Andreas Steffen
d12ad4748a
fix 64bit issue with time_t from database
2010-03-10 10:46:49 +01:00
Tobias Brunner
908d571796
Provide the Diffie Hellman parameters from a central location, so that we do not have to replicate them in every plugin that implements the DH interface.
...
The main reason for this change is that Android's libcrypto does not
include the get_rfcX_prime_Y functions by default. Therefore we would
have had to replicate the primes a third time.
2010-03-09 17:15:16 +01:00
Tobias Brunner
38031382dc
Adding the OpenSSL plugin to the Android build.
2010-03-08 17:21:46 +01:00
Tobias Brunner
16c8442a3e
Fixing integrity tests after renaming the plugin constructors.
2010-03-08 15:34:38 +01:00
Tobias Brunner
d543d9cadf
Adding a helper function that translates single characters in a string.
2010-03-08 15:34:38 +01:00
Tobias Brunner
d14203b009
Replaced the deprecated RSA_generate_key with RSA_generate_key_ex.
2010-03-08 15:34:38 +01:00
Martin Willi
40f130dab3
Implemented the PRF_KEYED_SHA1 algorithm in the openssl plugin
2010-03-08 13:16:12 +01:00
Andreas Steffen
ceeb9bac8b
critical keyUsage extension must be parsed
2010-03-07 20:51:34 +01:00
Andreas Steffen
469d448333
recognize strongSwan VID
2010-03-07 17:52:04 +01:00
Andreas Steffen
1ec8f22de2
set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true
2010-03-07 17:27:53 +01:00
Tobias Brunner
d6731a0f26
parser.l includes y.tab.h, so it must be built first
2010-03-05 14:59:22 +01:00
Tobias Brunner
73f5940b1c
Ignore the generated y.output.
2010-03-05 14:47:08 +01:00
Tobias Brunner
551b02029e
Do not hardcode the path to the strongSwan sources.
2010-03-05 14:47:08 +01:00
Tobias Brunner
0ace35282c
Build libstrongswan before building any plugins during the non-monolithic build (as it was before).
2010-03-05 11:05:32 +01:00
Martin Willi
23763c2cae
scepclient still depends on libfreeswan
2010-03-05 08:52:09 +01:00
Martin Willi
3eb633e1e6
Remove the invalid cast in time() parameter, as reported by Marius Tomaschewski.
2010-03-04 08:44:23 +01:00
Tobias Brunner
ea2f2c4b90
Fixing a bug on platforms where size_t is unsigned.
2010-03-03 17:35:19 +01:00
Tobias Brunner
465ccdc8cf
The parsed timeval is unsigned.
2010-03-03 17:34:49 +01:00
Tobias Brunner
fc1afcc89e
The return value of snprintf is int not size_t.
2010-03-03 17:34:06 +01:00
Martin Willi
d02308502f
Add braces around empty body in if statement
2010-03-03 16:53:42 +01:00
Martin Willi
a5a4b6c9d1
Added charon.send/receive_delay options to simulate different RTTs
2010-03-03 15:59:29 +01:00
Martin Willi
24f058ac74
Migrated receiver_t to METHOD/INIT macros
2010-03-03 15:52:20 +01:00
Martin Willi
eb1aa4c537
Migrated sender_t to METHOD/INIT macros
2010-03-03 15:46:53 +01:00
Martin Willi
aa59a7f241
Check if we are not using a vendor EAP method in EAP_IDENTITY comparison.
...
Bug reported by Ingo Kubbilun with a patch from Reinhard Pfau, secunet AG.
2010-03-03 12:28:38 +01:00
Martin Willi
1abab9ec4f
Use "static const", some GCCs don't like "const static"
2010-03-03 10:44:49 +01:00
Tobias Brunner
1be3298807
Adding Android.mk files to build charon and libstrongswan with the Android build system.
2010-03-03 10:18:46 +01:00
Tobias Brunner
afb364fff9
Reverting eba28948a5 which was only necessary when cross-compiling the plugins for Android 2.0.
...
With the coming monolithic build using Android.mk files this won't be
necessary anymore.
2010-03-02 12:03:44 +01:00
Tobias Brunner
4e657051f7
Streamlined the source file list formatting in plugin makefiles.
2010-03-02 10:40:50 +01:00
Tobias Brunner
fac3bfa5cd
Fixing some includes by replacing <> with "".
...
I changed only the includes needed to fix the build on Android, which has an utils.h system header file, but we should probably change all the local includes in libstrongswan to "" and relative paths.
2010-03-02 10:38:58 +01:00
Tobias Brunner
6ec60bb92b
Link all enabled libstrongswan plugins into the library, link all enabled charon plugins into libcharon.
2010-03-02 10:38:52 +01:00
Tobias Brunner
3724668b3d
Enabling the plugin loader to be able to load plugins without explicitly loading a shared object file first.
2010-03-02 09:10:32 +01:00
Tobias Brunner
9ce567f895
Changed plugin constructors from plugin_create to plugin_name_plugin_create.
2010-03-02 09:10:26 +01:00
Tobias Brunner
6cc13cd9c5
Removing the plugin constructor declarations from the header files.
2010-03-02 09:10:19 +01:00
Martin Willi
5acb97cebb
Link libstrongswan to the new plugins, too
2010-02-26 11:49:04 +01:00
Martin Willi
f16ca9e89c
Add support for dynamic ports in load tester
2010-02-26 11:44:34 +01:00
Martin Willi
347488bd67
Process ike_vendor task before ike_init, fixes support for private algs in IKE
2010-02-26 11:44:34 +01:00
Martin Willi
ed5fc4cafe
Use message instead of attributes in hook
2010-02-26 11:44:34 +01:00
Martin Willi
b3b74e479b
Set UDP encapsulation option on all sockets
2010-02-26 11:44:34 +01:00
Martin Willi
da2303ca69
Fixed starter left-/rightikeport keyword
2010-02-26 11:44:34 +01:00
Martin Willi
9cb2360e4f
Added locking to dynamic socket list
2010-02-26 11:44:34 +01:00
Martin Willi
af2c43fdc7
Include ports in ike_cfg equality check
2010-02-26 11:44:34 +01:00
Martin Willi
9ed1bb4842
Added an initiator-only socket implementation which binds ports on demand
2010-02-26 11:44:34 +01:00
Martin Willi
40706b6027
Removed obsolete daemon kill
2010-02-26 11:44:34 +01:00
Martin Willi
d6a27ec64e
Do not kill daemon, just not use pluggable kernel interface if initialization failed
2010-02-26 11:44:33 +01:00
Martin Willi
54f818590e
Pass sockets to bypass to kernel interface, allowing us to register them dynamically
2010-02-26 11:44:33 +01:00
Martin Willi
3e631491a0
Migrated kernel_klips_ipsec to METHOD/INIT macros
2010-02-26 11:44:33 +01:00
Martin Willi
44791b75f5
Migrated kernel_pfkey_ipsec to METHOD/INIT macros
2010-02-26 11:44:33 +01:00
Martin Willi
98ed9c6cf2
Migrated kernel_netlink_ipsec to METHOD/INIT macros
2010-02-26 11:44:33 +01:00
Martin Willi
2d49f74e28
Migrated kernel_interface wrapper to METHOD/INIT macros
2010-02-26 11:44:33 +01:00
Martin Willi
667b73721a
Added left-/rightikeport ipsec.conf options to use custom IKE ports
2010-02-26 11:44:33 +01:00