Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• ef33a4ab82 Fixed some typos, courtesy of codespell Tobias Brunner 2012-12-20 09:31:38 +01:00
• ba8b28b67f Raise an alert if IKE SA is kept Adrian-Ken Rueegsegger 2012-12-19 15:48:35 +01:00
• a7409773e6 stroke: Drop unneeded [MY|OTHER]_NETBITS Reto Buerki 2012-12-18 16:11:19 +01:00
• 31944a4366 stroke: Enable install_policy in add_connection() Reto Buerki 2012-07-18 16:19:31 +02:00
• 0ff8d20a89 Add support for draft-ietf-ipsec-nat-t-ike-03 and earlier Volker Rümelin 2012-12-15 14:11:26 +01:00
• ecdd5aedac NEWS about error-notify Martin Willi 2012-12-19 10:43:35 +01:00
• 32c3ac95e4 Add missing error_notify_msg.h to distribution tarball Martin Willi 2012-11-21 11:12:53 +01:00
• 3044085006 Add an error-notify sample application to listen to error notifications Martin Willi 2012-11-08 11:22:26 +01:00
• 0aaf5ccfa6 Add an error-notify plugin to send catched alerts to listening applications Martin Willi 2012-11-06 16:46:49 +01:00
• 578f72ceb0 Raise an alert if half-open timeout limit reached Martin Willi 2012-11-06 15:26:15 +01:00
• c57fe7ac6f Raise an alert if an authorize() hook fails Martin Willi 2012-11-06 11:48:58 +01:00
• 45d6134218 Raise an alert if allocating virtual IPs fails Martin Willi 2012-11-06 11:43:19 +01:00
• f285b9efc8 Raise an alert if kernel policy installation fails Martin Willi 2012-11-06 11:33:29 +01:00
• bcf3147e0a Raise an alert if kernel SA installation fails Martin Willi 2012-11-06 11:32:18 +01:00
• 24f30ec92f Raise an alert on traffic selector mismatch Martin Willi 2012-11-06 11:27:38 +01:00
• c794455666 Raise alerts when enforcing IKE_SA unique policy Martin Willi 2012-11-06 11:19:52 +01:00
• 5dd9c3087f Raise an alert if CHILD_SA proposals mismatch Martin Willi 2012-11-06 11:05:04 +01:00
• bab949bb26 Raise an alert if IKE proposals mismatch Martin Willi 2012-11-06 11:01:49 +01:00
• 3f7f5388a5 Raise an alert of generating local authentication data fails Martin Willi 2012-11-05 15:33:34 +01:00
• cc0cc3b54d Add NEWS about BER capable OpenSSL PKCS#7 backend Martin Willi 2012-12-19 10:38:42 +01:00
• 644be5d537 Free leaking scep attributes Martin Willi 2012-11-29 16:48:18 +01:00
• 429e6d5eee Corrected error message if enveloped-data decryption fails Martin Willi 2012-11-29 16:35:41 +01:00
• 0a344da291 Fix up serialNumber in openssl PKCS#7 if it has a leading MSB set Martin Willi 2012-11-29 16:35:06 +01:00
• 71dd4e7895 Don't handle PKCS#7 containers with infinite length encodings in pkcs7 plugin Martin Willi 2012-11-29 16:12:45 +01:00
• 3c820cdc23 Implement PKCS#7 decryption using openssl Martin Willi 2012-11-29 15:56:53 +01:00
• 2a87944a33 Make available wrapped certificates while verifying PKCS#7 signatures in openssl Martin Willi 2012-11-29 14:39:35 +01:00
• 04884be3b5 Implement openssl PKCS#7 certficiate enumeration Martin Willi 2012-11-29 14:30:08 +01:00
• e96d945dcd Fix doxygen grouping regarding containers and PKCS#7 Martin Willi 2012-11-29 12:02:07 +01:00
• 36f2e11c70 Enable pkcs7 plugin when building scepclient on Android Martin Willi 2012-11-29 11:53:13 +01:00
• 03ba8f9e8c Move PKCS#9 attribute lists to pkcs7 plugin, as we currently use it there only Martin Willi 2012-11-29 11:52:27 +01:00
• 804ba5bb50 Implement get_attribute() in openssl PKCS#7 backend Martin Willi 2012-11-29 11:39:49 +01:00
• 063ae4e52a Allocate data returned by pkcs7_t.get_attribute() Martin Willi 2012-11-29 11:29:46 +01:00
• c61723c69f Implement OpenSSL PKCS#7 signed-data parsing and verification Martin Willi 2012-11-28 18:45:30 +01:00
• 568ad938d1 Add a stub for OpenSSL PKCS#7 parsing Martin Willi 2012-11-28 14:59:49 +01:00
• 1865fb929a Remove unused monolithic PKCS#7 code Martin Willi 2012-11-28 12:44:05 +01:00
• 74cc41c704 Migrated scepclient to new modular PKCS# API Martin Willi 2012-11-28 12:41:38 +01:00
• 6d21c61a09 Fix encryption algorithm/key size argument processing in PKCS#7 enveloped-data Martin Willi 2012-11-28 12:41:15 +01:00
• ee97055835 Properly clone PKCS#7 attributes passed to builder Martin Willi 2012-11-28 12:40:55 +01:00
• 8ccf5a4731 Fix enum names for container_type_t Martin Willi 2012-11-27 17:37:55 +01:00
• 24b2dae2b6 Add a --show option to pki --pkcs7 to print contained certificates Martin Willi 2012-11-27 17:37:25 +01:00
• 9e967d7dda Add an enumerator for PKCS#7 contained certificates Martin Willi 2012-11-27 17:35:30 +01:00
• 9afbe59953 pki --pkcs7 --verify shows prints the signing time, if available Martin Willi 2012-11-27 17:10:37 +01:00
• d3d706f4fc Add a getter for signed PKCS#7 attributes Martin Willi 2012-11-27 17:10:23 +01:00
• 5a50bec9d2 Fix leak in pki --pkcs7 --decrypt Martin Willi 2012-11-27 16:35:53 +01:00
• b95b4730f5 Support multiple signerInfos while parsing PKCS#7 signed-data Martin Willi 2012-11-27 16:32:18 +01:00
• 47120d4977 Add a pki command to sign, verify, encrypt and decrypt PKCS#7 containers Martin Willi 2012-11-27 14:59:51 +01:00
• 5d932e4f01 Support encoding of PKCS#7 enveloped-data containers Martin Willi 2012-11-27 14:59:18 +01:00
• 32745a28cf Support encoding of PKCS#7 signed-data containers Martin Willi 2012-11-27 12:22:01 +01:00
• 3c2986bf0a Support encoding of PKCS#7 "data" containers Martin Willi 2012-11-27 12:21:07 +01:00
• 637a8abb72 Add builder parts to generate PKCS#7 containers Martin Willi 2012-11-27 12:20:16 +01:00
• d7aa09104f Implement PKCS#7 enveloped-data parsing and decryption Martin Willi 2012-11-27 10:32:54 +01:00
• 98bbe0760f Implement PKCS#7 signed-data parsing and verification Martin Willi 2012-11-26 15:05:15 +01:00
• 83ed1464e3 Implement PKCS#7 "data" content type parsing Martin Willi 2012-11-26 15:03:49 +01:00
• ed1c430334 certificate_t.has_subject() matches for certificate serialNumber Martin Willi 2012-11-27 10:02:37 +01:00
• 9de6a7a85c Implement generic PKCS#7 contentInfo parsing Martin Willi 2012-11-26 12:40:23 +01:00
• bd20f040fd Add a plugin stub for PKCS#7 containers Martin Willi 2012-11-26 12:06:44 +01:00
• 692f560546 Add container plugin features Martin Willi 2012-11-26 12:55:25 +01:00
• fc67a932ba Add a generic interface for crypto containers and a more specific PKCS#7 interface Martin Willi 2012-11-26 12:04:16 +01:00
• 67ca44ccbd Rebuild PKCS#9 encoding after adding new attributes Martin Willi 2012-11-23 16:38:25 +01:00
• 60c9b5da8d Don't store additional encoding for each PKCS#9 attribute Martin Willi 2012-11-23 16:37:23 +01:00
• 7f9fedc9bd Unify PKCS#9 set_attribute* methods to a single add_attribute Martin Willi 2012-11-23 16:27:31 +01:00
• c1005c120c PKCS#9 coding style cleanups Martin Willi 2012-11-23 16:00:15 +01:00
• f0c02e27c4 Remove external build_encoding method in PKCS#9 Martin Willi 2012-11-23 15:48:30 +01:00
• 766466b8d1 Adapt host configuration Reto Buerki 2012-11-19 17:17:38 +01:00
• 108040800d Add recipe for iptables Reto Buerki 2012-11-21 18:42:57 +01:00
• adbb5cbd43 Add freeradius recipe Reto Buerki 2012-11-21 18:39:08 +01:00
• e61ce6ee02 Factor out building of strongswan into own Makefile Reto Buerki 2012-11-21 18:08:24 +01:00
• aa5803e0e3 testing: Switch to Debian based guest images Reto Buerki 2012-11-19 10:43:42 +01:00
• 0080daa787 Fix deadlock in IMC/IMV managers Tobias Brunner 2012-12-18 15:50:08 +01:00
• 6a8eeba540 Properly select IMC/IMV according to given primary ID in reserve_id() Tobias Brunner 2012-12-18 15:49:21 +01:00
• 4185c64464 Use a ./configure check to detect pthread spinlock availability Martin Willi 2012-12-13 11:22:40 +01:00
• 544c2e3d7b kernel-netlinks get_interface() considers virtual IPs, too Martin Willi 2012-12-17 14:23:44 +01:00
• d9d0f12222 If load-tester requests a virtual IP, use a dynamic local traffic selector Martin Willi 2012-12-17 14:22:25 +01:00
• fe3060f5d0 Add missing CHILD_SA specific proposal keyword in conftest README Martin Willi 2012-12-17 10:58:47 +01:00
• 283898d6e0 Fix traffic selectors also as initiator in case of transport mode over NAT Tobias Brunner 2012-12-13 15:25:59 +01:00
• 2990671748 Fix debug output if responder selected invalid traffic selectors during QM Tobias Brunner 2012-12-13 15:25:03 +01:00
• 45b5203f5d fixed memory leak in TPM Version Info Andreas Steffen 2012-12-13 11:10:24 +01:00
• 5cb00b3afb Fixed reading of configs in conftest utility Tobias Brunner 2012-12-13 11:08:32 +01:00
• df75cc5c5f Migrate RADIUS accounting state while IKE_SA unique id changes during rekey Martin Willi 2012-12-11 10:40:59 +01:00
• 251b740712 Migrate cache and fire lookip events for unique_id change during IKE_SA rekey Martin Willi 2012-12-10 17:04:26 +01:00
• 43b4c2ea75 Inherit virtual IP and attributes from old to new, not from new to old Martin Willi 2012-12-10 17:01:00 +01:00
• caccc0e8cc Avoid that ruby 1.9 redefines snprintf(3) etc. Tobias Brunner 2012-12-10 11:41:37 +01:00
• 12e70a7efc Properly initialize linked list when enumerating interface addresses Tobias Brunner 2012-12-10 09:46:51 +01:00
• 6a25122bfc rb_cvar_set() takes three arguments in Ruby 1.9 Tobias Brunner 2012-12-10 09:41:32 +01:00
• d972975d87 Use rb_errinfo() instead of ruby_errinfo for Ruby 1.9 Tobias Brunner 2012-11-08 19:24:04 +01:00
• afabe7b0ef Use proper Ruby library depending on the available version Tobias Brunner 2012-11-08 19:23:05 +01:00
• 5057df5b73 Fixed search for ruby.h in ./configure for newer Ruby releases Tobias Brunner 2012-11-08 16:20:41 +01:00
• 133fb74841 add dlcose strongswan.conf option to tnc-imc/tnc-imv plugins Andreas Steffen 2012-12-09 19:40:13 +01:00
• 92e75e4535 optionally skip dlclose() of IMCs/IMVs in order to track memory leaks Andreas Steffen 2012-12-09 19:35:23 +01:00
• 7d17eeb7ef fixed memory leak in error case Andreas Steffen 2012-12-09 17:07:51 +01:00
• 965fce31c3 newer releases of dpkg-query does not have PackageSpec Andreas Steffen 2012-12-09 13:55:22 +01:00
• 4037bb5288 ignore ports of the 127.0.1.1 internal system address Andreas Steffen 2012-12-09 13:26:34 +01:00
• 137ea41f45 Properly trigger ike_updown() event if IKEv1 DPD times out Martin Willi 2012-12-04 11:11:50 +01:00
• b091d80aff Replace optionsfrom LGPLv2 header by a GPLv2 Martin Willi 2012-11-30 17:24:28 +01:00
• 01bc9bf428 Fix GPL license header to properly "sed" it Martin Willi 2012-11-30 17:15:37 +01:00
• c543616315 Add locking to IMC/IMV managers to add/remove IMC/IMVs on the fly Martin Willi 2012-11-20 14:34:00 +01:00
• 7e45257f7d Reuse generic constructor in IMV/IMC message Martin Willi 2012-11-19 16:18:50 +01:00
• a6722e5653 Add getters for the raw encoding in IMV/IMC messages Martin Willi 2012-11-19 16:11:59 +01:00
• 2a433075e2 Clean up whitespaces in IMC/IMV messages Martin Willi 2012-11-19 16:11:27 +01:00
• fdce28c49c Don't remove IETF standard errors while parsing IMC/IMV messages Martin Willi 2012-11-19 15:03:45 +01:00