 Andreas Steffen
|
5298777ad8
|
treat sig_alg and algorithm comparison in a consistent way over all certificate types
|
2008-03-26 13:10:36 +00:00 |
|
|
Andreas Steffen
|
26930a8c3e
|
certificate factory can load certs from file
|
2008-03-25 22:28:27 +00:00 |
|
|
Andreas Steffen
|
ff98c85b57
|
added component BUILD_FROM_FILE
|
2008-03-25 13:26:33 +00:00 |
|
|
Andreas Steffen
|
13bec89740
|
renamed certificate field in x509_cert.c to encoding
|
2008-03-25 12:22:12 +00:00 |
|
|
Andreas Steffen
|
84a5c6a679
|
added ac.c
|
2008-03-25 10:13:57 +00:00 |
|
|
Andreas Steffen
|
3e6ee16478
|
defined *_create_from_file() constructors in libstrongswan/credentials/certificates
|
2008-03-25 10:12:45 +00:00 |
|
|
Andreas Steffen
|
63cb8a7fee
|
fixed refence counts before calling attribute certificate factory
|
2008-03-25 09:39:23 +00:00 |
|
|
Andreas Steffen
|
9bb8d23e17
|
corrected some doxygen entries
|
2008-03-22 08:15:18 +00:00 |
|
|
Andreas Steffen
|
855606efd4
|
optimized self-signed certificate detection
|
2008-03-21 20:37:08 +00:00 |
|
|
Andreas Steffen
|
36617c1ad5
|
shortened debug output
|
2008-03-21 20:36:19 +00:00 |
|
|
Andreas Steffen
|
02fd225ea5
|
detect trusted self-signed before trust chain verification
|
2008-03-21 19:10:55 +00:00 |
|
|
Andreas Steffen
|
ffce5db1b7
|
self-signed certificates were not marked by x509_cert.c
|
2008-03-21 19:07:12 +00:00 |
|
|
Andreas Steffen
|
c081a9bfe6
|
added ietf group attribute support to attibute certificate factory
|
2008-03-21 16:59:21 +00:00 |
|
|
Andreas Steffen
|
93da2684b6
|
fixed memory allocation problem in openac
|
2008-03-21 15:58:48 +00:00 |
|
|
Andreas Steffen
|
104c96a63c
|
added BUILD_SERIAL component and fixed several ac bugs
|
2008-03-21 12:44:15 +00:00 |
|
|
Andreas Steffen
|
a2083c30d5
|
added VALIDATION_UNKNOWN to cert_validation_names
|
2008-03-21 11:54:12 +00:00 |
|
|
Andreas Steffen
|
6ac3a7acbb
|
added credential factory support for BULD_NOT_BEFORE_TIME and BUILD_NOT_AFTER_TIME
|
2008-03-21 11:32:33 +00:00 |
|
|
Andreas Steffen
|
b6377673e7
|
added x509_ac_builder plugin
|
2008-03-21 10:52:11 +00:00 |
|
|
Andreas Steffen
|
3d48f3301a
|
initialize library in openac
|
2008-03-21 10:42:05 +00:00 |
|
|
Andreas Steffen
|
754c1c0ef7
|
suppress IKEv2-specific policy flags in pluto. Patch contributed by Heiko Hund from Astaro.
|
2008-03-21 09:34:40 +00:00 |
|
|
Andreas Steffen
|
112482d3f4
|
optimized debug output of credential_manager.c
|
2008-03-21 09:28:25 +00:00 |
|
|
Andreas Steffen
|
dd7924f033
|
removed build.h include
|
2008-03-20 15:25:02 +00:00 |
|
|
Andreas Steffen
|
bdec2e4f52
|
refactored openac and its attribute certificate factory
|
2008-03-20 15:23:52 +00:00 |
|
|
Andreas Steffen
|
25c9637222
|
modified debug text
|
2008-03-20 15:22:26 +00:00 |
|
|
Andreas Steffen
|
2b522ab450
|
added $
|
2008-03-20 09:30:07 +00:00 |
|
|
Andreas Steffen
|
384ebaa57a
|
included utils/linked_list.h
|
2008-03-20 09:28:58 +00:00 |
|
|
Andreas Steffen
|
1a9ad33e3b
|
cleaned up includes
|
2008-03-20 09:24:22 +00:00 |
|
|
Andreas Steffen
|
84d8ff64cd
|
increased debug level in trust chain verification for auditing purposes
|
2008-03-19 17:04:09 +00:00 |
|
|
Andreas Steffen
|
c912c3d382
|
log nextUpdate of crls and ocsp responses
|
2008-03-19 13:11:29 +00:00 |
|
|
Andreas Steffen
|
2590faa330
|
fixed stupid bug in fetch_ocsp()
|
2008-03-19 12:36:15 +00:00 |
|
|
Andreas Steffen
|
ae8715f956
|
attempt to achieve consistent debugging output
|
2008-03-19 12:06:38 +00:00 |
|
|
Andreas Steffen
|
8d49b51f8b
|
made is_newer() a certificate_t method
|
2008-03-18 10:36:08 +00:00 |
|
|
Andreas Steffen
|
2df655134c
|
activated svn:keywords on all UML scripts
|
2008-03-01 10:25:52 +00:00 |
|
|
Andreas Steffen
|
7a691623c1
|
support of gnome-terminal in UML testing
|
2008-02-29 20:17:28 +00:00 |
|
|
Andreas Steffen
|
37940132a4
|
take down eth1 interface on alice via ssh
|
2008-02-29 17:00:07 +00:00 |
|
|
Andreas Steffen
|
2571708bea
|
added sleep due to new scheduler in 2.6.24 kernel
|
2008-02-29 15:52:25 +00:00 |
|
|
Andreas Steffen
|
a983ce889a
|
version bumps
|
2008-02-29 15:51:16 +00:00 |
|
|
Andreas Steffen
|
b48bdac20b
|
improved P2P_NAT debugging
|
2008-02-27 20:30:39 +00:00 |
|
|
Andreas Steffen
|
a11ea97db8
|
version bump to 4.2.0
|
2008-02-15 18:44:29 +00:00 |
|
|
Andreas Steffen
|
6859f760d9
|
release of 4.1.11 bug fix version
|
2008-02-14 21:26:21 +00:00 |
|
|
Andreas Steffen
|
13aa41d663
|
added support of --enable-eap-sim
|
2008-02-14 21:25:38 +00:00 |
|
|
Andreas Steffen
|
af0de6272d
|
disable eth1 interface of UML host alice after booting
|
2008-02-14 21:24:54 +00:00 |
|
|
Andreas Steffen
|
f750247f5e
|
added sleep 1 to ikev1/xauth-rsa-nosecret scenario
|
2008-02-14 21:23:48 +00:00 |
|
|
Andreas Steffen
|
298c9c8eed
|
some websites append a newline character to a DER-encoded binary blob
|
2008-02-05 19:27:05 +00:00 |
|
|
Andreas Steffen
|
e6b50b3fce
|
EAP-SIM server and client test module added
|
2008-02-04 20:55:57 +00:00 |
|
|
Andreas Steffen
|
663fedbe44
|
implemented IKEV2 EAP-SIM server and client test module that use triplets stored in a file. For details see the scenario 'ikev2/rw-eap-sim-rsa'
|
2008-02-04 14:52:06 +00:00 |
|
|
Andreas Steffen
|
7094e840bf
|
use the new options_t class
|
2008-02-04 14:46:43 +00:00 |
|
|
Andreas Steffen
|
b388a81848
|
fixed tabs
|
2008-02-04 14:45:50 +00:00 |
|
|
Andreas Steffen
|
0730fec464
|
refactored optionsfrom as in an object-oriented way using the options_t class. Eliminated all memory leaks
|
2008-02-04 14:44:14 +00:00 |
|
|
Andreas Steffen
|
9514d26c5c
|
parse signedData object with empty content
|
2008-02-02 00:29:03 +00:00 |
|
|
Andreas Steffen
|
f4a459473e
|
build_signedData() now computes messageDigest attribute
|
2008-02-01 22:26:01 +00:00 |
|
|
Andreas Steffen
|
7734c01677
|
added set_messageDigest() and get_messageDigest() methods
|
2008-02-01 22:24:51 +00:00 |
|
|
Andreas Steffen
|
e8bfe74289
|
extended and debugged PKCS#7 signedData support
|
2008-02-01 14:19:26 +00:00 |
|
|
Andreas Steffen
|
daccbee77e
|
added S/MIME capabilities OID
|
2008-02-01 10:40:03 +00:00 |
|
|
Andreas Steffen
|
26e9e2ecd9
|
changed tabs to 4 spaces
|
2008-02-01 01:01:17 +00:00 |
|
|
Andreas Steffen
|
a561f74d45
|
two bug fixes
|
2008-02-01 00:15:27 +00:00 |
|
|
Andreas Steffen
|
071e037124
|
next_payload must be of type u_int8_t
|
2008-02-01 00:07:56 +00:00 |
|
|
Andreas Steffen
|
b0e40caafb
|
NAT-T conditions were not inherited during IKE_SA rekeying
|
2008-01-29 01:41:47 +00:00 |
|
|
Andreas Steffen
|
5862981ce9
|
fixed comment
|
2008-01-27 20:59:22 +00:00 |
|
|
Andreas Steffen
|
f19628490c
|
implemented pkcs1_encrypt()
|
2008-01-27 20:58:52 +00:00 |
|
|
Andreas Steffen
|
e575b3daff
|
fixed padding bug in RSA_encrypt()
|
2008-01-27 20:17:15 +00:00 |
|
|
Andreas Steffen
|
5bb8fcc074
|
added RCSID
|
2008-01-22 10:52:26 +00:00 |
|
|
Andreas Steffen
|
2e3d4743d3
|
added md2WithRSA algorithm identifier
|
2008-01-22 10:52:03 +00:00 |
|
|
Andreas Steffen
|
93eb6ec8a1
|
extended asn1_algorithmIdentifier() to SHA-2
|
2008-01-22 10:34:44 +00:00 |
|
|
Andreas Steffen
|
cd543a69a2
|
extended asn1_algorithmIdentifier() to SHA-2
|
2008-01-22 10:32:37 +00:00 |
|
|
Andreas Steffen
|
2d49eaa131
|
x509_t.build_encoding() now supports any hash algorithm
|
2008-01-22 01:32:12 +00:00 |
|
|
Andreas Steffen
|
a7419b07d1
|
fully implemented x509_create()
|
2008-01-22 01:09:19 +00:00 |
|
|
Andreas Steffen
|
c8b6375c5c
|
fixed destruction of generalNames linked list
|
2008-01-21 22:56:58 +00:00 |
|
|
Andreas Steffen
|
0be06e472a
|
fixed parsing and building of generalNames
|
2008-01-21 10:00:13 +00:00 |
|
|
Andreas Steffen
|
55dbc3fd7b
|
implemented rsa_private_key_t.get_public_key()
|
2008-01-21 00:36:38 +00:00 |
|
|
Andreas Steffen
|
b5d8c9779a
|
added rsa_public_key_create(mpz_t n, mpz_t e)
|
2008-01-21 00:34:41 +00:00 |
|
|
Andreas Steffen
|
d349a3d11a
|
added notBefore and notAfter to x509_create()
|
2008-01-21 00:30:26 +00:00 |
|
|
Andreas Steffen
|
dfc14c8480
|
added --with-plugindir option
|
2008-01-20 17:57:38 +00:00 |
|
|
Andreas Steffen
|
fb6d76cd5c
|
version bump to 4.2.0
|
2007-12-24 18:07:55 +00:00 |
|
|
Andreas Steffen
|
e4f5123ac7
|
add ip xfrm state test for ikev1 transport mode
|
2007-12-19 21:02:15 +00:00 |
|
|
Andreas Steffen
|
2f9f4f3a3d
|
version bumps
|
2007-12-19 21:01:19 +00:00 |
|
|
Andreas Steffen
|
85b1fd00f4
|
include pipe-thin-green icons in distribution
|
2007-12-19 21:00:52 +00:00 |
|
|
Andreas Steffen
|
c2a703619d
|
added a-v-m-c-w-med.png topology graph
|
2007-12-19 20:59:54 +00:00 |
|
|
Andreas Steffen
|
8a4e5a957e
|
added behind-same-nat p2p scenario
|
2007-12-19 17:55:08 +00:00 |
|
|
Andreas Steffen
|
aa1a730bfb
|
set nexthop default value to 0::0 in IPv6 connections
|
2007-12-19 00:49:32 +00:00 |
|
|
Andreas Steffen
|
e044510e5a
|
set --enable-eap-aka in UML scenarios
|
2007-12-19 00:47:56 +00:00 |
|
|
Andreas Steffen
|
1f490cb1ec
|
check ip xfrm state in IKEv1 and IKEv2 transport mode scenarios
|
2007-12-19 00:47:21 +00:00 |
|
|
Andreas Steffen
|
6a49300c55
|
added ipv6 transport mode scenarios for IKEv1 and IKEv2
|
2007-12-19 00:45:26 +00:00 |
|
|
Andreas Steffen
|
a37e8f32d8
|
updated rw-eap-aka-rsa scenario
|
2007-12-19 00:11:20 +00:00 |
|
|
Andreas Steffen
|
005861b47b
|
make config view in strongSwan manager look similar to ikesa view
|
2007-12-18 15:41:37 +00:00 |
|
|
Andreas Steffen
|
2a0ba292f2
|
sbindir is required in the PATH of ipsec
|
2007-12-12 22:27:40 +00:00 |
|
|
Andreas Steffen
|
52bb1876ec
|
sbindir is required in the PATH of _updown
|
2007-12-12 22:12:10 +00:00 |
|
|
Andreas Steffen
|
83e0d841a0
|
added ocsp cache bug fix to NEWS
|
2007-12-12 21:03:17 +00:00 |
|
|
Andreas Steffen
|
35b2b1e334
|
fixed error in the ordering of the certinfo_t records in the ocsp cache that caused multiple entries of the same serial number to be created. This was caused by the iterator_t method insert_after() that inserts a record in the first instead of the last position of a linked list if the end of the list is reached. Fix: use linked_list_t method insert_last() instead.
|
2007-12-12 20:25:50 +00:00 |
|
|
Andreas Steffen
|
c2bb1ecacb
|
define a minimum PATH environment
|
2007-12-12 14:56:35 +00:00 |
|
|
Andreas Steffen
|
6fa3dcba3c
|
aligned error messages
|
2007-12-12 14:54:28 +00:00 |
|
|
Andreas Steffen
|
81edb520b2
|
version bump to 4.1.10
|
2007-12-04 23:54:32 +00:00 |
|
|
Andreas Steffen
|
addc4b3ce4
|
removed redundant server reflexive endpoint debug message
|
2007-12-04 00:45:00 +00:00 |
|
|
Andreas Steffen
|
d7bf4e4279
|
added brackets in PKG_CHECK_MODULES
|
2007-12-03 23:12:39 +00:00 |
|
|
Andreas Steffen
|
3af513753a
|
improved P2P_ENDPOINT debugging
|
2007-12-03 23:06:17 +00:00 |
|
|
Andreas Steffen
|
89f112ff34
|
some return code changes proposed by Marius Tomaschewski
|
2007-11-29 18:27:04 +00:00 |
|
|
Andreas Steffen
|
0b72091970
|
ipsec and starter exit with LSB-compliant return codes
|
2007-11-28 17:02:12 +00:00 |
|
|
Andreas Steffen
|
a349dc58f1
|
bob is passive responder in p2pnat scenario
|
2007-11-26 22:24:08 +00:00 |
|
|
Andreas Steffen
|
5af3a03396
|
added USE_P2P UML compile option
|
2007-11-26 00:29:52 +00:00 |
|
|
Andreas Steffen
|
a19ad35c5b
|
added a-m-c-w-s-b-med.png topology graph
|
2007-11-26 00:28:29 +00:00 |
|