This website requires JavaScript.
ddedf511bb
fixed compile error in smp plugin
Martin Willi
2008-06-10 11:29:46 +00:00
a57e0580f6
refactoring
Tobias Brunner
2008-06-10 09:19:18 +00:00
ea0823dffd
ECDSA with OpenSSL
Tobias Brunner
2008-06-10 09:08:27 +00:00
2904403e96
parsing of subjectPublicKeyInfo of x509 certificates extracted
Tobias Brunner
2008-06-10 09:00:42 +00:00
a8ed846be7
added strongswan.conf option "routing_table" and "routing_table_prio"
Martin Willi
2008-06-10 07:51:21 +00:00
80205e2fbc
oids for elliptic curves
Tobias Brunner
2008-06-10 07:37:32 +00:00
468d45e68b
making the parsing of parameters of a subjectAlgorithmIdentifier optional
Tobias Brunner
2008-06-10 07:36:44 +00:00
208b3baf10
fixed "enabled" value key word more debugging for settings parser
Martin Willi
2008-06-10 07:14:34 +00:00
5dcda9e25b
added strongswan.conf option to disable route installation
Martin Willi
2008-06-10 06:58:39 +00:00
5a22a02156
DNS resolving of ike_cfg hosts dynamically on demand
Martin Willi
2008-06-06 15:05:54 +00:00
1e9c46f13d
configure option for updown firewall scripts
Martin Willi
2008-06-06 08:24:39 +00:00
915e04b2dd
extended leak detective white list for OpenSSL
Martin Willi
2008-06-06 08:13:11 +00:00
e581a31d6a
link against openssl crypto library only
Martin Willi
2008-06-06 08:04:42 +00:00
1e5522ffd7
convert comma-separated RDNs into slash-separated OpenSSL --subject format
Andreas Steffen
2008-06-05 19:28:08 +00:00
6649a3ca80
fixed --utc parsing position support for DN filtering usign id="CN=asdf, O=asdf",addr=1.1.1.1 changed order of --leases columns
Martin Willi
2008-06-05 13:56:10 +00:00
179dd12c3a
added statistics functions and input validation checks to ipsec pool
Andreas Steffen
2008-06-05 12:17:08 +00:00
4fa74562ae
fixed UTC identitation implement filtering in --leases
Martin Willi
2008-06-05 08:52:27 +00:00
0f7aecf402
fixed NULL string mysql parameter
Martin Willi
2008-06-05 08:24:55 +00:00
da4ad32547
moved copying of tables.sql after the strongswan installation
Andreas Steffen
2008-06-05 07:25:27 +00:00
89c87995e2
cosmetics in size field of ipsec pool --status command
Andreas Steffen
2008-06-04 22:20:19 +00:00
011b1cca94
do not roam IKE_SA in created or deleting state
Martin Willi
2008-06-04 14:31:06 +00:00
2ba1f9e761
added pool statistics (size, online, lease count, with usage ratio)
Martin Willi
2008-06-04 14:01:44 +00:00
f3e11fc478
some input validation checks for --add and --resize --purge keeps an entry for each address to allow their reallaction
Martin Willi
2008-06-04 13:18:55 +00:00
f13e23754f
tolerating chown failures on installation, required to build some packages
Martin Willi
2008-06-04 12:09:24 +00:00
9fa66e8bbf
removed unused variable
Martin Willi
2008-06-03 12:14:02 +00:00
0ebc87f73e
added missing strongswan.conf
Andreas Steffen
2008-05-31 08:56:13 +00:00
76340368a6
divided ipsec.sql into tables.sql and data.sql
Andreas Steffen
2008-05-31 08:53:48 +00:00
fe46d8da37
added missing TCPDUMPHOST alice
Andreas Steffen
2008-05-29 08:58:49 +00:00
5785683afe
added two Elliptic Curve DH Group scenarios using the openssl library
Andreas Steffen
2008-05-29 08:28:20 +00:00
0655fe4fd8
CIRCLEQ patch submitted by Jay Pfeifer
Andreas Steffen
2008-05-29 07:49:47 +00:00
0caf2b936e
added missing comma in enumeration
Andreas Steffen
2008-05-29 06:55:03 +00:00
2e6749af0a
activate --enable-openssl option in uml scenarios
Andreas Steffen
2008-05-28 14:13:40 +00:00
1cc594f9bc
added openssl/rw-cert uml scenario
Andreas Steffen
2008-05-28 13:49:53 +00:00
7fe3ae88e4
handle default key sizes in openssl_crypter
Andreas Steffen
2008-05-28 12:20:38 +00:00
f1c2489e1e
added ikev2/rw-eap-md5-rsa scenario
Andreas Steffen
2008-05-28 10:38:12 +00:00
e825ede271
reinsert hash_and_url = yes option in strongswan.conf
Andreas Steffen
2008-05-28 08:35:28 +00:00
c9be754a45
define plugins to be loaded in strongswan.conf
Andreas Steffen
2008-05-28 08:29:51 +00:00
8f7074cf2e
version bump to 4.2.4
Andreas Steffen
2008-05-25 10:35:39 +00:00
f9b1bcad24
do not list empty certuribase strings
Andreas Steffen
2008-05-24 05:47:37 +00:00
ed26207d08
fixed copy-and-paste error
Andreas Steffen
2008-05-23 19:23:04 +00:00
49b2395e3b
check if parsing of the RSA public key in an X.509 certificate was successful
Andreas Steffen
2008-05-23 19:22:37 +00:00
7dfb8a1bde
fix caption alignment if date is displayed in local time
Andreas Steffen
2008-05-23 19:21:08 +00:00
731ac6bf52
check if crypter is available in pem_to_bin()
Andreas Steffen
2008-05-23 19:18:08 +00:00
7624dbf068
process payload length more strictly
Martin Willi
2008-05-23 18:23:17 +00:00
83d9e870ad
some bug fixes
Andreas Steffen
2008-05-23 16:06:58 +00:00
5e17e35c8d
fixed some compiler warnings
Martin Willi
2008-05-23 15:49:43 +00:00
c7d81ad12c
added --utc option to ipsec pool
Andreas Steffen
2008-05-23 15:46:25 +00:00
de3d65a132
filtering out non matching path probing pairs explicitly
Martin Willi
2008-05-23 15:43:42 +00:00
0672aa7b0e
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
Andreas Steffen
2008-05-23 14:24:24 +00:00
8cc16c9d9e
fixed the strongswan.conf path
Andreas Steffen
2008-05-22 21:59:54 +00:00
eaa1399812
fixed the strongswan.conf path
Andreas Steffen
2008-05-22 21:59:30 +00:00
7199d22e77
implement basic listing of attribute certificates
Andreas Steffen
2008-05-22 21:58:22 +00:00
be1585c587
log received DH groups and PRFs if no common proposal is found
Andreas Steffen
2008-05-22 14:18:44 +00:00
17188f20dd
Id and typo
Tobias Brunner
2008-05-22 12:13:10 +00:00
346e9c5712
added the ECP groups from RFC 5114
Tobias Brunner
2008-05-22 11:55:05 +00:00
fc1a31d54b
added ECDH with OpenSSL (see RFC 4753)
Tobias Brunner
2008-05-22 11:39:17 +00:00
31430acc1b
correctly initialize the mediation and connection manager
Tobias Brunner
2008-05-22 11:33:35 +00:00
58ac5e2ff4
fixed segmentation fault caused by malformed attribute certificates
Andreas Steffen
2008-05-21 22:53:45 +00:00
e1d2435dbf
fixed parsing of UNKNOWN_PAYLOADs
Martin Willi
2008-05-21 21:53:38 +00:00
0005cee527
fixed typo
Andreas Steffen
2008-05-21 21:52:59 +00:00
4d9c95ffcd
version bump to 4.2.3
Andreas Steffen
2008-05-21 18:40:11 +00:00
85a119bc0b
replying to COOKIE2 mobike notify properly including COOKIE2 ourself after path probing
Martin Willi
2008-05-21 17:56:21 +00:00
ce62751b60
writing guest pid to file (simplifies debugging)
Martin Willi
2008-05-21 16:02:16 +00:00
cb9edc54eb
using fixed size keys in key derivation for AES-XCBC PRF
Martin Willi
2008-05-21 14:58:03 +00:00
4f23ec78d1
added more verbosity if signature hash OID is unknown
Martin Willi
2008-05-21 13:01:58 +00:00
8bbb212f3a
list proposed ESP ENCRYPTION and INTEGRITY algorithms if no proposal is chosen
Andreas Steffen
2008-05-20 21:54:33 +00:00
a57cd446c6
added support of AES-CCM and AES-GCM
Andreas Steffen
2008-05-20 19:38:28 +00:00
02cd76241a
corrected evaltest.dat of ip-pool-db scenarios
Andreas Steffen
2008-05-20 18:33:23 +00:00
59495f8ae2
added the sql/ip-pool-db-restart and sql/ip-pool-db-expired scenarios
Andreas Steffen
2008-05-20 18:30:39 +00:00
49aeafc502
removed debug statement
Andreas Steffen
2008-05-20 16:23:58 +00:00
7f02156ebf
fixed whitespace eating in plugin loader
Andreas Steffen
2008-05-20 15:03:15 +00:00
367cc86f4a
added missing break in case statement
Andreas Steffen
2008-05-19 20:10:26 +00:00
da1bc5e860
fixed loading of smp plugin
Martin Willi
2008-05-19 14:20:07 +00:00
081a14cd33
added an error message when strongswan.conf cannot be read
Tobias Brunner
2008-05-19 13:20:33 +00:00
6f2ba57a4e
added a fixup for addresses from shared libraries in segmentation fault handler
Tobias Brunner
2008-05-19 12:49:35 +00:00
550690d23b
fixed the cleanup code when the credential factory fails to create a builder
Tobias Brunner
2008-05-19 12:43:01 +00:00
68ac3b44d1
fixed a bug introduced in [3973]
Tobias Brunner
2008-05-19 08:48:44 +00:00
6898ca1397
added ikev2/esp-alg-aes-ccm and ikev2/esp-alg-aes-gcm scenarios
Andreas Steffen
2008-05-17 21:57:08 +00:00
a327ee9589
suppress listing of integrity algorithm if it is undefined
Andreas Steffen
2008-05-17 21:52:58 +00:00
15c508c708
ccm and gcm icv_sizes are accepted both in bits and octets
Andreas Steffen
2008-05-17 21:51:47 +00:00
0b0fba9e0d
fixed warning if plugin list has trailing whitespaces
Martin Willi
2008-05-16 13:48:58 +00:00
3f730ec1cd
Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) in charon.
Tobias Brunner
2008-05-16 13:27:21 +00:00
5a9f62a754
updated xfrm.h to the version from the 2.6.25.4 kernel sources
Tobias Brunner
2008-05-16 13:24:18 +00:00
99968bf0a0
fixed plugin names of EAP modules
Martin Willi
2008-05-16 12:14:48 +00:00
987a42c05e
moved manager to its own subdirectory in ipsecdir
Martin Willi
2008-05-16 09:13:23 +00:00
1ba62b5562
loading default modules depending on configure options
Martin Willi
2008-05-16 08:52:32 +00:00
d8ff9eee6b
added missing semicolon
Andreas Steffen
2008-05-15 19:40:38 +00:00
7f491111e6
some NEWS for 4.2.2
Martin Willi
2008-05-15 14:15:27 +00:00
a3d92a3745
plugin load configuration in strongswan.conf some components accept a "component.load" option with a space separated list of plugins to load libcharon- plugins are now handled the same way as libstrongswan- plugins
Martin Willi
2008-05-15 14:01:26 +00:00
84770ded1e
RSA with OpenSSL
Tobias Brunner
2008-05-15 12:41:06 +00:00
144274ab20
corrected deinitialisation of public key factory
Tobias Brunner
2008-05-15 12:39:35 +00:00
c1571b34fd
generic public key factory moved
Tobias Brunner
2008-05-15 12:33:00 +00:00
89658f6d6c
static leases use 0, not NULL timeout fixed static leases
Martin Willi
2008-05-15 09:26:47 +00:00
bb94e1ed60
properly removing bootup poll interface eth0
Martin Willi
2008-05-15 08:41:00 +00:00
bde895181d
added ikev2/compress scenario
Andreas Steffen
2008-05-14 20:07:16 +00:00
fa44a2981c
implemented classical UML network scenario in dumm (ipsec testing)
Martin Willi
2008-05-14 13:11:13 +00:00
c48022a282
poll UML guests after startup using eth9=mcast, as networking is loaded after console
Martin Willi
2008-05-14 11:48:00 +00:00
1d56d328fd
typo
Tobias Brunner
2008-05-14 11:10:37 +00:00
782db7edd1
prototype of mediation client database plugin
Martin Willi
2008-05-14 07:26:19 +00:00
0fd4caea66
handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication
Martin Willi
2008-05-14 06:49:31 +00:00