Martin Willi
73760ca5ff
extended statusall output
...
added job/event-queue statistics
added allocation statistics when using LEAK_DETECTIVE
2006-09-21 07:03:21 +00:00
Martin Willi
995d8116e1
public declaration of all HASH_SIZEs in hasher.h
2006-09-20 06:45:19 +00:00
Andreas Steffen
490d267ac3
support of encrypted private key files
2006-09-20 05:48:54 +00:00
Martin Willi
b5cac6684d
added copyright notice to sha2_hasher
...
included SHA2 in build process
2006-09-19 14:54:01 +00:00
Martin Willi
e698dc4559
implemented sha2_hasher which supports SHA-256, SHA-384 and SHA-512
2006-09-19 14:49:47 +00:00
Martin Willi
462129d332
added support for 3DES encryption algorithm in IKE
2006-09-19 11:18:35 +00:00
Andreas Steffen
b2ac140338
fixed the ids parsing bug
2006-09-19 06:17:06 +00:00
Martin Willi
a2cf2812c4
some cleanups here and there
2006-09-18 11:37:40 +00:00
Andreas Steffen
8b448b5c22
cosmetics
2006-09-18 07:44:41 +00:00
Andreas Steffen
b267ed00d1
verify_emsa_pkcs1_signature returns status_t
2006-09-18 07:44:16 +00:00
Andreas Steffen
2e7b7faf0c
cosmetics
2006-09-18 07:43:44 +00:00
Martin Willi
8a95c322c5
fixed certificate verification bug!
2006-09-14 12:22:08 +00:00
Martin Willi
1f7fd2ced8
removed unneeded constructor
2006-08-31 06:16:52 +00:00
Martin Willi
48d9883a3e
initial support for IPv6 (more testing needed)
...
socket works (without v6 filter)
traffic selector handle IPv4/v4 cleanly
improvements in traffic selector code
kernel interface accepts v6 traffic selectors and hosts
host_t class has full IPv6 support
2006-08-30 17:12:56 +00:00
Martin Willi
51d4876814
added stddef.h include for compilers which do not support the offsetof() directive
2006-08-28 09:02:51 +00:00
Martin Willi
f698448ea3
implemented proper refcounting using atomic operations
2006-07-28 09:45:18 +00:00
Martin Willi
fe04e93a8b
implemented IKE_SA rekeying
...
uses ikelifetime, rekeymargin and rekeyfuzz config settings
no handling of simultaneus exchanges yet!
2006-07-27 12:18:40 +00:00
Martin Willi
c0593835f4
reuse an existing IKE_SA to set up additional CHILD_SAs
2006-07-20 14:57:49 +00:00
Martin Willi
8dfbe71b34
introduced refcounting on policy and connections
...
aren't stored in the IKE_SA anymore, they are queried on the fly
are immutable now, allows it to share them
policy selection based on traffic selectors, leads to valid lookup results
rekeying queries the policy based on its traffic selectors
2006-07-20 10:09:32 +00:00
Martin Willi
92ee45a0ee
cleanups in kernel interface code
...
added proper traffic selector to string conversion
some cleanups here & there
2006-07-18 12:53:54 +00:00
Martin Willi
269f7f448b
leak detective blanks memory on free & alloc, allows further membug detection
2006-07-12 11:15:31 +00:00
Martin Willi
4c19900ce8
code cleanups
2006-07-12 11:13:48 +00:00
Andreas Steffen
40f29769fa
identification_t.matches() supports multiple wildcard counts
2006-07-11 06:11:59 +00:00
Martin Willi
af2faa1f1d
reenabled check_expiry
2006-07-07 12:25:25 +00:00
Martin Willi
c71d53ba4e
updated copyright information
2006-07-07 08:49:06 +00:00
Martin Willi
b190424716
updated whitelist (getprotobynumber)
2006-07-05 13:10:47 +00:00
Martin Willi
b12af2ead6
fixed compiler warnings
2006-07-05 10:09:42 +00:00
Martin Willi
318dc7b6c4
updated leak detective whitelist
2006-07-04 13:26:20 +00:00
Andreas Steffen
971218c3ae
support of cert payloads
2006-07-03 06:27:45 +00:00
Andreas Steffen
6f74bfd6ac
added X.509 trust chain verification
2006-06-27 08:48:28 +00:00
Martin Willi
2f89902d07
applied new changes from NATT team
...
DPD only done when no IPsec and IKE traffic processed
minor changes here and there
2006-06-23 14:02:30 +00:00
Martin Willi
eecb2da87d
fixed identification_t clone to apply function pointers
2006-06-23 13:20:17 +00:00
Martin Willi
1396815afb
first merge of NATT code
2006-06-22 06:36:28 +00:00
Martin Willi
b29bfa7c76
fixed whitelist detection
2006-06-20 11:03:47 +00:00
Martin Willi
986d23bd6e
reworked function ignore mechanism to not-report whitelist
...
rather than overriding functions
2006-06-20 10:05:56 +00:00
Martin Willi
aed58dcc93
readded local_credential_store
...
added sendcert policy to connection
some other cleanups
2006-06-20 08:43:57 +00:00
Andreas Steffen
76dafed7a7
implemented rereadcrls rereadcacerts
2006-06-20 06:08:33 +00:00
Andreas Steffen
23e9fda8a5
added chunk_equals_or_null()
2006-06-16 05:53:47 +00:00
Andreas Steffen
307b4ded5e
added crl support
2006-06-16 05:52:52 +00:00
Andreas Steffen
277379620c
changed tabs from 8 to 4 spaces
2006-06-16 05:52:26 +00:00
Andreas Steffen
c345ff0b1e
added crl support
2006-06-16 05:51:36 +00:00
Andreas Steffen
63b86f5641
cosmetics
2006-06-16 05:51:16 +00:00
Andreas Steffen
d2c9d37d6f
cosmetics (space)
2006-06-16 05:50:28 +00:00
Martin Willi
147fe5095d
fixed aes code, we support now aes128, aes192, aes256 in IKE
2006-06-15 13:14:09 +00:00
Andreas Steffen
b3b4c0e44b
corrected some descriptions
2006-06-13 11:33:13 +00:00
Andreas Steffen
3c846c630a
moved RSA key size constraints to definitions.h
2006-06-13 11:32:12 +00:00
Andreas Steffen
fec9cb332f
NULL string argument is treated as %any
2006-06-12 08:26:14 +00:00
Martin Willi
a2a3fb3e25
workaround for peers rekeying at the same time
...
loading lifetime policies from ipsec.conf
2006-06-12 07:33:20 +00:00
Andreas Steffen
b7f9ca5837
added support for leftsendcert= and left|rightca= parameters
2006-06-09 05:50:41 +00:00
Andreas Steffen
a612f2dd00
added public methods is_ca() and is_valid()
2006-06-09 05:47:00 +00:00
Martin Willi