Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 6de28173f0 remove obsolete @brief doxygen tags Martin Willi 2009-09-07 18:56:53 +02:00
• 6d8e913ab6 Use wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t Martin Willi 2009-09-07 18:50:02 +02:00
• 48a606b5ff libfast uses enumerator instead of deprecated iterator Martin Willi 2009-09-07 18:28:55 +02:00
• d73f453c29 Updated x509 plugin to the new builder API Martin Willi 2009-09-09 16:24:06 +02:00
• 91ef5c66ab Updated pubkey plugin to the new builder API Martin Willi 2009-09-09 16:23:41 +02:00
• 872176d350 Updated pkcs1 plugin to the new builder API Martin Willi 2009-09-09 16:23:26 +02:00
• 43224e9527 Updated pgp plugin to the new builder API Martin Willi 2009-09-09 16:23:08 +02:00
• de408caf93 Updated pem plugin to the new builder API Martin Willi 2009-09-09 16:22:42 +02:00
• 30c06407c6 Updated openssl plugin to the new builder API Martin Willi 2009-09-09 16:21:21 +02:00
• 1086d00e41 Updated gmp plugin to the new builder API Martin Willi 2009-09-09 16:20:53 +02:00
• a94acb58a2 Updated gcrypt plugin to the new builder API Martin Willi 2009-09-09 16:20:35 +02:00
• 26135ed9bb Updated dnskey plugin to the new builder API Martin Willi 2009-09-09 16:19:44 +02:00
• 0a139eeac9 Updated agent plugin to the new builder API Martin Willi 2009-09-09 16:19:08 +02:00
• d3674e25a7 Updated pluto to the new builder API Martin Willi 2009-09-09 16:18:29 +02:00
• f678f5c77e Replaced builder_t objects by simple builder_function_t functions Martin Willi 2009-09-09 16:16:34 +02:00
• 3ce9438b60 Use dynamic registration/usage invocation of command types Martin Willi 2009-09-10 12:44:06 +02:00
• 6be68cc1c7 splitted PKI tool to a file per command Martin Willi 2009-09-10 12:31:40 +02:00
• e5e6c6f43c use generic option parsing with usage information Martin Willi 2009-09-10 11:18:41 +02:00
• 63ee88745a fixed memleak Martin Willi 2009-09-09 17:12:38 +02:00
• 1080a51fd2 evaluate arguments of chunk_clone/clonea/alloc/alloca only once Martin Willi 2009-09-09 13:30:31 +02:00
• 1f45e32594 split usage information Andreas Steffen 2009-09-09 02:37:17 +02:00
• e666d45ddb updated usage of ipsec pki --self Andreas Steffen 2009-09-08 22:22:09 +02:00
• a5fc71562a support --options also in ipsec pki --self Andreas Steffen 2009-09-08 21:54:00 +02:00
• ddf8ee0f37 --options reads command line options from file Andreas Steffen 2009-09-08 21:36:35 +02:00
• b5d31b3e56 pki tool supports subjectAltNames in certificates Martin Willi 2009-09-08 13:27:35 +02:00
• 7631aac20c x509 certificates support encoding of email, DNS and IP subjectAltNames Martin Willi 2009-09-08 13:17:41 +02:00
• d7be290643 non self-signed x509 certificates are encoded with authorityKeyIdentifier Martin Willi 2009-09-08 11:26:05 +02:00
• 5c92524449 x509 CA certificates are encoded with a subjectKeyIdentifier Martin Willi 2009-09-08 11:02:49 +02:00
• 8871e59c11 pki tool --issue/--verify operations require a CA with CA basicConstraint Martin Willi 2009-09-08 10:44:08 +02:00
• e4a4589606 pki tool can set CA basicConstraint on --self/--issued certificates Martin Willi 2009-09-08 10:39:04 +02:00
• 8ab900dee9 x509 plugin supports encoding of CA basicConstraint extension Martin Willi 2009-09-08 10:38:02 +02:00
• 58f34613e0 pki tool can issue certificates Martin Willi 2009-09-07 16:04:30 +02:00
• faa4bd49fb use sysconfdir, no need for an additional confdir variable Martin Willi 2009-09-07 15:10:30 +02:00
• c0e56a663e only add generated m4 files to include path Martin Willi 2009-09-07 15:10:01 +02:00
• b7b5653386 Use macros to define --with options Martin Willi 2009-09-07 12:07:57 +02:00
• b803bc82f4 Use macros to define --enable/--disable options Martin Willi 2009-09-07 10:34:14 +02:00
• e5efb5a03b Added a .gitignore for generated m4 scripts Martin Willi 2009-09-07 10:35:22 +02:00
• e455ae1343 use m4/ autoconf subdirectory Martin Willi 2009-09-07 09:31:31 +02:00
• 8b3b4a244e Removed trailing whitespaces in configure.in/Makefile.am Martin Willi 2009-09-07 11:46:16 +02:00
• 0755e98e5c Cleaned up some code of the mediation extension. Tobias Brunner 2009-09-04 15:48:30 +02:00
• f4b975a65d Moved set_state after the DBG0 statement, so that the message gets logged also for mediation connections without CHILD_SA. Tobias Brunner 2009-09-04 11:10:52 +02:00
• 7b3814f75d remove spaces before tabs at the beginning of lines (^( )+\t) Martin Willi 2009-09-04 15:02:11 +02:00
• b9b8a98f47 remove spaces within tabs (\t( )+\t) Martin Willi 2009-09-04 14:58:05 +02:00
• 323f9f990f replaces four spaces by tabs, where appropriate Martin Willi 2009-09-04 14:50:23 +02:00
• 7daf5226b7 removed trailing spaces ([[:space:]]+$) Martin Willi 2009-09-04 13:46:09 +02:00
• 7d1b030446 fixed open failure debug message in load_secrets Marius Tomaschewski 2009-09-04 11:36:36 +02:00
• dd2b6f3073 fixed memleak in rekey collissions Martin Willi 2009-09-03 18:09:29 +02:00
• 72e2faf291 Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL Martin Willi 2009-09-03 17:32:41 +02:00
• 9beb83868f Use get_notify() to look up single notifies Martin Willi 2009-09-03 17:32:01 +02:00
• 3e15f99189 accept octet strings in is_asn1() check Martin Willi 2009-09-03 15:35:05 +02:00
• d176994235 Use recursive source address lookup if we get a gateway only Martin Willi 2009-09-02 11:47:14 +02:00
• dece3d8efc Fixed load_secrets to acquire/release lock in level 0 only Marius Tomaschewski 2009-09-02 13:49:39 +02:00
• 12a230ddb4 Complain about rw(un)lock errors Martin Willi 2009-09-03 14:27:33 +02:00
• a20e98749a Simplified the search for ME_CONNECTID notifies. Tobias Brunner 2009-09-02 17:29:02 +02:00
• 484a06bce7 Fixed some typos; whitespace cleanup. Tobias Brunner 2009-09-02 17:26:36 +02:00
• 5293b02945 Missing commas added. Tobias Brunner 2009-09-02 16:12:52 +02:00
• 8fb4edc4ff handle plugin loading failures Martin Willi 2009-09-01 16:20:45 +02:00
• d6a45127dc plugins marked with a '!' are handled as critical: cancel if loading fails Martin Willi 2009-09-01 16:08:28 +02:00
• 9412bbfa7c use subjectPublicKeyInfo hash for CA certificate lookup Martin Willi 2009-09-01 14:05:58 +02:00
• deddfde91b Description of new lifetime limits added to manpage. Tobias Brunner 2009-09-01 12:48:59 +02:00
• 686aba2589 Added lifetime/margintime keywords as alias for keylife/rekeymargin. Tobias Brunner 2009-08-28 17:10:08 +02:00
• e75f423753 Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static. Tobias Brunner 2009-08-28 17:04:35 +02:00
• abff49a7ff Handling of new lifetime limits added to stroke. Tobias Brunner 2009-08-27 18:10:39 +02:00
• ca41aa0602 Added keywords for the new lifetime limits to starter. Tobias Brunner 2009-08-27 18:09:26 +02:00
• 9c7faa8618 Added parser for unsigned long long ints to starter. Tobias Brunner 2009-08-27 18:03:17 +02:00
• f40c115531 If no inbound CHILD_SA is found, try to find an outbound SA. Tobias Brunner 2009-08-27 16:16:23 +02:00
• 1087b9cebb Set the packet and byte limits in the netlink and pfkey kernel interfaces. Tobias Brunner 2009-08-27 16:07:30 +02:00
• e3c7e72973 Terminology and return value of get_lifetime of child_sa_t corrected. Tobias Brunner 2009-08-27 11:46:35 +02:00
• cb123493d1 child_sa_t adapted to the new lifetime configuration. Tobias Brunner 2009-08-27 11:45:36 +02:00
• 888af96343 Adapted the kernel interfaces to the new lifetime configuration. Tobias Brunner 2009-08-27 11:41:52 +02:00
• e0a8a8c3ec Adapted the config backends to the new lifetime configuration. Tobias Brunner 2009-08-27 11:38:13 +02:00
• caf87c7dcb child_cfg_t now takes a lifetime_cfg_t to configure the lifetime limits. Also adjusted the jitter calculation, so it works for values > RAND_MAX. Tobias Brunner 2009-08-27 11:27:10 +02:00
• 86e4728550 lifetime_cfg_t added to configure lifetime limits of a CHILD_SA. Tobias Brunner 2009-08-27 11:22:43 +02:00
• e822fc576a Added side effect free min and max macros. Tobias Brunner 2009-08-25 13:11:42 +02:00
• 8f68b72424 sql/rw-rsa and sql/rw-rsa-keyid scenarios require the pubkey plugin Martin Willi 2009-09-01 11:34:09 +02:00
• ad31f98a74 fixed certificate_t enum names Martin Willi 2009-09-01 11:28:05 +02:00
• f561d6f2e9 changed prefix of crl_reason_t values from CRL_ to CRL_REASON_ Andreas Steffen 2009-08-31 23:21:50 +02:00
• dc4aadc3f2 use crl_reason_t definition from <credentials/certificates/crl.h> Andreas Steffen 2009-08-31 23:05:45 +02:00
• a63f62c03b use crl_reason_t definition from <credentials/certificates/crl.h> Andreas Steffen 2009-08-31 22:58:34 +02:00
• 6180a55852 use time_monotonic() instead of time() for statistics and time difference calculations Martin Willi 2009-08-31 17:59:00 +02:00
• de5784452b use time_monotonic() instead of gettimeofday() for time difference calculations Martin Willi 2009-08-31 15:25:03 +02:00
• 3d5818ec38 use monotonic time source in convar->timed_wait, and in the scheduler using it Martin Willi 2009-08-31 15:13:48 +02:00
• 3f310c0d1f implemented a monotonic timestamping function, unaffected from system time changes Martin Willi 2009-08-31 15:03:35 +02:00
• 1d39663f7a do not depend on gcrypt autoconf macros Martin Willi 2009-08-31 13:14:54 +02:00
• 8706a151ff added ECGDSA specific OIDs Martin Willi 2009-08-31 10:34:00 +02:00
• 8365f7cd81 fixed crash in crl listing Martin Willi 2009-08-31 10:21:38 +02:00
• 52673c4348 generation of keyid requires pkcs1 plugin Andreas Steffen 2009-08-30 22:55:40 +02:00
• c9f74892cc clear RSA private key chunks after use Andreas Steffen 2009-08-30 19:12:29 +02:00
• 1982096aa0 ASN.1 DER encoding of private key is not needed anymore Andreas Steffen 2009-08-30 19:05:43 +02:00
• 26fa5a37d9 new UML scenario certs have SHA256 digest Andreas Steffen 2009-08-30 17:58:34 +02:00
• 735628f3e3 removed position debug output Andreas Steffen 2009-08-30 17:37:27 +02:00
• bf3b8c90d0 added workaround to parse PEM encoded PGP key with KEY_RSA Martin Willi 2009-08-28 17:25:07 +02:00
• 4593ef51fd implemented PGP Secret-Key Packet parsing Martin Willi 2009-08-28 17:23:58 +02:00
• caf1af1d9f fixed memleak Martin Willi 2009-08-28 16:16:39 +02:00
• 2aa67d2636 .., but a comment might be helpful Andreas Steffen 2009-08-28 09:28:39 +02:00
• 6be3f0f1d0 removed TODO reminder Andreas Steffen 2009-08-28 09:26:46 +02:00
• be04eef270 allow choice of digest algorithm in certificate generation Andreas Steffen 2009-08-28 09:08:03 +02:00
• e201f53e93 build_curve_signature() processes hash not data Andreas Steffen 2009-08-27 20:41:29 +02:00
• 1dbaec2177 NID_hash and NID_ec_curve were interchanged Andreas Steffen 2009-08-27 20:28:41 +02:00
• ac6a0d5038 verify_signature() now processes hash not data Andreas Steffen 2009-08-27 20:18:22 +02:00