aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | Fix leak in pki --pkcs7 --decryptMartin Willi2012-12-191-0/+1
| |
* | Support multiple signerInfos while parsing PKCS#7 signed-dataMartin Willi2012-12-191-173/+229
| |
* | Add a pki command to sign, verify, encrypt and decrypt PKCS#7 containersMartin Willi2012-12-192-0/+392
| |
* | Support encoding of PKCS#7 enveloped-data containersMartin Willi2012-12-193-3/+231
| |
* | Support encoding of PKCS#7 signed-data containersMartin Willi2012-12-193-0/+195
| |
* | Support encoding of PKCS#7 "data" containersMartin Willi2012-12-193-5/+66
| |
* | Add builder parts to generate PKCS#7 containersMartin Willi2012-12-192-1/+10
| |
* | Implement PKCS#7 enveloped-data parsing and decryptionMartin Willi2012-12-194-0/+434
| |
* | Implement PKCS#7 signed-data parsing and verificationMartin Willi2012-12-194-0/+444
| |
* | Implement PKCS#7 "data" content type parsingMartin Willi2012-12-194-0/+146
| |
* | certificate_t.has_subject() matches for certificate serialNumberMartin Willi2012-12-192-0/+8
| |
* | Implement generic PKCS#7 contentInfo parsingMartin Willi2012-12-194-0/+153
| |
* | Add a plugin stub for PKCS#7 containersMartin Willi2012-12-195-0/+140
| |
* | Add container plugin featuresMartin Willi2012-12-192-0/+36
| |
* | Add a generic interface for crypto containers and a more specific PKCS#7 ↵Martin Willi2012-12-196-5/+178
| | | | | | | | interface
* | Rebuild PKCS#9 encoding after adding new attributesMartin Willi2012-12-191-0/+3
| |
* | Don't store additional encoding for each PKCS#9 attributeMartin Willi2012-12-191-13/+15
| |
* | Unify PKCS#9 set_attribute* methods to a single add_attributeMartin Willi2012-12-194-59/+17
| | | | | | | | | | This way the PKCS#9 implementation does not have to know the encoding types for values
* | PKCS#9 coding style cleanupsMartin Willi2012-12-192-110/+41
| |
* | Remove external build_encoding method in PKCS#9Martin Willi2012-12-192-9/+5
|/
* Fix deadlock in IMC/IMV managersTobias Brunner2012-12-182-8/+36
| | | | | | | | | Since reserve_id() might be called from e.g. notify_connection_change() using a write lock will not work as this can't be acquired while holding the read lock. Also, with the previous code it was possible that two IMCs/IMVs added by two threads at the same time would get the same ID assigned.
* Properly select IMC/IMV according to given primary ID in reserve_id()Tobias Brunner2012-12-182-2/+2
|
* Use a ./configure check to detect pthread spinlock availabilityMartin Willi2012-12-182-15/+9
| | | | | _POSIX_SPIN_LOCKS does not seem to be defined correctly on all systems (Debian libc 2.3.6). Fixes #262.
* kernel-netlinks get_interface() considers virtual IPs, tooMartin Willi2012-12-171-0/+13
| | | | | | | When using load-tester, we can install tunnel outer addresses on demand. As these are installed as "virtual", we have to consider virtual IPs in the get_interface() lookup to install "real" virtual IPs to these dynamic external addresses.
* If load-tester requests a virtual IP, use a dynamic local traffic selectorMartin Willi2012-12-171-2/+8
|
* Add missing CHILD_SA specific proposal keyword in conftest READMEMartin Willi2012-12-171-0/+1
|
* Fix traffic selectors also as initiator in case of transport mode over NATTobias Brunner2012-12-131-1/+1
|
* Fix debug output if responder selected invalid traffic selectors during QMTobias Brunner2012-12-131-2/+2
|
* fixed memory leak in TPM Version InfoAndreas Steffen2012-12-131-2/+5
|
* Fixed reading of configs in conftest utilityTobias Brunner2012-12-131-4/+4
|
* Migrate RADIUS accounting state while IKE_SA unique id changes during rekeyMartin Willi2012-12-111-0/+23
|
* Migrate cache and fire lookip events for unique_id change during IKE_SA rekeyMartin Willi2012-12-101-0/+13
|
* Inherit virtual IP and attributes from old to new, not from new to oldMartin Willi2012-12-101-5/+5
|
* Avoid that ruby 1.9 redefines snprintf(3) etc.Tobias Brunner2012-12-101-0/+2
| | | | Otherwise our custom printf specifiers won't work.
* Properly initialize linked list when enumerating interface addressesTobias Brunner2012-12-101-0/+1
|
* rb_cvar_set() takes three arguments in Ruby 1.9Tobias Brunner2012-12-101-0/+4
|
* Use rb_errinfo() instead of ruby_errinfo for Ruby 1.9Tobias Brunner2012-12-102-0/+5
|
* Use proper Ruby library depending on the available versionTobias Brunner2012-12-102-1/+9
|
* Fixed search for ruby.h in ./configure for newer Ruby releasesTobias Brunner2012-12-101-15/+16
|
* add dlcose strongswan.conf option to tnc-imc/tnc-imv pluginsAndreas Steffen2012-12-091-0/+6
|
* optionally skip dlclose() of IMCs/IMVs in order to track memory leaksAndreas Steffen2012-12-092-2/+6
|
* fixed memory leak in error caseAndreas Steffen2012-12-091-1/+1
|
* newer releases of dpkg-query does not have PackageSpecAndreas Steffen2012-12-091-1/+1
|
* ignore ports of the 127.0.1.1 internal system addressAndreas Steffen2012-12-091-2/+6
|
* Properly trigger ike_updown() event if IKEv1 DPD times outMartin Willi2012-12-041-0/+1
| | | | Fixes missing RADIUS Accounting Stop, #257.
* Replace optionsfrom LGPLv2 header by a GPLv2Martin Willi2012-11-301-7/+7
|
* Fix GPL license header to properly "sed" itMartin Willi2012-11-301-1/+1
|
* Add locking to IMC/IMV managers to add/remove IMC/IMVs on the flyMartin Willi2012-11-302-7/+67
|
* Reuse generic constructor in IMV/IMC messageMartin Willi2012-11-302-44/+8
|
* Add getters for the raw encoding in IMV/IMC messagesMartin Willi2012-11-304-0/+38
|