aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* refactored PB-TNC state machine in send directionAndreas Steffen2010-12-091-91/+95
|
* pb_tnc_batch_t class implements parsing and building of PB-TNC batchesAndreas Steffen2010-12-0912-430/+1155
|
* fixed memory corruptionAndreas Steffen2010-12-081-1/+1
|
* Never register IKE_SA during checkout_new, as rekeying keeps it checked outMartin Willi2010-12-072-18/+2
|
* Include the destination net in the policy priority calculation.Tobias Brunner2010-12-072-12/+20
| | | | | | | | | | | | | The resulting priorities are as follows: IPv6 IPv4 routed normal routed normal max 4096(+3) 2048(+3) 4096(+3) 2048(+3) min 3072 1024 3840 1792 Where min is for a policy between two single hosts and max is for /0 on both ends (lower priorities are preferred by the kernel). (+3) applies for cases where no protocol and no ports are defined.
* added newlineAndreas Steffen2010-12-071-0/+1
|
* re-introduced commentAndreas Steffen2010-12-071-1/+3
|
* Migrated stroke_control_t to INIT/METHOD macrosAndreas Steffen2010-12-071-46/+30
|
* Migrated stroke_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-071-7/+11
|
* Guarantee entry->other is set when calling put_connected_peersThomas Egerer2010-12-061-1/+7
| | | | | | | | | | | Given the original intent of entry->host, the check for DoS attacks, it can happen that this value remains NULL when an entry is created. This is particularly awkward if put_connected_peers is called to check if a connection to a given peer already exists, since it takes the address family into consideration (git commit b74219d0) which is gleaned from entry->host. This patch guarantees that entry->other is a clone of host before put_connected_peers is called.
* added sql/multi-level-ca scenarioAndreas Steffen2010-12-0517-0/+683
|
* stupid typoAndreas Steffen2010-12-051-1/+1
|
* cosmeticsAndreas Steffen2010-12-051-2/+2
|
* cosmeticsAndreas Steffen2010-12-051-3/+3
|
* added parsing checksAndreas Steffen2010-12-051-6/+10
|
* output TLS-independent error messagesAndreas Steffen2010-12-051-9/+9
|
* added certificate_authorities and certificate_distribution_points tablesAndreas Steffen2010-12-051-0/+14
|
* support of reqid field in SQL databaseAndreas Steffen2010-12-054-7/+11
|
* fixed pb_reason_string_message_t classAndreas Steffen2010-12-052-51/+13
|
* Migrated fips_prf plugin to INIT/METHOD macrosAndreas Steffen2010-12-042-36/+37
|
* Migrated md4_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-7/+11
|
* Migrated md5_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-7/+11
|
* Migrated ldap plugin to INIT/METHOD macrosAndreas Steffen2010-12-042-23/+28
|
* Migrated pubkey_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-7/+11
|
* Migrated pkcs1_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-6/+10
|
* Migrated curl_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-6/+10
|
* Migrated random plugin to INIT/METHOD macrosAndreas Steffen2010-12-042-26/+27
|
* Migrated sha1_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-6/+10
|
* Migrated sha2_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-6/+10
|
* Migrated mysql plugin to INIT/METHOD macrosAndreas Steffen2010-12-042-28/+27
|
* use private destroy() functionAndreas Steffen2010-12-041-1/+1
|
* Migrated sqlite plugin to INIT/METHOD macrosAndreas Steffen2010-12-042-31/+30
|
* Migrated test_vectors_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-6/+10
|
* Migrated x509_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-6/+10
|
* Migrated pgp_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-10/+11
|
* Migrated pem_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-7/+11
|
* Migrated dnskey_plugin_t to INIT/METHOD macrosAndreas Steffen2010-12-041-8/+11
|
* Migrated options_t to INIT/METHOD macrosAndreas Steffen2010-12-041-18/+12
|
* CDP enumerator added to SQL plugin.Tobias Brunner2010-12-031-1/+108
|
* Tables added for CAs and CDPs.Tobias Brunner2010-12-032-0/+34
|
* Migrated sql_cred_t to INIT/METHOD macros.Tobias Brunner2010-12-031-78/+61
|
* Insert certificates and secrets at the front of the lists.Tobias Brunner2010-12-031-9/+9
| | | | | As the lookup is also from front to back, certificates added later are now found first, which is useful in case of e.g. "reread cacerts".
* Refactored stroke_cred_t to use mem_cred_t.Tobias Brunner2010-12-035-580/+32
|
* Function add_crl added to mem_cred_t.Tobias Brunner2010-12-032-0/+70
|
* Function added to clear secrets (but not certs) from mem_cred_t.Tobias Brunner2010-12-032-4/+20
|
* Alternative to mem_cred_t.add_cert added, which returns the certificate.Tobias Brunner2010-12-032-4/+40
| | | | If the certificate is already cached, the cached version is returned.
* Function added to mem_cred_t to add shared secret with a linked list of owners.Tobias Brunner2010-12-032-10/+33
|
* Added functions to modify/create settings in settings_t.Tobias Brunner2010-12-032-20/+162
|
* Added an option to create non-existing key/value pairs during search.Tobias Brunner2010-12-031-18/+55
|
* Compare shorter "boolean" values first.Tobias Brunner2010-12-031-6/+6
|