Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• c7f7a0ba06 Use strncaseeq instead of strncasecmp Martin Willi 2010-12-10 14:25:19 +01:00
• 7a3e0a6321 Added a strncaseeq variant to the string comparison macros Martin Willi 2010-12-10 14:22:18 +01:00
• 04a1279f91 Added tfc_padding option, changes signature to master changes Martin Willi 2010-12-10 11:29:39 +01:00
• 6840a6fb98 CRL/OCSP validation stores trustchain information in auth_cfg Martin Willi 2010-12-07 17:53:13 +01:00
• 473d5aa868 Key strength checking stores all key sizes in auth_cfg, verifies all in complies() Martin Willi 2010-12-07 17:48:23 +01:00
• 37b3fad782 Install "ipsec" script with tools or conftest Martin Willi 2010-12-06 10:36:51 +01:00
• 6ffd9f88ce Use subject, not issuer, of CRL issuing certificate Martin Willi 2010-12-03 14:29:03 +01:00
• dffb176f2b CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation Martin Willi 2010-12-03 13:51:51 +01:00
• ece5ac2271 Parse and encode crlSign keyUsage flag in x509 plugin Martin Willi 2010-12-03 13:26:38 +01:00
• bb0cda2fa9 pki tool shows and builds crlSign keyUsage Martin Willi 2010-12-03 13:25:45 +01:00
• 6807c0ca2c Added a flag for X509 CRLSign keyUsage Martin Willi 2010-12-03 13:24:49 +01:00
• e49bd37b5d Remove x509_flag_names, flags do not work with ENUM() Martin Willi 2010-12-03 13:23:59 +01:00
• 7d7beaa1fa Use certificate CRLIssuer information to look up cacched CRLs or CDPs Martin Willi 2010-12-02 15:38:44 +01:00
• 630d58724a Added --crlissuer option to pki --issue Martin Willi 2010-12-02 15:37:28 +01:00
• 4e508517d7 Added support for CRL Issuers to x509 and OpenSSL plugins Martin Willi 2010-12-03 09:28:46 +00:00
• 9992cb1c10 Generate payload to rebuild_auth, works with injected unknown payloads Martin Willi 2010-12-01 14:56:26 +01:00
• 5c95bf7b93 Move rebuild_auth functionality to a standalone hook Martin Willi 2010-12-01 14:33:57 +01:00
• a73e040cd5 Added key strength constraints support to conftest Martin Willi 2010-11-25 15:27:31 +01:00
• 963b4d9477 Added key strength constraints for RSA or ECDSA trustchains Martin Willi 2010-11-25 15:26:51 +01:00
• 586070d2ce Implemented hook to log traffic selectors Martin Willi 2010-11-25 13:54:31 +01:00
• 6bd3a1c220 The set_reserved() hook rebuilds AUTH if it mangles ID payload fields Martin Willi 2010-11-25 12:32:41 +01:00
• 5f15faebc8 Include the used reserved bytes from ID payloads in AUTH calculation Martin Willi 2010-11-25 11:35:43 +01:00
• 502edf425f Migrated psk/pubkey_authenticators to INIT/METHOD macros Martin Willi 2010-11-25 11:13:04 +01:00
• b5bbc9506c Extended set_reserved hook to mangle sa_payload substructures Martin Willi 2010-11-25 10:55:29 +01:00
• 54f2bdd656 Added substructure enumerators to sa_payload, proposal_substructure Martin Willi 2010-11-25 10:55:08 +01:00
• 9ca5d0280e Moved check if packet already encoded to ike_sa, avoids message() hook invocation twice Martin Willi 2010-11-24 18:09:06 +01:00
• a6da3795d6 The set_ike_version hook supports version flag mangling Martin Willi 2010-11-24 17:45:39 +01:00
• 2813be18f5 Added a message method to set the "higher version supported" flag Martin Willi 2010-11-24 17:45:12 +01:00
• 357e960e40 Implemented hook to toggle initiator flag in IKE header Martin Willi 2010-11-24 17:22:16 +01:00
• 446a4537e5 Implemented a hook to set reserved bits Martin Willi 2010-11-24 14:42:08 +00:00
• 166a2a45d9 Added reserved bit mangling wrapper functions to message Martin Willi 2010-11-24 16:56:46 +01:00
• 15a612efb2 Use payload_get_field() to look up payload fields Martin Willi 2010-11-24 17:07:45 +01:00
• e662d62a76 Implemented a generic payload field lookup function Martin Willi 2010-11-24 16:52:49 +01:00
• bf029696c6 Reserved field get parsed/generated like any other bit/byte field Martin Willi 2010-11-24 16:44:48 +01:00
• c93c7a7560 Added member fields for reserved bits and bytes in all payloads Martin Willi 2010-11-24 16:34:16 +01:00
• 1b671248c2 Migrated vendor_id_payload to INIT/METHOD macros Martin Willi 2010-11-24 14:42:22 +01:00
• 102adb9bfd Migrated ts_payload to INIT/METHOD macros Martin Willi 2010-11-24 14:36:47 +01:00
• 1f5b2bec4b Use enumerator instead of deprecated iterator Martin Willi 2010-11-24 14:21:01 +01:00
• 9f8ecff2e2 Migrated transform_substructure to INIT/METHOD macros Martin Willi 2010-11-24 14:17:44 +01:00
• 6844c156fc Removed obsolete clone mehtod from proposal_substructure Martin Willi 2010-11-24 13:58:33 +01:00
• 6b69c03d13 Migrated transform_attribute to INIT/METHOD macros Martin Willi 2010-11-24 12:14:31 +01:00
• 423745b652 Migrated traffic_selector_substructre to INIT/METHOD macros Martin Willi 2010-11-24 12:00:53 +01:00
• 3f0a2af2a6 Migrated notify_payload to INIT/METHOD macros Martin Willi 2010-11-24 11:54:12 +01:00
• e3c4c6a5ac Migrated nonce_payload to INIT/METHOD macros Martin Willi 2010-11-24 11:42:29 +01:00
• 19ee0762e7 Migrated ke_payload to INIT/METHOD macros Martin Willi 2010-11-24 11:37:34 +01:00
• ffb980572f Migrated id_payload to INIT/METHOD macros Martin Willi 2010-11-24 11:29:18 +01:00
• f5705d0fa6 Use standard ID getter in log_id hook Martin Willi 2010-11-24 11:28:58 +01:00
• a11cfe2960 Migrated cp_payload to INIT/METHOD macros Martin Willi 2010-11-24 11:16:37 +01:00
• bda62cedb9 Migrated configuration_attribute to INIT/METHOD macros Martin Willi 2010-11-24 11:07:28 +01:00
• 1cc58e7ed2 Migrated certreq_payload to INIT/METHOD macros Martin Willi 2010-11-24 11:01:27 +01:00
• 2aa1bffb02 Migrated cert_payload to INIT/METHOD macros Martin Willi 2010-11-24 10:53:38 +01:00
• 9c0ccf5e26 Migrated auth_payload to INIT/METHOD macros Martin Willi 2010-11-24 10:38:58 +01:00
• 64293410b7 Implemented a hook to toggle the IKE message request flag Martin Willi 2010-11-23 13:55:32 +01:00
• 19a18de98a Implemented hook to modify IKE header SPIs Martin Willi 2010-11-23 13:53:00 +01:00
• 6b50b9115d Fixed transport mode configuration option Martin Willi 2010-11-23 13:34:08 +01:00
• dbcdd4a46d Disable MOBIKE in conftesting, as it changes port floating behavior Martin Willi 2010-11-23 11:43:23 +01:00
• 1535913aed Load plugins only once, even if listed twice Martin Willi 2010-11-23 11:06:46 +01:00
• 9a99b745c0 Preload plugins configured in tests Martin Willi 2010-11-23 10:58:39 +01:00
• 401818651e Moved generic infrastructure initialization to libcharon_init(), allows us to preload plugins Martin Willi 2010-11-23 10:50:36 +01:00
• 74a5dfe537 Added IKE options to configure source/destination ports Martin Willi 2010-11-23 10:45:45 +01:00
• 448db6d9c0 Added IKE config option to fake NAT situations Martin Willi 2010-11-23 10:43:48 +01:00
• f2116c6de7 Show SPI in proposal logging hook Martin Willi 2010-11-23 10:12:32 +01:00
• 42133e33bd Implemented a hook to inject custom proposals Martin Willi 2010-11-23 10:01:42 +01:00
• 47e0b50725 Fixed error reporting Martin Willi 2010-11-23 10:01:23 +01:00
• 5d82b2d321 Remove unused variable Martin Willi 2010-11-23 08:42:57 +01:00
• 7ab6429b3c Added hook to log ID payload type and data Martin Willi 2010-11-15 14:56:34 +01:00
• c6f2bac1b8 Added hook to log received KE group Martin Willi 2010-11-15 14:47:06 +01:00
• 6dd6b0ef95 Added a hook to modify proposal numbers Martin Willi 2010-11-15 14:37:02 +01:00
• 5dca645d46 Added a hook to print received proposals, including number Martin Willi 2010-11-15 14:07:17 +01:00
• b080f393ce Added a hook to alter the payload length field of arbitrary payloads Martin Willi 2010-11-15 11:54:35 +01:00
• 2ecbd6186e Do not update payload length during generation, allows hooks override payload length Martin Willi 2010-11-15 11:53:20 +01:00
• d58127af84 Do not recalculate payload header length after generation, payloads do length calculation Martin Willi 2010-11-15 11:52:30 +01:00
• 90994a8a5c Support loading of certificate revocation lists Martin Willi 2010-11-12 16:10:00 +01:00
• 00d8b9a638 Implemented a hook that recreates a valid incoming IKE_AUTH response, even if AUTH_FAILED Martin Willi 2010-11-12 15:40:29 +01:00
• 2a19095e4c Apply IKE major/minor version set on message to IKE header Martin Willi 2010-11-11 16:37:26 +01:00
• 7e7c7c1d84 Added setters for IKE major/minor version to ike_header Martin Willi 2010-11-11 16:35:35 +01:00
• 1c22c529a7 Migrated ike_header_t to INIT/METHOD macros Martin Willi 2010-11-11 16:32:57 +01:00
• a0a760795e Added hook to set arbitrary IKE major/minor versions in message headers Martin Willi 2010-11-11 16:12:58 +01:00
• 2712b113c7 Prefer test specific over suite specific configuration Martin Willi 2010-11-11 15:52:32 +01:00
• e330360f77 Added a force_hookie hook that requests a COOKIE independent of our COOKIE mechanism Martin Willi 2010-11-11 15:38:52 +01:00
• 1f42c80942 The add_payload hook supports replacing existing payloads of the same type Martin Willi 2010-11-10 17:41:51 +01:00
• 60b14332b3 Fix insertion of non hex encoded payload data Martin Willi 2010-11-10 17:41:23 +01:00
• b0f6b31db8 Fixed length calculation of unknown payload Martin Willi 2010-11-10 17:40:43 +01:00
• 50b28ad8a4 Added a hook to set the critical bit on arbitrary payloads Martin Willi 2010-11-10 17:23:57 +01:00
• c67de660d2 Move critical bit checking to ike_sa, notify payload includes unsupported payload type Martin Willi 2010-11-10 16:47:56 +01:00
• e7099aa24e Handle all error notifies in CREATE_CHILD_SA exchanges Martin Willi 2010-11-10 16:30:25 +01:00
• 24384f352f Support encoding of UKNOWN_DATA Martin Willi 2010-11-10 16:29:59 +01:00
• 958c1d75d7 Moved our substructure identifiers above 255, ignore private payloads properly Martin Willi 2010-11-10 15:41:46 +01:00
• fea3aa5d12 Check for exceeded payload count even if we have a found one flagged as sufficient Martin Willi 2010-11-10 15:34:38 +01:00
• 9b2ed9501f Added a hook to inject custom payloads with critical bit Martin Willi 2010-11-10 14:26:03 +01:00
• ca93b54e65 Added a constructor for custom uknown payloads Martin Willi 2010-11-10 14:21:23 +01:00
• b6c796464d Use the payloads actual type in unknown_payload_t Martin Willi 2010-11-10 14:17:03 +01:00
• 9431023ce6 Migrated unknown payload to INIT/METHOD macros Martin Willi 2010-11-10 13:56:18 +01:00
• 7814c74970 Added a short README about the conftest utility Martin Willi 2010-11-09 15:37:41 +01:00
• a784c9e030 Specify the type of the certificate to load, currently X509 only Martin Willi 2010-11-09 14:19:59 +01:00
• 4a2f7f05df Be a little more verbose about cert payload injection Martin Willi 2010-11-09 12:05:30 +01:00
• a60b892841 Support hook suffixes to use the same hook multiple times Martin Willi 2010-11-09 11:17:20 +01:00
• e5e71e46d9 Support arbitrary suffixes for actions, same action multiple times Martin Willi 2010-11-09 11:07:37 +01:00
• cf594ca411 Added a hook to ignore specific messages Martin Willi 2010-11-09 10:19:56 +01:00
• c146c3c4e1 Ingore messages with exchange type altered to UNDEFINED in message() hook Martin Willi 2010-11-09 10:19:09 +01:00