Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 0c8d08068e pluto's crl handling now uses the x509 plugin Andreas Steffen 2009-09-30 09:29:15 +02:00
• 5406c65702 scepclient uses pkcs10 from libstrongswan Andreas Steffen 2009-09-28 05:52:20 +02:00
• c72080cea8 abbreviated struct connection by connection_t Andreas Steffen 2009-09-27 23:49:37 +02:00
• 0eff9f6539 pluto and scepclient now use the x509 plugin for certificates Andreas Steffen 2009-09-27 23:09:30 +02:00
• 727b0f11e2 whitelist Curl_client_write Andreas Steffen 2009-09-27 23:07:21 +02:00
• 8ad23ba346 added get_subjectKeyIdentifier() to x509_t Andreas Steffen 2009-09-26 22:10:36 +02:00
• f12d8cf719 Do not increase the invalid-KE/Cookie retry counter for additional keyingtry attempts Martin Willi 2009-09-24 14:15:20 +02:00
• cf76c42903 Do not create a replacement IKE_SA if we have CHILD_SAs to route only Martin Willi 2009-09-24 14:14:30 +02:00
• 6e6975395e Using the correct type for ME_ENDPOINT payloads in connectivity checks. Tobias Brunner 2009-09-24 11:28:43 +02:00
• 17859fe6cf Right-align short options in pki usage Martin Willi 2009-09-24 11:28:31 +02:00
• 02bf410aa9 certificate subject DNs are in double quotes Andreas Steffen 2009-09-23 22:03:52 +02:00
• b362cc2382 streamlining of credential loading debug output Andreas Steffen 2009-09-23 21:55:48 +02:00
• 1806024105 added fix of PKCS#7 wrapped certificates to NEWS Andreas Steffen 2009-09-23 21:50:56 +02:00
• 45cc7ba403 added and fixed debug output of version information Andreas Steffen 2009-09-23 16:21:18 +02:00
• c0be0977e7 fixed PKCS#7 wrapped certificate parsing Andreas Steffen 2009-09-23 15:51:40 +02:00
• 840743479a Use mysql_config to query MySQL LIBS and CFLAGS Martin Willi 2009-09-23 12:45:03 +02:00
• 0406ed7a16 Fixed a crash in source address lookup Martin Willi 2009-09-23 11:18:30 +02:00
• a7f79ee9c1 Define ME for all charon plugins Martin Willi 2009-09-23 11:13:27 +02:00
• e20b792108 Correctly handle --enable-mediation option Martin Willi 2009-09-23 10:49:38 +02:00
• 677322b1bf enforce coding rules Andreas Steffen 2009-09-22 21:50:28 +02:00
• b62ce860c1 enforce coding rules Andreas Steffen 2009-09-22 20:54:10 +02:00
• b88bbe8aa1 set XFRM_STATE_AF_UNSPEC flag Andreas Steffen 2009-09-22 20:00:49 +02:00
• b262680175 Emit a ALERT_SHUTDOWN_SIGNAL before shutting down the daemon Martin Willi 2009-09-22 16:59:25 +02:00
• a28334720c adding additional flags to loaded X.509 certificates Andreas Steffen 2009-09-22 12:55:25 +02:00
• b80fa9ca38 readying NEWS for the strongswan-4.3.5dr2 release Andreas Steffen 2009-09-22 12:44:58 +02:00
• 4b15ee8cd9 shortened file loading debug output Andreas Steffen 2009-09-22 12:33:13 +02:00
• 1271983ab9 computed hash-and-url for new certificates Andreas Steffen 2009-09-22 12:05:37 +02:00
• f1092e20f4 Fixed encoding of hash-and-url cert payload Martin Willi 2009-09-22 10:07:04 +02:00
• cb64b21217 Do not assign SIM version to a volatile buffer on stack Martin Willi 2009-09-22 09:11:35 +02:00
• 91cb348cc2 CA certificates are looked up using the subjectPublicKeyInfo keyid Martin Willi 2009-09-21 18:13:25 +02:00
• c84b139a87 Credential backends use has_fingerprint() methods to select keys/certificates Martin Willi 2009-09-21 17:03:00 +02:00
• 640ed4d5a5 Public/Private keys implement a has_fingerprint() method Martin Willi 2009-09-21 16:47:25 +02:00
• fde7f5abf8 Correctly serve certificates if CERT_ANY requested Martin Willi 2009-09-21 15:34:29 +02:00
• c6a8990bc5 Enforce a local address of the same family as remote address Martin Willi 2009-09-21 15:19:39 +02:00
• c331bce51d Return certificates of requested kind only Martin Willi 2009-09-21 14:43:57 +02:00
• 8153be823b plugin has been renamed to resolve Andreas Steffen 2009-09-20 22:03:23 +02:00
• 399ce164ad delete resolv_conf_* files Andreas Steffen 2009-09-20 21:59:36 +02:00
• af784261f5 all arguments must be read Andreas Steffen 2009-09-20 21:56:22 +02:00
• 4819ec6a71 resolv_conf plugin renamed to resolve Andreas Steffen 2009-09-20 19:06:58 +02:00
• 03f096df7e adapt evaltest.dat to changed debug output Andreas Steffen 2009-09-20 17:23:24 +02:00
• d7f2ffcf11 renewed certs in dynamic-initiator/dynamic-responder scenarios Andreas Steffen 2009-09-19 08:18:42 +02:00
• 6aa8d2c8bb use new certificates Andreas Steffen 2009-09-19 00:26:55 +02:00
• 05a6a77d85 eliminated double library_deinit() Andreas Steffen 2009-09-19 00:00:56 +02:00
• 309b8b3956 keyids of renewed keys Andreas Steffen 2009-09-18 21:44:57 +02:00
• afcd0b9787 updated to renewed certs in SQL database Andreas Steffen 2009-09-18 21:22:37 +02:00
• bdfe17c79b renewal of end entity certificates Andreas Steffen 2009-09-18 21:17:03 +02:00
• ddbb34093f fixed --enable-eap-md5 and --enable-eap-gtc options Andreas Steffen 2009-09-18 18:23:26 +02:00
• d78a0262d1 backwards compatibility with SQL format Andreas Steffen 2009-09-18 07:22:07 +02:00
• c7a64d6f41 Use helper functions to handle (non-)skippable attributes Martin Willi 2009-09-18 15:08:43 +02:00
• e466139c91 Clients can handle AKA-Identity requests by sending the full identity Martin Willi 2009-09-18 14:51:35 +02:00
• 85af7a89c6 nm uses the distributions trusted root CAs if none is explicitly specified Martin Willi 2009-09-18 14:29:50 +02:00
• d245f5cf33 some reformulations Andreas Steffen 2009-09-17 22:20:35 +02:00
• 7aa495d9d0 get_private() in listcacerts requires a valid auth cfg Martin Willi 2009-09-17 12:47:03 +02:00
• 4a03e85b37 Fixed nexthop lookup, used by source route installation Martin Willi 2009-09-16 13:55:32 +02:00
• 36b7ba5ee3 Use continue to advance to next iteration Martin Willi 2009-09-16 13:32:47 +02:00
• 075448fbc8 Complain about missing %defaultroute support only if one is actually used Martin Willi 2009-09-16 13:27:49 +02:00
• b538b606da Use the default debug hook if possible Martin Willi 2009-09-16 13:16:00 +02:00
• 5289249449 Default logger implementation can be modified by dbg_default_set_level/stream Martin Willi 2009-09-16 13:06:16 +02:00
• a474081f1f Removed obsolete per-command debug level option Martin Willi 2009-09-16 12:52:56 +02:00
• 4e1cade52f Fixed loading of DER encoded certificate files Martin Willi 2009-09-16 11:24:35 +02:00
• 934942dddb corrected usage Andreas Steffen 2009-09-15 22:43:22 +02:00
• c657492705 pki --req generates a PKCS#10 certificate request Andreas Steffen 2009-09-15 22:33:32 +02:00
• edf30136b0 implemented ASN.1 encoding of PKCS#10 attributes Andreas Steffen 2009-09-15 21:55:44 +02:00
• 8101695b32 fixed typo Andreas Steffen 2009-09-15 16:48:13 +02:00
• 88fdf88a1f Disable rtnetlink defaultroute lookup if pluto is disabled Martin Willi 2009-09-15 13:13:45 +02:00
• aa5d446939 Get starter default route via rtnetlink Heiko Hund 2009-09-08 11:32:50 +02:00
• ae7452e87c Handle pki --debug and --options in a generic way for all command Martin Willi 2009-09-15 11:49:14 +02:00
• 4fdb9f6f74 pki tool supports single letter short options Martin Willi 2009-09-15 10:20:22 +02:00
• 012f62a820 Exponents of a RSA key in openssl are optional (for PGP) Martin Willi 2009-09-15 09:17:04 +02:00
• b6b90b68a1 Added some NEWS Martin Willi 2009-09-15 09:13:31 +02:00
• 9f45b19fe7 Use ID_KEY_ID as PGP user id, as it can contain any string Martin Willi 2009-09-15 08:45:08 +02:00
• e4be5ef8fb Fall back to default credential set lookup if fingerprint lookup fails Martin Willi 2009-09-15 08:44:10 +02:00
• 79c6f16212 Implemented support for preinstalled PGP certificates in charon Martin Willi 2009-09-14 20:04:48 +02:00
• 4cb0e1bb76 Added basic support for PGP certificates (no trust relationships yet) Martin Willi 2009-09-14 16:56:54 +02:00
• 88f3ffa1b1 Moved generic PGP parsing functions to pgp_utils.[ch] Martin Willi 2009-09-14 16:06:19 +02:00
• 622e558cb0 pki --pub and --keyid accept pkcs10 as input Andreas Steffen 2009-09-15 06:23:38 +02:00
• 0912f0d2bc replaced the missed ${confdir} by ${sysconfdir} Martin Willi 2009-09-14 17:56:12 +02:00
• 0001db115d check if PKCS#10 version is 1 Andreas Steffen 2009-09-14 19:38:57 +02:00
• 29662a9b73 cosmetics Andreas Steffen 2009-09-14 19:28:56 +02:00
• 5a4dee6dc4 enable debug level setting Andreas Steffen 2009-09-14 19:28:25 +02:00
• af0dfe4987 Fixed pluto certificate parsing Martin Willi 2009-09-14 17:17:07 +02:00
• b9fbd66587 Added support to build RSA keys from components in openssl Martin Willi 2009-09-14 14:29:10 +02:00
• 341af94dc6 support of PKCS#10 certificate request generation without attributes Andreas Steffen 2009-09-14 00:45:51 +02:00
• 210d287368 extended hasher_signature_algorithm_to_oid() function Andreas Steffen 2009-09-13 21:41:51 +02:00
• ba274c2343 removed req.h Andreas Steffen 2009-09-13 21:03:36 +02:00
• f03e0e9147 support of PKCS#10 certificate request parsing Andreas Steffen 2009-09-13 21:00:15 +02:00
• 4c51c6be01 parsing error caused segfault in destroy() Andreas Steffen 2009-09-13 20:56:12 +02:00
• b6f28c2870 need two PKCS#9 OIDs Andreas Steffen 2009-09-13 00:42:15 +02:00
• beace4af14 corrected captions Andreas Steffen 2009-09-12 17:39:15 +02:00
• 4da11016e7 fixed another typo Andreas Steffen 2009-09-12 06:44:11 +02:00
• abffb63ffe fixed typo Andreas Steffen 2009-09-12 06:42:35 +02:00
• 06a8df11d9 pki tool can issue/self-sign certificates with OCSP URIs Martin Willi 2009-09-11 17:17:56 +02:00
• 6dc57cd02e x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations Martin Willi 2009-09-11 17:16:22 +02:00
• 6d24a5d746 added lost session cookie buffer Martin Willi 2009-09-11 16:23:15 +02:00
• 3b878dae7e Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro Martin Willi 2009-09-11 15:35:10 +02:00
• 3a7bd9bd49 pki tool can issue certificates with CRL distribution points Martin Willi 2009-09-11 11:45:42 +02:00
• 881b259943 x509 plugin supports encoding of CRL distribution points Martin Willi 2009-09-11 11:45:04 +02:00
• 31f87c29c7 double check session id has been initialized Martin Willi 2009-09-10 20:51:43 +02:00
• 356b2b2780 pass NULL to library_init() to load settings from default file Martin Willi 2009-09-08 20:01:13 +02:00
• 5b03a350fc use NULL to load plugins from default plugin directory Martin Willi 2009-09-08 19:48:34 +02:00