Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 58b263df43 corrected image title Andreas Steffen 2007-09-15 15:28:48 +00:00
• bd2e6c0347 added connection name to IKE_SA title Martin Willi 2007-09-14 14:18:09 +00:00
• d919f2f8db added missing distribution/install files Martin Willi 2007-09-14 14:17:43 +00:00
• c01f7bf989 added subnets of CHILD_SAs to xml interface a first design of Managers IKE_SA list page Martin Willi 2007-09-14 14:07:30 +00:00
• 15a9d460c0 peer_cfg now knows about group memberships Andreas Steffen 2007-09-13 15:33:17 +00:00
• eff806eb5a added missing 'break' in checkout_by_peer Tobias Brunner 2007-09-13 13:00:23 +00:00
• 660426ff48 added DATA files to EXTRA_DIST Martin Willi 2007-09-13 08:32:14 +00:00
• c63bbdca32 added compiler-soothing parentheses Andreas Steffen 2007-09-13 08:22:37 +00:00
• 6baca3b2f1 fixed 64bit issue with file descriptor Martin Willi 2007-09-13 08:19:15 +00:00
• 367f9f01f7 added debugging helper script for manager Martin Willi 2007-09-13 08:15:24 +00:00
• acc4aa8637 fixed scenario loading Martin Willi 2007-09-13 08:10:36 +00:00
• d8c15900ad added missing enumerator.h to distribution Martin Willi 2007-09-13 08:06:17 +00:00
• 068ba02775 replaced a confusing template with an ugly one (ikesalist) Martin Willi 2007-09-13 07:59:51 +00:00
• b8c7453a82 manager can query and list IKE_SA status (no layout yet) Martin Willi 2007-09-13 07:45:04 +00:00
• 28c5feddbd added Daniel Wydler to copyright.c Andreas Steffen 2007-09-13 07:07:30 +00:00
• 064cbe5d36 removed unused LARGEST_HASH_OID_SIZE definition Andreas Steffen 2007-09-13 06:26:57 +00:00
• dd52993068 only switch to port 4500 if we are on 500: fixed reauthentication in NAT scenarios Martin Willi 2007-09-12 11:11:10 +00:00
• b5816842f9 replaced 8 by BITS_PER_BYTE Andreas Steffen 2007-09-12 09:19:59 +00:00
• ba02f63eb1 error message outputs hash size differences Andreas Steffen 2007-09-12 08:02:41 +00:00
• ad63d68aa9 renamed encoded_hash to digestInfo Andreas Steffen 2007-09-12 08:01:59 +00:00
• f7cce7e33a included pem.h and x509.h; fixed comparison bug Andreas Steffen 2007-09-12 07:56:00 +00:00
• 794d2526b4 removed unused chunk variable Andreas Steffen 2007-09-12 07:54:56 +00:00
• 38ad6a7b35 included kernel_alg.h Andreas Steffen 2007-09-12 07:54:28 +00:00
• a8827c9b63 moving virtual IP when interface changes due mobike Martin Willi 2007-09-12 07:36:45 +00:00
• 12fa4387c6 fixed NAT detection with mobike Martin Willi 2007-09-12 07:14:05 +00:00
• 39cc6d1ad7 fixed shutdown order to prevent crash when kernel interface schedules events Martin Willi 2007-09-12 07:12:25 +00:00
• f25156dfc3 fixed warnings and memory leak Martin Willi 2007-09-12 07:11:41 +00:00
• 8b373ee6fc added error messages in signature verification Andreas Steffen 2007-09-12 07:06:52 +00:00
• f749108056 increased debug level for errors to DBG1 Andreas Steffen 2007-09-12 06:56:59 +00:00
• 1cb2cb622e overwrite shared_key with random bytes before freeing it Andreas Steffen 2007-09-11 21:06:46 +00:00
• e5f33737ab check for surplus bytes in EM structure after the digestInfo Andreas Steffen 2007-09-11 20:45:59 +00:00
• 2f9f5149c4 check hash algorithms used in signatures Andreas Steffen 2007-09-11 20:10:38 +00:00
• dd968b9b20 OID_UNKNOWN (-1) requires int type Andreas Steffen 2007-09-11 17:33:37 +00:00
• c1ff717690 removed rsa_private_key clone() function Andreas Steffen 2007-09-11 16:26:08 +00:00
• 780390e96a added md2, sha256, sha384, and sha512 ASN.1 algorithm IDs Andreas Steffen 2007-09-11 16:25:28 +00:00
• 965e99b5bf first revision of new manager webapp Martin Willi 2007-09-11 15:22:02 +00:00
• f0c156fbc9 replaced get_rsa_private_key() by rsa_signature() in order restrict the distribution of private key material Andreas Steffen 2007-09-11 10:18:25 +00:00
• 922464d00a mpz_clear_randomized() overwrites private key material before releasing it Andreas Steffen 2007-09-10 19:34:46 +00:00
• 7bac086733 overwrite storage used for shared secrets with pseudo-random bytes before releasing it Andreas Steffen 2007-09-10 19:12:01 +00:00
• db78593370 ipsec barf is not supported by the strongSwan 4.1 branch Andreas Steffen 2007-09-10 13:32:15 +00:00
• bb3d6c3dbe the new function chunk_free_randomized() overwrites the contents of a chunk with pseudo-random bytes before freeing it Andreas Steffen 2007-09-10 12:16:24 +00:00
• e7d9fa7f98 added new Windows Vista VID, courtesy of Jacco de Leeuw Andreas Steffen 2007-09-10 12:11:46 +00:00
• 054767bfff version bump to 4.1.7 Andreas Steffen 2007-09-03 19:04:38 +00:00
• 5474dc6500 implemented routeability checks for mobike (experimental) Martin Willi 2007-09-03 12:37:25 +00:00
• f5da63e937 correct debug Andreas Steffen 2007-09-02 15:59:59 +00:00
• 8c4339bdd2 added mobike option to man page Andreas Steffen 2007-09-02 11:44:32 +00:00
• 3eac4dfdda added new features Andreas Steffen 2007-09-02 11:24:53 +00:00
• 0e3073608d re-introduced the XAUTH_VID compile option Andreas Steffen 2007-09-02 11:13:24 +00:00
• 354242c55a added RADIUS, RADIUS-EAP and EAP-MD5 (CHAP) RFCs Martin Willi 2007-08-30 12:52:44 +00:00
• 857ceac9d9 proper initialization of rsa private key Martin Willi 2007-08-30 12:47:38 +00:00
• cfee19c26c added bitnames for POLICY_BEET and POLICY_MOBIKE flags Andreas Steffen 2007-08-29 13:17:30 +00:00
• cdc70899a8 change ipsec route table in UML scenarios Andreas Steffen 2007-08-29 13:03:34 +00:00
• 0886e64022 updated index.txt.old Andreas Steffen 2007-08-29 12:50:26 +00:00
• 9164e49ac0 added mobike=yes|no connection option yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes Martin Willi 2007-08-29 12:11:25 +00:00
• c5dfb88ab8 _updown removed from distribution Andreas Steffen 2007-08-29 11:59:52 +00:00
• bdc0b55b72 included the FIPS integrity test in LICENSE, CREDITS and NEWs Andreas Steffen 2007-08-29 11:04:55 +00:00
• 0bc5a23023 renamed integrity check to integrity test Andreas Steffen 2007-08-29 10:36:08 +00:00
• d3250f74af cosmetics Andreas Steffen 2007-08-29 10:31:37 +00:00
• 32be2ec599 fixed 64 bit issue (size_t is 32 bit) Andreas Steffen 2007-08-29 10:30:17 +00:00
• ab13376877 fips_verify_hmac_signature() now returns a boolean status Andreas Steffen 2007-08-29 09:43:02 +00:00
• df29e8f745 SHA-1 HMAC signature is now computed over concatenation of TEXT and RODATA segments Andreas Steffen 2007-08-29 09:13:08 +00:00
• fa50e4df48 compute SHA-1 HMAC over libstrongswan TEXT segment for the time being Andreas Steffen 2007-08-29 08:54:53 +00:00
• dc5a849bf0 signers implemented with HMAC now support NULL output parameters to feed signer with more than one block of data. Martin Willi 2007-08-29 07:52:49 +00:00
• ef5f65626f change self_test to self-test Andreas Steffen 2007-08-29 07:03:47 +00:00
• d8b45dcdd2 build fips_signer and fips_signature with USE_INTEGRITY_TEST condition only Andreas Steffen 2007-08-29 07:02:13 +00:00
• 2fb15ac606 changed interface of fips_verify_hmac_signature Andreas Steffen 2007-08-29 05:43:45 +00:00
• 90bcf8b286 free hmac_signature string after use Andreas Steffen 2007-08-29 05:43:05 +00:00
• d64b48a80b beautification Andreas Steffen 2007-08-29 05:42:22 +00:00
• 55434a1ba5 started implementation of libstrongswan code integrity check Andreas Steffen 2007-08-29 00:37:10 +00:00
• 0e54968584 defined ietfAttr_create_from_string() Andreas Steffen 2007-08-29 00:35:51 +00:00
• bf422b1664 fixed typo Andreas Steffen 2007-08-28 09:59:53 +00:00
• 69e56d9dec simple console support through pts devices Martin Willi 2007-08-28 07:53:46 +00:00
• 12fe0e60df set ignore properties Andreas Steffen 2007-08-28 07:02:51 +00:00
• 52d39feb81 set ignore properties Andreas Steffen 2007-08-28 07:02:23 +00:00
• 8234dd1216 testing/do-tests is made from do-tests.in by inserting actual routing table Andreas Steffen 2007-08-28 06:40:39 +00:00
• 35800a11ee testing/do-tests is made from do-tests.in by inserting actual routing table Andreas Steffen 2007-08-28 06:38:04 +00:00
• 9ee1111d8b added --enable-integrity-test and --disable-self-test options Andreas Steffen 2007-08-28 06:36:31 +00:00
• 0739cca9d1 default routing table/prio: 220/220 (as 19530 was invalid) added configure option --with-routing-table-prio= Martin Willi 2007-08-27 14:53:42 +00:00
• ad9613226b using default routing table 19530 for ipsec routes Martin Willi 2007-08-27 11:30:21 +00:00
• 4e411c8361 added --with-routing-table= configure option Martin Willi 2007-08-27 11:15:35 +00:00
• 98f97433af rerouting CHILD_SA if its IKE_SA gets deleted Martin Willi 2007-08-27 09:10:12 +00:00
• 9a63ddd84d initiated support of caIssuers accessLocation Andreas Steffen 2007-08-17 08:01:10 +00:00
• 2a48f47406 required CA is that.ca not this.ca Andreas Steffen 2007-08-17 07:22:04 +00:00
• 2133593696 matching_request instead of matching_trust must go into the metric Andreas Steffen 2007-08-17 07:21:26 +00:00
• 0f9f19f54e fixed maximum path length info in match_requested_ca() Andreas Steffen 2007-08-17 07:20:27 +00:00
• 6a85215809 sort attributes alphabetically Andreas Steffen 2007-08-15 22:58:15 +00:00
• cd15679122 added caIssuers OID Andreas Steffen 2007-08-15 09:46:40 +00:00
• 1bce8ec70d corrected typo Andreas Steffen 2007-08-15 09:46:14 +00:00
• 7cbe4a33e9 use symbolic shell variables in library paths Andreas Steffen 2007-08-15 08:40:16 +00:00
• 96cc677c96 removed oid.txt and oid.pl in pluto subdir Andreas Steffen 2007-08-15 08:29:55 +00:00
• 683d66fe93 aligned pluto/oid.txt to libstrongswan/asn1/oid.txt Andreas Steffen 2007-08-14 21:21:21 +00:00
• 2d064166db added Microsof Encrypting File System Extended Key Usage OID Andreas Steffen 2007-08-14 21:13:53 +00:00
• b086f62ca1 added Microsof Smartcard Logon Extended Key Usage OID Andreas Steffen 2007-08-14 21:05:40 +00:00
• bb70071b26 finetuning of phase1 matching metrics Andreas Steffen 2007-08-14 19:15:01 +00:00
• 929b9e367a append new attribute certs at the end Andreas Steffen 2007-08-14 13:04:36 +00:00
• 06faefe43d adding attribute certficates to a chained list Andreas Steffen 2007-08-14 12:27:02 +00:00
• efddbcb0b5 soft-limit treatment of unmatched certificate requests using a priority metric Andreas Steffen 2007-08-14 12:26:22 +00:00
• 3c1100187f replaced hex_str() by fprintf(#B) for printing unknown OIDs Andreas Steffen 2007-08-14 12:24:35 +00:00
• 9148e44b39 fixed bug occuring with multiple occurences of the same cacert on a smartcard Andreas Steffen 2007-08-13 07:47:47 +00:00
• 8f687a7591 has_rsa_private_key() must also be protected by keys_mutex Andreas Steffen 2007-08-10 12:10:36 +00:00