Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | parsing of generalNames is not needed any more | Andreas Steffen | 2009-10-08 | 2 | -299/+0 | |
| | ||||||
* | use of asn1_build_known_oid() | Andreas Steffen | 2009-10-08 | 1 | -86/+29 | |
| | ||||||
* | migrated public key IDs to identification_t | Andreas Steffen | 2009-10-08 | 20 | -466/+463 | |
| | ||||||
* | Reenabled acq_expires SA timer using rekey timeout | Martin Willi | 2009-10-07 | 1 | -1/+1 | |
| | | | | | | | While not using a SA expiration for allocating SPIs works fine, the situation is much more problematic for kernel-created temporary SAs from acquires. If the negotiation of such a CHILD_SA fails, the created temporary SA can not be deleted. | |||||
* | Catch CHILD_SA state changes during acquire | Martin Willi | 2009-10-07 | 1 | -17/+45 | |
| | | | | | If an acquire fails due to a TS_UNACCEPTABLE or other CHILD_SA only errors, we have to reset the pending state in the trap manager. | |||||
* | list subjectAltNames | Andreas Steffen | 2009-10-06 | 1 | -1/+33 | |
| | ||||||
* | some ipsec listall finetuning | Andreas Steffen | 2009-10-06 | 3 | -10/+9 | |
| | ||||||
* | pluto and charon now have the same ipsec listall output format | Andreas Steffen | 2009-10-06 | 17 | -131/+89 | |
| | ||||||
* | the ikev1 scenarios need the x509 plugin | Andreas Steffen | 2009-10-06 | 49 | -55/+56 | |
| | ||||||
* | streamlined output from get_validity() | Andreas Steffen | 2009-10-06 | 12 | -136/+54 | |
| | ||||||
* | fixed serial number conversion from hex | Andreas Steffen | 2009-10-05 | 1 | -0/+5 | |
| | ||||||
* | delete group attributes after use | Andreas Steffen | 2009-10-05 | 1 | -0/+1 | |
| | ||||||
* | stroke_list outputs group attributes | Andreas Steffen | 2009-10-05 | 1 | -0/+7 | |
| | ||||||
* | ipsec pki --issue suports --flag authServer option | Andreas Steffen | 2009-10-05 | 6 | -19/+46 | |
| | ||||||
* | ipsec pki --issue supports --flag ocspSigning option | Andreas Steffen | 2009-10-05 | 2 | -7/+32 | |
| | ||||||
* | Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word reads | Martin Willi | 2009-10-05 | 1 | -67/+101 | |
| | ||||||
* | Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word reads | Martin Willi | 2009-10-05 | 1 | -99/+108 | |
| | ||||||
* | Distinguish invalid free()s between corrupted magic and invalid pointer | Martin Willi | 2009-10-05 | 1 | -5/+24 | |
| | ||||||
* | pluto now uses x509 plugin for attribute certificate handling | Andreas Steffen | 2009-10-05 | 28 | -1445/+985 | |
| | ||||||
* | fixed output of authKeyID | Andreas Steffen | 2009-10-02 | 1 | -1/+1 | |
| | ||||||
* | mark embedded parsing in debug mode | Andreas Steffen | 2009-10-02 | 2 | -0/+4 | |
| | ||||||
* | added some notBefore/notAfter debugging info | Andreas Steffen | 2009-10-02 | 1 | -1/+13 | |
| | ||||||
* | verify correctness of X.509 versions | Andreas Steffen | 2009-10-02 | 1 | -2/+18 | |
| | ||||||
* | added all missing RFC 5280 OIDs | Andreas Steffen | 2009-10-02 | 1 | -0/+18 | |
| | ||||||
* | created ikev1/mode-config-multiple scenario | Andreas Steffen | 2009-10-01 | 9 | -0/+202 | |
| | ||||||
* | fixes multiple IPsec SAs with IKEv1 Mode Config | Andreas Steffen | 2009-10-01 | 1 | -0/+17 | |
| | ||||||
* | generate known OIDs dynamically | Andreas Steffen | 2009-09-30 | 1 | -14/+6 | |
| | ||||||
* | pluto's crl handling now uses the x509 plugin | Andreas Steffen | 2009-09-30 | 3 | -394/+159 | |
| | ||||||
* | scepclient uses pkcs10 from libstrongswan | Andreas Steffen | 2009-09-28 | 2 | -277/+0 | |
| | ||||||
* | abbreviated struct connection by connection_t | Andreas Steffen | 2009-09-27 | 17 | -289/+269 | |
| | ||||||
* | pluto and scepclient now use the x509 plugin for certificates | Andreas Steffen | 2009-09-27 | 27 | -1633/+1129 | |
| | ||||||
* | whitelist Curl_client_write | Andreas Steffen | 2009-09-27 | 1 | -0/+2 | |
| | ||||||
* | added get_subjectKeyIdentifier() to x509_t | Andreas Steffen | 2009-09-26 | 2 | -14/+39 | |
| | ||||||
* | Do not increase the invalid-KE/Cookie retry counter for additional keyingtry ↵ | Martin Willi | 2009-09-24 | 1 | -1/+3 | |
| | | | | attempts | |||||
* | Do not create a replacement IKE_SA if we have CHILD_SAs to route only | Martin Willi | 2009-09-24 | 1 | -8/+7 | |
| | ||||||
* | Using the correct type for ME_ENDPOINT payloads in connectivity checks. | Tobias Brunner | 2009-09-24 | 1 | -1/+2 | |
| | ||||||
* | Right-align short options in pki usage | Martin Willi | 2009-09-24 | 1 | -7/+5 | |
| | ||||||
* | certificate subject DNs are in double quotes | Andreas Steffen | 2009-09-23 | 1 | -5/+5 | |
| | ||||||
* | streamlining of credential loading debug output | Andreas Steffen | 2009-09-23 | 1 | -6/+6 | |
| | ||||||
* | added fix of PKCS#7 wrapped certificates to NEWS | Andreas Steffen | 2009-09-23 | 1 | -0/+2 | |
| | ||||||
* | added and fixed debug output of version information | Andreas Steffen | 2009-09-23 | 1 | -7/+23 | |
| | ||||||
* | fixed PKCS#7 wrapped certificate parsing | Andreas Steffen | 2009-09-23 | 1 | -1/+1 | |
| | ||||||
* | Use mysql_config to query MySQL LIBS and CFLAGS | Martin Willi | 2009-09-23 | 3 | -5/+9 | |
| | ||||||
* | Fixed a crash in source address lookup | Martin Willi | 2009-09-23 | 1 | -8/+11 | |
| | ||||||
* | Define ME for all charon plugins | Martin Willi | 2009-09-23 | 2 | -4/+3 | |
| | ||||||
* | Correctly handle --enable-mediation option | Martin Willi | 2009-09-23 | 2 | -1/+2 | |
| | ||||||
* | enforce coding rules | Andreas Steffen | 2009-09-22 | 1 | -7/+42 | |
| | ||||||
* | enforce coding rules | Andreas Steffen | 2009-09-22 | 1 | -63/+277 | |
| | ||||||
* | set XFRM_STATE_AF_UNSPEC flag | Andreas Steffen | 2009-09-22 | 1 | -1/+14 | |
| | ||||||
* | Emit a ALERT_SHUTDOWN_SIGNAL before shutting down the daemon | Martin Willi | 2009-09-22 | 2 | -0/+4 | |
| |