Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• cfede7f6e2 The introduced SHA1_NOFINAL hasher was not sufficient for EAP-AKA, as it requires to XOR the key into the hashers state. A new SHA1 based keyed hash function, implemented as PRF, enables EAP-AKA and the FIPS-PRF function to properly use the existing SHA1 implementation. Martin Willi 2008-03-19 14:02:52 +00:00
• c912c3d382 log nextUpdate of crls and ocsp responses Andreas Steffen 2008-03-19 13:11:29 +00:00
• 2590faa330 fixed stupid bug in fetch_ocsp() Andreas Steffen 2008-03-19 12:36:15 +00:00
• ae8715f956 attempt to achieve consistent debugging output Andreas Steffen 2008-03-19 12:06:38 +00:00
• d3a6993777 fixed shared key lookup in stroke Martin Willi 2008-03-19 10:24:51 +00:00
• 3c448f019b fixed peer_cfg lookup when omitting IDr Martin Willi 2008-03-19 10:08:59 +00:00
• 081ae2eb61 fixed CRL check return value on revoked certificates fixed possible refcounting bugs generic return_null() implementation Martin Willi 2008-03-19 09:44:47 +00:00
• a40708e511 fixed compiler warning Martin Willi 2008-03-18 14:06:11 +00:00
• bed94c8aeb added generic payload order rules for notifies Martin Willi 2008-03-18 12:45:23 +00:00
• 7162be5772 fixed ike_cfg lookup in stroke Martin Willi 2008-03-18 12:40:41 +00:00
• 4bfa63ed25 added false positive signature check Martin Willi 2008-03-18 12:25:39 +00:00
• 18be601fcd added missing test case file ([3607]) Martin Willi 2008-03-18 12:16:36 +00:00
• d7c529f5a6 creating public key from RSA private key RSA key generation and signature test Martin Willi 2008-03-18 12:13:51 +00:00
• 8d49b51f8b made is_newer() a certificate_t method Andreas Steffen 2008-03-18 10:36:08 +00:00
• 50045c3b14 better normalized tables for SQL plugin (IDs) Martin Willi 2008-03-18 09:07:04 +00:00
• 34e281ed32 enforcing x509_flags on certificate construction Martin Willi 2008-03-17 08:06:49 +00:00
• d4ba109c9c fixed CRL revoked certs enumeration Martin Willi 2008-03-17 07:25:32 +00:00
• 933f80c391 logging to SQL database Martin Willi 2008-03-15 14:17:09 +00:00
• 72d68379dc correctly unregister IKE_SA at the bus Martin Willi 2008-03-15 14:08:43 +00:00
• 8d04f78d07 removed X509_PEER flag; flags are meant to read cert, not to store additional state in cert removed x509_t.set_flags for the reason above implemented a simple, generic shared_key_t Martin Willi 2008-03-14 15:11:29 +00:00
• 39ea88f694 credential lookup in mysql/sqlite database Martin Willi 2008-03-14 15:06:42 +00:00
• 9c410a8806 refactored buggy trustchain building, fixed refcount bug Martin Willi 2008-03-14 15:04:16 +00:00
• dbcf4e7451 reduced mysql pool verbosity Martin Willi 2008-03-14 15:03:19 +00:00
• 8f1596d606 SQL schema for MySQL and SQLite, test data Martin Willi 2008-03-14 07:39:01 +00:00
• df3462ddbe two small fixes Tobias Brunner 2008-03-13 15:03:06 +00:00
• e42db695e2 fixed apidoc grouping Martin Willi 2008-03-13 14:53:57 +00:00
• 419ee1072e added NetworkManager prototype DBUS policy, applet config Martin Willi 2008-03-13 14:41:27 +00:00
• 2d94fdfab7 added old and unmaintained prototype of NetworkManager applet and authenticator Martin Willi 2008-03-13 14:37:11 +00:00
• b820f8aa8e reverted accidentally commited testing config Martin Willi 2008-03-13 14:20:20 +00:00
• 552cc11b1f merged the modularization branch (credentials) back to trunk Martin Willi 2008-03-13 14:14:44 +00:00
• 2df655134c activated svn:keywords on all UML scripts Andreas Steffen 2008-03-01 10:25:52 +00:00
• 7a691623c1 support of gnome-terminal in UML testing Andreas Steffen 2008-02-29 20:17:28 +00:00
• 37940132a4 take down eth1 interface on alice via ssh Andreas Steffen 2008-02-29 17:00:07 +00:00
• 2571708bea added sleep due to new scheduler in 2.6.24 kernel Andreas Steffen 2008-02-29 15:52:25 +00:00
• a983ce889a version bumps Andreas Steffen 2008-02-29 15:51:16 +00:00
• b48bdac20b improved P2P_NAT debugging Andreas Steffen 2008-02-27 20:30:39 +00:00
• e633b1998f creating sysconfdir if it does not exist moved all directory creations into starters Makefile Martin Willi 2008-02-22 14:50:38 +00:00
• a11ea97db8 version bump to 4.2.0 Andreas Steffen 2008-02-15 18:44:29 +00:00
• 6859f760d9 release of 4.1.11 bug fix version Andreas Steffen 2008-02-14 21:26:21 +00:00
• 13aa41d663 added support of --enable-eap-sim Andreas Steffen 2008-02-14 21:25:38 +00:00
• af0de6272d disable eth1 interface of UML host alice after booting Andreas Steffen 2008-02-14 21:24:54 +00:00
• f750247f5e added sleep 1 to ikev1/xauth-rsa-nosecret scenario Andreas Steffen 2008-02-14 21:23:48 +00:00
• fb7e7dc484 refactored connect_manager_t to use the find functions on linked lists Tobias Brunner 2008-02-14 13:42:36 +00:00
• e3311a40f0 find methods for linked lists Tobias Brunner 2008-02-14 12:29:29 +00:00
• 298c9c8eed some websites append a newline character to a DER-encoded binary blob Andreas Steffen 2008-02-05 19:27:05 +00:00
• 5bbac9ffff split connections with different virtual IPs in different peer_cfgs respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA Martin Willi 2008-02-05 12:39:30 +00:00
• cdd33ec665 * replaced __thread with pthread_key_t/pthread_setspecific * use pthread_once to initialize the request handler Tobias Brunner 2008-02-05 09:31:21 +00:00
• e6b50b3fce EAP-SIM server and client test module added Andreas Steffen 2008-02-04 20:55:57 +00:00
• 663fedbe44 implemented IKEV2 EAP-SIM server and client test module that use triplets stored in a file. For details see the scenario 'ikev2/rw-eap-sim-rsa' Andreas Steffen 2008-02-04 14:52:06 +00:00
• 7094e840bf use the new options_t class Andreas Steffen 2008-02-04 14:46:43 +00:00
• b388a81848 fixed tabs Andreas Steffen 2008-02-04 14:45:50 +00:00
• 0730fec464 refactored optionsfrom as in an object-oriented way using the options_t class. Eliminated all memory leaks Andreas Steffen 2008-02-04 14:44:14 +00:00
• 3b1692c058 use identifiers in EAP_SUCCESS/EAP_FAILURE payloads Martin Willi 2008-02-04 11:43:10 +00:00
• 9514d26c5c parse signedData object with empty content Andreas Steffen 2008-02-02 00:29:03 +00:00
• f4a459473e build_signedData() now computes messageDigest attribute Andreas Steffen 2008-02-01 22:26:01 +00:00
• 7734c01677 added set_messageDigest() and get_messageDigest() methods Andreas Steffen 2008-02-01 22:24:51 +00:00
• e8bfe74289 extended and debugged PKCS#7 signedData support Andreas Steffen 2008-02-01 14:19:26 +00:00
• daccbee77e added S/MIME capabilities OID Andreas Steffen 2008-02-01 10:40:03 +00:00
• 26e9e2ecd9 changed tabs to 4 spaces Andreas Steffen 2008-02-01 01:01:17 +00:00
• a561f74d45 two bug fixes Andreas Steffen 2008-02-01 00:15:27 +00:00
• 071e037124 next_payload must be of type u_int8_t Andreas Steffen 2008-02-01 00:07:56 +00:00
• b0e40caafb NAT-T conditions were not inherited during IKE_SA rekeying Andreas Steffen 2008-01-29 01:41:47 +00:00
• 5862981ce9 fixed comment Andreas Steffen 2008-01-27 20:59:22 +00:00
• f19628490c implemented pkcs1_encrypt() Andreas Steffen 2008-01-27 20:58:52 +00:00
• e575b3daff fixed padding bug in RSA_encrypt() Andreas Steffen 2008-01-27 20:17:15 +00:00
• 5bb8fcc074 added RCSID Andreas Steffen 2008-01-22 10:52:26 +00:00
• 2e3d4743d3 added md2WithRSA algorithm identifier Andreas Steffen 2008-01-22 10:52:03 +00:00
• 93eb6ec8a1 extended asn1_algorithmIdentifier() to SHA-2 Andreas Steffen 2008-01-22 10:34:44 +00:00
• cd543a69a2 extended asn1_algorithmIdentifier() to SHA-2 Andreas Steffen 2008-01-22 10:32:37 +00:00
• 2d49eaa131 x509_t.build_encoding() now supports any hash algorithm Andreas Steffen 2008-01-22 01:32:12 +00:00
• a7419b07d1 fully implemented x509_create() Andreas Steffen 2008-01-22 01:09:19 +00:00
• c8b6375c5c fixed destruction of generalNames linked list Andreas Steffen 2008-01-21 22:56:58 +00:00
• 0be06e472a fixed parsing and building of generalNames Andreas Steffen 2008-01-21 10:00:13 +00:00
• 55dbc3fd7b implemented rsa_private_key_t.get_public_key() Andreas Steffen 2008-01-21 00:36:38 +00:00
• b5d8c9779a added rsa_public_key_create(mpz_t n, mpz_t e) Andreas Steffen 2008-01-21 00:34:41 +00:00
• d349a3d11a added notBefore and notAfter to x509_create() Andreas Steffen 2008-01-21 00:30:26 +00:00
• dfc14c8480 added --with-plugindir option Andreas Steffen 2008-01-20 17:57:38 +00:00
• 3a36ce1164 added missing hasher include Martin Willi 2008-01-03 10:42:21 +00:00
• fb6d76cd5c version bump to 4.2.0 Andreas Steffen 2007-12-24 18:07:55 +00:00
• e4f5123ac7 add ip xfrm state test for ikev1 transport mode Andreas Steffen 2007-12-19 21:02:15 +00:00
• 2f9f4f3a3d version bumps Andreas Steffen 2007-12-19 21:01:19 +00:00
• 85b1fd00f4 include pipe-thin-green icons in distribution Andreas Steffen 2007-12-19 21:00:52 +00:00
• c2a703619d added a-v-m-c-w-med.png topology graph Andreas Steffen 2007-12-19 20:59:54 +00:00
• 8a4e5a957e added behind-same-nat p2p scenario Andreas Steffen 2007-12-19 17:55:08 +00:00
• aa1a730bfb set nexthop default value to 0::0 in IPv6 connections Andreas Steffen 2007-12-19 00:49:32 +00:00
• e044510e5a set --enable-eap-aka in UML scenarios Andreas Steffen 2007-12-19 00:47:56 +00:00
• 1f490cb1ec check ip xfrm state in IKEv1 and IKEv2 transport mode scenarios Andreas Steffen 2007-12-19 00:47:21 +00:00
• 6a49300c55 added ipv6 transport mode scenarios for IKEv1 and IKEv2 Andreas Steffen 2007-12-19 00:45:26 +00:00
• a37e8f32d8 updated rw-eap-aka-rsa scenario Andreas Steffen 2007-12-19 00:11:20 +00:00
• 005861b47b make config view in strongSwan manager look similar to ikesa view Andreas Steffen 2007-12-18 15:41:37 +00:00
• b8461a37db fixed EAP-MD5 to accept Name attribute in challenge Martin Willi 2007-12-18 10:44:44 +00:00
• fdc7c943f9 updated NEWS Martin Willi 2007-12-13 17:52:49 +00:00
• 0f806802ae implemented Expanded EAP types to support vendor specific methods Martin Willi 2007-12-13 17:31:21 +00:00
• 3243ac6d5e fixed actual ID length when AT_IDENTITY gets padded Martin Willi 2007-12-13 14:39:38 +00:00
• 26e2467692 ported EAP-AKA branch into trunk Martin Willi 2007-12-13 10:54:29 +00:00
• 2a0ba292f2 sbindir is required in the PATH of ipsec Andreas Steffen 2007-12-12 22:27:40 +00:00
• 52bb1876ec sbindir is required in the PATH of _updown Andreas Steffen 2007-12-12 22:12:10 +00:00
• 83e0d841a0 added ocsp cache bug fix to NEWS Andreas Steffen 2007-12-12 21:03:17 +00:00
• 35b2b1e334 fixed error in the ordering of the certinfo_t records in the ocsp cache that caused multiple entries of the same serial number to be created. This was caused by the iterator_t method insert_after() that inserts a record in the first instead of the last position of a linked list if the end of the list is reached. Fix: use linked_list_t method insert_last() instead. Andreas Steffen 2007-12-12 20:25:50 +00:00
• c2bb1ecacb define a minimum PATH environment Andreas Steffen 2007-12-12 14:56:35 +00:00