denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,386 Commits 1 Branch 0 Tags
f3e9eae28394943822fde4ad75c94c5e71384c55
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen f3e9eae283 the ikev1 scenarios need the x509 plugin 2009-10-06 14:38:34 +02:00
Andreas Steffen cf85e1319b streamlined output from get_validity() 2009-10-06 14:22:27 +02:00
Andreas Steffen afdaa9e5bf fixed serial number conversion from hex 2009-10-05 23:52:35 +02:00
Andreas Steffen 0da0f3fc3f delete group attributes after use 2009-10-05 23:17:36 +02:00
Andreas Steffen a9fe23cf53 stroke_list outputs group attributes 2009-10-05 23:13:51 +02:00
Andreas Steffen 408e46a324 ipsec pki --issue suports --flag authServer option 2009-10-05 22:44:01 +02:00
Andreas Steffen ce40bf5def ipsec pki --issue supports --flag ocspSigning option 2009-10-05 21:20:42 +02:00
Andreas Steffen fc12e3cd2e pluto now uses x509 plugin for attribute certificate handling 2009-10-05 07:24:28 +02:00
Andreas Steffen 0ea9cbc6e9 fixed output of authKeyID 2009-10-02 21:20:45 +02:00
Andreas Steffen 0aa5cea248 mark embedded parsing in debug mode 2009-10-02 20:54:15 +02:00
Andreas Steffen ec0abe4ab5 added some notBefore/notAfter debugging info 2009-10-02 20:14:09 +02:00
Andreas Steffen daaedcb9c2 verify correctness of X.509 versions 2009-10-02 17:49:51 +02:00
Andreas Steffen 6f2f08fb8d added all missing RFC 5280 OIDs 2009-10-02 14:10:27 +02:00
Andreas Steffen 03a52ce4e5 created ikev1/mode-config-multiple scenario 2009-10-01 09:42:35 +02:00
Andreas Steffen eb4544f773 fixes multiple IPsec SAs with IKEv1 Mode Config 2009-10-01 09:41:35 +02:00
Andreas Steffen 70e81857f9 generate known OIDs dynamically 2009-09-30 11:49:32 +02:00
Andreas Steffen 0c8d08068e pluto's crl handling now uses the x509 plugin 2009-09-30 09:29:15 +02:00
Andreas Steffen 5406c65702 scepclient uses pkcs10 from libstrongswan 2009-09-28 05:52:20 +02:00
Andreas Steffen c72080cea8 abbreviated struct connection by connection_t 2009-09-27 23:49:37 +02:00
Andreas Steffen 0eff9f6539 pluto and scepclient now use the x509 plugin for certificates 2009-09-27 23:09:30 +02:00
Andreas Steffen 727b0f11e2 whitelist Curl_client_write 2009-09-27 23:07:21 +02:00
Andreas Steffen 02bf410aa9 certificate subject DNs are in double quotes 2009-09-23 22:03:52 +02:00
Andreas Steffen b362cc2382 streamlining of credential loading debug output 2009-09-23 21:55:48 +02:00
Andreas Steffen 1806024105 added fix of PKCS#7 wrapped certificates to NEWS 2009-09-23 21:50:56 +02:00
Andreas Steffen 45cc7ba403 added and fixed debug output of version information 2009-09-23 16:21:18 +02:00
Andreas Steffen c0be0977e7 fixed PKCS#7 wrapped certificate parsing 2009-09-23 15:52:30 +02:00
Andreas Steffen 677322b1bf enforce coding rules 2009-09-22 21:50:28 +02:00
Andreas Steffen b62ce860c1 enforce coding rules 2009-09-22 20:55:10 +02:00
Andreas Steffen b88bbe8aa1 set XFRM_STATE_AF_UNSPEC flag 2009-09-22 20:55:10 +02:00
Andreas Steffen a28334720c adding additional flags to loaded X.509 certificates 2009-09-22 12:55:25 +02:00
Andreas Steffen b80fa9ca38 readying NEWS for the strongswan-4.3.5dr2 release 2009-09-22 12:44:58 +02:00
Andreas Steffen 4b15ee8cd9 shortened file loading debug output 2009-09-22 12:33:13 +02:00
Andreas Steffen 1271983ab9 computed hash-and-url for new certificates 2009-09-22 12:05:37 +02:00
Andreas Steffen 8153be823b plugin has been renamed to resolve 2009-09-20 22:03:23 +02:00
Andreas Steffen 399ce164ad delete resolv_conf_* files 2009-09-20 21:59:36 +02:00
Andreas Steffen af784261f5 all arguments must be read 2009-09-20 21:56:22 +02:00
Andreas Steffen 4819ec6a71 resolv_conf plugin renamed to resolve 2009-09-20 19:06:58 +02:00
Andreas Steffen 03f096df7e adapt evaltest.dat to changed debug output 2009-09-20 17:23:24 +02:00
Andreas Steffen d7f2ffcf11 renewed certs in dynamic-initiator/dynamic-responder scenarios 2009-09-19 08:18:42 +02:00
Andreas Steffen 6aa8d2c8bb use new certificates 2009-09-19 00:26:55 +02:00
Andreas Steffen 05a6a77d85 eliminated double library_deinit() 2009-09-19 00:00:56 +02:00
Andreas Steffen 309b8b3956 keyids of renewed keys 2009-09-18 21:44:57 +02:00
Andreas Steffen afcd0b9787 updated to renewed certs in SQL database 2009-09-18 21:22:37 +02:00
Andreas Steffen bdfe17c79b renewal of end entity certificates 2009-09-18 21:17:03 +02:00
Andreas Steffen ddbb34093f fixed --enable-eap-md5 and --enable-eap-gtc options 2009-09-18 18:23:26 +02:00
Andreas Steffen d78a0262d1 backwards compatibility with SQL format 2009-09-18 15:48:24 +02:00
Andreas Steffen d245f5cf33 some reformulations 2009-09-17 22:21:14 +02:00
Andreas Steffen 8101695b32 fixed typo 2009-09-15 16:48:13 +02:00
Andreas Steffen f561d6f2e9 changed prefix of crl_reason_t values from CRL_ to CRL_REASON_ 2009-08-31 23:21:50 +02:00
Andreas Steffen dc4aadc3f2 use crl_reason_t definition from <credentials/certificates/crl.h> 2009-08-31 23:05:45 +02:00
Andreas Steffen a63f62c03b use crl_reason_t definition from <credentials/certificates/crl.h> 2009-08-31 22:58:34 +02:00
Andreas Steffen 52673c4348 generation of keyid requires pkcs1 plugin 2009-08-30 22:55:40 +02:00
Andreas Steffen c9f74892cc clear RSA private key chunks after use 2009-08-30 19:12:29 +02:00
Andreas Steffen 1982096aa0 ASN.1 DER encoding of private key is not needed anymore 2009-08-30 19:05:43 +02:00
Andreas Steffen 26fa5a37d9 new UML scenario certs have SHA256 digest 2009-08-30 17:58:34 +02:00
Andreas Steffen 735628f3e3 removed position debug output 2009-08-30 17:37:27 +02:00
Andreas Steffen 2aa67d2636 .., but a comment might be helpful 2009-08-28 09:28:39 +02:00
Andreas Steffen 6be3f0f1d0 removed TODO reminder 2009-08-28 09:26:46 +02:00
Andreas Steffen be04eef270 allow choice of digest algorithm in certificate generation 2009-08-28 09:08:03 +02:00
Andreas Steffen e201f53e93 build_curve_signature() processes hash not data 2009-08-27 20:41:29 +02:00
Andreas Steffen 1dbaec2177 NID_hash and NID_ec_curve were interchanged 2009-08-27 20:28:41 +02:00
Andreas Steffen ac6a0d5038 verify_signature() now processes hash not data 2009-08-27 20:18:22 +02:00
Andreas Steffen c812802482 NID_hash and NID_ec_curver were interchanged 2009-08-27 20:11:49 +02:00
Andreas Steffen 78aa4ebd62 OID_EC_PUBLICKEY has a parameters field, defining the elliptic curve 2009-08-27 16:34:16 +02:00
Andreas Steffen 263872c47d added OID_EC_PUBLIC_KEY algorithmIdentifier 2009-08-27 16:07:59 +02:00
Andreas Steffen 050649ac41 cosmetics 2009-08-27 15:35:56 +02:00
Andreas Steffen fb70fc24d3 revoked soon-to-expire carol certificate 2009-08-27 13:36:02 +02:00
Andreas Steffen 87cb92d944 renewed expiring strongSwan certicates for UML scenarios 2009-08-27 13:21:04 +02:00
Andreas Steffen 277627043e pgp plugin required in ikev1/net2net-pgp-v3|v4 scenarios 2009-08-26 23:42:05 +02:00
Andreas Steffen 9df7699419 dnskey plugin required in ikev1/net2net-rsa scenario 2009-08-26 23:11:06 +02:00
Andreas Steffen 706c6abe70 ikev1 psk scenarios don't need pkcs1 and pem plugins 2009-08-26 22:46:39 +02:00
Andreas Steffen 7c512d8b21 fixed typo 2009-08-26 22:25:24 +02:00
Andreas Steffen 51a9db85f4 streamlined file loading labels 2009-08-26 22:02:00 +02:00
Andreas Steffen 289ce4ade6 use --outform consistantly 2009-08-26 18:55:18 +02:00
Andreas Steffen 2f1f17f137 the option has been changed to --outform 2009-08-26 18:41:19 +02:00
Andreas Steffen a05c4a856e added pki/.libs/pki to the libs 2009-08-26 18:27:04 +02:00
Andreas Steffen ca275b383f fixed two typos 2009-08-26 17:29:57 +02:00
Andreas Steffen 8bc2a8086c version bump to 4.3.5 2009-08-18 18:35:37 +02:00
Andreas Steffen fc0ed07c1f pruned OID tree 2009-08-18 18:24:26 +02:00
Andreas Steffen c8b543a6fc fixed wrong emailAddress OID introduced by revision c31687da 2009-08-18 17:52:00 +02:00
Andreas Steffen 2f5b1e0eb7 check success of library_init() 2009-08-14 22:13:51 +02:00
Andreas Steffen 12a699c58d fixed 4.3 refactoring error 2009-08-11 08:51:16 +02:00
Andreas Steffen 87079f58e1 added -module -avoid-version LDFLAGS 2009-08-11 01:06:45 +02:00
Andreas Steffen 8ddcac4c48 prepare CAMELLIA_CCM ESP encryption 2009-08-10 16:30:42 +02:00
Andreas Steffen 20af53fe33 add ikev1/esp-alg-aes-ctr scenario 2009-08-08 19:20:53 +02:00
Andreas Steffen 453c6aea16 added ikev2/esp-alg-aes-ctr scenario 2009-08-08 19:08:17 +02:00
Andreas Steffen 4b5b92bfee %llu correctly prints u_int64_t 2009-08-07 09:50:36 +02:00
Andreas Steffen 4a02deb088 printing u_int64_t caused segfault on 32-bit platforms 2009-08-07 08:47:29 +02:00
Andreas Steffen f53088c657 added openssl-ikev2/alg-camellia scenario 2009-08-06 16:48:41 +02:00
Andreas Steffen 5d8306de68 use SS_RC_FIRST and SS_RC_LAST 2009-08-06 16:42:44 +02:00
Andreas Steffen 3646c8a159 abort pluto or charon if initialization fails 2009-08-06 16:32:52 +02:00
Andreas Steffen 994b80b513 activated CAMELLIA_CBC cipher in openssl plugin 2009-08-05 22:46:53 +02:00
Andreas Steffen b6f739c13b support of SHA224-based certificate signatures 2009-08-05 22:01:44 +02:00
Andreas Steffen 10c13ed264 fixed dereferencing bug caused by bool type redefinition 2009-08-02 16:58:32 +02:00
Andreas Steffen f35f229fd6 implemented query_sa() for PFKEYv2 2009-08-02 11:46:33 +02:00
Andreas Steffen 47eb87d437 corrected interface definition 2009-07-31 08:57:55 +02:00
Andreas Steffen 3f720dc7c3 update usetime only if usebytes increase 2009-07-30 23:19:42 +02:00
Andreas Steffen 2ad51539f6 display transmitted bytes per SA 2009-07-30 21:33:19 +02:00
Andreas Steffen ecff28c5c5 fixe KW_END_FIRST..KW_END_LAST keyword range 2009-07-28 15:44:24 +02:00
Andreas Steffen acb34739e4 improved DPD error message 2009-07-22 22:30:21 +02:00