Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | adding additional flags to loaded X.509 certificates | Andreas Steffen | 2009-09-22 | 1 | -0/+5 | |
| | ||||||
* | readying NEWS for the strongswan-4.3.5dr2 release | Andreas Steffen | 2009-09-22 | 1 | -0/+3 | |
| | ||||||
* | shortened file loading debug output | Andreas Steffen | 2009-09-22 | 3 | -27/+26 | |
| | ||||||
* | computed hash-and-url for new certificates | Andreas Steffen | 2009-09-22 | 10 | -0/+13 | |
| | ||||||
* | Fixed encoding of hash-and-url cert payload | Martin Willi | 2009-09-22 | 1 | -13/+13 | |
| | ||||||
* | Do not assign SIM version to a volatile buffer on stack | Martin Willi | 2009-09-22 | 1 | -15/+11 | |
| | ||||||
* | CA certificates are looked up using the subjectPublicKeyInfo keyid | Martin Willi | 2009-09-21 | 25 | -25/+25 | |
| | ||||||
* | Credential backends use has_fingerprint() methods to select keys/certificates | Martin Willi | 2009-09-21 | 4 | -24/+7 | |
| | ||||||
* | Public/Private keys implement a has_fingerprint() method | Martin Willi | 2009-09-21 | 14 | -0/+83 | |
| | ||||||
* | Correctly serve certificates if CERT_ANY requested | Martin Willi | 2009-09-21 | 1 | -1/+1 | |
| | ||||||
* | Enforce a local address of the same family as remote address | Martin Willi | 2009-09-21 | 1 | -2/+8 | |
| | ||||||
* | Return certificates of requested kind only | Martin Willi | 2009-09-21 | 1 | -58/+4 | |
| | ||||||
* | plugin has been renamed to resolve | Andreas Steffen | 2009-09-20 | 2 | -2/+2 | |
| | ||||||
* | delete resolv_conf_* files | Andreas Steffen | 2009-09-20 | 4 | -352/+0 | |
| | ||||||
* | all arguments must be read | Andreas Steffen | 2009-09-20 | 1 | -1/+2 | |
| | ||||||
* | resolv_conf plugin renamed to resolve | Andreas Steffen | 2009-09-20 | 12 | -20/+371 | |
| | ||||||
* | adapt evaltest.dat to changed debug output | Andreas Steffen | 2009-09-20 | 1 | -2/+2 | |
| | ||||||
* | renewed certs in dynamic-initiator/dynamic-responder scenarios | Andreas Steffen | 2009-09-19 | 4 | -86/+86 | |
| | ||||||
* | use new certificates | Andreas Steffen | 2009-09-19 | 2 | -34/+34 | |
| | ||||||
* | eliminated double library_deinit() | Andreas Steffen | 2009-09-19 | 1 | -1/+0 | |
| | ||||||
* | keyids of renewed keys | Andreas Steffen | 2009-09-18 | 1 | -4/+4 | |
| | ||||||
* | updated to renewed certs in SQL database | Andreas Steffen | 2009-09-18 | 28 | -101/+104 | |
| | ||||||
* | renewal of end entity certificates | Andreas Steffen | 2009-09-18 | 43 | -808/+297 | |
| | ||||||
* | fixed --enable-eap-md5 and --enable-eap-gtc options | Andreas Steffen | 2009-09-18 | 1 | -2/+2 | |
| | ||||||
* | backwards compatibility with SQL format | Andreas Steffen | 2009-09-18 | 2 | -3/+3 | |
| | ||||||
* | Use helper functions to handle (non-)skippable attributes | Martin Willi | 2009-09-18 | 1 | -42/+46 | |
| | ||||||
* | Clients can handle AKA-Identity requests by sending the full identity | Martin Willi | 2009-09-18 | 1 | -0/+80 | |
| | ||||||
* | nm uses the distributions trusted root CAs if none is explicitly specified | Martin Willi | 2009-09-18 | 7 | -59/+198 | |
| | ||||||
* | some reformulations | Andreas Steffen | 2009-09-17 | 1 | -4/+4 | |
| | ||||||
* | get_private() in listcacerts requires a valid auth cfg | Martin Willi | 2009-09-17 | 1 | -1/+5 | |
| | ||||||
* | Fixed nexthop lookup, used by source route installation | Martin Willi | 2009-09-16 | 1 | -7/+4 | |
| | ||||||
* | Use continue to advance to next iteration | Martin Willi | 2009-09-16 | 1 | -12/+11 | |
| | ||||||
* | Complain about missing %defaultroute support only if one is actually used | Martin Willi | 2009-09-16 | 3 | -3/+7 | |
| | ||||||
* | Use the default debug hook if possible | Martin Willi | 2009-09-16 | 6 | -47/+3 | |
| | ||||||
* | Default logger implementation can be modified by dbg_default_set_level/stream | Martin Willi | 2009-09-16 | 2 | -5/+45 | |
| | ||||||
* | Removed obsolete per-command debug level option | Martin Willi | 2009-09-16 | 3 | -9/+0 | |
| | ||||||
* | Fixed loading of DER encoded certificate files | Martin Willi | 2009-09-16 | 1 | -5/+5 | |
| | ||||||
* | corrected usage | Andreas Steffen | 2009-09-15 | 1 | -2/+1 | |
| | ||||||
* | pki --req generates a PKCS#10 certificate request | Andreas Steffen | 2009-09-15 | 2 | -2/+195 | |
| | ||||||
* | implemented ASN.1 encoding of PKCS#10 attributes | Andreas Steffen | 2009-09-15 | 2 | -50/+97 | |
| | ||||||
* | fixed typo | Andreas Steffen | 2009-09-15 | 1 | -1/+1 | |
| | ||||||
* | Disable rtnetlink defaultroute lookup if pluto is disabled | Martin Willi | 2009-09-15 | 1 | -7/+24 | |
| | | | | | As we do not support Pluto on BSD/Mac, exclude the Linux specific rtnetlink routing lookup; Charon doesn't require it anyway. | |||||
* | Get starter default route via rtnetlink | Heiko Hund | 2009-09-15 | 1 | -88/+113 | |
| | | | | | | | | | | | | | This patch changes the way routes are fetched from the kernel by starter. The way it's currently done (via /proc) is limited to routes in the "main" routing table. Routes from the "default" table are never seen by starter. Starter may miss the default route even if it's set. Thus, default routes are now read from the "main" and the "default" table. The way this code behaves if more than one default route is found is slightly different to before. Instead of bailing out it just chooses the one with the best metric. I thought this was be a reasonable change. | |||||
* | Handle pki --debug and --options in a generic way for all command | Martin Willi | 2009-09-15 | 8 | -133/+163 | |
| | ||||||
* | pki tool supports single letter short options | Martin Willi | 2009-09-15 | 8 | -13/+42 | |
| | ||||||
* | Exponents of a RSA key in openssl are optional (for PGP) | Martin Willi | 2009-09-15 | 1 | -4/+9 | |
| | ||||||
* | Added some NEWS | Martin Willi | 2009-09-15 | 1 | -96/+120 | |
| | ||||||
* | Use ID_KEY_ID as PGP user id, as it can contain any string | Martin Willi | 2009-09-15 | 1 | -1/+1 | |
| | ||||||
* | Fall back to default credential set lookup if fingerprint lookup fails | Martin Willi | 2009-09-15 | 1 | -1/+5 | |
| | ||||||
* | Implemented support for preinstalled PGP certificates in charon | Martin Willi | 2009-09-15 | 5 | -6/+17 | |
| |