 Martin Willi
|
da5e7bdb4c
|
try to cache the same instance of equal certificates
|
2008-04-07 08:44:43 +00:00 |
|
|
Martin Willi
|
b5dbcc6270
|
compare certificates against full encoding to allow equality check of untrusted certs
|
2008-04-07 08:28:35 +00:00 |
|
|
Martin Willi
|
9caadea8c8
|
fixed bad cleanup which results in segfault if no issuer cert found, fixes #43
|
2008-04-07 08:06:02 +00:00 |
|
|
Andreas Steffen
|
6fbd3f1738
|
fixed path to ipsec.sql
|
2008-04-07 07:57:38 +00:00 |
|
|
Andreas Steffen
|
56bcc343ff
|
ipsec.sql remains in /etc/ipsec.d
|
2008-04-07 07:25:04 +00:00 |
|
|
Andreas Steffen
|
decfd8e546
|
moved strongswan.conf to /etc
|
2008-04-07 07:21:06 +00:00 |
|
|
Andreas Steffen
|
480297b883
|
cosmetics
|
2008-04-07 07:02:47 +00:00 |
|
|
Martin Willi
|
ff867d062e
|
added ./configure option --with-strongswan-conf=
defaults to /etc/strongswan.conf
|
2008-04-07 06:56:33 +00:00 |
|
|
Martin Willi
|
4071ad1e5b
|
fixed segfault when opening a SQLite database fails
|
2008-04-07 06:49:13 +00:00 |
|
|
Andreas Steffen
|
096b7f6889
|
do-tests now lists strongswan.conf and ip xfrm policy|state
|
2008-04-07 06:14:21 +00:00 |
|
|
Martin Willi
|
8ec032fc62
|
added helper scripts to create SQL scripts
|
2008-04-07 06:06:42 +00:00 |
|
|
Andreas Steffen
|
84fc1abf7a
|
added sql/net2net-psk scenario
|
2008-04-06 18:11:19 +00:00 |
|
|
Andreas Steffen
|
b6032b2400
|
corrected description
|
2008-04-06 18:10:57 +00:00 |
|
|
Andreas Steffen
|
f8ab4a8f76
|
log shared secret with debug level 4
|
2008-04-06 17:51:29 +00:00 |
|
|
Andreas Steffen
|
b26fecefa0
|
disable mobike in sql/net2net-cert scenario
|
2008-04-06 12:53:57 +00:00 |
|
|
Andreas Steffen
|
1b247314fd
|
default is hostaccess=no
|
2008-04-06 12:15:05 +00:00 |
|
|
Andreas Steffen
|
bc722433be
|
version bump to 4.2.1
|
2008-04-06 12:12:13 +00:00 |
|
|
Andreas Steffen
|
69813bd27f
|
added sql/net2net-cert scenario
|
2008-04-06 12:06:33 +00:00 |
|
|
Andreas Steffen
|
babaaa3c11
|
support of SQL databases in UML scenarios
|
2008-04-06 12:05:42 +00:00 |
|
|
Martin Willi
|
a9184df36b
|
do not build leak_detective.o if not enabled
|
2008-04-04 11:38:16 +00:00 |
|
|
Martin Willi
|
2429fb4958
|
defining hook functions ourself as definition in uClibc and glibc differ, fixes #36
|
2008-04-04 11:37:19 +00:00 |
|
|
Martin Willi
|
67d147e888
|
removed unused gmp.h to build libstrongswan without libgmp
|
2008-04-04 11:13:14 +00:00 |
|
|
Tobias Brunner
|
4c7e6112c5
|
and another
|
2008-04-03 15:22:06 +00:00 |
|
|
Tobias Brunner
|
471f923071
|
fixed two other memory leaks
|
2008-04-03 15:13:25 +00:00 |
|
|
Martin Willi
|
cce97b647a
|
redirecting all leak_report information to stderr
|
2008-04-03 11:25:08 +00:00 |
|
|
Martin Willi
|
6c45e62242
|
some code cleanups
|
2008-04-03 10:22:17 +00:00 |
|
|
Tobias Brunner
|
84b18d5fc7
|
replaced mutex in leak detective with thread scheduling
|
2008-04-03 09:24:35 +00:00 |
|
|
Tobias Brunner
|
8e91a36314
|
thread locking for sender and processor optimized
|
2008-04-03 09:19:12 +00:00 |
|
|
Martin Willi
|
6af29ccf33
|
configure option in strongswan.conf for thread count
|
2008-04-03 08:37:24 +00:00 |
|
|
Martin Willi
|
6e4e27f8de
|
updated test data to use correct encoding data
|
2008-04-03 06:45:17 +00:00 |
|
|
Andreas Steffen
|
196b28a470
|
demoted more notify debug messages to level 2
|
2008-04-02 19:15:05 +00:00 |
|
|
Andreas Steffen
|
f342cc08c0
|
make peer IP address and peer IP available to the xauth_module.verify_secret() method
|
2008-04-02 19:04:45 +00:00 |
|
|
Andreas Steffen
|
97da3d2de0
|
renamed AES_cbc_encrypt to SS_AES_cbc_encrypt due to name collision with OpenSSL library
|
2008-04-02 18:51:10 +00:00 |
|
|
Andreas Steffen
|
7a9d3ae471
|
support of force_keepalive parameter
|
2008-04-02 18:35:23 +00:00 |
|
|
Tobias Brunner
|
c3f803c4c6
|
fixing some memory leaks
|
2008-04-02 18:21:03 +00:00 |
|
|
Tobias Brunner
|
f049b29491
|
securing total_threads with the mutex while destroying the processor
|
2008-04-02 15:28:08 +00:00 |
|
|
Andreas Steffen
|
1ee637d8b1
|
generate debug output if ocsp response does not contain status information for a given certificate
|
2008-04-02 14:28:17 +00:00 |
|
|
Martin Willi
|
473eff33aa
|
updated TODO
|
2008-04-02 13:21:02 +00:00 |
|
|
Martin Willi
|
16f5dacd4b
|
added some NEWS for the 4.2 release
|
2008-04-02 13:20:46 +00:00 |
|
|
Martin Willi
|
d6bd078a65
|
updated RFCs/drafts
|
2008-04-02 13:20:14 +00:00 |
|
|
Martin Willi
|
513f20156a
|
fixed med_db test
|
2008-04-02 12:27:39 +00:00 |
|
|
Martin Willi
|
489e3da0ea
|
updated mediation database to public key authentication
added mysql table definition, test data
testcase
|
2008-04-02 12:25:14 +00:00 |
|
|
Martin Willi
|
e29ebcb1af
|
fixed compile warnings
|
2008-04-02 09:54:20 +00:00 |
|
|
Andreas Steffen
|
281d04502e
|
additional debug line makes certificate status checking more understandable
|
2008-04-02 06:25:59 +00:00 |
|
|
Andreas Steffen
|
9372f44c67
|
workaround for parsing IPv6 PSKs requires extract_last_token()
|
2008-04-01 20:40:29 +00:00 |
|
|
Andreas Steffen
|
080555e76a
|
demoted received notify debug message to level 2
|
2008-04-01 20:22:38 +00:00 |
|
|
Andreas Steffen
|
158a62c326
|
adapted ikev2 uml scenarios for the 4.2 version
|
2008-04-01 20:05:02 +00:00 |
|
|
Martin Willi
|
372b7ac7e2
|
added missing files for commit [3721]
|
2008-04-01 15:03:02 +00:00 |
|
|
Martin Willi
|
9d1c384b4b
|
loading of subjectPublicKeyInfo wrapped keys using KEY_ANY (openssl format)
testcase
|
2008-04-01 14:51:31 +00:00 |
|
|
Martin Willi
|
d5a9e6ff3a
|
and a fix for it
|
2008-04-01 14:26:31 +00:00 |
|