 Martin Willi
|
2f89902d07
|
applied new changes from NATT team
DPD only done when no IPsec and IKE traffic processed
minor changes here and there
|
2006-06-23 14:02:30 +00:00 |
|
|
Martin Willi
|
2891590b05
|
some message code cleanups
|
2006-06-23 14:00:15 +00:00 |
|
|
Martin Willi
|
eecb2da87d
|
fixed identification_t clone to apply function pointers
|
2006-06-23 13:20:17 +00:00 |
|
|
Martin Willi
|
4b24dd2d7d
|
cleaner error handling on UDP encapsultion sockopt failure
|
2006-06-22 13:05:15 +00:00 |
|
|
Martin Willi
|
6f51c9f184
|
added mysterious UDP encapsulation socket option to get encapsulation working
|
2006-06-22 12:57:49 +00:00 |
|
|
Andreas Steffen
|
8d204aa145
|
fixed BAD_PROPOSAL_SYNTAX vulnerability
|
2006-06-22 12:16:12 +00:00 |
|
|
Martin Willi
|
1396815afb
|
first merge of NATT code
|
2006-06-22 06:36:28 +00:00 |
|
|
Martin Willi
|
6bf1352032
|
fixed testing build
|
2006-06-21 12:58:02 +00:00 |
|
|
Martin Willi
|
e986c40bc7
|
updated for 4.0.1 release
|
2006-06-21 12:14:40 +00:00 |
|
|
Martin Willi
|
7e81e97543
|
updated news for 4.0.1 release
|
2006-06-21 12:11:29 +00:00 |
|
|
Martin Willi
|
b29bfa7c76
|
fixed whitelist detection
|
2006-06-20 11:03:47 +00:00 |
|
|
Martin Willi
|
986d23bd6e
|
reworked function ignore mechanism to not-report whitelist
rather than overriding functions
|
2006-06-20 10:05:56 +00:00 |
|
|
Martin Willi
|
13b8fa0e8d
|
fixed execv call args to work when using strictcrl and syslog
|
2006-06-20 10:04:35 +00:00 |
|
|
Martin Willi
|
5c6b5bf599
|
fixed bug: usage of already freed mem
|
2006-06-20 09:53:25 +00:00 |
|
|
Martin Willi
|
aed58dcc93
|
readded local_credential_store
added sendcert policy to connection
some other cleanups
|
2006-06-20 08:43:57 +00:00 |
|
|
Andreas Steffen
|
76dafed7a7
|
implemented rereadcrls rereadcacerts
|
2006-06-20 06:08:33 +00:00 |
|
|
Andreas Steffen
|
a8ed64c494
|
implemented rereadcrls rereadcacerts
|
2006-06-20 06:07:37 +00:00 |
|
|
Andreas Steffen
|
21b433c641
|
implemented rereadcrls rereadcacerts
|
2006-06-20 06:05:01 +00:00 |
|
|
Andreas Steffen
|
db959e6ea3
|
removed local_credential_store
|
2006-06-20 05:57:52 +00:00 |
|
|
Martin Willi
|
b965b8456b
|
fixed SPI when acting as initiator of rekeying
|
2006-06-19 09:27:14 +00:00 |
|
|
Martin Willi
|
c65a4fff3f
|
fixed SPI when rekeying and deleting CHILD_SAs
|
2006-06-19 08:54:19 +00:00 |
|
|
Martin Willi
|
891dfaf983
|
change key derivation order to fullfill RFC
|
2006-06-19 08:11:42 +00:00 |
|
|
Martin Willi
|
f7eb60dd5e
|
|
2006-06-16 14:10:49 +00:00 |
|
|
Andreas Steffen
|
21e7a724d0
|
added crl support
|
2006-06-16 05:55:30 +00:00 |
|
|
Andreas Steffen
|
d92cca4a72
|
added listcrls
|
2006-06-16 05:55:02 +00:00 |
|
|
Andreas Steffen
|
23e9fda8a5
|
added chunk_equals_or_null()
|
2006-06-16 05:53:47 +00:00 |
|
|
Andreas Steffen
|
307b4ded5e
|
added crl support
|
2006-06-16 05:52:52 +00:00 |
|
|
Andreas Steffen
|
277379620c
|
changed tabs from 8 to 4 spaces
|
2006-06-16 05:52:26 +00:00 |
|
|
Andreas Steffen
|
c345ff0b1e
|
added crl support
|
2006-06-16 05:51:36 +00:00 |
|
|
Andreas Steffen
|
63b86f5641
|
cosmetics
|
2006-06-16 05:51:16 +00:00 |
|
|
Andreas Steffen
|
d2c9d37d6f
|
cosmetics (space)
|
2006-06-16 05:50:28 +00:00 |
|
|
Martin Willi
|
c859ec9592
|
fixed compilation error
|
2006-06-15 13:41:06 +00:00 |
|
|
Martin Willi
|
c15c3d4be9
|
updated for release
|
2006-06-15 13:23:06 +00:00 |
|
|
Martin Willi
|
147fe5095d
|
fixed aes code, we support now aes128, aes192, aes256 in IKE
|
2006-06-15 13:14:09 +00:00 |
|
|
Martin Willi
|
c095388f7f
|
added support for "ike" and "esp" keywords
fixed bugs in proposal code
algorithm selection for charon works now with ipsec.conf
a lot of other fixes
|
2006-06-15 11:09:11 +00:00 |
|
|
Martin Willi
|
3efbf98312
|
implemented clean spi allocation behavior when using multiple proposals
|
2006-06-15 11:06:22 +00:00 |
|
|
Martin Willi
|
525a5538db
|
fixed logleve(l) keyword typo
|
2006-06-15 11:03:41 +00:00 |
|
|
Martin Willi
|
56f1a8f2d6
|
handling of "rekey=no" parameter added
|
2006-06-15 11:02:15 +00:00 |
|
|
Martin Willi
|
ad038f770d
|
changed default algorithms to:
ike: aes128-sha-modp2048
esp: aes128-sha1, 3des-md5
|
2006-06-15 11:01:17 +00:00 |
|
|
Andreas Steffen
|
b98e0927f4
|
added default CRL directory path
|
2006-06-14 12:44:12 +00:00 |
|
|
Andreas Steffen
|
311b225740
|
added strictcrlpolicy command line argument
|
2006-06-14 12:43:51 +00:00 |
|
|
Andreas Steffen
|
03442041a9
|
added option parsing
|
2006-06-14 12:42:36 +00:00 |
|
|
Andreas Steffen
|
d9d35d5911
|
added local CRLs
|
2006-06-14 12:41:37 +00:00 |
|
|
Andreas Steffen
|
71d277e468
|
added rekeying parameters
|
2006-06-14 12:41:17 +00:00 |
|
|
Andreas Steffen
|
b3b4c0e44b
|
corrected some descriptions
|
2006-06-13 11:33:13 +00:00 |
|
|
Andreas Steffen
|
3c846c630a
|
moved RSA key size constraints to definitions.h
|
2006-06-13 11:32:12 +00:00 |
|
|
Martin Willi
|
b7e3329f17
|
fixed down keyword
|
2006-06-13 10:11:45 +00:00 |
|
|
Martin Willi
|
fa32cd3c47
|
debug and logging improvements
|
2006-06-13 10:01:04 +00:00 |
|
|
Martin Willi
|
22ff6f578f
|
|
2006-06-13 10:00:19 +00:00 |
|
|
Andreas Steffen
|
64f4d91898
|
support for stroke listcerts|listcacerts|listcrls|listall
|
2006-06-12 08:47:28 +00:00 |
|