Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• b6b90b68a1 Added some NEWS Martin Willi 2009-09-15 09:13:31 +02:00
• 9f45b19fe7 Use ID_KEY_ID as PGP user id, as it can contain any string Martin Willi 2009-09-15 08:45:08 +02:00
• e4be5ef8fb Fall back to default credential set lookup if fingerprint lookup fails Martin Willi 2009-09-15 08:44:10 +02:00
• 79c6f16212 Implemented support for preinstalled PGP certificates in charon Martin Willi 2009-09-14 20:04:48 +02:00
• 4cb0e1bb76 Added basic support for PGP certificates (no trust relationships yet) Martin Willi 2009-09-14 16:56:54 +02:00
• 88f3ffa1b1 Moved generic PGP parsing functions to pgp_utils.[ch] Martin Willi 2009-09-14 16:06:19 +02:00
• 622e558cb0 pki --pub and --keyid accept pkcs10 as input Andreas Steffen 2009-09-15 06:23:38 +02:00
• 0912f0d2bc replaced the missed ${confdir} by ${sysconfdir} Martin Willi 2009-09-14 17:56:12 +02:00
• 0001db115d check if PKCS#10 version is 1 Andreas Steffen 2009-09-14 19:38:57 +02:00
• 29662a9b73 cosmetics Andreas Steffen 2009-09-14 19:28:56 +02:00
• 5a4dee6dc4 enable debug level setting Andreas Steffen 2009-09-14 19:28:25 +02:00
• af0dfe4987 Fixed pluto certificate parsing Martin Willi 2009-09-14 17:17:07 +02:00
• b9fbd66587 Added support to build RSA keys from components in openssl Martin Willi 2009-09-14 14:29:10 +02:00
• 341af94dc6 support of PKCS#10 certificate request generation without attributes Andreas Steffen 2009-09-14 00:45:51 +02:00
• 210d287368 extended hasher_signature_algorithm_to_oid() function Andreas Steffen 2009-09-13 21:41:51 +02:00
• ba274c2343 removed req.h Andreas Steffen 2009-09-13 21:03:36 +02:00
• f03e0e9147 support of PKCS#10 certificate request parsing Andreas Steffen 2009-09-13 21:00:15 +02:00
• 4c51c6be01 parsing error caused segfault in destroy() Andreas Steffen 2009-09-13 20:56:12 +02:00
• b6f28c2870 need two PKCS#9 OIDs Andreas Steffen 2009-09-13 00:42:15 +02:00
• beace4af14 corrected captions Andreas Steffen 2009-09-12 17:39:15 +02:00
• 4da11016e7 fixed another typo Andreas Steffen 2009-09-12 06:44:11 +02:00
• abffb63ffe fixed typo Andreas Steffen 2009-09-12 06:42:35 +02:00
• 06a8df11d9 pki tool can issue/self-sign certificates with OCSP URIs Martin Willi 2009-09-11 17:17:56 +02:00
• 6dc57cd02e x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations Martin Willi 2009-09-11 17:16:22 +02:00
• 6d24a5d746 added lost session cookie buffer Martin Willi 2009-09-11 16:23:15 +02:00
• 3b878dae7e Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro Martin Willi 2009-09-11 15:35:10 +02:00
• 3a7bd9bd49 pki tool can issue certificates with CRL distribution points Martin Willi 2009-09-11 11:45:42 +02:00
• 881b259943 x509 plugin supports encoding of CRL distribution points Martin Willi 2009-09-11 11:45:04 +02:00
• 31f87c29c7 double check session id has been initialized Martin Willi 2009-09-10 20:51:43 +02:00
• 356b2b2780 pass NULL to library_init() to load settings from default file Martin Willi 2009-09-08 20:01:13 +02:00
• 5b03a350fc use NULL to load plugins from default plugin directory Martin Willi 2009-09-08 19:48:34 +02:00
• 6de28173f0 remove obsolete @brief doxygen tags Martin Willi 2009-09-07 18:56:53 +02:00
• 6d8e913ab6 Use wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t Martin Willi 2009-09-07 18:50:02 +02:00
• 48a606b5ff libfast uses enumerator instead of deprecated iterator Martin Willi 2009-09-07 18:28:55 +02:00
• d73f453c29 Updated x509 plugin to the new builder API Martin Willi 2009-09-09 16:24:06 +02:00
• 91ef5c66ab Updated pubkey plugin to the new builder API Martin Willi 2009-09-09 16:23:41 +02:00
• 872176d350 Updated pkcs1 plugin to the new builder API Martin Willi 2009-09-09 16:23:26 +02:00
• 43224e9527 Updated pgp plugin to the new builder API Martin Willi 2009-09-09 16:23:08 +02:00
• de408caf93 Updated pem plugin to the new builder API Martin Willi 2009-09-09 16:22:42 +02:00
• 30c06407c6 Updated openssl plugin to the new builder API Martin Willi 2009-09-09 16:21:21 +02:00
• 1086d00e41 Updated gmp plugin to the new builder API Martin Willi 2009-09-09 16:20:53 +02:00
• a94acb58a2 Updated gcrypt plugin to the new builder API Martin Willi 2009-09-09 16:20:35 +02:00
• 26135ed9bb Updated dnskey plugin to the new builder API Martin Willi 2009-09-09 16:19:44 +02:00
• 0a139eeac9 Updated agent plugin to the new builder API Martin Willi 2009-09-09 16:19:08 +02:00
• d3674e25a7 Updated pluto to the new builder API Martin Willi 2009-09-09 16:18:29 +02:00
• f678f5c77e Replaced builder_t objects by simple builder_function_t functions Martin Willi 2009-09-09 16:16:34 +02:00
• 3ce9438b60 Use dynamic registration/usage invocation of command types Martin Willi 2009-09-10 12:44:06 +02:00
• 6be68cc1c7 splitted PKI tool to a file per command Martin Willi 2009-09-10 12:31:40 +02:00
• e5e6c6f43c use generic option parsing with usage information Martin Willi 2009-09-10 11:18:41 +02:00
• 63ee88745a fixed memleak Martin Willi 2009-09-09 17:12:38 +02:00
• 1080a51fd2 evaluate arguments of chunk_clone/clonea/alloc/alloca only once Martin Willi 2009-09-09 13:30:31 +02:00
• 1f45e32594 split usage information Andreas Steffen 2009-09-09 02:37:17 +02:00
• e666d45ddb updated usage of ipsec pki --self Andreas Steffen 2009-09-08 22:22:09 +02:00
• a5fc71562a support --options also in ipsec pki --self Andreas Steffen 2009-09-08 21:54:00 +02:00
• ddf8ee0f37 --options reads command line options from file Andreas Steffen 2009-09-08 21:36:35 +02:00
• b5d31b3e56 pki tool supports subjectAltNames in certificates Martin Willi 2009-09-08 13:27:35 +02:00
• 7631aac20c x509 certificates support encoding of email, DNS and IP subjectAltNames Martin Willi 2009-09-08 13:17:41 +02:00
• d7be290643 non self-signed x509 certificates are encoded with authorityKeyIdentifier Martin Willi 2009-09-08 11:26:05 +02:00
• 5c92524449 x509 CA certificates are encoded with a subjectKeyIdentifier Martin Willi 2009-09-08 11:02:49 +02:00
• 8871e59c11 pki tool --issue/--verify operations require a CA with CA basicConstraint Martin Willi 2009-09-08 10:44:08 +02:00
• e4a4589606 pki tool can set CA basicConstraint on --self/--issued certificates Martin Willi 2009-09-08 10:39:04 +02:00
• 8ab900dee9 x509 plugin supports encoding of CA basicConstraint extension Martin Willi 2009-09-08 10:38:02 +02:00
• 58f34613e0 pki tool can issue certificates Martin Willi 2009-09-07 16:04:30 +02:00
• faa4bd49fb use sysconfdir, no need for an additional confdir variable Martin Willi 2009-09-07 15:10:30 +02:00
• c0e56a663e only add generated m4 files to include path Martin Willi 2009-09-07 15:10:01 +02:00
• b7b5653386 Use macros to define --with options Martin Willi 2009-09-07 12:07:57 +02:00
• b803bc82f4 Use macros to define --enable/--disable options Martin Willi 2009-09-07 10:34:14 +02:00
• e5efb5a03b Added a .gitignore for generated m4 scripts Martin Willi 2009-09-07 10:35:22 +02:00
• e455ae1343 use m4/ autoconf subdirectory Martin Willi 2009-09-07 09:31:31 +02:00
• 8b3b4a244e Removed trailing whitespaces in configure.in/Makefile.am Martin Willi 2009-09-07 11:46:16 +02:00
• 0755e98e5c Cleaned up some code of the mediation extension. Tobias Brunner 2009-09-04 15:48:30 +02:00
• f4b975a65d Moved set_state after the DBG0 statement, so that the message gets logged also for mediation connections without CHILD_SA. Tobias Brunner 2009-09-04 11:10:52 +02:00
• 7b3814f75d remove spaces before tabs at the beginning of lines (^( )+\t) Martin Willi 2009-09-04 15:02:11 +02:00
• b9b8a98f47 remove spaces within tabs (\t( )+\t) Martin Willi 2009-09-04 14:58:05 +02:00
• 323f9f990f replaces four spaces by tabs, where appropriate Martin Willi 2009-09-04 14:50:23 +02:00
• 7daf5226b7 removed trailing spaces ([[:space:]]+$) Martin Willi 2009-09-04 13:46:09 +02:00
• 7d1b030446 fixed open failure debug message in load_secrets Marius Tomaschewski 2009-09-04 11:36:36 +02:00
• dd2b6f3073 fixed memleak in rekey collissions Martin Willi 2009-09-03 18:09:29 +02:00
• 72e2faf291 Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL Martin Willi 2009-09-03 17:32:41 +02:00
• 9beb83868f Use get_notify() to look up single notifies Martin Willi 2009-09-03 17:32:01 +02:00
• 3e15f99189 accept octet strings in is_asn1() check Martin Willi 2009-09-03 15:35:05 +02:00
• d176994235 Use recursive source address lookup if we get a gateway only Martin Willi 2009-09-02 11:47:14 +02:00
• dece3d8efc Fixed load_secrets to acquire/release lock in level 0 only Marius Tomaschewski 2009-09-02 13:49:39 +02:00
• 12a230ddb4 Complain about rw(un)lock errors Martin Willi 2009-09-03 14:27:33 +02:00
• a20e98749a Simplified the search for ME_CONNECTID notifies. Tobias Brunner 2009-09-02 17:29:02 +02:00
• 484a06bce7 Fixed some typos; whitespace cleanup. Tobias Brunner 2009-09-02 17:26:36 +02:00
• 5293b02945 Missing commas added. Tobias Brunner 2009-09-02 16:12:52 +02:00
• 8fb4edc4ff handle plugin loading failures Martin Willi 2009-09-01 16:20:45 +02:00
• d6a45127dc plugins marked with a '!' are handled as critical: cancel if loading fails Martin Willi 2009-09-01 16:08:28 +02:00
• 9412bbfa7c use subjectPublicKeyInfo hash for CA certificate lookup Martin Willi 2009-09-01 14:05:58 +02:00
• deddfde91b Description of new lifetime limits added to manpage. Tobias Brunner 2009-09-01 12:48:59 +02:00
• 686aba2589 Added lifetime/margintime keywords as alias for keylife/rekeymargin. Tobias Brunner 2009-08-28 17:10:08 +02:00
• e75f423753 Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static. Tobias Brunner 2009-08-28 17:04:35 +02:00
• abff49a7ff Handling of new lifetime limits added to stroke. Tobias Brunner 2009-08-27 18:10:39 +02:00
• ca41aa0602 Added keywords for the new lifetime limits to starter. Tobias Brunner 2009-08-27 18:09:26 +02:00
• 9c7faa8618 Added parser for unsigned long long ints to starter. Tobias Brunner 2009-08-27 18:03:17 +02:00
• f40c115531 If no inbound CHILD_SA is found, try to find an outbound SA. Tobias Brunner 2009-08-27 16:16:23 +02:00
• 1087b9cebb Set the packet and byte limits in the netlink and pfkey kernel interfaces. Tobias Brunner 2009-08-27 16:07:30 +02:00
• e3c7e72973 Terminology and return value of get_lifetime of child_sa_t corrected. Tobias Brunner 2009-08-27 11:46:35 +02:00
• cb123493d1 child_sa_t adapted to the new lifetime configuration. Tobias Brunner 2009-08-27 11:45:36 +02:00