Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• dd3b7b7147 removed version numbers in autogen Martin Willi 2007-04-16 08:34:22 +00:00
• 8501be235c added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords Andreas Steffen 2007-04-14 18:09:44 +00:00
• be6258485c fixed destroy() bug Andreas Steffen 2007-04-14 17:34:41 +00:00
• 6598f99af0 exported parse_generalNames() Andreas Steffen 2007-04-14 17:34:18 +00:00
• ddf1b3e09e added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords Andreas Steffen 2007-04-14 17:33:29 +00:00
• f9e0dc3e02 added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords Andreas Steffen 2007-04-14 17:33:02 +00:00
• 4390abeb94 added trailing newline to list() Andreas Steffen 2007-04-12 20:16:14 +00:00
• e4c58fdb09 set sleep back to 180 s Andreas Steffen 2007-04-12 19:41:24 +00:00
• 734dc32edd started to parse attribute certificates Andreas Steffen 2007-04-12 19:39:11 +00:00
• 3e21837582 cosmetics Andreas Steffen 2007-04-12 19:33:13 +00:00
• 854a96ae47 moved parse_time() from x509.c to asn1.c Andreas Steffen 2007-04-12 18:58:27 +00:00
• 56352fca2f replace cert by this in parse_certificate() Andreas Steffen 2007-04-12 18:57:33 +00:00
• f5ce017b0d parse_authorityKeyIdentifier() is made available externally Andreas Steffen 2007-04-12 18:56:46 +00:00
• 34ee184a2d external functions are defined in asn1.h and x509.h now Andreas Steffen 2007-04-12 18:55:44 +00:00
• f880eb2dca started support of X.509 attribute certificates Andreas Steffen 2007-04-12 17:49:33 +00:00
• 0dbe579a51 added AA and AATR cert paths Andreas Steffen 2007-04-12 16:43:21 +00:00
• 4cda602393 fixed output of list_auth_certificates() Andreas Steffen 2007-04-12 16:42:07 +00:00
• f865d34b35 fixed output of list_certinfos() Andreas Steffen 2007-04-12 16:36:12 +00:00
• 6a132a53e5 corrected copyright statement Andreas Steffen 2007-04-12 16:21:02 +00:00
• c4d9504a6b added missing #include Martin Willi 2007-04-12 11:33:43 +00:00
• 9e3e46a52c updated uClibc note in HACKING Martin Willi 2007-04-12 11:33:28 +00:00
• a1b2d82db0 removed %Q, %Y, %W, %U printf handlers Martin Willi 2007-04-12 09:44:26 +00:00
• db97fd8298 not using %m printf handler, as late errno interpration over bus may be problematic Martin Willi 2007-04-12 08:52:36 +00:00
• 1dad08b035 fixed DPD delay in peer_cfg Martin Willi 2007-04-12 06:20:42 +00:00
• 092958c89d fixed payload debug message Martin Willi 2007-04-12 06:20:14 +00:00
• 5f088665ad removed IKE_SA_ID (%J) printf hook, two more to go Martin Willi 2007-04-11 13:01:08 +00:00
• 3c662c30ee cleanup and fixes for status & statusall Martin Willi 2007-04-11 12:43:52 +00:00
• 015912016c using %V time delta for rekeying times Martin Willi 2007-04-11 12:33:02 +00:00
• a3ce4bc214 removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to go Martin Willi 2007-04-11 12:14:51 +00:00
• cd08b6880b removed %M printf handler, five more to go Martin Willi 2007-04-11 09:12:21 +00:00
• 82240938ca fixed virtual ip configuration bug introduced with the previous commit Martin Willi 2007-04-11 08:34:21 +00:00
• 4d50f872d4 adapted evaltest to refactored ipsec status output Andreas Steffen 2007-04-11 08:18:38 +00:00
• f925b42a5d two %any IDs are equal Martin Willi 2007-04-11 07:43:23 +00:00
• 3b138b8422 cleaned up apidoc added some comments removed configuration.[ch], as it does not make sense like it is Martin Willi 2007-04-11 07:20:39 +00:00
• 2ed8cee162 added script for sed'ing thhrough all source files Martin Willi 2007-04-11 07:19:17 +00:00
• de55c6895f accepting stroke initiation by a name of a child_cfg Martin Willi 2007-04-11 05:58:38 +00:00
• 90faff8e5a reduced sleep from 180 to 170 seconds Andreas Steffen 2007-04-10 23:22:26 +00:00
• 86b7215627 fixed bug with roadwarrior and wildcard IDs Andreas Steffen 2007-04-10 22:39:09 +00:00
• a07aad39dc edited comment and debug output Andreas Steffen 2007-04-10 22:38:06 +00:00
• 4876f521d6 best must be initialized to 2*MAX_WILDCARDS+1 Andreas Steffen 2007-04-10 22:35:45 +00:00
• 241ab32c10 changed tab spacing from 8 to 4 Andreas Steffen 2007-04-10 19:31:42 +00:00
• 00ccb87671 requesting the same virtual IP on reauthentication Martin Willi 2007-04-10 15:02:57 +00:00
• d3e1da2378 proper notification handling Martin Willi 2007-04-10 15:00:51 +00:00
• 83e60eb29a version bump to 4.1.2 Andreas Steffen 2007-04-10 11:53:35 +00:00
• e0fe765152 restructured file layout new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads Martin Willi 2007-04-10 06:01:03 +00:00
• 1628cd6bda adapt evaltest to changed debug output Andreas Steffen 2007-04-06 10:39:24 +00:00
• babdde4fa4 cosmetics in debug output Andreas Steffen 2007-04-06 10:35:13 +00:00
• f5fc277463 crl-ldap scenario added Andreas Steffen 2007-04-06 10:02:27 +00:00
• db88e37d2f ldap-based crl fetching supported Andreas Steffen 2007-04-06 09:51:04 +00:00
• 2c0e0f4f62 changed LDAP_VER compile option to LIBLDAP Andreas Steffen 2007-04-06 09:49:05 +00:00
• 241d2ff3bc support of ldap-based crl fetching Andreas Steffen 2007-04-06 09:44:06 +00:00
• 4c56bd64e5 removed list_crls() and list_ocsp() methods Andreas Steffen 2007-04-06 09:43:20 +00:00
• 3c5c3431b3 removed list_crls() and list_ocsp() methods Andreas Steffen 2007-04-06 09:42:45 +00:00
• 915c7add1f enabled crl fetching using crlcheckinterval != 0 Andreas Steffen 2007-04-05 17:51:12 +00:00
• 46b9ff68d0 cachecrls=yes supported by IKEv2 Andreas Steffen 2007-04-05 17:44:50 +00:00
• 389623374f enabled crl fetching using crlcheckinterval != 0 Andreas Steffen 2007-04-05 17:40:33 +00:00
• 1d1e55b4c3 added crl-to-cache Andreas Steffen 2007-04-05 17:18:25 +00:00
• 7771780b38 added crl-from-cache Andreas Steffen 2007-04-05 17:18:15 +00:00
• a224faf9ea block crl fetching Andreas Steffen 2007-04-05 17:10:59 +00:00
• 45c97f180f block crl fetching Andreas Steffen 2007-04-05 17:09:54 +00:00
• 69837d5baa support multiple ocsp servers Andreas Steffen 2007-04-05 17:08:51 +00:00
• 8883eef7b8 support cachecrls=yes Andreas Steffen 2007-04-05 17:07:14 +00:00
• e58afb1a0a support of crlcheckinterval=0 to disable IKEv2 CRL fetching Andreas Steffen 2007-04-04 07:49:05 +00:00
• 80b7162531 improved log output for checkout_by_message() Martin Willi 2007-04-04 07:11:12 +00:00
• e47a7a131d reinsert SHAREDTREE Andreas Steffen 2007-04-04 05:29:20 +00:00
• c056d929b2 --enable-ldap without value 3 Andreas Steffen 2007-04-04 05:26:21 +00:00
• d15d1cc4f3 recognize strongSwan 2.8.4 VID Andreas Steffen 2007-04-04 05:25:06 +00:00
• 8f76dbe8b1 support of dynamical http-based CRL fetching Andreas Steffen 2007-04-03 22:05:04 +00:00
• ace5de18b2 iptables -L has now a link of its own Andreas Steffen 2007-04-03 22:03:25 +00:00
• 3d62a7d225 fixed crl fetching bug Andreas Steffen 2007-04-03 22:02:17 +00:00
• 7e4f8db2bf added ip route list and iptables -L Andreas Steffen 2007-04-03 21:18:46 +00:00
• a0eaa59b50 implemented dynamic http-based CRL fetching Andreas Steffen 2007-04-03 21:11:23 +00:00
• 5d6dc162f2 send VID_NATT_IETF_02_N for Windows 2003 server support Andreas Steffen 2007-04-03 21:10:08 +00:00
• a8f02ad5f5 implemented dynamic http-based CRL fetching Andreas Steffen 2007-04-03 21:09:11 +00:00
• f166af2c0a implemented http get method Andreas Steffen 2007-04-03 19:46:50 +00:00
• 3b4f7d922a IKEv1 changes Andreas Steffen 2007-04-03 12:41:37 +00:00
• b0f9f02ca4 added --enable-nat-transport and --disable-vendor-id configuration options Andreas Steffen 2007-04-03 07:58:34 +00:00
• 7b0c588a88 added --enable-nat-transport and --disable-vendor-id configuration options Andreas Steffen 2007-04-03 07:58:21 +00:00
• a0c15611a4 bug fix: check existence of encryption key before sending encrypted notification Andreas Steffen 2007-04-02 19:04:51 +00:00
• ed284399cd updated NEWS, TODO Martin Willi 2007-03-30 12:49:19 +00:00
• 73390cce24 removed unneded includes Martin Willi 2007-03-30 12:24:31 +00:00
• 3374c8b1c8 using IFA_LOCAL for interface enumeration to support ppp links Martin Willi 2007-03-30 09:21:48 +00:00
• b9e363f86f added IKE_SA_INIT retransmission detection fixed thread exhaustion when IKE_SA is blocked for a longer time Martin Willi 2007-03-29 14:20:10 +00:00
• 891e69944f implemented DoS protection with cookies and IP filter Martin Willi 2007-03-29 11:26:55 +00:00
• 361e6df8c1 fixed task manager message id bug for cookies Martin Willi 2007-03-29 11:08:30 +00:00
• a6bdc731b1 added retry limit for IKE_SA_INIT (give up after 5 cookie failures) Martin Willi 2007-03-29 11:07:49 +00:00
• 25eaae17db added chunk_from_thing() macro Martin Willi 2007-03-29 11:06:59 +00:00
• 6819e4d754 implemented ipsec purgeocsp Andreas Steffen 2007-03-28 20:43:38 +00:00
• 6af6c0bfc3 cosmetics Andreas Steffen 2007-03-28 20:43:25 +00:00
• 2bfadf7f3b implemented ipsec purgeocsp Andreas Steffen 2007-03-28 20:43:11 +00:00
• 4deb89485c removed send_queue, handled internally in sender_t know do header parsing in receiver, ready for cookie integration Martin Willi 2007-03-28 13:34:02 +00:00
• 077a6fff95 implemented a simple IP blocking filter in receiver thread Martin Willi 2007-03-28 09:23:03 +00:00
• 9179ac9667 merged changes from eap-aka trunk Martin Willi 2007-03-28 07:32:54 +00:00
• 9d9c72e317 is_trusted() adds cert_status to cert_to_be_trusted Andreas Steffen 2007-03-28 05:38:42 +00:00
• 203e15fe03 fixed delta time format: 2 seconds, 1 second, 0 seconds Andreas Steffen 2007-03-28 05:37:20 +00:00
• 7a89380eca replaced expired since %V by expired %V ago Andreas Steffen 2007-03-28 05:36:27 +00:00
• c00840478e fixed state and logging of IKE_SA when using EAP authentication Martin Willi 2007-03-27 16:11:29 +00:00
• e23a59f635 fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progress Martin Willi 2007-03-27 13:32:12 +00:00
• b34f86f545 giving up EAP-SIM authentication after 3 failed challenges Martin Willi 2007-03-27 06:24:17 +00:00
• 1bf8530507 implemented ipsec listocsp function Andreas Steffen 2007-03-27 04:40:25 +00:00