denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,511 Commits 1 Branch 0 Tags
f52e9c1aa8a5a265741ba509cba8c652f0e01e07
Commit Graph
154 Commits
Author SHA1 Message Date
Andreas Steffen 8c45f0f102 added support for AUTH_HMAC_SHA1_160 2009-05-04 23:01:40 +02:00
Andreas Steffen bc2e33ca96 pluto and scepclient use the random plugin from libstrongswan 2009-04-30 18:31:48 +00:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk 
important change for developers: %Y replaces %D to print identities!
 2009-04-30 11:37:54 +00:00
Andreas Steffen f67eebccc8 changed RNG_REAL to RNG_TRUE 2009-04-29 09:13:20 +00:00
Andreas Steffen e67197a7f9 pluto and scepclient use the curl and ldap fetcher plugins 2009-04-29 08:09:35 +00:00
Martin Willi be0a03be64 set default CFLAGS globally, including -Wno-format 2009-04-27 11:34:07 +00:00
Andreas Steffen 08b2d288a1 scepclient and pluto use asn1 from libstrongswan 2009-04-20 20:53:38 +00:00
Martin Willi a44bb9345f merged multi-auth branch back into trunk 2009-04-14 10:34:24 +00:00
Martin Willi 1490ff4d9b updated Doxyfile 
properly close all doxygen groups
fixed remaining doxygen warnings
 2009-03-24 17:43:01 +00:00
Martin Willi 4a6b84a934 reintegrated eap-radius branch into trunk 2009-03-24 10:24:58 +00:00
Tobias Brunner 6e7c0b1e44 fixing DES ECB decryption 2009-03-12 18:38:13 +00:00
Tobias Brunner d25ce3701e printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms). 2009-03-12 18:07:32 +00:00
Tobias Brunner 7b76702587 ECB mode added to the DES plugin 2009-02-19 14:29:25 +00:00
Andreas Steffen e7c336c6ab added Id svn:keyword 2009-02-19 10:16:45 +00:00
Andreas Steffen 1e0d1ae213 support of MD4 hash 2009-02-19 10:06:58 +00:00
Tobias Brunner b8fa437fb7 adding MD4 and DES (ECB) to openssl plugin 2009-02-18 19:41:33 +00:00
Martin Willi 2241a29571 support for Padlock RNG 2008-12-18 16:21:05 +00:00
Martin Willi 5045eeba7b proper feature probing for padlock 2008-12-17 15:40:01 +00:00
Martin Willi aa5c5d3fde removed debugging leftovers 2008-12-08 19:15:38 +00:00
Martin Willi df68b54f4e basic x509 certificate generation 2008-12-08 15:29:36 +00:00
Andreas Steffen 9c674e7214 fixed refactoring error in openac 2008-12-04 04:34:49 +00:00
Tobias Brunner 83c42156a2 add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg. 2008-12-03 10:12:20 +00:00
Martin Willi b8cbb6451c ported some hard-to-merge cherries back to trunk :-/ 
shame, svn, shame: this was ways to complicated
	we should consider a switch to git...
 2008-11-12 15:09:24 +00:00
Martin Willi 479f295049 fixed compiler warnings issued by: 
gcc 4.3
	curl.h gcc type-checking
	glibc with enabled FORTIFY_SOURCE checking
 2008-11-11 18:37:19 +00:00
Martin Willi 2abc66b977 proper cleanup of openssl locking code 2008-11-05 12:37:37 +00:00
Martin Willi 3ac5a0db8c replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant 2008-11-05 11:29:56 +00:00
Martin Willi e13389a7f7 got rid of deprecated create_iterator_locked() 2008-11-05 08:32:38 +00:00
Martin Willi 7854475f42 OpenSSL requires a signature length of exactly RSA_size() 2008-11-04 14:05:42 +00:00
Martin Willi d4f08fe324 removed superfluous get_other_public_value in diffie_hellman_t interface 2008-11-04 13:12:11 +00:00
Martin Willi ddd7e6c656 fixed bignum export if BN_num_bytes() != DH_size() 2008-11-04 13:05:00 +00:00
Martin Willi dcbea444ee fixed memleak 2008-11-04 13:01:36 +00:00
Martin Willi 7de6da0c88 added locking mechanism for multithreaded use of OpenSSL 2008-11-03 16:14:12 +00:00
Martin Willi ee66fa625e removed accidently checked in debug code 2008-11-03 12:40:42 +00:00
Martin Willi d6dc9db5ef reverted 4541, does not fix the problem 2008-11-03 09:44:20 +00:00
Martin Willi e301a69d6c removed 0-byte truncation, fixes random Openssl RSA signature verification failures 2008-10-31 17:07:04 +00:00
Martin Willi a13862be61 fixed crash in openssl signature verification if sizeof(size_t) != sizeof(int) (64bit) 2008-10-31 17:05:40 +00:00
Andreas Steffen f5ab7f5f57 refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key 2008-10-28 01:59:01 +00:00
Andreas Steffen aeaa6a9b45 remove unused local DH_EXPONENT_ENTROPY definition 2008-10-27 00:02:22 +00:00
Andreas Steffen 21a45f2f2d use 512 bits of entropy for secret DH exponents 2008-10-26 23:53:52 +00:00
Andreas Steffen d1cbe55127 implemented ipsec listalgs as a stroke command 2008-10-08 07:00:13 +00:00
Andreas Steffen af09048e35 get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 hash consistent with the IKEv2 keyid philosophy 2008-10-08 03:35:52 +00:00
Andreas Steffen 95fd1dedb3 Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype 2008-10-08 01:19:26 +00:00
Martin Willi ceff3064fe using signed return value for read() 2008-09-30 06:27:50 +00:00
Martin Willi cdaf57ec34 fixed DH value range testing 2008-09-17 09:02:30 +00:00
Martin Willi 73f6886a50 checking mpz_export return value properly 
fixes a potential DoS attack if a DH value of zero gets processed
 2008-09-17 08:10:48 +00:00
Martin Willi 6af6f88a79 agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific private key from the agent 2008-09-04 08:35:11 +00:00
Martin Willi 21c9546321 libstrongswan agent plugin to use ssh-agent for RSA signatures 2008-09-02 11:04:26 +00:00
Martin Willi f7c17aa15c refactored credential builder 
allow enumeration of matching builders
	try a second builder if the first one fails
	builder clones resources internally on demand
	caller frees added resources on failure and success
	stricter handling of non-supported build parts
 2008-09-02 11:00:13 +00:00
Martin Willi e577ad3985 creating default IKE proposals dynamically using algorithm enumeration API 2008-08-28 11:07:57 +00:00