aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* generalized get_ca_certificate() to get_auth_certificate(auth_flags)Andreas Steffen2007-03-084-11/+13
* added fetcher_finalize() to clean up libcurlAndreas Steffen2007-03-083-1/+24
* some cleanupsMartin Willi2007-03-082-11/+10
* support of setting and getting authority flagsAndreas Steffen2007-03-082-2/+58
* support if ocsp signing certificatesAndreas Steffen2007-03-084-22/+53
* support if ocsp signing certificatesAndreas Steffen2007-03-082-61/+97
* fixed payload order in IKE_AUTHMartin Willi2007-03-081-7/+27
* removed SHA2 kernel proposals from default, the kernel doesn't support them yetMartin Willi2007-03-081-6/+0
* allocation fixes, not completeMartin Willi2007-03-081-8/+16
* handling "No policy found" properlyMartin Willi2007-03-081-4/+4
* added more debugging output for policy lookupMartin Willi2007-03-081-3/+17
* fixed CHILD_SA creation within existing IKE_SAMartin Willi2007-03-081-0/+1
* added ocsp_parse_single_responseAndreas Steffen2007-03-081-1/+79
* ported changes from EAP branch, renabling EAP frameworkMartin Willi2007-03-082-126/+371
* added (not yet supported) sha2 algorithms to kernelMartin Willi2007-03-081-7/+10
* added SHA2 MAC and PRF to default proposalMartin Willi2007-03-081-23/+58
* added more debug output Martin Willi2007-03-081-0/+2
* experimental SHA2 HMAC and PRF implementationsMartin Willi2007-03-085-4/+40
* parsing basic ocsp responseAndreas Steffen2007-03-081-26/+269
* forgot to assign public.is_ocsp_signer() methodAndreas Steffen2007-03-071-0/+1
* added parsing level to x509_create_from_chunk()Andreas Steffen2007-03-071-1/+1
* added parsing level to x509_create_from_chunk() and added is_ocsp_signer() me...Andreas Steffen2007-03-072-7/+42
* http post fetching using libcurl implementedAndreas Steffen2007-03-076-11/+180
* added fetcher.h and fetcher.cAndreas Steffen2007-03-071-0/+1
* addedAndreas Steffen2007-03-072-0/+132
* corrected @ingroup to utilsAndreas Steffen2007-03-071-1/+1
* corrected commentAndreas Steffen2007-03-071-1/+1
* start ocsp checking only if there are any ocspuris presentAndreas Steffen2007-03-071-1/+9
* conntrack -F is used to flush the NAT statesAndreas Steffen2007-03-075-3/+7
* the hostaccess=yes parameters are not needed anymoreAndreas Steffen2007-03-072-2/+0
* use conntrack -F to flush NAT statesAndreas Steffen2007-03-076-3/+8
* replaced actual virtual IP addresses by symbolic onesAndreas Steffen2007-03-071-2/+2
* removed unnecessary double quotesAndreas Steffen2007-03-071-1/+1
* nonce in ocsp_t was not properly initializedAndreas Steffen2007-03-071-0/+1
* ocsp request is now fully built but without requestor signatureAndreas Steffen2007-03-071-12/+85
* starting to build ocsp requestAndreas Steffen2007-03-063-54/+299
* prevent from initiating multiple exchanges the same timeMartin Willi2007-03-061-0/+9
* updated apidoc documentationMartin Willi2007-03-061-4/+3
* fixed notify handling in IKE_AUTHMartin Willi2007-03-062-16/+25
* moved REKEY_SA notify to the beginning of the messageMartin Willi2007-03-061-7/+7
* fixed traffic selector redundancy removal code (not completely tested)Martin Willi2007-03-062-7/+17
* add crl and ocsp uris to linked list after partial verificationAndreas Steffen2007-03-061-22/+35
* added print hook for certinfo_t printingAndreas Steffen2007-03-061-0/+2
* fixed typoAndreas Steffen2007-03-061-1/+1
* sending an SPI of 0 as responder when IKE_SA_INIT failsMartin Willi2007-03-061-0/+7
* iterate certinfos linked list for matching serialNumberAndreas Steffen2007-03-053-2/+45
* some cleanupsMartin Willi2007-03-052-13/+7
* fixed double free bugMartin Willi2007-03-0510-24/+96
* addedAndreas Steffen2007-03-0511-0/+135
* fixed ID selection bug when peer doesn't include IDr payloadMartin Willi2007-03-054-40/+34