-
1009e5c3bc
Include suiteb test suite config in distribution
Martin Willi
2010-11-08 16:45:48 +01:00
-
b70abdac2b
Fixed loading of credentials using a relative path
Martin Willi
2010-11-02 16:12:29 +01:00
-
52e6df0cdc
Implemented a add_notify hook to inject arbitrary Notify payloads
Martin Willi
2010-11-02 15:51:56 +01:00
-
89fda1abb5
Moved message()-hook invocation to generate_message(), catch pre-generated IKE_SA_INITs, too
Martin Willi
2010-11-02 15:49:09 +01:00
-
f2986524d9
Implemented a hook to unsort payloads in messages
Martin Willi
2010-11-02 14:55:18 +01:00
-
e6c6a4d304
Support removal of payloads from messages
Martin Willi
2010-11-02 14:30:45 +01:00
-
363ec8986c
Added a message_t option to disable automatic payload sorting
Martin Willi
2010-11-02 14:21:38 +01:00
-
6260e6fe12
Added a fist hook to fill up IKE_AUTH messages with dummy certificates (1.1.1/1.2.1)
Martin Willi
2010-11-02 12:14:03 +01:00
-
dacf658036
Implemented cert payload constructor for custom encoding types
Martin Willi
2010-11-02 12:13:03 +01:00
-
3b3e5c0de5
Fix segfault if config not found
Martin Willi
2010-11-02 12:12:42 +01:00
-
73a3013f7c
Read actions from test config, delayed execution
Martin Willi
2010-10-29 15:45:58 +02:00
-
6c2d466b90
Support manually triggerd DPD check, even if DPD disabled in config
Martin Willi
2010-10-29 15:36:19 +02:00
-
3f759bb75b
Load private keys from suite and test configs
Martin Willi
2010-10-29 11:55:19 +02:00
-
a13c1d649f
Load certificates from both, suite and test config
Martin Willi
2010-10-29 11:47:25 +02:00
-
d1041fa463
Load test and suite specific connection configurations
Martin Willi
2010-10-29 10:34:08 +02:00
-
f452a5a1f8
Load hooks based on listener dynamically
Martin Willi
2010-10-26 10:51:28 +02:00
-
b318e0ab57
Load certificates from global suite configuration file
Martin Willi
2010-10-21 16:36:40 +02:00
-
e78ec86d27
Added a Suite B conftest utility skeleton using libcharon
Martin Willi
2010-10-19 14:42:47 +02:00
-
65697c2734
Added a CIDR notation based host constructor
Martin Willi
2010-10-29 09:54:15 +02:00
-
84f89634ef
Moved logger initialization from libcharon to charon
Martin Willi
2010-10-29 09:39:19 +02:00
-
3d653727a8
removed superfluous s
Andreas Steffen
2011-01-05 04:09:19 +01:00
-
97613b3b1a
remove private_
Andreas Steffen
2011-01-05 03:44:57 +01:00
-
d0eb22333e
remove private_
Andreas Steffen
2011-01-05 03:44:28 +01:00
-
ac46c8be5c
cosmetics in debug output
Andreas Steffen
2011-01-05 02:44:27 +01:00
-
69e8407d51
detect fragmentation of PB-TNC batch
Andreas Steffen
2011-01-05 02:41:36 +01:00
-
dcde152265
fixed typo
Andreas Steffen
2011-01-02 06:52:32 +01:00
-
53e2c2e283
replaced spaces by tabs
Andreas Steffen
2010-12-30 03:45:08 +01:00
-
4aab89274c
version bump to 4.5.1dr5
Andreas Steffen
2010-12-27 13:49:32 +01:00
-
3a8ef88e51
commas are required
Andreas Steffen
2010-12-27 08:26:29 +01:00
-
203bfa4ee8
added Sansar Choinambuu to copryright.c
Andreas Steffen
2010-12-27 08:24:01 +01:00
-
fc293c96b2
unset RADIUSHOSTS after before loading new scenario
Andreas Steffen
2010-12-27 06:26:17 +01:00
-
e3504d6011
added missing tfc argument to kernel_pfkey_ipsec interface
Andreas Steffen
2010-12-27 05:53:36 +01:00
-
1c7a729100
set tfcv3 flag TRUE in ha_dispatcher
Andreas Steffen
2010-12-26 23:10:57 +01:00
-
27a66f9393
implemented wrap around of registered IKEv1 algorithm names
Andreas Steffen
2010-12-26 17:11:02 +01:00
-
690d5aed59
disable AEAD crypto algorithm if no key size is supported
Andreas Steffen
2010-12-25 16:14:55 +01:00
-
d733a3babb
disable crypto algorithm if no key size is supported
Andreas Steffen
2010-12-25 16:11:50 +01:00
-
c6a043fad0
log if an AEAD algorithm does not support a given key size
Andreas Steffen
2010-12-25 15:53:15 +01:00
-
90288c76f8
log if a crypto algorithm does not support a given key size
Andreas Steffen
2010-12-25 15:49:29 +01:00
-
16b6606e5f
wrap list of IKEv2 algorithms after 120 characters per line
Andreas Steffen
2010-12-24 17:29:51 +01:00
-
cb6be85cfe
Migrated stroke_list_t to INIT/METHOD macros
Andreas Steffen
2010-12-24 14:29:09 +01:00
-
d77c6c49a9
printed plugin names have a hyphen
Andreas Steffen
2010-12-24 05:53:27 +01:00
-
33bfdf6f37
Fixed public key construction from PKCS#11 private key
Martin Willi
2010-12-23 10:29:01 +01:00
-
905ab99fc1
eliminated whitespace
Andreas Steffen
2010-12-21 17:51:27 +01:00
-
cf16a29dac
Migrated child_create_t to INIT/METHOD macros
Andreas Steffen
2010-12-21 17:45:10 +01:00
-
78a547c999
Added NEWS for af-alg plugin
Martin Willi
2010-12-20 10:22:14 +01:00
-
23a737eb29
Probe for supported AF_ALG algorithms, register dynamically
Martin Willi
2010-11-08 14:56:23 +01:00
-
4ee5d97d57
Register algorithms with dependencies only if dependency available
Martin Willi
2010-11-08 14:20:15 +01:00
-
d214ebdf82
Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish)
Martin Willi
2010-11-08 11:58:01 +01:00
-
533151692f
Implemented PRFs using AF_ALG
Martin Willi
2010-11-08 11:41:01 +01:00
-
06eb35efb0
Use the AF_ALG wrapper in hasher, crypter and signer
Martin Willi
2010-11-08 10:02:35 +00:00
-
1b5de7ce3b
Use a generic AF_ALG wrapper for common operations
Martin Willi
2010-11-08 10:59:54 +01:00
-
a5c973b955
Implemented crypter on top of AF_ALG
Martin Willi
2010-11-06 11:03:12 +01:00
-
e75e1c9473
Implemented signer interface using AF_ALG
Martin Willi
2010-11-05 21:29:43 +01:00
-
6f08911321
Implemented hasher based on AF_ALG
Martin Willi
2010-11-05 15:55:53 +00:00
-
fd67d39e93
Added Linux AF_ALG header
Martin Willi
2010-11-05 16:15:51 +01:00
-
71c87e3483
Added plugin stub for AF_ALG
Martin Willi
2010-11-05 16:15:13 +01:00
-
e44817df6f
Added NEWS about TFC padding
Martin Willi
2010-12-20 09:51:33 +01:00
-
6c302616f1
Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality
Martin Willi
2010-11-30 19:19:56 +01:00
-
55df72e6d5
Do not use TFC padding if peer does not support ESPv3
Martin Willi
2010-12-08 12:41:51 +00:00
-
37788b1d06
Added a TFC padding option to child_cfg
Martin Willi
2010-12-08 12:41:04 +00:00
-
d86bb6ef4d
Implemented Traffic Flow Confidentiality padding in kernel_interface
Martin Willi
2010-11-30 16:17:30 +00:00
-
814873a356
version bump to 4.5.1dr4
Andreas Steffen
2010-12-19 09:46:59 +01:00
-
f10e72341c
cast enumerated algorithm type as int
Andreas Steffen
2010-12-18 20:24:53 +01:00
-
840e7044e2
updated NEWS with new ipsec listalgs feature
Andreas Steffen
2010-12-18 16:44:29 +01:00
-
5932f41fcc
trace back crypto algorithms to the plugins that registered them
Andreas Steffen
2010-12-18 16:31:01 +01:00
-
ae09bc62bc
Added news about changes regarding strongswan.conf.
Tobias Brunner
2010-12-17 17:32:14 +01:00
-
5889e864a0
Moved "Reading values" section, typo fixed.
Tobias Brunner
2010-12-17 17:31:42 +01:00
-
c0cadd7182
version bump to 4.5.1dr3
Andreas Steffen
2010-12-15 08:56:32 +01:00
-
19b7f763b3
Install selectors on transport mode IPsec SAs.
Jiri Bohac
2010-12-13 15:28:40 +01:00
-
e27554144a
increase sleep time in mediation scenarios
Andreas Steffen
2010-12-12 21:54:44 +01:00
-
7883e7ce33
fixed bug in mem_cred.c:add_crl()
Andreas Steffen
2010-12-12 21:34:27 +01:00
-
836d9a795b
reverted Connection ID to capital letters
Andreas Steffen
2010-12-12 12:55:14 +01:00
-
dc1b2eb2e8
fixed a bug in enum_from_name() function
Andreas Steffen
2010-12-12 12:54:36 +01:00
-
458e7779a8
reorganized ikev2/rw-eap-tnc scenarios
Andreas Steffen
2010-12-12 12:51:14 +01:00
-
146e9123a2
added the ikev2/rw-eap-tnc-20 scenario
Andreas Steffen
2010-12-12 10:47:16 +01:00
-
1b7e081bfa
NEWS for the 4.5.1dr2 release
Andreas Steffen
2010-12-12 10:46:43 +01:00
-
c2e625514d
some more cosmetics
Andreas Steffen
2010-12-12 10:19:54 +01:00
-
41216e6518
final cosmetics in PB-TNC debug output
Andreas Steffen
2010-12-12 10:17:43 +01:00
-
54eb669dd5
implemented PB-TNC message parsing checks
Andreas Steffen
2010-12-12 00:42:31 +01:00
-
3a4695dc5e
some code optimizations
Andreas Steffen
2010-12-11 00:52:53 +01:00
-
781730b86a
support handshake retry requests
Andreas Steffen
2010-12-10 23:41:12 +01:00
-
4ca368d223
the PB-TNC protocol is working
Andreas Steffen
2010-12-10 23:21:13 +01:00
-
512d2e045f
refactored message handling
Andreas Steffen
2010-12-10 17:09:21 +01:00
-
af1e3ff567
do not accept results and recommendation messages from clients
Andreas Steffen
2010-12-10 17:04:11 +01:00
-
7289f4424a
defined some additional Private Enterprise Numbers
Andreas Steffen
2010-12-10 14:58:33 +01:00
-
5988fc0dfd
define pb_tnc_state_machine_t object
Andreas Steffen
2010-12-10 14:56:40 +01:00
-
755f2419a5
debug cosmetics
Andreas Steffen
2010-12-10 11:54:51 +01:00
-
cf5866b9c0
Renamed purgex509/crl to purgecerts/crls to be consistent with list commands
Martin Willi
2010-12-10 11:16:39 +01:00
-
7e7efa647e
implemented handling of received PB-TNC messages
Andreas Steffen
2010-12-10 11:16:08 +01:00
-
6aa144ddb7
Added options to flush CRLs/X509 certs from the cert cache
Martin Willi
2010-12-09 10:06:25 +01:00
-
68fada37b1
refactored PB-TNC state machine in receive direction
Andreas Steffen
2010-12-09 23:38:38 +01:00
-
7382a639fb
refactored PB-TNC state machine in send direction
Andreas Steffen
2010-12-09 23:18:55 +01:00
-
4333c48a1b
pb_tnc_batch_t class implements parsing and building of PB-TNC batches
Andreas Steffen
2010-12-09 21:33:12 +01:00
-
2f942ba67d
fixed memory corruption
Andreas Steffen
2010-12-08 12:12:15 +01:00
-
86993d6b90
Never register IKE_SA during checkout_new, as rekeying keeps it checked out
Martin Willi
2010-12-07 11:41:41 +01:00
-
e6f42b0721
Include the destination net in the policy priority calculation.
Tobias Brunner
2010-12-07 11:58:09 +01:00
-
4332cd7f95
added newline
Andreas Steffen
2010-12-07 09:02:55 +01:00
-
faccd69068
re-introduced comment
Andreas Steffen
2010-12-07 09:01:28 +01:00
-
a42aaed64f
Migrated stroke_control_t to INIT/METHOD macros
Andreas Steffen
2010-12-07 08:58:57 +01:00
-
d31aec9fa7
Migrated stroke_plugin_t to INIT/METHOD macros
Andreas Steffen
2010-12-07 08:01:45 +01:00