 Martin Willi
|
6eacaffc72
|
Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word reads
|
2009-10-05 14:06:32 +02:00 |
|
|
Martin Willi
|
3b836fc759
|
Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word reads
|
2009-10-05 13:32:41 +02:00 |
|
|
Martin Willi
|
587ebae722
|
Distinguish invalid free()s between corrupted magic and invalid pointer
|
2009-10-05 11:02:54 +02:00 |
|
|
Martin Willi
|
f12d8cf719
|
Do not increase the invalid-KE/Cookie retry counter for additional keyingtry attempts
|
2009-09-24 14:49:41 +02:00 |
|
|
Martin Willi
|
cf76c42903
|
Do not create a replacement IKE_SA if we have CHILD_SAs to route only
|
2009-09-24 14:49:41 +02:00 |
|
|
Martin Willi
|
17859fe6cf
|
Right-align short options in pki usage
|
2009-09-24 11:28:53 +02:00 |
|
|
Martin Willi
|
840743479a
|
Use mysql_config to query MySQL LIBS and CFLAGS
|
2009-09-23 12:45:03 +02:00 |
|
|
Martin Willi
|
0406ed7a16
|
Fixed a crash in source address lookup
|
2009-09-23 11:18:30 +02:00 |
|
|
Martin Willi
|
a7f79ee9c1
|
Define ME for all charon plugins
|
2009-09-23 11:13:27 +02:00 |
|
|
Martin Willi
|
e20b792108
|
Correctly handle --enable-mediation option
|
2009-09-23 10:50:00 +02:00 |
|
|
Martin Willi
|
b262680175
|
Emit a ALERT_SHUTDOWN_SIGNAL before shutting down the daemon
|
2009-09-22 17:00:00 +02:00 |
|
|
Martin Willi
|
f1092e20f4
|
Fixed encoding of hash-and-url cert payload
|
2009-09-22 10:07:04 +02:00 |
|
|
Martin Willi
|
cb64b21217
|
Do not assign SIM version to a volatile buffer on stack
|
2009-09-22 09:11:35 +02:00 |
|
|
Martin Willi
|
91cb348cc2
|
CA certificates are looked up using the subjectPublicKeyInfo keyid
|
2009-09-21 18:13:25 +02:00 |
|
|
Martin Willi
|
c84b139a87
|
Credential backends use has_fingerprint() methods to select keys/certificates
|
2009-09-21 17:03:00 +02:00 |
|
|
Martin Willi
|
640ed4d5a5
|
Public/Private keys implement a has_fingerprint() method
|
2009-09-21 16:47:25 +02:00 |
|
|
Martin Willi
|
fde7f5abf8
|
Correctly serve certificates if CERT_ANY requested
|
2009-09-21 15:34:29 +02:00 |
|
|
Martin Willi
|
c6a8990bc5
|
Enforce a local address of the same family as remote address
|
2009-09-21 15:30:40 +02:00 |
|
|
Martin Willi
|
c331bce51d
|
Return certificates of requested kind only
|
2009-09-21 14:43:57 +02:00 |
|
|
Martin Willi
|
c7a64d6f41
|
Use helper functions to handle (non-)skippable attributes
|
2009-09-18 15:08:43 +02:00 |
|
|
Martin Willi
|
e466139c91
|
Clients can handle AKA-Identity requests by sending the full identity
|
2009-09-18 14:51:35 +02:00 |
|
|
Martin Willi
|
85af7a89c6
|
nm uses the distributions trusted root CAs if none is explicitly specified
|
2009-09-18 14:34:27 +02:00 |
|
|
Martin Willi
|
7aa495d9d0
|
get_private() in listcacerts requires a valid auth cfg
|
2009-09-17 12:47:03 +02:00 |
|
|
Martin Willi
|
4a03e85b37
|
Fixed nexthop lookup, used by source route installation
|
2009-09-16 13:55:32 +02:00 |
|
|
Martin Willi
|
36b7ba5ee3
|
Use continue to advance to next iteration
|
2009-09-16 13:32:47 +02:00 |
|
|
Martin Willi
|
075448fbc8
|
Complain about missing %defaultroute support only if one is actually used
|
2009-09-16 13:27:49 +02:00 |
|
|
Martin Willi
|
b538b606da
|
Use the default debug hook if possible
|
2009-09-16 13:16:00 +02:00 |
|
|
Martin Willi
|
5289249449
|
Default logger implementation can be modified by dbg_default_set_level/stream
|
2009-09-16 13:06:16 +02:00 |
|
|
Martin Willi
|
a474081f1f
|
Removed obsolete per-command debug level option
|
2009-09-16 12:52:56 +02:00 |
|
|
Martin Willi
|
4e1cade52f
|
Fixed loading of DER encoded certificate files
|
2009-09-16 11:24:35 +02:00 |
|
|
Martin Willi
|
88fdf88a1f
|
Disable rtnetlink defaultroute lookup if pluto is disabled
As we do not support Pluto on BSD/Mac, exclude the Linux specific
rtnetlink routing lookup; Charon doesn't require it anyway.
|
2009-09-15 13:16:39 +02:00 |
|
|
Martin Willi
|
ae7452e87c
|
Handle pki --debug and --options in a generic way for all command
|
2009-09-15 11:53:46 +02:00 |
|
|
Martin Willi
|
4fdb9f6f74
|
pki tool supports single letter short options
|
2009-09-15 10:20:22 +02:00 |
|
|
Martin Willi
|
012f62a820
|
Exponents of a RSA key in openssl are optional (for PGP)
|
2009-09-15 09:33:00 +02:00 |
|
|
Martin Willi
|
b6b90b68a1
|
Added some NEWS
|
2009-09-15 09:13:31 +02:00 |
|
|
Martin Willi
|
9f45b19fe7
|
Use ID_KEY_ID as PGP user id, as it can contain any string
|
2009-09-15 08:45:08 +02:00 |
|
|
Martin Willi
|
e4be5ef8fb
|
Fall back to default credential set lookup if fingerprint lookup fails
|
2009-09-15 08:44:10 +02:00 |
|
|
Martin Willi
|
79c6f16212
|
Implemented support for preinstalled PGP certificates in charon
|
2009-09-15 08:23:48 +02:00 |
|
|
Martin Willi
|
4cb0e1bb76
|
Added basic support for PGP certificates (no trust relationships yet)
|
2009-09-15 08:23:48 +02:00 |
|
|
Martin Willi
|
88f3ffa1b1
|
Moved generic PGP parsing functions to pgp_utils.[ch]
|
2009-09-15 08:23:47 +02:00 |
|
|
Martin Willi
|
0912f0d2bc
|
replaced the missed ${confdir} by ${sysconfdir}
|
2009-09-14 21:38:36 +02:00 |
|
|
Martin Willi
|
af0dfe4987
|
Fixed pluto certificate parsing
|
2009-09-14 17:18:43 +02:00 |
|
|
Martin Willi
|
b9fbd66587
|
Added support to build RSA keys from components in openssl
|
2009-09-14 14:29:10 +02:00 |
|
|
Martin Willi
|
06a8df11d9
|
pki tool can issue/self-sign certificates with OCSP URIs
|
2009-09-11 17:17:56 +02:00 |
|
|
Martin Willi
|
6dc57cd02e
|
x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations
|
2009-09-11 17:16:22 +02:00 |
|
|
Martin Willi
|
6d24a5d746
|
added lost session cookie buffer
|
2009-09-11 16:23:15 +02:00 |
|
|
Martin Willi
|
3b878dae7e
|
Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro
|
2009-09-11 15:39:35 +02:00 |
|
|
Martin Willi
|
3a7bd9bd49
|
pki tool can issue certificates with CRL distribution points
|
2009-09-11 15:36:22 +02:00 |
|
|
Martin Willi
|
881b259943
|
x509 plugin supports encoding of CRL distribution points
|
2009-09-11 15:36:22 +02:00 |
|
|
Martin Willi
|
31f87c29c7
|
double check session id has been initialized
|
2009-09-10 20:51:43 +02:00 |
|
|
Martin Willi
|
356b2b2780
|
pass NULL to library_init() to load settings from default file
|
2009-09-10 18:52:42 +02:00 |
|
|
Martin Willi
|
5b03a350fc
|
use NULL to load plugins from default plugin directory
|
2009-09-10 18:52:42 +02:00 |
|
|
Martin Willi
|
6de28173f0
|
remove obsolete @brief doxygen tags
|
2009-09-10 18:52:42 +02:00 |
|
|
Martin Willi
|
6d8e913ab6
|
Use wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t
|
2009-09-10 18:52:42 +02:00 |
|
|
Martin Willi
|
48a606b5ff
|
libfast uses enumerator instead of deprecated iterator
|
2009-09-10 18:52:42 +02:00 |
|
|
Martin Willi
|
d73f453c29
|
Updated x509 plugin to the new builder API
|
2009-09-10 16:20:21 +02:00 |
|
|
Martin Willi
|
91ef5c66ab
|
Updated pubkey plugin to the new builder API
|
2009-09-10 16:20:20 +02:00 |
|
|
Martin Willi
|
872176d350
|
Updated pkcs1 plugin to the new builder API
|
2009-09-10 16:20:20 +02:00 |
|
|
Martin Willi
|
43224e9527
|
Updated pgp plugin to the new builder API
|
2009-09-10 16:20:20 +02:00 |
|
|
Martin Willi
|
de408caf93
|
Updated pem plugin to the new builder API
|
2009-09-10 16:20:19 +02:00 |
|
|
Martin Willi
|
30c06407c6
|
Updated openssl plugin to the new builder API
|
2009-09-10 16:20:19 +02:00 |
|
|
Martin Willi
|
1086d00e41
|
Updated gmp plugin to the new builder API
|
2009-09-10 16:20:19 +02:00 |
|
|
Martin Willi
|
a94acb58a2
|
Updated gcrypt plugin to the new builder API
|
2009-09-10 16:20:18 +02:00 |
|
|
Martin Willi
|
26135ed9bb
|
Updated dnskey plugin to the new builder API
|
2009-09-10 16:20:18 +02:00 |
|
|
Martin Willi
|
0a139eeac9
|
Updated agent plugin to the new builder API
|
2009-09-10 16:20:18 +02:00 |
|
|
Martin Willi
|
d3674e25a7
|
Updated pluto to the new builder API
|
2009-09-10 16:20:18 +02:00 |
|
|
Martin Willi
|
f678f5c77e
|
Replaced builder_t objects by simple builder_function_t functions
|
2009-09-10 16:20:17 +02:00 |
|
|
Martin Willi
|
3ce9438b60
|
Use dynamic registration/usage invocation of command types
|
2009-09-10 16:18:30 +02:00 |
|
|
Martin Willi
|
6be68cc1c7
|
splitted PKI tool to a file per command
|
2009-09-10 12:31:40 +02:00 |
|
|
Martin Willi
|
e5e6c6f43c
|
use generic option parsing with usage information
|
2009-09-10 11:18:41 +02:00 |
|
|
Martin Willi
|
63ee88745a
|
fixed memleak
|
2009-09-09 17:16:00 +02:00 |
|
|
Martin Willi
|
1080a51fd2
|
evaluate arguments of chunk_clone/clonea/alloc/alloca only once
|
2009-09-09 16:24:21 +02:00 |
|
|
Martin Willi
|
b5d31b3e56
|
pki tool supports subjectAltNames in certificates
|
2009-09-08 13:27:35 +02:00 |
|
|
Martin Willi
|
7631aac20c
|
x509 certificates support encoding of email, DNS and IP subjectAltNames
|
2009-09-08 13:17:41 +02:00 |
|
|
Martin Willi
|
d7be290643
|
non self-signed x509 certificates are encoded with authorityKeyIdentifier
|
2009-09-08 11:26:05 +02:00 |
|
|
Martin Willi
|
5c92524449
|
x509 CA certificates are encoded with a subjectKeyIdentifier
|
2009-09-08 11:02:49 +02:00 |
|
|
Martin Willi
|
8871e59c11
|
pki tool --issue/--verify operations require a CA with CA basicConstraint
|
2009-09-08 10:44:08 +02:00 |
|
|
Martin Willi
|
e4a4589606
|
pki tool can set CA basicConstraint on --self/--issued certificates
|
2009-09-08 10:39:04 +02:00 |
|
|
Martin Willi
|
8ab900dee9
|
x509 plugin supports encoding of CA basicConstraint extension
|
2009-09-08 10:38:02 +02:00 |
|
|
Martin Willi
|
58f34613e0
|
pki tool can issue certificates
|
2009-09-07 16:04:30 +02:00 |
|
|
Martin Willi
|
faa4bd49fb
|
use sysconfdir, no need for an additional confdir variable
|
2009-09-07 15:10:30 +02:00 |
|
|
Martin Willi
|
c0e56a663e
|
only add generated m4 files to include path
|
2009-09-07 15:10:01 +02:00 |
|
|
Martin Willi
|
b7b5653386
|
Use macros to define --with options
|
2009-09-07 15:00:45 +02:00 |
|
|
Martin Willi
|
b803bc82f4
|
Use macros to define --enable/--disable options
|
2009-09-07 15:00:45 +02:00 |
|
|
Martin Willi
|
e5efb5a03b
|
Added a .gitignore for generated m4 scripts
|
2009-09-07 15:00:44 +02:00 |
|
|
Martin Willi
|
e455ae1343
|
use m4/ autoconf subdirectory
|
2009-09-07 15:00:32 +02:00 |
|
|
Martin Willi
|
8b3b4a244e
|
Removed trailing whitespaces in configure.in/Makefile.am
|
2009-09-07 11:48:03 +02:00 |
|
|
Martin Willi
|
7b3814f75d
|
remove spaces before tabs at the beginning of lines (^( )+\t)
|
2009-09-04 15:02:11 +02:00 |
|
|
Martin Willi
|
b9b8a98f47
|
remove spaces within tabs (\t( )+\t)
|
2009-09-04 15:00:19 +02:00 |
|
|
Martin Willi
|
323f9f990f
|
replaces four spaces by tabs, where appropriate
|
2009-09-04 14:50:23 +02:00 |
|
|
Martin Willi
|
7daf5226b7
|
removed trailing spaces ([[:space:]]+$)
|
2009-09-04 13:46:09 +02:00 |
|
|
Martin Willi
|
dd2b6f3073
|
fixed memleak in rekey collissions
|
2009-09-03 18:09:29 +02:00 |
|
|
Martin Willi
|
72e2faf291
|
Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL
|
2009-09-03 17:32:41 +02:00 |
|
|
Martin Willi
|
9beb83868f
|
Use get_notify() to look up single notifies
|
2009-09-03 17:32:01 +02:00 |
|
|
Martin Willi
|
3e15f99189
|
accept octet strings in is_asn1() check
|
2009-09-03 15:35:05 +02:00 |
|
|
Martin Willi
|
d176994235
|
Use recursive source address lookup if we get a gateway only
|
2009-09-03 14:46:39 +02:00 |
|
|
Martin Willi
|
12a230ddb4
|
Complain about rw(un)lock errors
|
2009-09-03 14:46:28 +02:00 |
|
|
Martin Willi
|
8fb4edc4ff
|
handle plugin loading failures
|
2009-09-01 16:20:45 +02:00 |
|
|
Martin Willi
|
d6a45127dc
|
plugins marked with a '!' are handled as critical: cancel if loading fails
|
2009-09-01 16:08:28 +02:00 |
|
|
Martin Willi
|
9412bbfa7c
|
use subjectPublicKeyInfo hash for CA certificate lookup
|
2009-09-01 14:06:44 +02:00 |
|