin Willi
069f01cfef
removed SHA2 kernel proposals from default, the kernel doesn't support them yet
2007-03-08 15:18:51 +00:00
Martin Willi
0cde6c412b
added more debugging output for policy lookup
...
returning a (dummy) policy even when TS does not match, so we can properly send a TS_UNACCEPTABLE
2007-03-08 14:40:15 +00:00
Martin Willi
9aa20fdae8
added SHA2 MAC and PRF to default proposal
2007-03-08 00:16:33 +00:00
Martin Willi
9de7540eee
fixed traffic selector redundancy removal code (not completely tested)
2007-03-06 20:55:19 +00:00
Andreas Steffen
69351da14d
add crl and ocsp uris to linked list after partial verification
2007-03-06 18:51:56 +00:00
Martin Willi
6e1be42744
some cleanups
...
not assigning %any virtual IPs to peer anymore
2007-03-05 22:07:36 +00:00
Martin Willi
02b3101b67
fixed double free bug
2007-03-05 22:02:14 +00:00
Andreas Steffen
81020aaefd
refactored ca_info_t
2007-03-03 21:08:07 +00:00
Martin Willi
0c8aba6771
added support for 0.0.0.0/0 traffic selectors
...
fixed routing to make correct 0.0.0.0/0 routes
2007-03-01 11:42:08 +00:00
Martin Willi
c60c7694d2
merged tasking branch into trunk
2007-02-28 14:04:36 +00:00
Andreas Steffen
7d119253f6
added support of OCSP accessLocations
2007-02-25 08:14:50 +00:00
Andreas Steffen
b3e4211fc3
full support of ca info records
2007-02-24 23:18:31 +00:00
Andreas Steffen
182d20e94e
support of ca info records
2007-02-23 15:15:31 +00:00
Martin Willi
f27f6296e6
merged EAP framework from branch into trunk
...
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Andreas Steffen
6fda18d99d
%T requires time_t ptr
2007-02-08 17:59:37 +00:00
Martin Willi
7995489a6d
added support for NULL encryption in ESP
2007-02-08 13:54:42 +00:00
Martin Willi
9425da1816
include NO_EXT_SEQUENCE_NUMBER in default proposal
2007-02-08 13:31:31 +00:00
Martin Willi
21f42524e0
support for transport in create_child_sa
...
include TRANSPORT/TUNNEL information in statusall
2007-01-08 06:55:50 +00:00
Martin Willi
7652be891c
added support for transport mode and (experimental!) BEET mode
...
support for the type=transport/tunnel parameter in charon
2006-12-21 14:35:17 +00:00
Martin Willi
6fe03b0af0
implemented reauthentication using the new reauth=yes|no parameter
2006-12-19 07:30:07 +00:00
Andreas Steffen
3b62f53fa4
fixed output of proto/port selectors
2006-11-02 07:51:53 +00:00
Andreas Steffen
1f9160614a
cosmetics
2006-11-01 17:28:01 +00:00
Martin Willi
db7ef62494
better split up of library files "types.h" & "definitions.h"
...
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
2006-10-31 12:27:59 +00:00
Andreas Steffen
29137c0cef
preparations to include certreqs in policy decisions
2006-10-31 07:04:15 +00:00
Martin Willi
382b481795
moved typedefs to beginning of files to solve some include problems
...
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
2006-10-30 14:07:05 +00:00
Andreas Steffen
a702b731cb
support of certreq payload in IKE_AUTH messages
2006-10-28 20:02:26 +00:00
Andreas Steffen
6ae7d265fb
added method get_ca_certificate()
2006-10-28 15:32:30 +00:00
Andreas Steffen
5db5740075
added methods get_my_ca() and get_other_ca()
2006-10-28 15:31:42 +00:00
Andreas Steffen
af6d6bb954
added methods get_my_ca() and get_other_ca()
2006-10-28 15:31:29 +00:00
Martin Willi
b83806d83d
improved signal handling and emitting
2006-10-26 09:46:56 +00:00
Martin Willi