This website requires JavaScript.
a84fb01b96
restructuring of configuration backends added propotypes of new control interfaces (xml & dbus) introduced loadable: configuration backends control interfaces using pluggable modules as in EAP
Martin Willi
2007-04-27 14:25:08 +00:00
bb1030cb3d
removed eap sim config
Martin Willi
2007-04-27 14:11:18 +00:00
594e830eb7
forcing proper autoload of af_key kernel module in charon
Martin Willi
2007-04-27 07:43:42 +00:00
d931f4658e
updated news
Martin Willi
2007-04-26 07:58:50 +00:00
37fb03554b
updated NEWS
Martin Willi
2007-04-26 06:33:03 +00:00
8ea7b96f7b
xauth_modules.verify_secret() function now passes the connection name
Andreas Steffen
2007-04-25 07:51:04 +00:00
f24a62278b
added conn_name to xauth_module.verify_secret() function call
Andreas Steffen
2007-04-25 07:00:16 +00:00
f47e450be9
properly checking received IDr as initiator
Martin Willi
2007-04-25 06:06:13 +00:00
c80e8ba11a
added support for AES-XCBC in kernel using e.g. esp=aes128-aesxcbc (>=linux-2.6.20)
Martin Willi
2007-04-23 13:00:20 +00:00
17712ea866
fixed CHILD_SA proposal selection when not using DH exchange
Martin Willi
2007-04-23 12:59:10 +00:00
63c477244d
fixed keyingtries
Martin Willi
2007-04-23 12:19:23 +00:00
0a09cd6864
generated certs for ocsp-strict-ifuri scenario
Andreas Steffen
2007-04-20 14:54:10 +00:00
4031b8bae7
generated certs for ocsp-strict-ifuri scenario
Andreas Steffen
2007-04-20 14:52:32 +00:00
221a64e4f7
fixed test scenarios
Andreas Steffen
2007-04-20 14:51:39 +00:00
ea4563d93f
ocsp-strict-ifuri added
Andreas Steffen
2007-04-20 14:50:42 +00:00
ce9b4ea6e6
ocsp-no-signer-cert added
Andreas Steffen
2007-04-20 14:49:50 +00:00
cb5485318f
initialize isCA to FALSE
Andreas Steffen
2007-04-20 14:36:55 +00:00
b073ad64b8
isOcspSigner was not initialized
Andreas Steffen
2007-04-20 12:38:35 +00:00
a3590ac1bd
wrong delimiters in ipsec.in
Andreas Steffen
2007-04-20 12:23:03 +00:00
4841189b72
implementation of strictcrlpolicy=ifuri
Andreas Steffen
2007-04-20 11:12:08 +00:00
ab58c17445
removed linux26/xfrm.h
Andreas Steffen
2007-04-19 15:02:55 +00:00
7ef4be2cb1
unshare argument buffers
Andreas Steffen
2007-04-19 14:26:11 +00:00
b7ade11b16
updated man page: proposals using PFS
Martin Willi
2007-04-19 14:22:53 +00:00
622f50801c
kernel_netlink.c now includes src/include/linux/xfrm.h
Andreas Steffen
2007-04-19 14:15:00 +00:00
cd115716fe
updated TODO
Martin Willi
2007-04-19 14:14:01 +00:00
0706c39cda
added support for EAP methods not establishing an MSK
Martin Willi
2007-04-19 12:37:48 +00:00
04a7b6d868
added most problematic linux headers to distribution other/real linux header may be selected using --with-linux-headers=dir
Martin Willi
2007-04-19 08:59:36 +00:00
1fd5383e61
added PDF support for CHILD_SAs support for INVALID_KE_PAYLOAD negotiation for rekeying
Martin Willi
2007-04-19 08:02:19 +00:00
41ab00da6b
fixed memleak in IKE_SA manager
Martin Willi
2007-04-19 07:04:35 +00:00
217e985b41
moved initiate() code to the generic controller_t class
Martin Willi
2007-04-16 12:52:49 +00:00
418dbd6243
cloning %any ID without zero-byte memleak
Martin Willi
2007-04-16 08:37:52 +00:00
dd3b7b7147
removed version numbers in autogen
Martin Willi
2007-04-16 08:34:22 +00:00
8501be235c
added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords
Andreas Steffen
2007-04-14 18:09:44 +00:00
be6258485c
fixed destroy() bug
Andreas Steffen
2007-04-14 17:34:41 +00:00
6598f99af0
exported parse_generalNames()
Andreas Steffen
2007-04-14 17:34:18 +00:00
ddf1b3e09e
added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords
Andreas Steffen
2007-04-14 17:33:29 +00:00
f9e0dc3e02
added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords
Andreas Steffen
2007-04-14 17:33:02 +00:00
4390abeb94
added trailing newline to list()
Andreas Steffen
2007-04-12 20:16:14 +00:00
e4c58fdb09
set sleep back to 180 s
Andreas Steffen
2007-04-12 19:41:24 +00:00
734dc32edd
started to parse attribute certificates
Andreas Steffen
2007-04-12 19:39:11 +00:00
3e21837582
cosmetics
Andreas Steffen
2007-04-12 19:33:13 +00:00
854a96ae47
moved parse_time() from x509.c to asn1.c
Andreas Steffen
2007-04-12 18:58:27 +00:00
56352fca2f
replace cert by this in parse_certificate()
Andreas Steffen
2007-04-12 18:57:33 +00:00
f5ce017b0d
parse_authorityKeyIdentifier() is made available externally
Andreas Steffen
2007-04-12 18:56:46 +00:00
34ee184a2d
external functions are defined in asn1.h and x509.h now
Andreas Steffen
2007-04-12 18:55:44 +00:00
f880eb2dca
started support of X.509 attribute certificates
Andreas Steffen
2007-04-12 17:49:33 +00:00
0dbe579a51
added AA and AATR cert paths
Andreas Steffen
2007-04-12 16:43:21 +00:00
4cda602393
fixed output of list_auth_certificates()
Andreas Steffen
2007-04-12 16:42:07 +00:00
f865d34b35
fixed output of list_certinfos()
Andreas Steffen
2007-04-12 16:36:12 +00:00
6a132a53e5
corrected copyright statement
Andreas Steffen
2007-04-12 16:21:02 +00:00
c4d9504a6b
added missing #include
Martin Willi
2007-04-12 11:33:43 +00:00
9e3e46a52c
updated uClibc note in HACKING
Martin Willi
2007-04-12 11:33:28 +00:00
a1b2d82db0
removed %Q, %Y, %W, %U printf handlers
Martin Willi
2007-04-12 09:44:26 +00:00
db97fd8298
not using %m printf handler, as late errno interpration over bus may be problematic
Martin Willi
2007-04-12 08:52:36 +00:00
1dad08b035
fixed DPD delay in peer_cfg
Martin Willi
2007-04-12 06:20:42 +00:00
092958c89d
fixed payload debug message
Martin Willi
2007-04-12 06:20:14 +00:00
5f088665ad
removed IKE_SA_ID (%J) printf hook, two more to go
Martin Willi
2007-04-11 13:01:08 +00:00
3c662c30ee
cleanup and fixes for status & statusall
Martin Willi
2007-04-11 12:43:52 +00:00
015912016c
using %V time delta for rekeying times
Martin Willi
2007-04-11 12:33:02 +00:00
a3ce4bc214
removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to go
Martin Willi
2007-04-11 12:14:51 +00:00
cd08b6880b
removed %M printf handler, five more to go
Martin Willi
2007-04-11 09:12:21 +00:00
82240938ca
fixed virtual ip configuration bug introduced with the previous commit
Martin Willi
2007-04-11 08:34:21 +00:00
4d50f872d4
adapted evaltest to refactored ipsec status output
Andreas Steffen
2007-04-11 08:18:38 +00:00
f925b42a5d
two %any IDs are equal
Martin Willi
2007-04-11 07:43:23 +00:00
3b138b8422
cleaned up apidoc added some comments removed configuration.[ch], as it does not make sense like it is
Martin Willi
2007-04-11 07:20:39 +00:00
2ed8cee162
added script for sed'ing thhrough all source files
Martin Willi
2007-04-11 07:19:17 +00:00
de55c6895f
accepting stroke initiation by a name of a child_cfg
Martin Willi
2007-04-11 05:58:38 +00:00
90faff8e5a
reduced sleep from 180 to 170 seconds
Andreas Steffen
2007-04-10 23:22:26 +00:00
86b7215627
fixed bug with roadwarrior and wildcard IDs
Andreas Steffen
2007-04-10 22:39:09 +00:00
a07aad39dc
edited comment and debug output
Andreas Steffen
2007-04-10 22:38:06 +00:00
4876f521d6
best must be initialized to 2*MAX_WILDCARDS+1
Andreas Steffen
2007-04-10 22:35:45 +00:00
241ab32c10
changed tab spacing from 8 to 4
Andreas Steffen
2007-04-10 19:31:42 +00:00
00ccb87671
requesting the same virtual IP on reauthentication
Martin Willi
2007-04-10 15:02:57 +00:00
d3e1da2378
proper notification handling
Martin Willi
2007-04-10 15:00:51 +00:00
83e60eb29a
version bump to 4.1.2
Andreas Steffen
2007-04-10 11:53:35 +00:00
e0fe765152
restructured file layout new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads
Martin Willi
2007-04-10 06:01:03 +00:00
1628cd6bda
adapt evaltest to changed debug output
Andreas Steffen
2007-04-06 10:39:24 +00:00
babdde4fa4
cosmetics in debug output
Andreas Steffen
2007-04-06 10:35:13 +00:00
f5fc277463
crl-ldap scenario added
Andreas Steffen
2007-04-06 10:02:27 +00:00
db88e37d2f
ldap-based crl fetching supported
Andreas Steffen
2007-04-06 09:51:04 +00:00
2c0e0f4f62
changed LDAP_VER compile option to LIBLDAP
Andreas Steffen
2007-04-06 09:49:05 +00:00
241d2ff3bc
support of ldap-based crl fetching
Andreas Steffen
2007-04-06 09:44:06 +00:00
4c56bd64e5
removed list_crls() and list_ocsp() methods
Andreas Steffen
2007-04-06 09:43:20 +00:00
3c5c3431b3
removed list_crls() and list_ocsp() methods
Andreas Steffen
2007-04-06 09:42:45 +00:00
915c7add1f
enabled crl fetching using crlcheckinterval != 0
Andreas Steffen
2007-04-05 17:51:12 +00:00
46b9ff68d0
cachecrls=yes supported by IKEv2
Andreas Steffen
2007-04-05 17:44:50 +00:00
389623374f
enabled crl fetching using crlcheckinterval != 0
Andreas Steffen
2007-04-05 17:40:33 +00:00
1d1e55b4c3
added crl-to-cache
Andreas Steffen
2007-04-05 17:18:25 +00:00
7771780b38
added crl-from-cache
Andreas Steffen
2007-04-05 17:18:15 +00:00
a224faf9ea
block crl fetching
Andreas Steffen
2007-04-05 17:10:59 +00:00
45c97f180f
block crl fetching
Andreas Steffen
2007-04-05 17:09:54 +00:00
69837d5baa
support multiple ocsp servers
Andreas Steffen
2007-04-05 17:08:51 +00:00
8883eef7b8
support cachecrls=yes
Andreas Steffen
2007-04-05 17:07:14 +00:00
e58afb1a0a
support of crlcheckinterval=0 to disable IKEv2 CRL fetching
Andreas Steffen
2007-04-04 07:49:05 +00:00
80b7162531
improved log output for checkout_by_message()
Martin Willi
2007-04-04 07:11:12 +00:00
e47a7a131d
reinsert SHAREDTREE
Andreas Steffen
2007-04-04 05:29:20 +00:00
c056d929b2
--enable-ldap without value 3
Andreas Steffen
2007-04-04 05:26:21 +00:00
d15d1cc4f3
recognize strongSwan 2.8.4 VID
Andreas Steffen
2007-04-04 05:25:06 +00:00
8f76dbe8b1
support of dynamical http-based CRL fetching
Andreas Steffen
2007-04-03 22:05:04 +00:00
ace5de18b2
iptables -L has now a link of its own
Andreas Steffen
2007-04-03 22:03:25 +00:00