Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• d5a9e6ff3a and a fix for it Martin Willi 2008-04-01 14:26:31 +00:00
• 68356ab12c simple converter from binary data to a c array Martin Willi 2008-04-01 14:19:22 +00:00
• 0ea70ca66e removed unneded publicKeyInfo ASN1 structure Martin Willi 2008-04-01 13:39:12 +00:00
• 392f4e17c2 minimal stroke_list_ocsp() implementation Andreas Steffen 2008-04-01 12:11:09 +00:00
• 9c2a905d63 stopping connectivity checks on the responders side after receiving an IKE_SA_INIT request with the proper ME_CONNECTID Tobias Brunner 2008-04-01 11:38:18 +00:00
• 45d66f5af6 some simplifications to trusted_enumerator_t Martin Willi 2008-04-01 10:56:08 +00:00
• 1bb85edffe checking pretrusted but bad certificates only once Martin Willi 2008-04-01 10:43:44 +00:00
• 946d1ecd59 stroke_list groups certificates by issuer Andreas Steffen 2008-04-01 10:26:27 +00:00
• dd2efc2c03 replaced the example manager database by a sql script Martin Willi 2008-04-01 07:16:48 +00:00
• e411f94d44 changed enumerator implementation to handle reentrant code Martin Willi 2008-04-01 06:51:55 +00:00
• c096472605 minor changes in debug output Andreas Steffen 2008-03-31 21:59:32 +00:00
• aaa7643b73 put DN in double quotes Andreas Steffen 2008-03-31 21:08:56 +00:00
• a92ea0ccb3 output error message if maximum ca path length is reached Andreas Steffen 2008-03-31 20:42:57 +00:00
• eafc0654ca ipsec list suppresses duplicates Andreas Steffen 2008-03-31 20:21:24 +00:00
• e5ab32a7ee timing of connectivity checks adjusted Tobias Brunner 2008-03-31 15:04:38 +00:00
• 9e72d3bcaf defining ME globally, as we need it in plugins Martin Willi 2008-03-31 15:01:43 +00:00
• 58a05045cc utc argument in %#T was missing Andreas Steffen 2008-03-31 14:36:00 +00:00
• 9e183cd5b8 signal fixed Tobias Brunner 2008-03-31 14:27:16 +00:00
• 681d56b1bb disabled build of outdated dbus interface Andreas Steffen 2008-03-31 12:59:39 +00:00
• f98736aee6 changed order of server and peer reflexive endpoints (and also the priorities) Tobias Brunner 2008-03-31 10:56:49 +00:00
• 0f7ef3d2a0 received certificates have least priority fixed manager unlocking Martin Willi 2008-03-31 08:43:18 +00:00
• d69b267d58 fixed refcounting in certificate trustchain validation Martin Willi 2008-03-31 07:16:12 +00:00
• 1c65129148 adapted configure options in testing.conf and build-umlrootfs Andreas Steffen 2008-03-29 19:33:02 +00:00
• dcc777652e changed error message Andreas Steffen 2008-03-29 13:26:53 +00:00
• 40f9006845 output uptime in status in local time Andreas Steffen 2008-03-29 08:55:09 +00:00
• d2aa6fcaeb shortened menu item Andreas Steffen 2008-03-28 22:46:09 +00:00
• c63dc50f15 demoted ldap debug output to level 2 Andreas Steffen 2008-03-28 22:44:45 +00:00
• 95ef5db5c3 remove xml directory Andreas Steffen 2008-03-28 19:49:59 +00:00
• b7ef3f625d leak detective detects heap over- and underflow Martin Willi 2008-03-28 14:51:26 +00:00
• 7939864dec updated leak_detective whitelist: libxml and clearsilver functions Martin Willi 2008-03-28 13:16:36 +00:00
• 6b9290ff12 renamed xml plugin to smp to avoid confusion added some dependency checks to configure configure checks ClearSilver and fastcgi cleanups in the build system here and there Martin Willi 2008-03-28 12:44:01 +00:00
• 892fb43b12 fixed manager plugin loading manager uses strongswan.conf to read its configuration Martin Willi 2008-03-28 12:41:05 +00:00
• 35b6e2301f fixed crash if crl fetching fails Martin Willi 2008-03-28 12:00:51 +00:00
• dca40a9483 fixed all pluto compiler warnings Martin Willi 2008-03-28 11:48:14 +00:00
• 7539b1d1aa fixed compiler warning in openace fixed pem loading bug Martin Willi 2008-03-28 11:47:11 +00:00
• acf7956c68 fixed compiler warning in libfreeswan Martin Willi 2008-03-28 11:46:30 +00:00
• a43eb5aa3f fixed compiler warning in scepclient Martin Willi 2008-03-28 11:45:56 +00:00
• 0d2670e7e6 removed unused yynuput to fix compiler warning Martin Willi 2008-03-28 11:45:01 +00:00
• 15e21c5cba fixed compiler warning Martin Willi 2008-03-28 10:21:04 +00:00
• d55fa9aff7 reentrant save cert_cache Martin Willi 2008-03-28 08:38:51 +00:00
• ac1fefc2de caching of CRLs Martin Willi 2008-03-28 08:14:47 +00:00
• d20e5c6ab5 replaced get_public() by create_public_enumerator() to try multiple public keys for signature verification Martin Willi 2008-03-27 19:07:23 +00:00
• 0d30ba3343 use trusted self-signed root CA certificates as trust anchor only Martin Willi 2008-03-27 13:38:02 +00:00
• e74bc8e51d changed external interface to the mediation extension. Tobias Brunner 2008-03-27 12:31:35 +00:00
• b42421a04c corrected ME_ENDPOINT length check Tobias Brunner 2008-03-27 12:29:51 +00:00
• 52a61742e7 reusing generic shared_key_t implementation in med_db Martin Willi 2008-03-27 11:45:49 +00:00
• cf4caefab1 whitelisted FCGX_Init reporting count of leaks suppressed by whitelist Martin Willi 2008-03-27 11:42:35 +00:00
• 4204db116b fixed memory leak in dispatcher Martin Willi 2008-03-27 10:24:37 +00:00
• 54150b3f13 checking the size of ME_* notify payloads Tobias Brunner 2008-03-27 10:17:29 +00:00
• b0dee635d2 replaced the COOKIE notify payload in connectivity checks with a ME_CONNECTAUTH notify payload Tobias Brunner 2008-03-27 09:54:09 +00:00
• f957f7dfb3 implemented cert cache flushing, ipsec purgeocsp Martin Willi 2008-03-27 06:37:29 +00:00
• d61bd27a9a fixed plugin/stroke Makefile Andreas Steffen 2008-03-26 20:24:55 +00:00
• 1aad8bdfad makeshift fix of --enable-integrity-test option Andreas Steffen 2008-03-26 20:16:42 +00:00
• dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed Tobias Brunner 2008-03-26 18:40:19 +00:00
• 685232670a added uptime statistics to statusall Martin Willi 2008-03-26 16:13:14 +00:00
• 7b88a983d8 caching of ocsp responses (experimental), no crl caching yet Martin Willi 2008-03-26 15:21:50 +00:00
• 391abda082 fixed compile error if --enable-p2p is set Martin Willi 2008-03-26 14:45:24 +00:00
• 5298777ad8 treat sig_alg and algorithm comparison in a consistent way over all certificate types Andreas Steffen 2008-03-26 13:10:36 +00:00
• e37f7715bf fixed rightca= constraint checking implemented rightca= for intermediate CAs we do not have the certificate at config load Martin Willi 2008-03-26 12:23:46 +00:00
• 2d84da89b9 fixed auth_info_t.equals() Martin Willi 2008-03-26 10:58:19 +00:00
• 0b14fdb92b splitted stroke plugin to several files: socket: reads messages from socket, dispatching config: process add/del conn, serves configs through backend_t control: controlling of the daemon (up/down/route/...( cred: credential loading, serves creds through credential_set_t ca: ca sections from ipsec.conf, serves cdp's through credential_set_t list: log status information to stroke console (status/statusall/list*) shared_key: shared key implementation for keys read from ipsec.secrets plugin: registers stroke plugin and starts socket w/ thread Martin Willi 2008-03-26 10:10:40 +00:00
• 3c7e72f5b0 added equals() method to peer_cfg, ike_cfg, proposals, auth_info allows easier merging of ipsec.conf connections replaced some iterators through enumerators made proposals algorithm_t private using enumerator Martin Willi 2008-03-26 10:06:45 +00:00
• a852928a6f fixed compiler warnings Martin Willi 2008-03-26 09:29:30 +00:00
• 26930a8c3e certificate factory can load certs from file Andreas Steffen 2008-03-25 22:28:27 +00:00
• ff98c85b57 added component BUILD_FROM_FILE Andreas Steffen 2008-03-25 13:26:33 +00:00
• 13bec89740 renamed certificate field in x509_cert.c to encoding Andreas Steffen 2008-03-25 12:22:12 +00:00
• 84a5c6a679 added ac.c Andreas Steffen 2008-03-25 10:13:57 +00:00
• 3e6ee16478 defined *_create_from_file() constructors in libstrongswan/credentials/certificates Andreas Steffen 2008-03-25 10:12:45 +00:00
• 63cb8a7fee fixed refence counts before calling attribute certificate factory Andreas Steffen 2008-03-25 09:39:23 +00:00
• 9bb8d23e17 corrected some doxygen entries Andreas Steffen 2008-03-22 08:15:18 +00:00
• 855606efd4 optimized self-signed certificate detection Andreas Steffen 2008-03-21 20:37:08 +00:00
• 36617c1ad5 shortened debug output Andreas Steffen 2008-03-21 20:36:19 +00:00
• 02fd225ea5 detect trusted self-signed before trust chain verification Andreas Steffen 2008-03-21 19:10:55 +00:00
• ffce5db1b7 self-signed certificates were not marked by x509_cert.c Andreas Steffen 2008-03-21 19:07:12 +00:00
• c081a9bfe6 added ietf group attribute support to attibute certificate factory Andreas Steffen 2008-03-21 16:59:21 +00:00
• 93da2684b6 fixed memory allocation problem in openac Andreas Steffen 2008-03-21 15:58:48 +00:00
• 104c96a63c added BUILD_SERIAL component and fixed several ac bugs Andreas Steffen 2008-03-21 12:44:15 +00:00
• a2083c30d5 added VALIDATION_UNKNOWN to cert_validation_names Andreas Steffen 2008-03-21 11:54:12 +00:00
• 6ac3a7acbb added credential factory support for BULD_NOT_BEFORE_TIME and BUILD_NOT_AFTER_TIME Andreas Steffen 2008-03-21 11:32:33 +00:00
• b6377673e7 added x509_ac_builder plugin Andreas Steffen 2008-03-21 10:52:11 +00:00
• 3d48f3301a initialize library in openac Andreas Steffen 2008-03-21 10:42:05 +00:00
• 754c1c0ef7 suppress IKEv2-specific policy flags in pluto. Patch contributed by Heiko Hund from Astaro. Andreas Steffen 2008-03-21 09:34:40 +00:00
• 112482d3f4 optimized debug output of credential_manager.c Andreas Steffen 2008-03-21 09:28:25 +00:00
• dd7924f033 removed build.h include Andreas Steffen 2008-03-20 15:25:02 +00:00
• bdec2e4f52 refactored openac and its attribute certificate factory Andreas Steffen 2008-03-20 15:23:52 +00:00
• 25c9637222 modified debug text Andreas Steffen 2008-03-20 15:22:26 +00:00
• dfd5cdcb88 cert_cache_t caches subject-issuer relations and subject certificates ocsp/crl do not benefit yet due missing lookup function Martin Willi 2008-03-20 14:31:36 +00:00
• fe8f7626d1 fallback to random end entity certificate if trustchain building fails Martin Willi 2008-03-20 13:14:55 +00:00
• 629e55434a Martin Willi 2008-03-20 11:38:51 +00:00
• a86e3ab37a some C libraries need _GNU_SOURCE for rwlocks Martin Willi 2008-03-20 11:27:55 +00:00
• 36524c4844 added support for certificate requests for not yet known CAs Martin Willi 2008-03-20 10:09:56 +00:00
• 2b522ab450 added $ Andreas Steffen 2008-03-20 09:30:07 +00:00
• 9be0dc922e fixed verification of preinstalled certificates Martin Willi 2008-03-20 09:30:02 +00:00
• 384ebaa57a included utils/linked_list.h Andreas Steffen 2008-03-20 09:28:58 +00:00
• 44ab7c85d7 more trustchain verification improvements should fix crl-revoked and two-certs scenarios Martin Willi 2008-03-20 09:27:57 +00:00
• 1a9ad33e3b cleaned up includes Andreas Steffen 2008-03-20 09:24:22 +00:00
• ca7663ece6 CA certificates are allowed to sign OCSP responsed without OCSP_SIGNER flag Martin Willi 2008-03-20 07:21:44 +00:00
• 48acfe98ae refactored trustchain verification, this should fix #33 moved auth_info/ocsp_response credset wrapper to separate files Martin Willi 2008-03-19 17:54:54 +00:00
• 84d8ff64cd increased debug level in trust chain verification for auditing purposes Andreas Steffen 2008-03-19 17:04:09 +00:00
• de7062a280 removed unimplemented private/public key function declarations Martin Willi 2008-03-19 14:21:56 +00:00