Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 64e06d4f8f Compare ending address in ts->equals, fixes redundant traffic selector elimination Martin Willi 2011-01-14 13:22:19 +01:00
• 983a5e88d3 Revert "Send INITIAL_CONTACT even if we have a unique policy" Martin Willi 2011-01-13 10:50:46 +01:00
• 9bac426bf3 Fixed memory cleanup if no DHCP transaction found for an OFFER Martin Willi 2011-01-12 15:17:08 +01:00
• 2082417df3 Force port update as responder when initiator switches to 4500 in IKE_AUTH Martin Willi 2011-01-12 13:54:46 +01:00
• 8ba805f4db Avoid variable name overloading Martin Willi 2011-01-12 13:54:13 +01:00
• 213281de04 terminate TNCCS 1.1 connection after sending recommendation Andreas Steffen 2011-01-10 07:22:02 +01:00
• 4c8e9708ca fixed XML syntax for TNCCS-Recommendation messages Andreas Steffen 2011-01-10 07:21:03 +01:00
• 59d1b15aea implemented check_and_build_recommendation() Andreas Steffen 2011-01-10 06:46:17 +01:00
• 21d96f44f7 correct numbering of batches Andreas Steffen 2011-01-10 05:08:48 +01:00
• 8d0d0f0fe9 initialize the reference count correctly Andreas Steffen 2011-01-10 05:08:07 +01:00
• f33966fe8f handle zero size Base64 conversions Andreas Steffen 2011-01-10 05:06:59 +01:00
• 8a284e0454 communicate DELETE state to IMCs and IMVs Andreas Steffen 2011-01-09 23:27:43 +01:00
• 719c33b41a Send INITIAL_CONTACT even if we have a unique policy Martin Willi 2011-01-10 11:54:10 +01:00
• 5fee822a93 implemented parsing of TNCCS 1.1 messages Andreas Steffen 2011-01-09 10:00:54 +01:00
• 33749b879c send notifyConnectionChange() to IMCs Andreas Steffen 2011-01-09 10:00:13 +01:00
• a226307f13 suiteb directory hasn't been moved to Master yet Andreas Steffen 2011-01-08 02:17:14 +01:00
• 8235528840 generate TNCCS-Error messages Andreas Steffen 2011-01-08 02:16:14 +01:00
• 1c4b4f76ad created process() method for TNCCS messages Andreas Steffen 2011-01-08 02:15:10 +01:00
• 96c4addcbd Added NEWS for ipsec.conf certpolicy and key strength options Martin Willi 2011-01-07 15:45:53 +01:00
• 44e513a320 Added support for trustchain key strength checking to rightauth option Martin Willi 2011-01-07 15:38:34 +01:00
• 6367de28ad Added a left/rightcertpolicy keyword to specify certificatePolicy requirements Martin Willi 2011-01-07 15:14:41 +01:00
• 1ed482d808 Fix nonce comparison in rekey collisions, lowest nonce loses Martin Willi 2011-01-07 13:32:28 +01:00
• 3a04dfaaf6 corrected naming of tnccs_reason_strings_msg_t object Andreas Steffen 2011-01-07 07:18:42 +01:00
• 87fd83a91e do not forget to advance node Andreas Steffen 2011-01-07 07:17:52 +01:00
• 1f7aad7f58 libcharon plugins depend on libtls and/or libsimaka Andreas Steffen 2011-01-07 06:28:08 +01:00
• 3e348daae5 fixed cert_validator_t:validate interface Andreas Steffen 2011-01-07 05:41:01 +01:00
• d9e21bf180 implemented TNCCS 1.1 without libtnc Andreas Steffen 2011-01-07 05:29:04 +01:00
• cfa190bb7c compute memory requirement for PEM-encoding correctly Andreas Steffen 2011-01-07 05:28:17 +01:00
• fb1e7df13f Added delta CRL NEWS Martin Willi 2011-01-05 18:20:11 +01:00
• 77eee25f5a Added constraints plugin NEWS Martin Willi 2011-01-05 18:15:44 +01:00
• f078346476 Added conftest NEWS Martin Willi 2011-01-05 18:09:49 +01:00
• 41ed02940e Added NEWS about INITIAL_CONTACT support Martin Willi 2011-01-05 18:05:09 +01:00
• 6f5892f5c7 Destroy existing IKE_SAs with same identities when receiving INITIAL_CONTACT Martin Willi 2011-01-05 16:44:01 +01:00
• a4a1e24d37 Send INITIAL_CONTACT for the first IKE_SA if it has a unique policy Martin Willi 2011-01-05 15:58:38 +01:00
• 240bd7dbb7 Migrated ike_sa_manager_t to INIT/METHOD macros, some cleanups Martin Willi 2011-01-05 15:15:34 +01:00
• 5b0e6c593a Added option to use a different key when rebuilding AUTH Martin Willi 2010-12-23 15:40:09 +01:00
• 7721fc6695 Do not print empty DN identities as invalid Martin Willi 2010-12-23 15:22:32 +01:00
• 3fd3f8dea8 Added support for empty subjects DNs to pki --issue Martin Willi 2010-12-23 15:21:52 +01:00
• 97d30f0010 Added support for OCSP responder URIs to conftest Martin Willi 2010-12-23 15:00:34 +01:00
• 7b3740d958 Added support for delta CRL checking to revocation plugin Martin Willi 2010-12-23 14:51:00 +01:00
• 0110c26a04 Use incremented serial of base CRL when signing delta CRL Martin Willi 2010-12-23 14:50:04 +01:00
• 2e90006f96 Show base CRL of delta CRLs in listcrls Martin Willi 2010-12-23 14:40:37 +01:00
• 76cfaf13c1 Verify trustchain for each candidate certificate only once Martin Willi 2010-12-23 14:36:20 +01:00
• 3a89b3c52f Provide CRLs received in CERT payloads to trustchain verification Martin Willi 2010-12-23 12:18:15 +01:00
• 1a79d76abc Added an AUTH_HELPER for revocation certificates Martin Willi 2010-12-23 12:17:49 +01:00
• 968e5e665b Added support for CDPs to conftest Martin Willi 2010-12-23 11:54:17 +01:00
• 85b9e9be99 Added CDP support to mem_cred Martin Willi 2010-12-23 11:54:01 +01:00
• d3a18dade1 Check for issuer only if we actually got a CRL Martin Willi 2010-12-23 11:44:36 +01:00
• 06e6535151 Updated conftest README Martin Willi 2010-12-22 18:00:11 +01:00
• dbec133eb8 Added support for custom file loggers, loglevel settings Martin Willi 2010-12-22 17:19:28 +01:00
• c5f213cc0f Check inhibitAnyPolicy in constraints plugin Martin Willi 2010-12-22 16:08:20 +01:00
• b088fd4a76 Slightly renamed different policyConstraints to distinguish them better Martin Willi 2010-12-22 15:58:00 +01:00
• 6a339fffc7 Added inhibitAnyPolicy constraint support to pki tool Martin Willi 2010-12-22 15:52:19 +01:00
• 07eee80401 Added support for inhibitAnyPolicy constraint to x509 plugin Martin Willi 2010-12-22 15:52:02 +01:00
• b3d359e58f Use a generic getter for all numerical X.509 constraints Martin Willi 2010-12-22 15:10:03 +01:00
• b1703d6cb3 Check inhibitPolicyMapping in constraints plugin Martin Willi 2010-12-22 14:53:46 +01:00
• 927120a128 Check requireExplicitPolicy in constraints plugin Martin Willi 2010-12-22 10:38:06 +01:00
• 8469625fdc Include subject cert to temporary auth info before completing trustchain Martin Willi 2010-12-22 11:49:16 +01:00
• 5eae41c6d8 Fail silently when trying to convert IPv6 address to v4 family host Martin Willi 2010-12-22 11:42:44 +01:00
• 6aba6ff061 Pass an additional anchor flag to validate() hook if we reach the root CA Martin Willi 2010-12-22 10:43:06 +01:00
• 09e319d419 Always pass auth info to validate(), use pathlen to check for user certificate Martin Willi 2010-12-22 10:34:58 +01:00
• 98ef286580 Merge test config into suite config, instead of having two distinct configs Martin Willi 2010-12-20 15:49:00 +01:00
• de8521f6f2 Added support for delta CRLs to pki tool Martin Willi 2010-12-17 17:00:32 +01:00
• 55e4d8982f Added support for delta CRLs to x509 plugin Martin Willi 2010-12-17 16:53:00 +01:00
• 1019cad161 Moved CRL distribution point building to an exportable function Martin Willi 2010-12-17 16:52:04 +01:00
• a6478a0402 Simplified format of x509 CRL URI parsing/enumerator Martin Willi 2010-12-17 15:52:15 +01:00
• e24a02a28f Fail on critical extensions in openssl CRLs Martin Willi 2010-12-17 11:40:01 +01:00
• 51b7e9ce72 Respect enforce_critical setting in x509 plugin CRLs Martin Willi 2010-12-17 11:38:04 +01:00
• d14d3b31b8 Parse CRL extensions in a switch statement Martin Willi 2010-12-17 11:36:15 +01:00
• 6c547631c0 Respect policy mappings in certificatePolicy validation Martin Willi 2010-12-16 16:44:33 +01:00
• 58be32e88e Added a cert_policy option to conftest configurations Martin Willi 2010-12-16 16:18:11 +01:00
• 5595d2bcff Validate simple certificatePolicy inheritance Martin Willi 2010-12-16 11:24:52 +01:00
• 77a288e960 Added a certificate policy OID auth_cfg constraint Martin Willi 2010-12-16 11:25:32 +01:00
• a864eb37b1 Added policyConstraints support to pki tool Martin Willi 2010-12-15 17:46:04 +01:00
• a742d97fb8 Added support for policyConstraints to x509 plugin Martin Willi 2010-12-15 17:45:32 +01:00
• 5dba5852fc Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too Martin Willi 2010-12-15 16:42:30 +01:00
• 3ffc9d9a88 Added policyMappings support to pki tool Martin Willi 2010-12-15 14:30:09 +00:00
• 5a0caa4b3a Added policyMappings support to x509 plugin Martin Willi 2010-12-15 14:29:25 +00:00
• 5122fa1e02 Added policyMappings OID identifier Martin Willi 2010-12-15 14:28:31 +00:00
• 6c3ac04478 Added certificatePolicy options to pki tool Martin Willi 2010-12-15 14:31:04 +01:00
• 20bd78106e Added certificatePolicy support to x509 plugin Martin Willi 2010-12-15 14:08:20 +01:00
• 1038d9fee5 Added a null-safe strdup variant Martin Willi 2010-12-15 12:15:12 +01:00
• b0892d094c Fail when parsing unsupported critical extensions in openssl_x509 Martin Willi 2010-12-14 17:34:34 +01:00
• 2d3ae93832 Added CertificatePolicy OID identifier Martin Willi 2010-12-14 17:34:02 +01:00
• 7240e2266c Added command line tool for OID to DER conversion function Martin Willi 2010-12-14 14:49:17 +01:00
• feac4a8162 Added conversion functions between string OIDs and its DER encoding Martin Willi 2010-12-14 14:47:44 +01:00
• a6850b8499 Do not parse certificates with invalid version in openssl plugin Martin Willi 2010-12-13 14:22:00 +01:00
• a2b340764f Implemented NameConstraint matching in constraints plugin Martin Willi 2010-12-09 16:39:07 +01:00
• e6fbe5933b pki --issue/self support permitted/excluded NameConstraints Martin Willi 2010-12-09 16:29:22 +01:00
• 64bcaae203 pki --print prints NameConstraints Martin Willi 2010-12-09 13:34:17 +01:00
• 7eeb37dea9 Added support for generating NameConstraints in x509 plugin Martin Willi 2010-12-09 13:33:43 +01:00
• 7c325cee5c Added support for parsing NameConstraints in x509 plugin Martin Willi 2010-12-09 13:33:07 +01:00
• dbfbbec368 Added name constraint enumerator to x509 interface Martin Willi 2010-12-09 11:50:50 +01:00
• a199ef15e6 Migrated x509_cert_t to INIT/METHOD macros Martin Willi 2010-12-09 11:44:31 +01:00
• be8858e9b6 Moved X509 pathlen constraint checking to constraints plugin Martin Willi 2010-12-09 10:46:48 +01:00
• 01d3038137 Added plugin stub for advanced X509 constraint checking Martin Willi 2010-12-09 09:41:54 +00:00
• 0beb1d6fbb Added a hook to reset ESP sequence numbers Martin Willi 2010-12-10 18:18:24 +01:00
• 48ef001133 Accept a suffix to differentiate x509, crl, ecdsa and rsa files Martin Willi 2010-12-10 14:33:28 +01:00
• c7f7a0ba06 Use strncaseeq instead of strncasecmp Martin Willi 2010-12-10 14:25:19 +01:00
• 7a3e0a6321 Added a strncaseeq variant to the string comparison macros Martin Willi 2010-12-10 14:22:18 +01:00