aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* generalized get_ca_certificate() to get_auth_certificate(auth_flags)Andreas Steffen2007-03-084-11/+13
|
* added fetcher_finalize() to clean up libcurlAndreas Steffen2007-03-083-1/+24
|
* some cleanupsMartin Willi2007-03-082-11/+10
| | | | | not installing %any DNS servers
* support of setting and getting authority flagsAndreas Steffen2007-03-082-2/+58
|
* support if ocsp signing certificatesAndreas Steffen2007-03-084-22/+53
|
* support if ocsp signing certificatesAndreas Steffen2007-03-082-61/+97
|
* fixed payload order in IKE_AUTHMartin Willi2007-03-081-7/+27
|
* removed SHA2 kernel proposals from default, the kernel doesn't support them yetMartin Willi2007-03-081-6/+0
|
* allocation fixes, not completeMartin Willi2007-03-081-8/+16
|
* handling "No policy found" properlyMartin Willi2007-03-081-4/+4
|
* added more debugging output for policy lookupMartin Willi2007-03-081-3/+17
| | | | | returning a (dummy) policy even when TS does not match, so we can properly send a TS_UNACCEPTABLE
* fixed CHILD_SA creation within existing IKE_SAMartin Willi2007-03-081-0/+1
|
* added ocsp_parse_single_responseAndreas Steffen2007-03-081-1/+79
|
* ported changes from EAP branch, renabling EAP frameworkMartin Willi2007-03-082-126/+371
|
* added (not yet supported) sha2 algorithms to kernelMartin Willi2007-03-081-7/+10
| | | | only adding a route if using tunnel mode
* added SHA2 MAC and PRF to default proposalMartin Willi2007-03-081-23/+58
|
* added more debug output Martin Willi2007-03-081-0/+2
|
* experimental SHA2 HMAC and PRF implementationsMartin Willi2007-03-085-4/+40
|
* parsing basic ocsp responseAndreas Steffen2007-03-081-26/+269
|
* forgot to assign public.is_ocsp_signer() methodAndreas Steffen2007-03-071-0/+1
|
* added parsing level to x509_create_from_chunk()Andreas Steffen2007-03-071-1/+1
|
* added parsing level to x509_create_from_chunk() and added is_ocsp_signer() ↵Andreas Steffen2007-03-072-7/+42
| | | | method
* http post fetching using libcurl implementedAndreas Steffen2007-03-076-11/+180
|
* added fetcher.h and fetcher.cAndreas Steffen2007-03-071-0/+1
|
* addedAndreas Steffen2007-03-072-0/+132
|
* corrected @ingroup to utilsAndreas Steffen2007-03-071-1/+1
|
* corrected commentAndreas Steffen2007-03-071-1/+1
|
* start ocsp checking only if there are any ocspuris presentAndreas Steffen2007-03-071-1/+9
|
* conntrack -F is used to flush the NAT statesAndreas Steffen2007-03-075-3/+7
|
* the hostaccess=yes parameters are not needed anymoreAndreas Steffen2007-03-072-2/+0
|
* use conntrack -F to flush NAT statesAndreas Steffen2007-03-076-3/+8
|
* replaced actual virtual IP addresses by symbolic onesAndreas Steffen2007-03-071-2/+2
|
* removed unnecessary double quotesAndreas Steffen2007-03-071-1/+1
|
* nonce in ocsp_t was not properly initializedAndreas Steffen2007-03-071-0/+1
|
* ocsp request is now fully built but without requestor signatureAndreas Steffen2007-03-071-12/+85
|
* starting to build ocsp requestAndreas Steffen2007-03-063-54/+299
|
* prevent from initiating multiple exchanges the same timeMartin Willi2007-03-061-0/+9
|
* updated apidoc documentationMartin Willi2007-03-061-4/+3
|
* fixed notify handling in IKE_AUTHMartin Willi2007-03-062-16/+25
| | | | moved nonce payload before TS in CHILD_SA setup
* moved REKEY_SA notify to the beginning of the messageMartin Willi2007-03-061-7/+7
|
* fixed traffic selector redundancy removal code (not completely tested)Martin Willi2007-03-062-7/+17
|
* add crl and ocsp uris to linked list after partial verificationAndreas Steffen2007-03-061-22/+35
|
* added print hook for certinfo_t printingAndreas Steffen2007-03-061-0/+2
|
* fixed typoAndreas Steffen2007-03-061-1/+1
|
* sending an SPI of 0 as responder when IKE_SA_INIT failsMartin Willi2007-03-061-0/+7
|
* iterate certinfos linked list for matching serialNumberAndreas Steffen2007-03-053-2/+45
|
* some cleanupsMartin Willi2007-03-052-13/+7
| | | | | | not assigning %any virtual IPs to peer anymore
* fixed double free bugMartin Willi2007-03-0510-24/+96
|
* addedAndreas Steffen2007-03-0511-0/+135
|
* fixed ID selection bug when peer doesn't include IDr payloadMartin Willi2007-03-054-40/+34
| | | | | allowing vendor ID in any messag