Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 6d989d356b use --addattr Andreas Steffen 2010-06-05 13:15:03 +02:00
• bdd28aa9c5 remove stray scenario files Andreas Steffen 2010-06-05 13:10:39 +02:00
• d43775ae58 Accept ARP requests with an ethernet trailer, but trim it Martin Willi 2010-06-02 10:05:43 +02:00
• d2c358742a Added a EAP-SIM/AKA backend reading triplets/quintuplets from a SQL database Martin Willi 2010-06-02 15:55:58 +02:00
• c77f4b305e fixed configuration attribute type determination Andreas Steffen 2010-06-02 11:51:53 +02:00
• 2f57e6da0e Disable close action for a redundant CHILD_SA resulting from a rekey collision Martin Willi 2010-06-02 11:43:39 +02:00
• fe02d99b96 Use wrapped getters for close/dpd action Martin Willi 2010-06-02 11:41:46 +02:00
• 4c401ea216 Wrap getters for dpd/close action into CHILD_SA, allows us to override them Martin Willi 2010-06-02 11:40:38 +02:00
• 616b13c7a5 ipsec pool --statusattr [--hexout] outputs attribute values in correct format if known Andreas Steffen 2010-06-01 16:47:56 +02:00
• 185d8b7335 added unity_def_domain keyword tip ipsec pool Andreas Steffen 2010-05-31 16:46:47 +02:00
• 80b5661a9b Added generated manpages to .gitignore Martin Willi 2010-05-31 13:41:25 +02:00
• a2cf26f1c1 Changed default lifetime of certificates to 3 years Martin Willi 2010-05-31 13:14:36 +02:00
• 70ac7c43a5 Support extendedKeyUsage flags in self-signed certificates Martin Willi 2010-05-31 13:12:46 +02:00
• 3d829c4c0a IPSEC_CONFDIR in ipsec script fixed. Tobias Brunner 2010-05-30 13:07:32 +02:00
• 8f76653a4c Adding the version number to the most relevant manual pages. Tobias Brunner 2010-05-30 13:03:04 +02:00
• 1d3a48b559 Updated and corrected the ipsec.secrets(5) manual page. Tobias Brunner 2010-05-30 11:51:30 +02:00
• f115838bee Updated and corrected the ipsec.conf(5) manual page. Tobias Brunner 2010-05-29 21:10:18 +02:00
• 28550caaa8 Updated and corrected the ipsec(8) manual page. Tobias Brunner 2010-05-29 17:34:00 +02:00
• d9c751daac added --leases command line option to synopsis Andreas Steffen 2010-05-29 13:29:23 +02:00
• 751379e5e8 added --showattr command line option to synopsys Andreas Steffen 2010-05-29 13:23:20 +02:00
• 3561cc4b3b added X.509 support by openssl plugin to NEWS Andreas Steffen 2010-05-29 11:22:36 +02:00
• 5b6200888b remove x509 plugin from openssl-ikev1 scenarios Andreas Steffen 2010-05-28 23:22:15 +02:00
• d070e0a6d1 Do not install trap policy if remote host is %any. Tobias Brunner 2010-05-28 15:43:12 +02:00
• e8960c2a99 be lenient towards wrong attribute encodings Andreas Steffen 2010-05-28 15:07:09 +02:00
• 2e08be79a3 Send empty SIM/AKA-NOTIFICATION response for non-success codes, too Martin Willi 2010-05-27 15:04:25 +02:00
• ddf29f5b07 Added support for reading raw PUT/POST data from HTTP request Martin Willi 2010-05-27 09:30:14 +02:00
• f00a101590 Unwrap subjectKeyIdentifier from OCTET_STRING Martin Willi 2010-05-26 16:09:50 +02:00
• bd371ccac7 remove x509 plugin from remaining openssl-ikev2 scenarios Andreas Steffen 2010-05-25 15:49:58 +02:00
• 2996cb3163 openssl-ikev2/rw-cert scenario doesn't need x509 plugin any more Andreas Steffen 2010-05-25 15:26:46 +02:00
• e2bd6b616e several subnets can be concatenated Andreas Steffen 2010-05-22 22:53:24 +02:00
• 2111dc1b84 added --showattr command to usage() Andreas Steffen 2010-05-22 10:46:15 +02:00
• 24632bc0e8 Fixed compiler warning in invocation of crl_is_newer() Martin Willi 2010-05-21 16:41:13 +02:00
• 09f38ebe54 Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier Martin Willi 2010-05-21 16:38:19 +02:00
• 0c73ceff0a Added a --signcrl command to the pki utility Martin Willi 2010-05-21 15:53:31 +02:00
• 13c593f126 Added support for CRL generation to x509 plugin Martin Willi 2010-05-21 15:52:20 +02:00
• aab861608a Removed is_newer() from certificate_t, obsoleting all implementations Martin Willi 2010-05-21 09:53:23 +02:00
• 8029e5efd2 Added generic implementations for crl_is_newer/certificate_is_newer Martin Willi 2010-05-21 09:48:23 +02:00
• 654218a31b Migrated x509_crl_t to INIT/METHOD macros Martin Willi 2010-05-21 09:18:27 +02:00
• 6d7eed9a37 Implemented X.509 CRL reading using OpenSSL Martin Willi 2010-05-20 17:33:52 +02:00
• 5728c6aa7e Implemented X.509 certificate reading using OpenSSL Martin Willi 2010-05-20 08:09:04 +00:00
• 3e3059ba7c oops, removed stray parenthesis Andreas Steffen 2010-05-20 17:38:39 +02:00
• 9806381322 Fixed doxygen group Martin Willi 2010-05-20 13:22:13 +02:00
• 40b2be16e3 Whitelist OpenSSLs ERR_put_error() in leak-detective Martin Willi 2010-05-20 09:44:59 +02:00
• 2e57b21252 Added a --print command to pki that dumps different credentials Martin Willi 2010-05-20 09:41:47 +02:00
• 091d178060 Option to skip slow addr2line resolution in leak-detective Martin Willi 2010-05-19 15:22:12 +02:00
• 36c1650b19 range check for configuration attribute types Andreas Steffen 2010-05-20 17:35:10 +02:00
• c2d10df6e7 implement ipsec pool -showattr function Andreas Steffen 2010-05-20 17:24:43 +02:00
• 05f1096cd8 removed deprecated use of ipsec pool --attr|del dns|nbns from usage() Andreas Steffen 2010-05-20 16:30:15 +02:00
• e3dd6b1475 Only include C files that start with the plugin name when building for Android. Tobias Brunner 2010-05-20 12:01:12 +02:00
• c5c6f9b6da added ipsec pool attribute support to NEWS Andreas Steffen 2010-05-19 21:53:55 +02:00
• ad6dbc41e5 management of any attribute by ipsec pool Andreas Steffen 2010-05-19 21:51:21 +02:00
• b596f4f260 updated ikev1/rw-cert scenario to support xauth integrity test Andreas Steffen 2010-05-19 08:31:39 +02:00
• f71cb4777e checksum_builder() needs the pluto symbol Andreas Steffen 2010-05-19 08:02:22 +02:00
• 73434ce9eb updated ikev1/xauth-rsa-mode-config scenario to support xauth plugin Andreas Steffen 2010-05-18 22:57:12 +02:00
• 1fe5d973cb updated ikev1/xauth-psk-mode-config scenario to support xauth plugin Andreas Steffen 2010-05-18 22:56:42 +02:00
• 17adc8d074 updated ikev1/xauth-psk-mode-config scenario to support xauth plugin Andreas Steffen 2010-05-18 22:48:37 +02:00
• ab0ecb7dd9 register virtual IPs under the XAUTH identity Andreas Steffen 2010-05-18 22:41:22 +02:00
• efde96b38e updated ikev1/xauth-rsa-nosecret scenario to support xauth plugin Andreas Steffen 2010-05-18 20:20:55 +02:00
• 4f1110ab7b created ikev1/xauth-id-psk scenario Andreas Steffen 2010-05-18 20:04:52 +02:00
• dc5d63a599 updated ikev1/xauth-psk scenario to support xauth plugin Andreas Steffen 2010-05-18 20:04:02 +02:00
• 8d7fffc942 clarified secret loading debug output Andreas Steffen 2010-05-18 16:54:20 +02:00
• 8ebc3da64c updated ikev1/xauth-rsa-fail scenario to xauth plugin Andreas Steffen 2010-05-18 16:53:34 +02:00
• 2549ff7849 created ikev1/xauth-id-rsa scenario using XAUTH identities Andreas Steffen 2010-05-18 16:53:00 +02:00
• 0a6085b13e updated ikev1/xauth-rsa scenario to xauth plugin Andreas Steffen 2010-05-18 16:52:12 +02:00
• 9ffb475e5d Typo fixed. Tobias Brunner 2010-05-18 13:59:23 +02:00
• 26ec52a405 implemented xauth as a pluto plugin Andreas Steffen 2010-05-18 13:51:15 +02:00
• ea409980b9 Handle collisions between rekey and the following delete properly Martin Willi 2010-05-18 12:21:38 +02:00
• d235274486 Added simple conditional packet receive delay Martin Willi 2010-05-18 12:21:05 +02:00
• 45def2147b Added simple conditional packet send delay Martin Willi 2010-05-18 12:20:32 +02:00
• 42df8beeb6 Explicitly link gpg-error to gcrypt plugin Martin Willi 2010-05-17 12:36:30 +02:00
• 322226c0ce Link to libgpg-error to resolve additional symbols when testing for libgcrypt Martin Willi 2010-05-17 11:08:13 +02:00
• ee1bdd85d3 it's too late on Saturday evening Andreas Steffen 2010-05-15 18:52:59 +02:00
• 3399c3dca0 roll back some changes Andreas Steffen 2010-05-15 18:48:35 +02:00
• 31b39e5f7c encoding of MODE_TUNNEL changed Andreas Steffen 2010-05-15 18:36:14 +02:00
• 20ae6eccf5 the keyid is a subjectKeyIdentifier Andreas Steffen 2010-05-15 17:03:04 +02:00
• ccfd54e68d fixed keyids in sql/rw-psk-rsa-split scenario Andreas Steffen 2010-05-15 16:55:08 +02:00
• 4636f1579c fixed keyids in sql/rw-eap-aka-rsa scenario Andreas Steffen 2010-05-15 16:44:53 +02:00
• 88e180489a fixed keyids in sql/rw-cert scenario Andreas Steffen 2010-05-15 16:34:50 +02:00
• 829b790e5b fixed keyids in sql/net2net-cert scenario Andreas Steffen 2010-05-15 16:20:34 +02:00
• d147de932e inserted newline Andreas Steffen 2010-05-15 16:13:22 +02:00
• c572f93ed7 fixed keyids in sql/ip-split-pools-db-restart scenario Andreas Steffen 2010-05-15 16:11:08 +02:00
• 2948e3d0c2 fixed keyids in sql/ip-split-pools-db scenario Andreas Steffen 2010-05-15 13:40:11 +02:00
• 1ae9353d8a fixed keyids in sql/ip-pool-db-restart scenario Andreas Steffen 2010-05-15 13:22:49 +02:00
• f2c84bd890 fixed keyids in sql/ip-pool-db-expired scenario Andreas Steffen 2010-05-15 13:07:22 +02:00
• 0ee2c5e9be fixed keyids in sql/ip-pool-db scenario Andreas Steffen 2010-05-15 13:06:48 +02:00
• 8143f10914 introduced xauth_identity keyword Andreas Steffen 2010-05-15 10:18:29 +02:00
• b8520ad50d adapted evaltest of ikev1/ip-pool-db-push scenario to resolve plugin Andreas Steffen 2010-05-14 17:26:59 +02:00
• 9e229e284f adapted evaltest of ikev1/ip-pool-db scenario to resolve plugin Andreas Steffen 2010-05-14 17:20:28 +02:00
• 03b5e4d8d7 refactoring of Mode Config functionality allows transport and handling of any attribute Andreas Steffen 2010-05-14 17:07:03 +02:00
• a273546854 adapted evaltest of ikev1/mode-config-push scenario to resolve plugin Andreas Steffen 2010-05-14 15:12:03 +02:00
• 3cbf6db653 adapted evaltest to resolve plugin Andreas Steffen 2010-05-14 11:07:26 +02:00
• fb7de3a8bf implemented support of resolve plugin Andreas Steffen 2010-05-08 16:09:02 +02:00
• c2651ff13d include demux.h only once Andreas Steffen 2010-05-06 21:55:19 +02:00
• c158df0f23 already defined in attributes/attributes.h Andreas Steffen 2010-05-06 21:44:15 +02:00
• 4eee16354b include state.h only once Andreas Steffen 2010-05-06 21:35:00 +02:00
• 3baf4922e2 removed stray file Andreas Steffen 2010-05-06 10:35:25 +02:00
• 026b0058d5 Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin Martin Willi 2010-05-05 13:48:10 +02:00
• 75d4322d68 Do not check pointer, but length of a chunk Martin Willi 2010-05-05 11:30:18 +02:00
• 37c2aac89d Double-check that a blob passed to is_asn1() is not empty Martin Willi 2010-05-05 11:26:17 +02:00
• c60b69e4bf Do not print filename twice if plugin loading fails, dlerror() contains the filename Martin Willi 2010-05-05 11:15:10 +02:00