aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Added generated manpages to .gitignoreMartin Willi2010-05-313-0/+3
|
* Changed default lifetime of certificates to 3 yearsMartin Willi2010-05-312-4/+4
|
* Support extendedKeyUsage flags in self-signed certificatesMartin Willi2010-05-311-0/+16
|
* IPSEC_CONFDIR in ipsec script fixed.Tobias Brunner2010-05-301-1/+1
|
* Adding the version number to the most relevant manual pages.Tobias Brunner2010-05-306-6/+23
|
* Updated and corrected the ipsec.secrets(5) manual page.Tobias Brunner2010-05-301-107/+107
|
* Updated and corrected the ipsec.conf(5) manual page.Tobias Brunner2010-05-301-126/+163
|
* Updated and corrected the ipsec(8) manual page.Tobias Brunner2010-05-301-206/+167
|
* added --leases command line option to synopsisAndreas Steffen2010-05-291-1/+1
|
* added --showattr command line option to synopsysAndreas Steffen2010-05-291-1/+1
|
* added X.509 support by openssl plugin to NEWSAndreas Steffen2010-05-291-0/+2
|
* remove x509 plugin from openssl-ikev1 scenariosAndreas Steffen2010-05-2815-21/+21
|
* Do not install trap policy if remote host is %any.Tobias Brunner2010-05-281-1/+1
|
* be lenient towards wrong attribute encodingsAndreas Steffen2010-05-281-6/+0
|
* Send empty SIM/AKA-NOTIFICATION response for non-success codes, tooMartin Willi2010-05-272-2/+0
|
* Added support for reading raw PUT/POST data from HTTP requestMartin Willi2010-05-272-0/+18
|
* Unwrap subjectKeyIdentifier from OCTET_STRINGMartin Willi2010-05-261-4/+12
|
* remove x509 plugin from remaining openssl-ikev2 scenariosAndreas Steffen2010-05-2517-23/+23
|
* openssl-ikev2/rw-cert scenario doesn't need x509 plugin any moreAndreas Steffen2010-05-253-5/+5
|
* several subnets can be concatenatedAndreas Steffen2010-05-222-27/+49
|
* added --showattr command to usage()Andreas Steffen2010-05-221-0/+5
|
* Fixed compiler warning in invocation of crl_is_newer()Martin Willi2010-05-211-1/+1
|
* Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifierMartin Willi2010-05-211-1/+1
|
* Added a --signcrl command to the pki utilityMartin Willi2010-05-213-1/+377
|
* Added support for CRL generation to x509 pluginMartin Willi2010-05-215-3/+202
|
* Removed is_newer() from certificate_t, obsoleting all implementationsMartin Willi2010-05-2110-182/+2
|
* Added generic implementations for crl_is_newer/certificate_is_newerMartin Willi2010-05-218-11/+78
|
* Migrated x509_crl_t to INIT/METHOD macrosMartin Willi2010-05-211-95/+70
|
* Implemented X.509 CRL reading using OpenSSLMartin Willi2010-05-214-1/+606
|
* Implemented X.509 certificate reading using OpenSSLMartin Willi2010-05-216-2/+1054
|
* oops, removed stray parenthesisAndreas Steffen2010-05-201-1/+1
|
* Fixed doxygen groupMartin Willi2010-05-201-1/+1
|
* Whitelist OpenSSLs ERR_put_error() in leak-detectiveMartin Willi2010-05-201-0/+1
| | | | | | | As we do not invoke ERR_get/clear_error() in all error cases, the error codes are not removed from the error queue. But it is save to whitelist the put function, as it uses a circular buffer that does not grow beyond ERR_NUM_ERRORS errors (16 by default).
* Added a --print command to pki that dumps different credentialsMartin Willi2010-05-202-0/+369
|
* Option to skip slow addr2line resolution in leak-detectiveMartin Willi2010-05-207-49/+76
|
* range check for configuration attribute typesAndreas Steffen2010-05-201-0/+6
|
* implement ipsec pool -showattr functionAndreas Steffen2010-05-203-0/+57
|
* removed deprecated use of ipsec pool --attr|del dns|nbns from usage()Andreas Steffen2010-05-201-8/+0
|
* Only include C files that start with the plugin name when building for Android.Tobias Brunner2010-05-201-1/+3
|
* added ipsec pool attribute support to NEWSAndreas Steffen2010-05-191-0/+3
|
* management of any attribute by ipsec poolAndreas Steffen2010-05-196-218/+693
|
* updated ikev1/rw-cert scenario to support xauth integrity testAndreas Steffen2010-05-192-2/+2
|
* checksum_builder() needs the pluto symbolAndreas Steffen2010-05-191-0/+3
|
* updated ikev1/xauth-rsa-mode-config scenario to support xauth pluginAndreas Steffen2010-05-186-4/+37
|
* updated ikev1/xauth-psk-mode-config scenario to support xauth pluginAndreas Steffen2010-05-1811-21/+16
|
* updated ikev1/xauth-psk-mode-config scenario to support xauth pluginAndreas Steffen2010-05-1814-0/+0
|
* register virtual IPs under the XAUTH identityAndreas Steffen2010-05-181-2/+4
|
* updated ikev1/xauth-rsa-nosecret scenario to support xauth pluginAndreas Steffen2010-05-185-3/+25
|
* created ikev1/xauth-id-psk scenarioAndreas Steffen2010-05-1814-0/+178
|
* updated ikev1/xauth-psk scenario to support xauth pluginAndreas Steffen2010-05-1810-8/+15
|