Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 6f51c9f184 added mysterious UDP encapsulation socket option to get encapsulation working Martin Willi 2006-06-22 12:57:49 +00:00
• 8d204aa145 fixed BAD_PROPOSAL_SYNTAX vulnerability Andreas Steffen 2006-06-22 12:16:12 +00:00
• 1396815afb first merge of NATT code Martin Willi 2006-06-22 06:36:28 +00:00
• 6bf1352032 fixed testing build Martin Willi 2006-06-21 12:58:02 +00:00
• e986c40bc7 updated for 4.0.1 release Martin Willi 2006-06-21 12:14:40 +00:00
• 7e81e97543 updated news for 4.0.1 release Martin Willi 2006-06-21 12:11:29 +00:00
• b29bfa7c76 fixed whitelist detection Martin Willi 2006-06-20 11:03:47 +00:00
• 986d23bd6e reworked function ignore mechanism to not-report whitelist rather than overriding functions Martin Willi 2006-06-20 10:05:56 +00:00
• 13b8fa0e8d fixed execv call args to work when using strictcrl and syslog Martin Willi 2006-06-20 10:04:35 +00:00
• 5c6b5bf599 fixed bug: usage of already freed mem Martin Willi 2006-06-20 09:53:25 +00:00
• aed58dcc93 readded local_credential_store added sendcert policy to connection some other cleanups Martin Willi 2006-06-20 08:43:57 +00:00
• 76dafed7a7 implemented rereadcrls rereadcacerts Andreas Steffen 2006-06-20 06:08:33 +00:00
• a8ed64c494 implemented rereadcrls rereadcacerts Andreas Steffen 2006-06-20 06:07:37 +00:00
• 21b433c641 implemented rereadcrls rereadcacerts Andreas Steffen 2006-06-20 06:05:01 +00:00
• db959e6ea3 removed local_credential_store Andreas Steffen 2006-06-20 05:57:52 +00:00
• b965b8456b fixed SPI when acting as initiator of rekeying Martin Willi 2006-06-19 09:27:14 +00:00
• c65a4fff3f fixed SPI when rekeying and deleting CHILD_SAs Martin Willi 2006-06-19 08:54:19 +00:00
• 891dfaf983 change key derivation order to fullfill RFC Martin Willi 2006-06-19 08:11:42 +00:00
• f7eb60dd5e Martin Willi 2006-06-16 14:10:49 +00:00
• 21e7a724d0 added crl support Andreas Steffen 2006-06-16 05:55:30 +00:00
• d92cca4a72 added listcrls Andreas Steffen 2006-06-16 05:55:02 +00:00
• 23e9fda8a5 added chunk_equals_or_null() Andreas Steffen 2006-06-16 05:53:47 +00:00
• 307b4ded5e added crl support Andreas Steffen 2006-06-16 05:52:52 +00:00
• 277379620c changed tabs from 8 to 4 spaces Andreas Steffen 2006-06-16 05:52:26 +00:00
• c345ff0b1e added crl support Andreas Steffen 2006-06-16 05:51:36 +00:00
• 63b86f5641 cosmetics Andreas Steffen 2006-06-16 05:51:16 +00:00
• d2c9d37d6f cosmetics (space) Andreas Steffen 2006-06-16 05:50:28 +00:00
• c859ec9592 fixed compilation error Martin Willi 2006-06-15 13:41:06 +00:00
• c15c3d4be9 updated for release Martin Willi 2006-06-15 13:23:06 +00:00
• 147fe5095d fixed aes code, we support now aes128, aes192, aes256 in IKE Martin Willi 2006-06-15 13:14:09 +00:00
• c095388f7f added support for "ike" and "esp" keywords fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes Martin Willi 2006-06-15 11:09:11 +00:00
• 3efbf98312 implemented clean spi allocation behavior when using multiple proposals Martin Willi 2006-06-15 11:06:22 +00:00
• 525a5538db fixed logleve(l) keyword typo Martin Willi 2006-06-15 11:03:41 +00:00
• 56f1a8f2d6 handling of "rekey=no" parameter added Martin Willi 2006-06-15 11:02:15 +00:00
• ad038f770d changed default algorithms to: ike: aes128-sha-modp2048 esp: aes128-sha1, 3des-md5 Martin Willi 2006-06-15 11:01:17 +00:00
• b98e0927f4 added default CRL directory path Andreas Steffen 2006-06-14 12:44:12 +00:00
• 311b225740 added strictcrlpolicy command line argument Andreas Steffen 2006-06-14 12:43:51 +00:00
• 03442041a9 added option parsing Andreas Steffen 2006-06-14 12:42:36 +00:00
• d9d35d5911 added local CRLs Andreas Steffen 2006-06-14 12:41:37 +00:00
• 71d277e468 added rekeying parameters Andreas Steffen 2006-06-14 12:41:17 +00:00
• b3b4c0e44b corrected some descriptions Andreas Steffen 2006-06-13 11:33:13 +00:00
• 3c846c630a moved RSA key size constraints to definitions.h Andreas Steffen 2006-06-13 11:32:12 +00:00
• b7e3329f17 fixed down keyword Martin Willi 2006-06-13 10:11:45 +00:00
• fa32cd3c47 debug and logging improvements Martin Willi 2006-06-13 10:01:04 +00:00
• 22ff6f578f Martin Willi 2006-06-13 10:00:19 +00:00
• 64f4d91898 support for stroke listcerts|listcacerts|listcrls|listall Andreas Steffen 2006-06-12 08:47:28 +00:00
• 5347233204 support for stroke listcerts|listcacerts|listall and left|rightca= Andreas Steffen 2006-06-12 08:43:46 +00:00
• 299dbc604f gperf creates optimum hash table for stroke keywords Andreas Steffen 2006-06-12 08:42:32 +00:00
• 50f98119dd using same reqid if a child sa rekeys an existing one Martin Willi 2006-06-12 08:36:41 +00:00
• fec9cb332f NULL string argument is treated as %any Andreas Steffen 2006-06-12 08:26:14 +00:00
• bc35460db7 add_certificate() now returns pointer to added cert Andreas Steffen 2006-06-12 07:57:14 +00:00
• c4a7413e72 cosmetics Andreas Steffen 2006-06-12 07:55:37 +00:00
• 016816b880 single tests now start up faster Andreas Steffen 2006-06-12 07:51:18 +00:00
• a2a3fb3e25 workaround for peers rekeying at the same time loading lifetime policies from ipsec.conf Martin Willi 2006-06-12 07:33:20 +00:00
• 695723d4e8 old child_sa gets deleted after rekeying rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time, Martin Willi 2006-06-09 15:12:43 +00:00
• 2a13996de0 corrected type Andreas Steffen 2006-06-09 11:06:37 +00:00
• b543bef50c improved kernel interface logging Martin Willi 2006-06-09 08:41:41 +00:00
• 0bb32cb5f3 fixed clone/destroy behavior when not using CAs Martin Willi 2006-06-09 07:40:40 +00:00
• 5c131a016b specifying keysize in bits, as it is required in IKEv2 added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs Martin Willi 2006-06-09 07:31:30 +00:00
• b7f9ca5837 added support for leftsendcert= and left|rightca= parameters Andreas Steffen 2006-06-09 05:50:41 +00:00
• ac427e3677 discard cert if CA basic constraints flag is not set and warn if cert is not valide Andreas Steffen 2006-06-09 05:48:49 +00:00
• a612f2dd00 added public methods is_ca() and is_valid() Andreas Steffen 2006-06-09 05:47:00 +00:00
• 5407d563b7 changed ASN.1 CONTROL log output to LEVEL2 Andreas Steffen 2006-06-09 05:45:37 +00:00
• 996865b09e cosmetics Andreas Steffen 2006-06-09 05:44:34 +00:00
• 180f924ba5 removed unused Makefile Martin Willi 2006-06-09 05:42:29 +00:00
• d521714c9a stroke.h requires libstrongswan/types.h Andreas Steffen 2006-06-09 05:41:31 +00:00
• 5238c9afef fixed compile warnings when using -Wall further CHILD_SA rekeying work done: creation of a new CHILD_SA on a expire from a kernel works delete of old CHILD_SA still missing some issues when both initiate rekeing Martin Willi 2006-06-08 14:20:05 +00:00
• c0d63ac9db updated INSTALL to conform with autotools added a short HACKING introduction Martin Willi 2006-06-08 06:34:52 +00:00
• 8d77eddec2 further work for rekeying: get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals Martin Willi 2006-06-07 13:26:23 +00:00
• a401efd091 proper leak detective hook for realloc excluded pthread_setspecific from leak detective Martin Willi 2006-06-07 13:22:38 +00:00
• 6a030ba9ea fixed a memleak Martin Willi 2006-06-07 05:54:09 +00:00
• 0f2094930d cosmetics Andreas Steffen 2006-06-06 06:24:04 +00:00
• 71c80765a5 ipv6-host2host scenario added Andreas Steffen 2006-06-06 05:43:32 +00:00
• fc0afb6810 created IPv6 environment Andreas Steffen 2006-06-06 05:41:21 +00:00
• 32b6500fbf job management: moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-) Martin Willi 2006-05-31 14:23:15 +00:00
• 6f2aba1322 - fixed some memleaks/freebugs - leak detective works almost usable now (?!) Martin Willi 2006-05-31 14:13:26 +00:00
• 3b8af2ab60 - added host2host test for ikev2 Martin Willi 2006-05-31 08:15:23 +00:00
• bd72398729 - fixed host-host tunnel traffic selection, host-host works now Martin Willi 2006-05-31 06:52:27 +00:00
• 1df544d063 bug fixed circumventing an assertion in delete_connection when ikev1 is not set Andreas Steffen 2006-05-31 05:51:05 +00:00
• 6848dac603 minimized prefixed on stroke logger output Andreas Steffen 2006-05-31 05:50:04 +00:00
• 90ed2e8278 charon outputs strongSwan version Andreas Steffen 2006-05-31 05:48:32 +00:00
• ef8f5256d3 tests with subjectAltNames now Andreas Steffen 2006-05-31 05:47:30 +00:00
• 2d6c3bce06 Martin Willi 2006-05-30 14:56:12 +00:00
• b93782903f - fixed event queue for events >36min Martin Willi 2006-05-30 13:22:46 +00:00
• 8403b34bd9 Martin Willi 2006-05-30 13:01:50 +00:00
• 0773bdcf3f - included charons module tests to build & dist Martin Willi 2006-05-30 13:00:18 +00:00
• 6d5e617f7d full support of ikev1 and ikev2 connection flags Andreas Steffen 2006-05-30 11:10:42 +00:00
• 9db4f61476 cosmetics in log_status output Andreas Steffen 2006-05-30 11:07:14 +00:00
• c11c43d2c3 use of streq Andreas Steffen 2006-05-30 11:03:55 +00:00
• 5e5f0bd4b2 - added testing files to dist - required the use of the "ustar" format to support filenames longer than 99 chars Martin Willi 2006-05-30 08:51:48 +00:00
• 510d54eb59 lookup of private key based on keyid of public key Andreas Steffen 2006-05-30 07:53:13 +00:00
• fa896e9a21 new functions to add certificates and retrieve private and public keys Andreas Steffen 2006-05-30 07:52:25 +00:00
• d793980f56 changed log level Andreas Steffen 2006-05-30 07:50:15 +00:00
• e1c00b96a6 list ca certificates Andreas Steffen 2006-05-30 07:48:29 +00:00
• f5a4518a74 computation of SHA-1 hash over publicKeyInfo object Andreas Steffen 2006-05-30 07:47:19 +00:00
• 3b58a143a0 moved abbreviated thread_id in front of brackets Andreas Steffen 2006-05-30 07:45:06 +00:00
• cdffecf3ba added has_key parameter to log_certificates() Andreas Steffen 2006-05-30 07:43:39 +00:00
• c164f8c4a7 log_certificates() now shows keyid and availability of matching private key Andreas Steffen 2006-05-30 07:42:52 +00:00
• 7c2e556644 indented loaded file log entry Andreas Steffen 2006-05-30 07:41:22 +00:00
• 1a10669080 moved TIMETOA_BUF definition to types.h Andreas Steffen 2006-05-30 07:40:44 +00:00