denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,924 Commits 1 Branch 0 Tags
d7b965e93137b9cbf40852cafff3e4c945e36955
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi d7b965e931 fixed two doxygen warnings 2009-07-08 10:28:54 +02:00
Martin Willi c99227630c updated HACKING info 2009-07-07 17:26:16 +02:00
Martin Willi efb4bb248f remove obsolete child_cfg_t.equal_traffic_selectors() method 2009-07-07 14:38:55 +02:00
Martin Willi 20188fcad4 child_cfg matching code prefers a config containing the first proposed TS 2009-07-07 14:38:19 +02:00
Martin Willi 2d00984d73 added missing equals() method assignment for ID_ANY identities 2009-07-07 13:42:22 +02:00
Martin Willi 92a65c506a use architecture specific Elf header 2009-07-06 16:36:01 +02:00
Martin Willi 0c31b9db84 centralized ID type specific method assignement in generic constructor 2009-07-06 13:15:29 +02:00
Martin Willi bbf6a4c0ff removed obsolete init_rdn()/get_next_rdn() functions 2009-07-06 13:15:29 +02:00
Martin Willi 8309798fae reimplemented dnota() using RDN enumerator 2009-07-06 13:15:29 +02:00
Martin Willi f48c3c72f4 added a chunk_printable() function (replaces sanitize_chunk) 2009-07-06 13:15:29 +02:00
Martin Willi d692557298 replaced {same,match}_dn() by compare_dn(), using the RDN enumerator 2009-07-06 13:15:29 +02:00
Martin Willi ed680e33c0 fixed memleak if RND parsing fails 2009-07-06 13:15:29 +02:00
Martin Willi dca2eee92a added unit test for identification_t.matches() 2009-07-06 13:15:29 +02:00
Martin Willi 05fe0a7d25 added unit test for identification_t.equals() 2009-07-06 13:15:29 +02:00
Martin Willi 01da687f78 contains_wildcard() for DNs uses RDN enumerator 2009-07-06 13:15:28 +02:00
Martin Willi d35650115b added unit test for identification_t.contains_wildcard() 2009-07-06 13:15:28 +02:00
Martin Willi 2147da40a5 simplified identification_t.clone() using memcpy 2009-07-06 13:15:28 +02:00
Martin Willi 6bdd79d86c use an enumerator to parse RDNs, based on asn1_unwrap() function 2009-07-06 13:15:28 +02:00
Martin Willi 5dd492efff make filter enumerator methods static 2009-07-06 13:15:28 +02:00
Martin Willi 596e0540a5 asn1_unwrap() function to parse ASN.1 objects with length/type 2009-07-06 13:15:28 +02:00
Martin Willi 6e61122727 listen for CHILD_SA state changes only until it has been installed 2009-07-03 16:16:00 +02:00
Martin Willi 90855e965a added additional sanity checks to asn1_length() parsing 2009-07-03 09:26:48 +02:00
Martin Willi 00fcc0f8f3 added -avoid-version to LDFLAGS, plugins are not versioned 2009-07-03 08:57:11 +02:00
Martin Willi 7afd9d6672 defer MOBIKE update if we have no route to the peer 2009-07-02 10:56:13 +02:00
Martin Willi 133623871d do not abort notifying listeners if a listener unregisters 2009-07-02 09:38:12 +02:00
Martin Willi 2b7129f9b3 added mconsole exec patch based on 2.6.30 2009-07-01 13:53:46 +02:00
Martin Willi fb64239cab added mconsole exec patch based on 2.6.29 2009-07-01 13:52:54 +02:00
Martin Willi 4fd40cf6b0 signal tunnel breakage to NetworkManager 2009-06-30 17:47:42 +02:00
Martin Willi 7f9fab77f8 restarting dbus is insufficient, restart network-manager after installation 2009-06-30 17:03:53 +02:00
Martin Willi a2f1bb238e enforce correct RSA signature lenght in gcrypt 2009-06-30 12:10:30 +02:00
Martin Willi d860a9b924 handle --disable-pluto/charon with --enable-integrity-test 2009-06-22 16:37:28 +02:00
Martin Willi f0f420229a deinit() library if integrity check fails 2009-06-22 16:18:53 +02:00
Martin Willi 4f2c48cd3d build and verify on disk file integrity of pluto and charon executables 2009-06-22 15:47:18 +02:00
Martin Willi da2834a280 removed functions from faked symbol list, not needed anymore with RTLD_LAZY 2009-06-22 15:47:18 +02:00
Martin Willi cfe508d911 indicate use if integrity testing at startup 2009-06-22 15:47:18 +02:00
Martin Willi 67a7bb02ef moved checksum_builder/libchechsum to top srcdir to respect build order 2009-06-22 15:47:18 +02:00
Martin Willi e4e6a77a80 check for dladdr() and dl_iterate_phdr() if --enable-integrity-test set 2009-06-22 15:47:17 +02:00
Martin Willi bef508755b build integrity_checker.c only if --enable-integrity-test set 2009-06-22 15:47:17 +02:00
Martin Willi 6a8c8815fe check on-disk and loaded segment integrity of libstrongswan 2009-06-22 15:47:17 +02:00
Martin Willi d88bcee079 reduced verbosity of integrity checker 2009-06-22 15:47:17 +02:00
Martin Willi e3b7be91e1 removed obsolete INTEGRITY_TEST and fips signer code 
--enable-integrity-test now conditionally builds libchecksum
 2009-06-22 15:47:17 +02:00
Martin Willi f1f51395d5 build checksums for charon plugins 2009-06-22 15:47:17 +02:00
Martin Willi a0fc89798a library initialization fails if libstrongswan checksum is invalid 2009-06-22 15:47:17 +02:00
Martin Willi 70f59fab9b checksum.c depends on all libraries 2009-06-22 15:47:17 +02:00
Martin Willi 12c68f1b3a implemented a checksum_builder tool to build the checksum library 2009-06-22 15:47:17 +02:00
Martin Willi 0179d4684a integrity checker accepts an option checksum library on construction 2009-06-22 15:47:17 +02:00
Martin Willi 059c479a2f check integrity of libstrongswan 2009-06-22 15:47:17 +02:00
Martin Willi 960e0c1040 check integrity of plugins before loading 2009-06-22 15:47:17 +02:00
Martin Willi 20d4fc97cf implemented an integrity checker class to build and check code integrity 2009-06-22 15:47:16 +02:00
Martin Willi 2927db377d dist-hook to remove .svn folder not needed anymore 2009-06-22 15:45:24 +02:00
Martin Willi 31b9c10800 removed unneeded newline 2009-06-22 15:35:18 +02:00
Martin Willi 1694e82c7c fixed another 64bit compiler warning 2009-06-19 10:19:55 +02:00
Martin Willi aab814c793 fixed compiler warning 2009-06-19 10:05:27 +02:00
Martin Willi f53b7e00c2 reverted rule_count back to size_t, as it is passed as pointer (fixes 64bit issues) 2009-06-19 10:01:04 +02:00
Martin Willi 80d3a187c5 double check that parsing a list consumes all bytes 2009-06-17 13:38:05 +02:00
Martin Willi df2565a2d5 use signed lengths in parser and generator 2009-06-17 13:22:07 +02:00
Martin Willi 8ae89883e1 fixed copy/paste error in attribute type parsing 2009-06-17 11:42:53 +02:00
Martin Willi fcb06fdbfa use rwlock instead of a mutex in trap_manager, avoids possible deadlock 2009-06-16 17:27:25 +02:00
Martin Willi 4edda6e4a0 load trap_manager before plugins, allowing them to install traps 2009-06-16 17:27:24 +02:00
Martin Willi 04d6583e26 reset IKE_SA on bus after checkout/checkin of replacement SA 2009-06-16 17:27:24 +02:00
Martin Willi 140ea1fe5a instanciate first registered kernel interface immediately 2009-06-16 17:27:24 +02:00
Martin Willi a998276a2b calculating plugin dependencies for eap-sim/aka 2009-06-16 14:53:16 +02:00
Martin Willi 9c9a110130 pluto does not depend on gmp anymore 2009-06-16 14:47:07 +02:00
Martin Willi 62d6da67dd support older gcrypt libraries not defining the CAMELLIA cipher 2009-06-16 14:23:32 +02:00
Martin Willi 24d7b25d21 fixed compiler warning 2009-06-16 14:21:55 +02:00
Martin Willi 0c013ff345 load hmac/xcbc plugins after hash/crypter plugins to pass crypto tests 2009-06-16 13:05:43 +02:00
Martin Willi 26999f2511 increased verbosity of successful crypto tests 2009-06-16 09:54:28 +02:00
Martin Willi 72e174f966 removed one hierarchy level for crypto test options 2009-06-16 09:48:45 +02:00
Martin Willi 80c0710caa added NEWS for 4.3.2 2009-06-16 09:39:56 +02:00
Martin Willi 25ecb8dafa gcrypt actually does not implement IDEA 2009-06-15 18:18:04 +02:00
Martin Willi d32b14db5e implemented gcrypt RSA encrypt/decrypt operations 2009-06-15 18:07:57 +02:00
Martin Willi 810ce1f336 added a gcrypt.quick_random option to generate weak testing keys faster 2009-06-15 18:06:16 +02:00
Martin Willi f1f968d562 extended RSA tests by encrypt/decrypt operations 2009-06-15 18:05:34 +02:00
Martin Willi 04b348f61a implemented IKEv1 specific SIGN_RSA_EMSA_PKCS1_NULL scheme in gcrypt 2009-06-15 14:47:39 +02:00
Martin Willi 3176e4421f check if RSA key is large enough to sign a chunk of data 2009-06-15 13:49:30 +02:00
Martin Willi e7227f0ba0 use save chunk advancing, check signature length 2009-06-15 13:37:52 +02:00
Martin Willi b59e239335 added SHA2 HMAC signer test vectors 2009-06-12 11:09:09 +02:00
Martin Willi 0897ff21e7 removed crypto tests form unit tester, all gone to test-vector plugin 2009-06-12 10:44:01 +02:00
Martin Willi 095f971c10 added a FIPS_PRF test vector 2009-06-12 10:40:38 +02:00
Martin Willi 371a54c7a9 added support for stateful PRFs (such as the FIPS_PRF) 2009-06-12 10:39:47 +02:00
Martin Willi c66cd00df4 removed pluto test vectors, --disable-self-test option 2009-06-11 20:27:32 +02:00
Martin Willi 701381ceb8 added SHA2 HMAC PRF test vectors 2009-06-11 20:26:01 +02:00
Martin Willi d94d68e404 added SHA2 test vectors 2009-06-11 18:14:30 +02:00
Martin Willi f02d144095 added SHA1 test vectors 2009-06-11 17:17:33 +02:00
Martin Willi 2df93f467b added HMAC SHA1 test vectors 2009-06-11 17:05:56 +02:00
Martin Willi 764708b4e0 added HMAC MD5 test vectors 2009-06-11 16:44:20 +02:00
Martin Willi c698da8cb4 added RNG test vectors 2009-06-11 15:56:00 +02:00
Martin Willi e091d5100f added MD5 test vectors 2009-06-11 15:56:00 +02:00
Martin Willi 54916d79d6 added AES-XCBC test vectors for signer/prf 2009-06-11 15:56:00 +02:00
Martin Willi 005163805d added test vectors for AES128 CBC 2009-06-11 15:56:00 +02:00
Martin Willi 6f4f83e333 added blowfish test vectors from pluto 2009-06-11 15:56:00 +02:00
Martin Willi 81811a9d8b added a plugin providing crypto test vectors 2009-06-11 15:55:59 +02:00
Martin Willi 28a0728b67 make use of the crypto_tester in the crypto_factory 
libstrongswan.crypto.test.on_add to test algorithms during initialization
libstrongswan.crypto.test.on_create to test algorithms on each instantiation
 2009-06-11 15:55:48 +02:00
Martin Willi 3e8891667b implemented a crypto_tester class to test crypto algorithms 
libstrongswan.crypto.test.required to require at least one test vector to use an algorithm
libstrongswan.crypto.test.rng_true to run RNG tests on RNG_TRUE quality
 2009-06-11 15:54:44 +02:00
Martin Willi 6f299040fb handling hashers and rngs as transform types (in private range) 2009-06-11 14:17:16 +02:00
Martin Willi e51f607221 gcrypt blowfish supports 128 bit key size only 2009-06-11 14:13:17 +02:00
Martin Willi 25d6c5146b remove obsolete scripts 2009-06-10 18:31:15 +02:00
Martin Willi e0069366c8 fixed ecp521 test 2009-06-10 18:07:19 +02:00
Martin Willi 0461a2ff13 added missing RSA 768 test 2009-06-10 17:26:56 +02:00
Martin Willi 6edad5afdd added convenience scripts for pubkey/dh speed tests 2009-06-10 16:25:32 +02:00