Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 0030880c6b Ported AKA functions to 3gpp2 plugin Martin Willi 2009-10-08 13:01:49 +02:00
• 4720815774 Added a stub for the EAP-AKA backend implementing the 3GPP2 functions in software Martin Willi 2009-10-08 10:29:43 +02:00
• 36a3bccfcf Implemented a manager for USIM cards/providers very similar to the SIM manager Martin Willi 2009-10-08 09:08:46 +02:00
• c6b2b2aae2 corrected caption Andreas Steffen 2009-10-09 00:16:33 +02:00
• 4b4f8bd732 created identification_create_from_sockaddr() function Andreas Steffen 2009-10-09 00:13:02 +02:00
• a4eb37eed0 Added medsrv.fcgi to gitignore Martin Willi 2009-10-08 13:10:02 +02:00
• 5026519057 medsrv.fcgi is not part of the git tree Andreas Steffen 2009-10-08 13:05:27 +02:00
• 878fc472e9 hex_str() isn't used externally any more Andreas Steffen 2009-10-08 13:04:07 +02:00
• e64b4e96c9 parsing of generalNames is not needed any more Andreas Steffen 2009-10-08 12:42:29 +02:00
• 88212ee6e7 use of asn1_build_known_oid() Andreas Steffen 2009-10-08 12:35:36 +02:00
• 0354d5703d migrated public key IDs to identification_t Andreas Steffen 2009-10-08 11:25:33 +02:00
• 4b1cd5a367 Reenabled acq_expires SA timer using rekey timeout Martin Willi 2009-10-07 11:40:36 +02:00
• 991f7ccd6c Catch CHILD_SA state changes during acquire Martin Willi 2009-10-07 10:14:18 +02:00
• 84e390fdc4 list subjectAltNames Andreas Steffen 2009-10-06 23:50:26 +02:00
• 20afe5e9f5 some ipsec listall finetuning Andreas Steffen 2009-10-06 23:19:46 +02:00
• ce2f2461e0 pluto and charon now have the same ipsec listall output format Andreas Steffen 2009-10-06 16:49:46 +02:00
• f3e9eae283 the ikev1 scenarios need the x509 plugin Andreas Steffen 2009-10-06 14:38:34 +02:00
• cf85e1319b streamlined output from get_validity() Andreas Steffen 2009-10-06 14:22:27 +02:00
• afdaa9e5bf fixed serial number conversion from hex Andreas Steffen 2009-10-05 23:52:35 +02:00
• 0da0f3fc3f delete group attributes after use Andreas Steffen 2009-10-05 23:17:36 +02:00
• a9fe23cf53 stroke_list outputs group attributes Andreas Steffen 2009-10-05 23:13:51 +02:00
• 408e46a324 ipsec pki --issue suports --flag authServer option Andreas Steffen 2009-10-05 22:44:01 +02:00
• ce40bf5def ipsec pki --issue supports --flag ocspSigning option Andreas Steffen 2009-10-05 21:20:42 +02:00
• 6eacaffc72 Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word reads Martin Willi 2009-10-05 14:06:32 +02:00
• 3b836fc759 Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word reads Martin Willi 2009-10-05 13:32:41 +02:00
• 587ebae722 Distinguish invalid free()s between corrupted magic and invalid pointer Martin Willi 2009-10-05 10:49:10 +02:00
• fc12e3cd2e pluto now uses x509 plugin for attribute certificate handling Andreas Steffen 2009-10-05 07:24:28 +02:00
• 0ea9cbc6e9 fixed output of authKeyID Andreas Steffen 2009-10-02 21:20:45 +02:00
• 0aa5cea248 mark embedded parsing in debug mode Andreas Steffen 2009-10-02 20:54:15 +02:00
• ec0abe4ab5 added some notBefore/notAfter debugging info Andreas Steffen 2009-10-02 20:14:09 +02:00
• daaedcb9c2 verify correctness of X.509 versions Andreas Steffen 2009-10-02 17:49:51 +02:00
• 6f2f08fb8d added all missing RFC 5280 OIDs Andreas Steffen 2009-10-02 14:10:27 +02:00
• 03a52ce4e5 created ikev1/mode-config-multiple scenario Andreas Steffen 2009-10-01 09:42:35 +02:00
• eb4544f773 fixes multiple IPsec SAs with IKEv1 Mode Config Andreas Steffen 2009-10-01 09:41:35 +02:00
• 70e81857f9 generate known OIDs dynamically Andreas Steffen 2009-09-30 11:49:32 +02:00
• 0c8d08068e pluto's crl handling now uses the x509 plugin Andreas Steffen 2009-09-30 09:29:15 +02:00
• 5406c65702 scepclient uses pkcs10 from libstrongswan Andreas Steffen 2009-09-28 05:52:20 +02:00
• c72080cea8 abbreviated struct connection by connection_t Andreas Steffen 2009-09-27 23:49:37 +02:00
• 0eff9f6539 pluto and scepclient now use the x509 plugin for certificates Andreas Steffen 2009-09-27 23:09:30 +02:00
• 727b0f11e2 whitelist Curl_client_write Andreas Steffen 2009-09-27 23:07:21 +02:00
• 8ad23ba346 added get_subjectKeyIdentifier() to x509_t Andreas Steffen 2009-09-26 22:10:36 +02:00
• f12d8cf719 Do not increase the invalid-KE/Cookie retry counter for additional keyingtry attempts Martin Willi 2009-09-24 14:15:20 +02:00
• cf76c42903 Do not create a replacement IKE_SA if we have CHILD_SAs to route only Martin Willi 2009-09-24 14:14:30 +02:00
• 6e6975395e Using the correct type for ME_ENDPOINT payloads in connectivity checks. Tobias Brunner 2009-09-24 11:28:43 +02:00
• 17859fe6cf Right-align short options in pki usage Martin Willi 2009-09-24 11:28:31 +02:00
• 02bf410aa9 certificate subject DNs are in double quotes Andreas Steffen 2009-09-23 22:03:52 +02:00
• b362cc2382 streamlining of credential loading debug output Andreas Steffen 2009-09-23 21:55:48 +02:00
• 1806024105 added fix of PKCS#7 wrapped certificates to NEWS Andreas Steffen 2009-09-23 21:50:56 +02:00
• 45cc7ba403 added and fixed debug output of version information Andreas Steffen 2009-09-23 16:21:18 +02:00
• c0be0977e7 fixed PKCS#7 wrapped certificate parsing Andreas Steffen 2009-09-23 15:51:40 +02:00
• 840743479a Use mysql_config to query MySQL LIBS and CFLAGS Martin Willi 2009-09-23 12:45:03 +02:00
• 0406ed7a16 Fixed a crash in source address lookup Martin Willi 2009-09-23 11:18:30 +02:00
• a7f79ee9c1 Define ME for all charon plugins Martin Willi 2009-09-23 11:13:27 +02:00
• e20b792108 Correctly handle --enable-mediation option Martin Willi 2009-09-23 10:49:38 +02:00
• 677322b1bf enforce coding rules Andreas Steffen 2009-09-22 21:50:28 +02:00
• b62ce860c1 enforce coding rules Andreas Steffen 2009-09-22 20:54:10 +02:00
• b88bbe8aa1 set XFRM_STATE_AF_UNSPEC flag Andreas Steffen 2009-09-22 20:00:49 +02:00
• b262680175 Emit a ALERT_SHUTDOWN_SIGNAL before shutting down the daemon Martin Willi 2009-09-22 16:59:25 +02:00
• a28334720c adding additional flags to loaded X.509 certificates Andreas Steffen 2009-09-22 12:55:25 +02:00
• b80fa9ca38 readying NEWS for the strongswan-4.3.5dr2 release Andreas Steffen 2009-09-22 12:44:58 +02:00
• 4b15ee8cd9 shortened file loading debug output Andreas Steffen 2009-09-22 12:33:13 +02:00
• 1271983ab9 computed hash-and-url for new certificates Andreas Steffen 2009-09-22 12:05:37 +02:00
• f1092e20f4 Fixed encoding of hash-and-url cert payload Martin Willi 2009-09-22 10:07:04 +02:00
• cb64b21217 Do not assign SIM version to a volatile buffer on stack Martin Willi 2009-09-22 09:11:35 +02:00
• 91cb348cc2 CA certificates are looked up using the subjectPublicKeyInfo keyid Martin Willi 2009-09-21 18:13:25 +02:00
• c84b139a87 Credential backends use has_fingerprint() methods to select keys/certificates Martin Willi 2009-09-21 17:03:00 +02:00
• 640ed4d5a5 Public/Private keys implement a has_fingerprint() method Martin Willi 2009-09-21 16:47:25 +02:00
• fde7f5abf8 Correctly serve certificates if CERT_ANY requested Martin Willi 2009-09-21 15:34:29 +02:00
• c6a8990bc5 Enforce a local address of the same family as remote address Martin Willi 2009-09-21 15:19:39 +02:00
• c331bce51d Return certificates of requested kind only Martin Willi 2009-09-21 14:43:57 +02:00
• 8153be823b plugin has been renamed to resolve Andreas Steffen 2009-09-20 22:03:23 +02:00
• 399ce164ad delete resolv_conf_* files Andreas Steffen 2009-09-20 21:59:36 +02:00
• af784261f5 all arguments must be read Andreas Steffen 2009-09-20 21:56:22 +02:00
• 4819ec6a71 resolv_conf plugin renamed to resolve Andreas Steffen 2009-09-20 19:06:58 +02:00
• 03f096df7e adapt evaltest.dat to changed debug output Andreas Steffen 2009-09-20 17:23:24 +02:00
• d7f2ffcf11 renewed certs in dynamic-initiator/dynamic-responder scenarios Andreas Steffen 2009-09-19 08:18:42 +02:00
• 6aa8d2c8bb use new certificates Andreas Steffen 2009-09-19 00:26:55 +02:00
• 05a6a77d85 eliminated double library_deinit() Andreas Steffen 2009-09-19 00:00:56 +02:00
• 309b8b3956 keyids of renewed keys Andreas Steffen 2009-09-18 21:44:57 +02:00
• afcd0b9787 updated to renewed certs in SQL database Andreas Steffen 2009-09-18 21:22:37 +02:00
• bdfe17c79b renewal of end entity certificates Andreas Steffen 2009-09-18 21:17:03 +02:00
• ddbb34093f fixed --enable-eap-md5 and --enable-eap-gtc options Andreas Steffen 2009-09-18 18:23:26 +02:00
• d78a0262d1 backwards compatibility with SQL format Andreas Steffen 2009-09-18 07:22:07 +02:00
• c7a64d6f41 Use helper functions to handle (non-)skippable attributes Martin Willi 2009-09-18 15:08:43 +02:00
• e466139c91 Clients can handle AKA-Identity requests by sending the full identity Martin Willi 2009-09-18 14:51:35 +02:00
• 85af7a89c6 nm uses the distributions trusted root CAs if none is explicitly specified Martin Willi 2009-09-18 14:29:50 +02:00
• d245f5cf33 some reformulations Andreas Steffen 2009-09-17 22:20:35 +02:00
• 7aa495d9d0 get_private() in listcacerts requires a valid auth cfg Martin Willi 2009-09-17 12:47:03 +02:00
• 4a03e85b37 Fixed nexthop lookup, used by source route installation Martin Willi 2009-09-16 13:55:32 +02:00
• 36b7ba5ee3 Use continue to advance to next iteration Martin Willi 2009-09-16 13:32:47 +02:00
• 075448fbc8 Complain about missing %defaultroute support only if one is actually used Martin Willi 2009-09-16 13:27:49 +02:00
• b538b606da Use the default debug hook if possible Martin Willi 2009-09-16 13:16:00 +02:00
• 5289249449 Default logger implementation can be modified by dbg_default_set_level/stream Martin Willi 2009-09-16 13:06:16 +02:00
• a474081f1f Removed obsolete per-command debug level option Martin Willi 2009-09-16 12:52:56 +02:00
• 4e1cade52f Fixed loading of DER encoded certificate files Martin Willi 2009-09-16 11:24:35 +02:00
• 934942dddb corrected usage Andreas Steffen 2009-09-15 22:43:22 +02:00
• c657492705 pki --req generates a PKCS#10 certificate request Andreas Steffen 2009-09-15 22:33:32 +02:00
• edf30136b0 implemented ASN.1 encoding of PKCS#10 attributes Andreas Steffen 2009-09-15 21:55:44 +02:00
• 8101695b32 fixed typo Andreas Steffen 2009-09-15 16:48:13 +02:00
• 88fdf88a1f Disable rtnetlink defaultroute lookup if pluto is disabled Martin Willi 2009-09-15 13:13:45 +02:00