This website requires JavaScript.
318dc7b6c4
updated leak detective whitelist
Martin Willi
2006-07-04 13:26:20 +00:00
f141214e64
applied latest NATT patch with some fixes and cleanups
Martin Willi
2006-07-04 13:25:00 +00:00
343ae15214
test currently without firewall
Andreas Steffen
2006-07-04 06:54:53 +00:00
ef9e55def4
added
Andreas Steffen
2006-07-04 06:51:58 +00:00
5061a2af1a
added
Andreas Steffen
2006-07-04 06:13:54 +00:00
5fc1577728
added
Andreas Steffen
2006-07-04 06:13:33 +00:00
20f29a359e
removed
Andreas Steffen
2006-07-04 06:13:07 +00:00
1a8a163630
removed version information from ipsec.conf
Andreas Steffen
2006-07-04 06:12:10 +00:00
a642cbe3ae
log entries start with lowcercase character
Andreas Steffen
2006-07-04 06:11:35 +00:00
fe98a03ff1
restored lost IKEv2 packet suppression
Andreas Steffen
2006-07-03 14:39:57 +00:00
6981aca04f
added USE_LEAK_DETECTIVE option
Andreas Steffen
2006-07-03 08:36:47 +00:00
427088f004
fixed natd_hash memory leak
Andreas Steffen
2006-07-03 08:34:34 +00:00
6db2ac30c7
tests with subdirectory structure
Andreas Steffen
2006-07-03 07:11:30 +00:00
92069df82f
removed tests
Andreas Steffen
2006-07-03 07:10:25 +00:00
d9a883c337
introduced subdirectory structure
Andreas Steffen
2006-07-03 07:10:17 +00:00
971218c3ae
support of cert payloads
Andreas Steffen
2006-07-03 06:27:45 +00:00
1d390631d7
lowercase log entries
Andreas Steffen
2006-07-03 06:26:06 +00:00
830cc85298
distributed by ITA
Andreas Steffen
2006-07-03 06:24:54 +00:00
e5382ce736
added support of updown parameter
Andreas Steffen
2006-07-03 06:22:43 +00:00
5c149670df
generation of default key
Andreas Steffen
2006-07-03 06:21:56 +00:00
0e3cb317e2
cosmetics
Andreas Steffen
2006-07-03 06:21:40 +00:00
b17e4d2bfd
added support of updown parameter
Andreas Steffen
2006-07-03 06:21:14 +00:00
7fa242410a
version bump to 4.0.2
Andreas Steffen
2006-06-28 11:09:14 +00:00
6f74bfd6ac
added X.509 trust chain verification
Andreas Steffen
2006-06-27 08:48:28 +00:00
c01d911201
version bump to 4.0.2
Andreas Steffen
2006-06-27 08:47:03 +00:00
dd50707e4f
ESP packet size changed
Andreas Steffen
2006-06-27 07:08:37 +00:00
cfd8b27f78
fixed bad_proposal_syntax bug
Andreas Steffen
2006-06-27 07:07:44 +00:00
2f89902d07
applied new changes from NATT team DPD only done when no IPsec and IKE traffic processed minor changes here and there
Martin Willi
2006-06-23 14:02:30 +00:00
2891590b05
some message code cleanups
Martin Willi
2006-06-23 14:00:15 +00:00
eecb2da87d
fixed identification_t clone to apply function pointers
Martin Willi
2006-06-23 13:20:17 +00:00
4b24dd2d7d
cleaner error handling on UDP encapsultion sockopt failure
Martin Willi
2006-06-22 13:05:15 +00:00
6f51c9f184
added mysterious UDP encapsulation socket option to get encapsulation working
Martin Willi
2006-06-22 12:57:49 +00:00
8d204aa145
fixed BAD_PROPOSAL_SYNTAX vulnerability
Andreas Steffen
2006-06-22 12:16:12 +00:00
1396815afb
first merge of NATT code
Martin Willi
2006-06-22 06:36:28 +00:00
6bf1352032
fixed testing build
Martin Willi
2006-06-21 12:58:02 +00:00
e986c40bc7
updated for 4.0.1 release
Martin Willi
2006-06-21 12:14:40 +00:00
7e81e97543
updated news for 4.0.1 release
Martin Willi
2006-06-21 12:11:29 +00:00
b29bfa7c76
fixed whitelist detection
Martin Willi
2006-06-20 11:03:47 +00:00
986d23bd6e
reworked function ignore mechanism to not-report whitelist rather than overriding functions
Martin Willi
2006-06-20 10:05:56 +00:00
13b8fa0e8d
fixed execv call args to work when using strictcrl and syslog
Martin Willi
2006-06-20 10:04:35 +00:00
5c6b5bf599
fixed bug: usage of already freed mem
Martin Willi
2006-06-20 09:53:25 +00:00
aed58dcc93
readded local_credential_store added sendcert policy to connection some other cleanups
Martin Willi
2006-06-20 08:43:57 +00:00
76dafed7a7
implemented rereadcrls rereadcacerts
Andreas Steffen
2006-06-20 06:08:33 +00:00
a8ed64c494
implemented rereadcrls rereadcacerts
Andreas Steffen
2006-06-20 06:07:37 +00:00
21b433c641
implemented rereadcrls rereadcacerts
Andreas Steffen
2006-06-20 06:05:01 +00:00
db959e6ea3
removed local_credential_store
Andreas Steffen
2006-06-20 05:57:52 +00:00
b965b8456b
fixed SPI when acting as initiator of rekeying
Martin Willi
2006-06-19 09:27:14 +00:00
c65a4fff3f
fixed SPI when rekeying and deleting CHILD_SAs
Martin Willi
2006-06-19 08:54:19 +00:00
891dfaf983
change key derivation order to fullfill RFC
Martin Willi
2006-06-19 08:11:42 +00:00
f7eb60dd5e
Martin Willi
2006-06-16 14:10:49 +00:00
21e7a724d0
added crl support
Andreas Steffen
2006-06-16 05:55:30 +00:00
d92cca4a72
added listcrls
Andreas Steffen
2006-06-16 05:55:02 +00:00
23e9fda8a5
added chunk_equals_or_null()
Andreas Steffen
2006-06-16 05:53:47 +00:00
307b4ded5e
added crl support
Andreas Steffen
2006-06-16 05:52:52 +00:00
277379620c
changed tabs from 8 to 4 spaces
Andreas Steffen
2006-06-16 05:52:26 +00:00
c345ff0b1e
added crl support
Andreas Steffen
2006-06-16 05:51:36 +00:00
63b86f5641
cosmetics
Andreas Steffen
2006-06-16 05:51:16 +00:00
d2c9d37d6f
cosmetics (space)
Andreas Steffen
2006-06-16 05:50:28 +00:00
c859ec9592
fixed compilation error
Martin Willi
2006-06-15 13:41:06 +00:00
c15c3d4be9
updated for release
Martin Willi
2006-06-15 13:23:06 +00:00
147fe5095d
fixed aes code, we support now aes128, aes192, aes256 in IKE
Martin Willi
2006-06-15 13:14:09 +00:00
c095388f7f
added support for "ike" and "esp" keywords fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes
Martin Willi
2006-06-15 11:09:11 +00:00
3efbf98312
implemented clean spi allocation behavior when using multiple proposals
Martin Willi
2006-06-15 11:06:22 +00:00
525a5538db
fixed logleve(l) keyword typo
Martin Willi
2006-06-15 11:03:41 +00:00
56f1a8f2d6
handling of "rekey=no" parameter added
Martin Willi
2006-06-15 11:02:15 +00:00
ad038f770d
changed default algorithms to: ike: aes128-sha-modp2048 esp: aes128-sha1, 3des-md5
Martin Willi
2006-06-15 11:01:17 +00:00
b98e0927f4
added default CRL directory path
Andreas Steffen
2006-06-14 12:44:12 +00:00
311b225740
added strictcrlpolicy command line argument
Andreas Steffen
2006-06-14 12:43:51 +00:00
03442041a9
added option parsing
Andreas Steffen
2006-06-14 12:42:36 +00:00
d9d35d5911
added local CRLs
Andreas Steffen
2006-06-14 12:41:37 +00:00
71d277e468
added rekeying parameters
Andreas Steffen
2006-06-14 12:41:17 +00:00
b3b4c0e44b
corrected some descriptions
Andreas Steffen
2006-06-13 11:33:13 +00:00
3c846c630a
moved RSA key size constraints to definitions.h
Andreas Steffen
2006-06-13 11:32:12 +00:00
b7e3329f17
fixed down keyword
Martin Willi
2006-06-13 10:11:45 +00:00
fa32cd3c47
debug and logging improvements
Martin Willi
2006-06-13 10:01:04 +00:00
22ff6f578f
Martin Willi
2006-06-13 10:00:19 +00:00
64f4d91898
support for stroke listcerts|listcacerts|listcrls|listall
Andreas Steffen
2006-06-12 08:47:28 +00:00
5347233204
support for stroke listcerts|listcacerts|listall and left|rightca=
Andreas Steffen
2006-06-12 08:43:46 +00:00
299dbc604f
gperf creates optimum hash table for stroke keywords
Andreas Steffen
2006-06-12 08:42:32 +00:00
50f98119dd
using same reqid if a child sa rekeys an existing one
Martin Willi
2006-06-12 08:36:41 +00:00
fec9cb332f
NULL string argument is treated as %any
Andreas Steffen
2006-06-12 08:26:14 +00:00
bc35460db7
add_certificate() now returns pointer to added cert
Andreas Steffen
2006-06-12 07:57:14 +00:00
c4a7413e72
cosmetics
Andreas Steffen
2006-06-12 07:55:37 +00:00
016816b880
single tests now start up faster
Andreas Steffen
2006-06-12 07:51:18 +00:00
a2a3fb3e25
workaround for peers rekeying at the same time loading lifetime policies from ipsec.conf
Martin Willi
2006-06-12 07:33:20 +00:00
695723d4e8
old child_sa gets deleted after rekeying rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time,
Martin Willi
2006-06-09 15:12:43 +00:00
2a13996de0
corrected type
Andreas Steffen
2006-06-09 11:06:37 +00:00
b543bef50c
improved kernel interface logging
Martin Willi
2006-06-09 08:41:41 +00:00
0bb32cb5f3
fixed clone/destroy behavior when not using CAs
Martin Willi
2006-06-09 07:40:40 +00:00
5c131a016b
specifying keysize in bits, as it is required in IKEv2 added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
Martin Willi
2006-06-09 07:31:30 +00:00
b7f9ca5837
added support for leftsendcert= and left|rightca= parameters
Andreas Steffen
2006-06-09 05:50:41 +00:00
ac427e3677
discard cert if CA basic constraints flag is not set and warn if cert is not valide
Andreas Steffen
2006-06-09 05:48:49 +00:00
a612f2dd00
added public methods is_ca() and is_valid()
Andreas Steffen
2006-06-09 05:47:00 +00:00
5407d563b7
changed ASN.1 CONTROL log output to LEVEL2
Andreas Steffen
2006-06-09 05:45:37 +00:00
996865b09e
cosmetics
Andreas Steffen
2006-06-09 05:44:34 +00:00
180f924ba5
removed unused Makefile
Martin Willi
2006-06-09 05:42:29 +00:00
d521714c9a
stroke.h requires libstrongswan/types.h
Andreas Steffen
2006-06-09 05:41:31 +00:00
5238c9afef
fixed compile warnings when using -Wall further CHILD_SA rekeying work done: creation of a new CHILD_SA on a expire from a kernel works delete of old CHILD_SA still missing some issues when both initiate rekeing
Martin Willi
2006-06-08 14:20:05 +00:00
c0d63ac9db
updated INSTALL to conform with autotools added a short HACKING introduction
Martin Willi
2006-06-08 06:34:52 +00:00
8d77eddec2
further work for rekeying: get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals
Martin Willi
2006-06-07 13:26:23 +00:00