aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Added crl support to pki --printMartin Willi2010-08-301-7/+52
|
* Typo in doxygen comment fixed.Tobias Brunner2010-08-301-1/+1
|
* Fixed ME after introduction of AEAD wrapper.Tobias Brunner2010-08-301-1/+1
|
* Fixed pluto smartcard support after introducing encryption schemesMartin Willi2010-08-301-2/+2
|
* replaced ikev2/esp-alg-aes-ctr by ikev2/alg-aes-ctrAndreas Steffen2010-08-2910-9/+12
|
* added ctr ccm and gcm plugins to ikev2/rw-cert scenarioAndreas Steffen2010-08-293-3/+3
|
* added ctr ccm and gcm plugins to openssl-ikev2/rw-cert scenarioAndreas Steffen2010-08-293-3/+3
|
* added ctr ccm and gcm plugins to gcrypt-ikev2/rw-cert scenarioAndreas Steffen2010-08-293-3/+3
|
* replaced ikev2/esp-alg-aes-gcm by ikev2/alg-aes-gcmAndreas Steffen2010-08-2910-11/+14
|
* replaced ikev2/esp-alg-aes-ccm by ikev2/alg-aes-ccmAndreas Steffen2010-08-2910-11/+13
|
* Win7 might send up to 7k of certificate requestsAndreas Steffen2010-08-273-3/+3
|
* Fixed documentation of XAUTH in ipsec.secrets.Tobias Brunner2010-08-261-3/+3
|
* Prefer AES/Camellia suites over 3DES/NULL encryptionMartin Willi2010-08-251-16/+16
|
* Send TLS alerts for errors in TLS handshake buildingMartin Willi2010-08-253-0/+12
|
* Refactored fragment building, use correct TLS content type for non-first ↵Martin Willi2010-08-251-67/+82
| | | | fragments
* Update delete_payload length when adding SPIsMartin Willi2010-08-251-0/+1
|
* Migrated delete_payload to INIT/METHOD macros, replaced iteratorMartin Willi2010-08-253-130/+108
|
* Use different return values in payload decryption to distinguish between ↵Martin Willi2010-08-253-12/+16
| | | | integrity and syntax errors
* Implemented a TLS utility to test on any TLS secured TCP connectionMartin Willi2010-08-254-4/+334
|
* Added a simple high level TLS wrapper for socketsMartin Willi2010-08-254-0/+290
|
* Initialize output chunk before appending data to itMartin Willi2010-08-251-0/+1
|
* Added private key support to in-memory credential setMartin Willi2010-08-252-1/+77
|
* Added certificate support to in-memory credential setMartin Willi2010-08-252-2/+121
|
* Check if colliding rekey actually created an IKE_INITThomas Egerer2010-08-251-37/+42
| | | | | | In some cases (especially if a child is half-open) the colliding rekey-job might not have created the ike_init member. If so, the nonce check fails with SIGSEGV.
* Added a ike_name logger option to prefix the IKE_SA name on each lineMartin Willi2010-08-255-19/+69
|
* removed tls_record_t definitionAndreas Steffen2010-08-241-10/+0
|
* Pass NULL peer identity to omit TLS peer authentication, added ↵Martin Willi2010-08-247-49/+36
| | | | eap-ttls.request_peer_auth option
* Skip the close notify if application layer completes successfullyMartin Willi2010-08-242-4/+11
|
* added ikev2/rw-eap-tls-fragments scenarioAndreas Steffen2010-08-2424-0/+119
|
* use correct network diagramAndreas Steffen2010-08-241-2/+2
|
* support fragmentation in AVPsAndreas Steffen2010-08-243-21/+118
|
* removed some redundant debug outputAndreas Steffen2010-08-242-4/+0
|
* Added generic TLS purposesMartin Willi2010-08-243-6/+19
|
* Client sends empty EAP-TTLS packet on fatal alerts to properly shut down TLSMartin Willi2010-08-241-0/+6
|
* Check if the application layer has completed successfullyMartin Willi2010-08-243-16/+62
|
* Moved TLS record parsing/generation to tls.cMartin Willi2010-08-244-134/+78
|
* added debug-tls comand line optionAndreas Steffen2010-08-231-0/+1
|
* Added a TLS purpose for EAP-TTLS with client authenticationMartin Willi2010-08-233-0/+4
|
* EAP-TLS clients send an empty packet on failure to properly shut down a TLS ↵Martin Willi2010-08-231-0/+6
| | | | session
* Implemented TLS Alert handlingMartin Willi2010-08-2315-80/+643
|
* Rebuild library.lo after changing ./configure optionsMartin Willi2010-08-231-0/+2
|
* Build a trustchain even if no trust anchor is givenMartin Willi2010-08-231-14/+23
|
* Accept encryption payloads with no wrapped payloadsMartin Willi2010-08-231-1/+1
|
* Fall back to shifting with 32-bit words if 64-bit byte order conversion ↵Martin Willi2010-08-231-10/+12
| | | | function missing
* Use enum mappings to resolve debug groupMartin Willi2010-08-231-16/+1
|
* Implemented generic enum name to enum value mappingMartin Willi2010-08-232-3/+44
|
* Verify negotiated TLS versionMartin Willi2010-08-234-8/+27
|
* Introducing a dedicated debug message group for libtlsMartin Willi2010-08-238-74/+78
|
* Streamlined TLS debugging outputMartin Willi2010-08-232-12/+12
|
* fixed build_cipher_suite_list()Andreas Steffen2010-08-211-6/+6
|