denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,146 Commits 1 Branch 0 Tags
b12c6d163d179ad238fe920eb9f1746b96f51166
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi b12c6d163d do openssl fingerprinting/encoding directly, openssl provides all functions 2009-08-27 09:58:38 +02:00
Martin Willi 2ee8cd04bd key encoding gained a cache() method, allows caching of externally created encodings 2009-08-27 09:57:49 +02:00
Martin Willi 083142c4a0 encoding public EC keys is not really possible without subjectPublicKeyInfo 2009-08-26 16:15:38 +02:00
Martin Willi 6a8791cd1f complain about build errors in non-recursive cases only 2009-08-26 14:44:05 +02:00
Martin Willi d16fd64d39 openac (and tools) do not depend on gmp anymore 2009-08-26 14:08:20 +02:00
Martin Willi 500f515a64 moved chunk_increment() function to libstrongswan 2009-08-26 14:07:26 +02:00
Martin Willi d4df33f255 pki tool supports public key extraction from private key, certificates 2009-08-26 13:05:17 +02:00
Martin Willi df5c60bc5d added a BUILD_FROM_FD option, supporting credential parsing from stdin 2009-08-26 13:03:23 +02:00
Martin Willi 7c577c8ea2 started implementation of a PKI tool, currently supporting RSA|ECDSA key generation 2009-08-26 11:23:55 +02:00
Martin Willi 08ed551ce0 implemented openssl EC key generation 2009-08-26 11:23:55 +02:00
Martin Willi a0b850450f fixed openssl RSA private key encoding 2009-08-26 11:23:55 +02:00
Martin Willi 16db1207cf keyids in SQL use ID_KEY_ID type with subjectPublicKey SHA1 hash 2009-08-26 11:23:55 +02:00
Martin Willi 41f57038e4 tests load pem/pkcs1 plugins, pubkey plugin not needed anymore 2009-08-26 11:23:55 +02:00
Martin Willi 0df451bc07 use ./configured plugins in keyid scripts 2009-08-26 11:23:55 +02:00
Martin Willi 500aa2607f accept PEM encoded keys in keyid scripts 2009-08-26 11:23:55 +02:00
Martin Willi 94dde8a0ab migrated scripts to new fingerprinting API 2009-08-26 11:23:55 +02:00
Martin Willi 9c3d2b3d60 updated medsrv and test to new fingerprint/encoding API 2009-08-26 11:23:55 +02:00
Martin Willi 1cd0d7969a updated load-tester plugin to new fingerprinting API 2009-08-26 11:23:53 +02:00
Martin Willi 8eefe4617f use only KEY_ID_PUBKEY_SHA1 fingerprint charon internally 2009-08-26 11:23:53 +02:00
Martin Willi 87d2026341 updated nm plugin to new fingerprinting API 2009-08-26 11:23:53 +02:00
Martin Willi cb4f09eff3 updated agent plugin to new fingerprint/encoding API 2009-08-26 11:23:53 +02:00
Martin Willi c5cd195c6c updated stroke plugin to fingerprinting API 2009-08-26 11:23:53 +02:00
Martin Willi 64fdbce4da updated charon to new fingerprinting API 2009-08-26 11:23:53 +02:00
Martin Willi b4b68b64b8 updated pluto to new fingerprinting API 2009-08-26 11:23:52 +02:00
Martin Willi 5bceb90c86 updated scepclient to new encoding API 2009-08-26 11:23:52 +02:00
Martin Willi 8d09681559 updated pubkey plugin to new fingerprinting API 2009-08-26 11:23:52 +02:00
Martin Willi 6b6ece636c updated x509 plugin to public key/x509 API changes 2009-08-26 11:23:52 +02:00
Martin Willi a5e3153a36 updated x509/CRL/AC API to align with public key, authKeyIdentifier is a chunk 2009-08-26 11:23:52 +02:00
Martin Willi e35c3e2a03 updated openssl plugin to new private/public key API, use encoder framework 2009-08-26 11:23:52 +02:00
Martin Willi cbd5138948 updated gcrypt plugin to new private/public key API, use encoder framework 2009-08-26 11:23:52 +02:00
Martin Willi 741680d179 updated gmp plugin to new private/public key API, use encoder framework 2009-08-26 11:23:52 +02:00
Martin Willi 1384a42e1b changed get_id/get_encoding API of private/public key to use new encoding framework 2009-08-26 11:23:52 +02:00
Martin Willi 1ef69b01ab removed obsolete fingerprint identification types 2009-08-26 11:23:52 +02:00
Martin Willi edd354db6f added generic implementation helpers for private_key_t.equals/belongs_to, public_key_t.equals 2009-08-26 11:23:52 +02:00
Martin Willi 0dd2defc5a added a seperate chache lookup, as encode() requires arguments expensive to build 2009-08-26 11:23:52 +02:00
Martin Willi 64e77e8fbb use credential builder API to parse trusted public keys 2009-08-26 11:23:52 +02:00
Martin Willi d1b3e8607e implemented PGP fingerprinting 2009-08-26 11:23:51 +02:00
Martin Willi e773fe4cab implemented pkcs1 private/public key encoding and fingerprinting 2009-08-26 11:23:51 +02:00
Martin Willi 934d49a4f9 chunk_cat/cata/create_cat/length accept the sensitive data clearing mode 's' 2009-08-26 11:23:51 +02:00
Martin Willi 957d116328 in addition to 'm'/'c' mode, asn1_wrap accepts a 's' mode clearing sensitive information 2009-08-26 11:23:51 +02:00
Martin Willi d9b24887a4 added a facility to hand out fingerprinting/key encoding to the pkcs1/pgp/... plugins 2009-08-26 11:23:51 +02:00
Martin Willi 831520d895 gmp uses component builder to build public- from private-key 2009-08-26 11:23:51 +02:00
Martin Willi 8380503168 gcrypt uses component builder to build public- from private-key 2009-08-26 11:23:51 +02:00
Martin Willi b457e08fca moved PGP code to pluto and gpg plugin 2009-08-26 11:23:51 +02:00
Martin Willi 7033a70fd0 gmp plugin makes use of pkcs1/pgp/dnskey plugins 2009-08-26 11:23:51 +02:00
Martin Willi cbfafc1125 enforce RSA_PRIME1 > RSA_PRIME2 (p > q) in PGP 2009-08-26 11:23:51 +02:00
Martin Willi 5ef478aaee implemented RFC3110 key builder in a plugin, added generic DNSKEY RR parsing 2009-08-26 11:23:51 +02:00
Martin Willi 3addf4e937 renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support other key types 2009-08-26 11:23:51 +02:00
Martin Willi caa00e7ab7 pluto uses KEY_ANY builder to parse PGP public keys 2009-08-26 11:23:50 +02:00
Martin Willi 9493dd2ce0 implemented a pgp plugin providing PGP key parsing builders 2009-08-26 11:23:50 +02:00
Martin Willi 4e3d1e804e make use of the pkcs1 plugin in gcrypt rsa key parsing 2009-08-26 11:23:50 +02:00
Martin Willi 3044774323 removed subjectPublicKeyInfo parsing, provided by pkcs1 plugin 2009-08-26 11:23:50 +02:00
Martin Willi 1e0f69373a implemented a pkcs1 plugin providing PKCS#1 key parsing builders 2009-08-26 11:23:50 +02:00
Martin Willi 750bbcf9a8 added support for %prompt-ing private key passhprases in strokes "ipsec secrets" 2009-08-26 11:23:50 +02:00
Martin Willi 7c2d883af7 show more information if building a credential fails 2009-08-26 11:23:50 +02:00
Martin Willi 833dcfa530 log loaded private key/certificates 2009-08-26 11:23:50 +02:00
Martin Willi 3f9ec06f6f added getnetbyname/gethostbyname2 to leak detective whitelist, used by pluto 2009-08-26 11:23:50 +02:00
Martin Willi d47dc6d170 clone blobs passed to parse functions, check before free 2009-08-26 11:23:50 +02:00
Martin Willi 89556140d0 fixed builder signature 2009-08-26 11:23:50 +02:00
Martin Willi ddf7c6ac7b do not enumerate builders returning NULL 2009-08-26 11:23:50 +02:00
Martin Willi 2b7e085dea updated pubkey_speed test to use pem plugin 2009-08-26 11:23:49 +02:00
Martin Willi cbb62e8f4c handle pluto specific certificates under CRED_CERTIFICATE, not as own credential kind 2009-08-26 11:23:49 +02:00
Martin Willi f11a78f10a unified pluto builder implementations 2009-08-26 11:23:49 +02:00
Martin Willi 94463a33b4 removed obsolete PEM code in pluto/libstrongswan 2009-08-26 11:23:49 +02:00
Martin Willi ccd0a624b6 use credential builder to build crls 2009-08-26 11:23:49 +02:00
Martin Willi 37f5a0da2c use credential builder to build attribute certificates 2009-08-26 11:23:49 +02:00
Martin Willi a5dc4a9585 moved builder hooks to a separate file 2009-08-26 11:23:49 +02:00
Martin Willi 11aa7e7869 use a pluto specific credential builder to build pluto cert_t's 2009-08-26 11:23:49 +02:00
Martin Willi c486fa8158 removed obsolete pgp private key parsing, done by libstrongswan 2009-08-26 11:23:49 +02:00
Martin Willi dc816eacdf use libstrongswan for private key loading, whack callback to read passphrase 2009-08-26 11:23:49 +02:00
Martin Willi 4d15129160 pass along X509 flags when loading PEM encoded data 2009-08-26 11:23:49 +02:00
Martin Willi 280469923d make use of the pem helper plugin to load credentials 2009-08-26 11:23:49 +02:00
Martin Willi c9db16b7dd added file loading support to pem plugin, using mmap() 2009-08-26 11:23:48 +02:00
Martin Willi 160f4c225d moved PEM parsing functionality to its own plugin 2009-08-26 11:23:48 +02:00
Martin Willi eb641993d4 set stroke connection flags to a clear TRUE/FALSE 2009-08-25 19:57:36 +02:00
Martin Willi 469083cc7d disable lifetimes of allocated SPIs 
The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine.
 2009-08-25 18:15:25 +02:00
Martin Willi 1bc0b4f795 remove incomplete SAs with PROTO_ESP 2009-08-25 18:12:55 +02:00
Martin Willi 625b48b558 added URL for git repository served over git:// protocol 2009-08-21 10:52:39 +02:00
Martin Willi dd4c14f37c set protocol to ESP for policies installed as a trap 2009-08-07 16:05:32 +02:00
Martin Willi d9796a4311 fixed printf fromat for length limited string 2009-08-07 10:31:21 +02:00
Martin Willi 51c037cc71 added support for ipsec.secrets "include" directive 2009-08-06 11:48:19 +02:00
Martin Willi 3d2f73b92f parse RDNs in multiple SEQUENCEs in all SETs of a DN 2009-08-03 15:24:48 +02:00
Martin Willi 5cb300e795 compare IKE config when reusing an existing IKE_SA to initiate a CHILD_SA 2009-08-03 14:37:24 +02:00
Martin Willi fcac8f6571 filter objects for segment checksumming by dlpi_name, excludes rare false positives 2009-07-21 15:10:24 +02:00
Martin Willi 7655843ab5 enumerate executable sections only to build checksum 2009-07-21 15:00:18 +02:00
Martin Willi acd4afc997 announce integrity testing only once 2009-07-21 14:58:14 +02:00
Martin Willi e0964e2e26 fixed memleak in SQL config lookup 2009-07-16 15:59:56 +02:00
Martin Willi 88957f54f2 raise an alert() if the RADIUS server is not responding 2009-07-16 15:15:39 +02:00
Martin Willi e85b83c737 added an alert() bus hook to raise critical system errors and notifications 2009-07-16 15:15:39 +02:00
Martin Willi f5410905ac moved the CFLAGS mangling AC_LIB_PREFIX macro behind CFLAG test 2009-07-15 16:04:37 +02:00
Martin Willi 449e90e1af updated debian package 2009-07-15 15:37:23 +02:00
Martin Willi 0a1d168752 updated Standards-Version to 3.8.2 2009-07-15 14:01:47 +02:00
Martin Willi e04c5d9371 added ${misc:Depends} dependency, fixes debhelper-but-no-misc-depends lintian warning 2009-07-15 14:00:42 +02:00
Martin Willi 426e1c3d0f added copyright information, fixes copyright-without-copyright-notice lintian warning 2009-07-15 13:59:25 +02:00
Martin Willi 74b14b4008 cast pointers to uintptr_t for alignement check 2009-07-15 10:39:45 +02:00
Martin Willi 69b8058925 use the configured NM connection id as configuration/IKE_SA name 2009-07-10 11:01:44 +02:00
Martin Willi ce741aa649 fixed state check if establishing the CHILD_SA fails 2009-07-10 09:40:02 +02:00
Martin Willi bad99d5aff use the new updown()/rekey() hooks to track the state of NetworkManager connections 2009-07-10 09:37:27 +02:00
Martin Willi 977ec0c316 implemented ike_down() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi fa1d3c6629 implemented ike_up() bus hook 2009-07-09 15:25:16 +02:00