Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 5744d3e777 fixed payload order (again) Martin Willi 2007-03-08 20:21:17 +00:00
• 1216db7e8b including peers certificate when his certreq is empty Martin Willi 2007-03-08 20:19:24 +00:00
• e5a7f1cd08 implemented cookies as initiator proper logging of notifies in IKE_SA setup Martin Willi 2007-03-08 20:18:39 +00:00
• bb32e76c3a disabling routing for IPv6, does not work correctly Martin Willi 2007-03-08 20:17:34 +00:00
• 162afac75f fixed call of add_auth_certificate() Andreas Steffen 2007-03-08 19:44:14 +00:00
• 33d108de22 generalized get_ca_certificate() to get_auth_certificate(auth_flags) Andreas Steffen 2007-03-08 18:56:43 +00:00
• 54645fb275 added fetcher_finalize() to clean up libcurl Andreas Steffen 2007-03-08 17:00:32 +00:00
• 8b8dd69dee some cleanups not installing %any DNS servers Martin Willi 2007-03-08 16:58:59 +00:00
• 8d0cd21a01 support of setting and getting authority flags Andreas Steffen 2007-03-08 16:48:16 +00:00
• 9149635ffa support if ocsp signing certificates Andreas Steffen 2007-03-08 16:47:18 +00:00
• 9f4039755d support if ocsp signing certificates Andreas Steffen 2007-03-08 16:46:50 +00:00
• 3b7fdcf6c6 fixed payload order in IKE_AUTH Martin Willi 2007-03-08 15:59:21 +00:00
• 069f01cfef removed SHA2 kernel proposals from default, the kernel doesn't support them yet Martin Willi 2007-03-08 15:18:51 +00:00
• f007a70055 allocation fixes, not complete Martin Willi 2007-03-08 14:41:30 +00:00
• 2c7fe7f530 handling "No policy found" properly Martin Willi 2007-03-08 14:41:09 +00:00
• 0cde6c412b added more debugging output for policy lookup returning a (dummy) policy even when TS does not match, so we can properly send a TS_UNACCEPTABLE Martin Willi 2007-03-08 14:40:15 +00:00
• 9b8b3e5f5c fixed CHILD_SA creation within existing IKE_SA Martin Willi 2007-03-08 12:28:10 +00:00
• 95f6a18fc7 added ocsp_parse_single_response Andreas Steffen 2007-03-08 00:35:20 +00:00
• 49e8ac052d ported changes from EAP branch, renabling EAP framework Martin Willi 2007-03-08 00:27:43 +00:00
• 3c6337793f added (not yet supported) sha2 algorithms to kernel only adding a route if using tunnel mode Martin Willi 2007-03-08 00:17:57 +00:00
• 9aa20fdae8 added SHA2 MAC and PRF to default proposal Martin Willi 2007-03-08 00:16:33 +00:00
• ea235d388e added more debug output Martin Willi 2007-03-08 00:15:15 +00:00
• 3243e90188 experimental SHA2 HMAC and PRF implementations Martin Willi 2007-03-08 00:14:17 +00:00
• 40695383ae parsing basic ocsp response Andreas Steffen 2007-03-08 00:13:15 +00:00
• 08d42d3994 forgot to assign public.is_ocsp_signer() method Andreas Steffen 2007-03-07 23:31:03 +00:00
• 4eacb268a0 added parsing level to x509_create_from_chunk() Andreas Steffen 2007-03-07 22:58:25 +00:00
• 8dfb0a31b5 added parsing level to x509_create_from_chunk() and added is_ocsp_signer() method Andreas Steffen 2007-03-07 22:57:50 +00:00
• 78703918aa http post fetching using libcurl implemented Andreas Steffen 2007-03-07 19:28:03 +00:00
• bdfff62db9 added fetcher.h and fetcher.c Andreas Steffen 2007-03-07 14:13:01 +00:00
• 6a65758a80 added Andreas Steffen 2007-03-07 14:12:36 +00:00
• a7d67e77a1 corrected @ingroup to utils Andreas Steffen 2007-03-07 14:11:47 +00:00
• 62a8ee10c3 corrected comment Andreas Steffen 2007-03-07 14:11:02 +00:00
• dd82ca4dcc start ocsp checking only if there are any ocspuris present Andreas Steffen 2007-03-07 13:22:07 +00:00
• 0d1f911065 conntrack -F is used to flush the NAT states Andreas Steffen 2007-03-07 04:45:12 +00:00
• 26ad49c8e7 the hostaccess=yes parameters are not needed anymore Andreas Steffen 2007-03-07 04:44:25 +00:00
• 854b4e4460 use conntrack -F to flush NAT states Andreas Steffen 2007-03-07 04:29:13 +00:00
• 764804739f replaced actual virtual IP addresses by symbolic ones Andreas Steffen 2007-03-07 04:28:34 +00:00
• 74d1b5e5b0 removed unnecessary double quotes Andreas Steffen 2007-03-07 04:27:32 +00:00
• 817fecddc9 nonce in ocsp_t was not properly initialized Andreas Steffen 2007-03-07 04:22:21 +00:00
• 7687c463da ocsp request is now fully built but without requestor signature Andreas Steffen 2007-03-07 03:39:40 +00:00
• 45fe480e87 starting to build ocsp request Andreas Steffen 2007-03-06 23:05:44 +00:00
• 2540992a06 prevent from initiating multiple exchanges the same time Martin Willi 2007-03-06 22:17:53 +00:00
• 915c065d61 updated apidoc documentation Martin Willi 2007-03-06 22:17:21 +00:00
• c676f2e2a6 fixed notify handling in IKE_AUTH moved nonce payload before TS in CHILD_SA setup Martin Willi 2007-03-06 20:58:39 +00:00
• f2d4ec5639 moved REKEY_SA notify to the beginning of the message Martin Willi 2007-03-06 20:56:58 +00:00
• 9de7540eee fixed traffic selector redundancy removal code (not completely tested) Martin Willi 2007-03-06 20:55:19 +00:00
• 69351da14d add crl and ocsp uris to linked list after partial verification Andreas Steffen 2007-03-06 18:51:56 +00:00
• fd8819e06f added print hook for certinfo_t printing Andreas Steffen 2007-03-06 14:27:34 +00:00
• aa3af83a80 fixed typo Andreas Steffen 2007-03-06 14:26:03 +00:00
• ddae0f9673 sending an SPI of 0 as responder when IKE_SA_INIT fails Martin Willi 2007-03-06 13:06:47 +00:00
• ce7fdaca71 iterate certinfos linked list for matching serialNumber Andreas Steffen 2007-03-05 22:08:48 +00:00
• 6e1be42744 some cleanups not assigning %any virtual IPs to peer anymore Martin Willi 2007-03-05 22:07:36 +00:00
• 02b3101b67 fixed double free bug Martin Willi 2007-03-05 22:02:14 +00:00
• 0b0eb65573 added Andreas Steffen 2007-03-05 19:15:33 +00:00
• 5bf1be3c9f fixed ID selection bug when peer doesn't include IDr payload allowing vendor ID in any messag Martin Willi 2007-03-05 15:22:50 +00:00
• 03ffdf7526 moved listing of crls to local_credential_store and ca Andreas Steffen 2007-03-03 21:10:22 +00:00
• 81020aaefd refactored ca_info_t Andreas Steffen 2007-03-03 21:08:07 +00:00
• e5b0570a02 refactored ca_info_t Andreas Steffen 2007-03-03 21:07:23 +00:00
• 373b8a607f fixed netlink socket receiver code implemented interface enumeration code with netlink: no getifaddrs reqired anymore Martin Willi 2007-03-03 14:56:24 +00:00
• 285bbed595 refactored kernel interface, works reliable again Martin Willi 2007-03-03 13:04:07 +00:00
• 1d51abb71b implemented get_iface() using RTM_GETADDR added support for multi-header netlink messages really ugly now, need a lot of refactoring Martin Willi 2007-03-02 17:08:38 +00:00
• ebc59e3bb8 added debuggin for interface lookup Martin Willi 2007-03-01 12:53:20 +00:00
• 3c940a2e4b fixed address lookup when !using getifaddrs() Martin Willi 2007-03-01 12:35:21 +00:00
• 8f03147376 added firewalling support when using virtual IPs Martin Willi 2007-03-01 12:31:58 +00:00
• 0c8aba6771 added support for 0.0.0.0/0 traffic selectors fixed routing to make correct 0.0.0.0/0 routes Martin Willi 2007-03-01 11:42:08 +00:00
• 671a54e9ab config-payload scenario fixes Andreas Steffen 2007-03-01 08:20:50 +00:00
• 9b1f4540c6 preparations for PLUTO_MY_SOURCEIP Andreas Steffen 2007-03-01 07:45:43 +00:00
• 7493cd0b6b corrected typo Andreas Steffen 2007-03-01 00:00:35 +00:00
• 83c3750ac3 added cert with OCSP access info Andreas Steffen 2007-02-28 23:25:13 +00:00
• b62f2fc895 dpd now takes 180 s and 5 retransmits Andreas Steffen 2007-02-28 23:19:20 +00:00
• 1b44633cbc changed grep to creating aquire job for CHILD SA Andreas Steffen 2007-02-28 23:02:40 +00:00
• 501fac0c88 replaced actual virtual IPs by place holders Andreas Steffen 2007-02-28 22:38:49 +00:00
• f4d7dec384 virtual-ip scenario has been replaces by config-payload scenario Andreas Steffen 2007-02-28 22:21:58 +00:00
• bc92caaabf added Andreas Steffen 2007-02-28 22:16:23 +00:00
• 63b97bda3f added Andreas Steffen 2007-02-28 22:16:16 +00:00
• 05bda56556 added ocsp.h and ocsp.c Andreas Steffen 2007-02-28 20:31:07 +00:00
• eb8aaa6747 added Andreas Steffen 2007-02-28 20:30:44 +00:00
• 3d8ec1bacb virtual ip uml test Tobias Brunner 2007-02-28 15:20:10 +00:00
• 9362e063b9 fixed reauthentication when connections other is %any Martin Willi 2007-02-28 14:17:31 +00:00
• c60c7694d2 merged tasking branch into trunk Martin Willi 2007-02-28 14:04:36 +00:00
• a7a5e834e3 fixed big endian bug in md5 hasher Martin Willi 2007-02-28 07:20:16 +00:00
• e6b1066edc cosmetics Andreas Steffen 2007-02-27 22:05:49 +00:00
• 2ddcc33e16 added once flag to certinfo_t Andreas Steffen 2007-02-27 21:23:51 +00:00
• bc5c21baac cosmetics Andreas Steffen 2007-02-27 21:22:57 +00:00
• 87dabcbd1e added certinfos linked list Andreas Steffen 2007-02-27 21:21:54 +00:00
• f3f390eb76 changed ca info to ca Andreas Steffen 2007-02-25 18:47:09 +00:00
• c5d0fbb665 support of ca info sections Andreas Steffen 2007-02-25 08:18:11 +00:00
• 9c6032510f added support of OCSP accessLocations Andreas Steffen 2007-02-25 08:15:46 +00:00
• 508d22b2f9 correct interface definition Andreas Steffen 2007-02-25 08:15:38 +00:00
• 7d119253f6 added support of OCSP accessLocations Andreas Steffen 2007-02-25 08:14:50 +00:00
• db56de5bf7 full support of ca info records Andreas Steffen 2007-02-24 23:21:57 +00:00
• e3c0ece8c8 added the create_crluri_iterator method Andreas Steffen 2007-02-24 23:21:45 +00:00
• 7eb4010c01 replace ca is realized as del_ca followed by add_ca Andreas Steffen 2007-02-24 23:20:27 +00:00
• 98a905838a last CA keyword is KW_OCSPURI2 Andreas Steffen 2007-02-24 23:19:28 +00:00
• b3e4211fc3 full support of ca info records Andreas Steffen 2007-02-24 23:18:31 +00:00
• 83fbaa1ff0 full support of ca info records Andreas Steffen 2007-02-24 23:18:08 +00:00
• 84fd27d06a alphabetically sorting print commands Andreas Steffen 2007-02-24 00:35:23 +00:00
• 87f0656c39 listing ca_info items Andreas Steffen 2007-02-24 00:34:44 +00:00
• 7d203c3b75 replace printf.h by stdio.h Andreas Steffen 2007-02-24 00:34:17 +00:00
• 0cdec3baa5 addin get_keyid() method Andreas Steffen 2007-02-24 00:33:48 +00:00