Andreas Steffen
ed1813ff6f
added x as a wildcard for number of tests
2007-06-08 07:10:00 +00:00
Andreas Steffen
0b455e2e7b
pass eroutes now need explicit routes
2007-06-08 07:06:10 +00:00
Andreas Steffen
b7af55ac87
no need for left|rightnexthop parameter any more
2007-06-08 07:03:14 +00:00
Andreas Steffen
7a1f49c314
do not delete existing routes with NETKEY
2007-06-08 07:01:17 +00:00
Andreas Steffen
e93c68ba0d
_updown inserts routes only if a sourceip is defined
2007-06-06 13:37:43 +00:00
Andreas Steffen
ef01451916
insert route only in case of sourceip
2007-06-06 13:30:27 +00:00
Andreas Steffen
9bac1d6640
do not print nexthop in ipsec status[all]
2007-06-06 13:16:48 +00:00
Martin Willi
8e481be97a
included patch from Rene Mayrhofer to respect DESTDIR in make install
2007-06-06 05:55:18 +00:00
Andreas Steffen
d0a6ed9a3c
version bump to 4.1.4
2007-05-26 19:07:39 +00:00
Andreas Steffen
b5463662d2
version bump to 4.1.4
2007-05-26 19:05:34 +00:00
Andreas Steffen
ad8c6c60dc
moved assignment of CERT_UNKNOWN
2007-05-25 14:04:39 +00:00
Andreas Steffen
2b34eafbc0
changed exceeded to reached
2007-05-25 11:42:00 +00:00
Andreas Steffen
3f9834a491
log trust pathlen
2007-05-25 11:41:06 +00:00
Andreas Steffen
3367fa8b74
fixed html output
2007-05-25 11:33:49 +00:00
Andreas Steffen
41e16cf4cf
libfreeswan kernel header problem fixed
2007-05-25 11:17:16 +00:00
Andreas Steffen
89eeedc243
included a certificate label in the is_trusted() method
2007-05-25 11:10:35 +00:00
Martin Willi
998ca0ea9c
updated NEWS for 4.1.3
2007-05-25 11:06:03 +00:00
Andreas Steffen
60b44bbe62
stop dave in posttest.dat
2007-05-25 09:29:10 +00:00
Andreas Steffen
0bc543f1dc
multi-level-ca-strict scenario added
2007-05-25 09:23:24 +00:00
Andreas Steffen
238b92d632
virtual-ip-override scenario added
2007-05-25 09:22:42 +00:00
Andreas Steffen
845cfa025b
stop iptables on dave
2007-05-25 09:22:08 +00:00
Andreas Steffen
f44dbc639b
DBG1 level now shows stepping up through the certifiate hierarchy up to the trust anchor
2007-05-25 08:29:35 +00:00
Andreas Steffen
13b872ebd2
set certinfo status to CERT_UNKNOWN before crl and|or ocsp verification
2007-05-25 08:21:27 +00:00
Andreas Steffen
f2566a3bac
x509_t* argument in get_issuer() method is not constant any more because a short cut to the ca might be set
2007-05-25 08:17:29 +00:00
Andreas Steffen
fc92116296
fixed virtual-ip scenario
2007-05-25 07:28:00 +00:00
Andreas Steffen
ea7f3e1bca
version bump to 4.1.3
2007-05-25 07:27:33 +00:00
Andreas Steffen
64bf6e564b
added parsing of charging and group attributes
2007-05-25 07:26:33 +00:00
Andreas Steffen
babb69109f
version bump to 4.1.3
2007-05-25 07:25:38 +00:00
Martin Willi
532137e70f
fixed man page
2007-05-25 07:19:49 +00:00
Martin Willi
8e79d8d3de
updated man-page for left/rightsourceip
2007-05-25 07:15:18 +00:00
Martin Willi
1f2a0f8098
removed paranoid module checking
2007-05-25 05:45:41 +00:00
Martin Willi
1fa9bdc4fb
added compatibility names (pluto) for sha2 algorithms (sha2_256, ...)
2007-05-25 05:44:53 +00:00
Andreas Steffen
8c06e9c0ed
added #define LDAP_DEPRECATED in order to use old ldap_init() function
2007-05-24 12:09:48 +00:00
Andreas Steffen
3e4eac0b63
removed unneeded libdes files speed.c and des_opts.c
2007-05-24 12:08:44 +00:00
Andreas Steffen
0749196612
cecho changes in UML scripts
2007-05-23 22:24:47 +00:00
Andreas Steffen
c502b1b4c6
added virtual-ip scenario
2007-05-23 21:41:05 +00:00
Andreas Steffen
02ee40ad6a
defined ietfAttr_t type and its destroy function
2007-05-23 19:43:24 +00:00
Andreas Steffen
8fbac48e26
removed old FreeS/WAN cvs revision entries
2007-05-23 19:27:48 +00:00
Andreas Steffen
2911f4ee37
added #include <linux/types.h> required by 2.6.21 linux headers
2007-05-23 19:27:02 +00:00
Martin Willi
76042f8471
proper thread cancellation when using the charon->interfaces
2007-05-23 09:08:13 +00:00
Martin Willi
0f6b068259
fixed crash when using 0.0.0.0/0 subnets
2007-05-23 06:33:22 +00:00
Martin Willi
b1450b48a0
removed misleading warning when rekeying
2007-05-23 06:32:41 +00:00
Martin Willi
16878f6823
support for virtual IP definition on client side:
...
if leftsourceip is defined, it is requested.
server may define rightsourceip=%config to accept any,
or it may overwrite it using rightsourceip.
if server does not return an IP, client enforces its configured leftsourceip.
2007-05-22 13:49:31 +00:00
Martin Willi
a06c068191
fixed memleak
2007-05-22 09:38:42 +00:00
Martin Willi
905438735a
using local address as gateway in installed routes
2007-05-22 07:47:16 +00:00
Andreas Steffen
3eb9630071
support of left|rightgroups parameter
2007-05-20 15:38:36 +00:00
Andreas Steffen
9a590819a2
reduced crl validity of research and sales ca to 15 days
2007-05-19 19:47:24 +00:00
Andreas Steffen
3388e7674d
fixed nextUpdate and until behaviour in the non-strict case
2007-05-19 19:46:13 +00:00
Andreas Steffen
4756b7aa5d
set rightca= to root CA
2007-05-18 13:19:47 +00:00
Andreas Steffen
9619b0d33a
added multi-level-ca-revoked scenario
2007-05-18 13:18:28 +00:00