Martin Willi
fde7f5abf8
Correctly serve certificates if CERT_ANY requested
2009-09-21 15:34:29 +02:00
Martin Willi
c6a8990bc5
Enforce a local address of the same family as remote address
2009-09-21 15:30:40 +02:00
Martin Willi
c331bce51d
Return certificates of requested kind only
2009-09-21 14:43:57 +02:00
Andreas Steffen
8153be823b
plugin has been renamed to resolve
2009-09-20 22:03:23 +02:00
Andreas Steffen
399ce164ad
delete resolv_conf_* files
2009-09-20 21:59:36 +02:00
Andreas Steffen
af784261f5
all arguments must be read
2009-09-20 21:56:22 +02:00
Andreas Steffen
4819ec6a71
resolv_conf plugin renamed to resolve
2009-09-20 19:06:58 +02:00
Andreas Steffen
03f096df7e
adapt evaltest.dat to changed debug output
2009-09-20 17:23:24 +02:00
Andreas Steffen
d7f2ffcf11
renewed certs in dynamic-initiator/dynamic-responder scenarios
2009-09-19 08:18:42 +02:00
Andreas Steffen
6aa8d2c8bb
use new certificates
2009-09-19 00:26:55 +02:00
Andreas Steffen
05a6a77d85
eliminated double library_deinit()
2009-09-19 00:00:56 +02:00
Andreas Steffen
309b8b3956
keyids of renewed keys
2009-09-18 21:44:57 +02:00
Andreas Steffen
afcd0b9787
updated to renewed certs in SQL database
2009-09-18 21:22:37 +02:00
Andreas Steffen
bdfe17c79b
renewal of end entity certificates
2009-09-18 21:17:03 +02:00
Andreas Steffen
ddbb34093f
fixed --enable-eap-md5 and --enable-eap-gtc options
2009-09-18 18:23:26 +02:00
Andreas Steffen
d78a0262d1
backwards compatibility with SQL format
2009-09-18 15:48:24 +02:00
Martin Willi
c7a64d6f41
Use helper functions to handle (non-)skippable attributes
2009-09-18 15:08:43 +02:00
Martin Willi
e466139c91
Clients can handle AKA-Identity requests by sending the full identity
2009-09-18 14:51:35 +02:00
Martin Willi
85af7a89c6
nm uses the distributions trusted root CAs if none is explicitly specified
2009-09-18 14:34:27 +02:00
Andreas Steffen
d245f5cf33
some reformulations
2009-09-17 22:21:14 +02:00
Martin Willi
7aa495d9d0
get_private() in listcacerts requires a valid auth cfg
2009-09-17 12:47:03 +02:00
Martin Willi
4a03e85b37
Fixed nexthop lookup, used by source route installation
2009-09-16 13:55:32 +02:00
Martin Willi
36b7ba5ee3
Use continue to advance to next iteration
2009-09-16 13:32:47 +02:00
Martin Willi
075448fbc8
Complain about missing %defaultroute support only if one is actually used
2009-09-16 13:27:49 +02:00
Martin Willi
b538b606da
Use the default debug hook if possible
2009-09-16 13:16:00 +02:00
Martin Willi
5289249449
Default logger implementation can be modified by dbg_default_set_level/stream
2009-09-16 13:06:16 +02:00
Martin Willi
a474081f1f
Removed obsolete per-command debug level option
2009-09-16 12:52:56 +02:00
Martin Willi
4e1cade52f
Fixed loading of DER encoded certificate files
2009-09-16 11:24:35 +02:00
Andreas Steffen
934942dddb
corrected usage
2009-09-15 22:43:22 +02:00
Andreas Steffen
c657492705
pki --req generates a PKCS#10 certificate request
2009-09-15 22:33:32 +02:00
Andreas Steffen
edf30136b0
implemented ASN.1 encoding of PKCS#10 attributes
2009-09-15 21:55:44 +02:00
Andreas Steffen
8101695b32
fixed typo
2009-09-15 16:48:13 +02:00
Martin Willi
88fdf88a1f
Disable rtnetlink defaultroute lookup if pluto is disabled
...
As we do not support Pluto on BSD/Mac, exclude the Linux specific
rtnetlink routing lookup; Charon doesn't require it anyway.
2009-09-15 13:16:39 +02:00
Heiko Hund
aa5d446939
Get starter default route via rtnetlink
...
This patch changes the way routes are fetched from the kernel by starter.
The way it's currently done (via /proc) is limited to routes in the
"main" routing table. Routes from the "default" table are never seen by
starter. Starter may miss the default route even if it's set. Thus, default
routes are now read from the "main" and the "default" table.
The way this code behaves if more than one default route is found is slightly
different to before. Instead of bailing out it just chooses the one with the best
metric. I thought this was be a reasonable change.
2009-09-15 12:55:25 +02:00
Martin Willi
ae7452e87c
Handle pki --debug and --options in a generic way for all command
2009-09-15 11:53:46 +02:00
Martin Willi
4fdb9f6f74
pki tool supports single letter short options
2009-09-15 10:20:22 +02:00
Martin Willi
012f62a820
Exponents of a RSA key in openssl are optional (for PGP)
2009-09-15 09:33:00 +02:00
Martin Willi
b6b90b68a1
Added some NEWS
2009-09-15 09:13:31 +02:00
Martin Willi
9f45b19fe7
Use ID_KEY_ID as PGP user id, as it can contain any string
2009-09-15 08:45:08 +02:00
Martin Willi
e4be5ef8fb
Fall back to default credential set lookup if fingerprint lookup fails
2009-09-15 08:44:10 +02:00
Martin Willi
79c6f16212
Implemented support for preinstalled PGP certificates in charon
2009-09-15 08:23:48 +02:00
Martin Willi
4cb0e1bb76
Added basic support for PGP certificates (no trust relationships yet)
2009-09-15 08:23:48 +02:00
Martin Willi
88f3ffa1b1
Moved generic PGP parsing functions to pgp_utils.[ch]
2009-09-15 08:23:47 +02:00
Andreas Steffen
622e558cb0
pki --pub and --keyid accept pkcs10 as input
2009-09-15 06:24:14 +02:00
Martin Willi
0912f0d2bc
replaced the missed ${confdir} by ${sysconfdir}
2009-09-14 21:38:36 +02:00
Andreas Steffen
0001db115d
check if PKCS#10 version is 1
2009-09-14 19:38:57 +02:00
Andreas Steffen
29662a9b73
cosmetics
2009-09-14 19:29:05 +02:00
Andreas Steffen
5a4dee6dc4
enable debug level setting
2009-09-14 19:29:05 +02:00
Martin Willi
af0dfe4987
Fixed pluto certificate parsing
2009-09-14 17:18:43 +02:00
Martin Willi
b9fbd66587
Added support to build RSA keys from components in openssl
2009-09-14 14:29:10 +02:00
Martin Willi