Martin Willi
b1f2f05c92
Merge branch 'ikev1-clean' into ikev1-master
...
Conflicts:
configure.in
man/ipsec.conf.5.in
src/libcharon/daemon.c
src/libcharon/plugins/eap_ttls/eap_ttls_peer.c
src/libcharon/plugins/eap_radius/eap_radius_accounting.c
src/libcharon/plugins/eap_radius/eap_radius_forward.c
src/libcharon/plugins/farp/farp_listener.c
src/libcharon/sa/ike_sa.c
src/libcharon/sa/keymat.c
src/libcharon/sa/task_manager.c
src/libcharon/sa/trap_manager.c
src/libstrongswan/plugins/x509/x509_cert.c
src/libstrongswan/utils.h
Applied lost changes of moved files keymat.c and task_manager.c.
Updated listener_t.message hook signature in new plugins.
2012-03-20 17:57:53 +01:00
Martin Willi
5aef6bd0f3
Accept NULL auth_cfg_t passed to credential_manager_t.get_private()
2012-03-20 17:31:39 +01:00
Martin Willi
747f837cce
Added a flag to register local credential sets exclusively, disabling all others
2012-03-20 17:31:28 +01:00
Martin Willi
45956d15ea
Free list after removing the last local credential set, fixes a leak report
2012-03-20 17:31:19 +01:00
Adrian-Ken Rueegsegger
2a375e62f3
Some documentation corrections
2012-01-12 11:25:12 +01:00
Martin Willi
a846bf06e8
Add missing AUTH_RULE for trusted self-signed peer certificates
2011-02-01 09:25:10 +01:00
Martin Willi
76cfaf13c1
Verify trustchain for each candidate certificate only once
2011-01-05 16:46:06 +01:00
Martin Willi
8469625fdc
Include subject cert to temporary auth info before completing trustchain
2011-01-05 16:46:04 +01:00
Martin Willi
6aba6ff061
Pass an additional anchor flag to validate() hook if we reach the root CA
2011-01-05 16:46:04 +01:00
Martin Willi
09e319d419
Always pass auth info to validate(), use pathlen to check for user certificate
2011-01-05 16:46:04 +01:00
Martin Willi
be8858e9b6
Moved X509 pathlen constraint checking to constraints plugin
2011-01-05 16:46:00 +01:00
Martin Willi
473d5aa868
Key strength checking stores all key sizes in auth_cfg, verifies all in complies()
2011-01-05 16:45:56 +01:00
Martin Willi
963b4d9477
Added key strength constraints for RSA or ECDSA trustchains
2011-01-05 16:45:53 +01:00
Martin Willi
e0fcf43cf8
Build a trustchain even if no trust anchor is given
2010-08-23 12:01:43 +02:00
Tobias Brunner
56bceda7b5
Fixed compiler warnings.
2010-08-03 19:00:46 +02:00
Martin Willi
da9724e6d0
Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding
2010-07-13 11:29:35 +02:00
Martin Willi
c2e5cee413
Moved CRL/OCSP checking to a dedicated plugin called revocation
2010-07-13 10:26:07 +02:00
Martin Willi
c1f9dad672
Made some useful methods in the credential manager public
2010-07-13 10:26:07 +02:00
Martin Willi
5f9e62c54f
Moved X509 addrBlock validation to a separate addrblock plugin
2010-07-13 10:26:07 +02:00
Martin Willi
2feb16f5dd
Added a certificate validation hook to the credential manager
2010-07-13 10:26:07 +02:00
Martin Willi
c3a9bef08e
Migrated credential manager to INIT/METHOD macros
2010-07-13 10:26:07 +02:00
Martin Willi
2ccc02a4fd
Moved credential manager to libstrongswan
2010-07-13 10:26:07 +02:00
Martin Willi