Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | - rewrote a lot of RSA stuff | Martin Willi | 2006-03-30 | 4 | -16/+88 |
| | | | | | | | | | | - done major work for ASN1/decoder - allow loading of ASN1 der encoded private keys, public keys and certificates - extracting public key from certificates - passing certificates from stroke to charon => basic authentication with RSA certificates works! | ||||
* | - starter work on asn1 with der de/encoder | Martin Willi | 2006-03-24 | 2 | -0/+6 |
| | | | | | | - RSA private and public key can load read key from ASN1 DER - some other fixes here and there | ||||
* | - rewrite of logger_manager, uses now one instance per context | Martin Willi | 2006-03-23 | 4 | -396/+119 |
| | | | | | | | - cleanups for logger here and there - removed critical flag check in payload verification (conformance to IKEv2) - so thats and theres everywere... ;-) | ||||
* | - works quite well now with ipsec.conf & ipsec starter | Martin Willi | 2006-03-20 | 3 | -11/+54 |
| | |||||
* | - reworked configuration framework completly | Martin Willi | 2006-03-16 | 5 | -18/+40 |
| | | | | | | - configuration is now split up in: connections, policies, credentials and daemon config - further alloc/free fixes needed! | ||||
* | - first attempt for connection loading and starting via "stroke" | Martin Willi | 2006-03-14 | 2 | -3/+10 |
| | | | | | - some improvements here and there | ||||
* | - configuration_manager replaced by configuration_t interface | Martin Willi | 2006-03-07 | 2 | -3/+5 |
| | | | | | | | | - current configuration_manager is now static_configuration (testing) - first draft of starter_configuration, which should once interact with ipsec starter (via whack?) - some cleanups - socket_t uses RAW socket, which allows parallel service of pluto/charon | ||||
* | - fixed socket code, so we know on which address we receive traffic | Martin Willi | 2006-02-16 | 1 | -0/+1 |
| | | | | | - AH/ESP setup in kernel is working now!!! :-))) | ||||
* | - installing of child sa works | Martin Willi | 2006-02-16 | 1 | -2/+1 |
| | | | | | - need correct IP adresses to actually use IPsec | ||||
* | - key derivation for child_sa works | Martin Willi | 2006-02-10 | 3 | -15/+20 |
| | |||||
* | - some fixes here and there | Martin Willi | 2006-02-09 | 1 | -8/+25 |
| | |||||
* | - fixed memleaks | Martin Willi | 2006-02-09 | 2 | -1/+50 |
| | |||||
* | - works with new proposal code | Martin Willi | 2006-02-09 | 1 | -0/+1 |
| | | | | | - still some(!) memleaks | ||||
* | - fixed alot of bugs in child_proposal | Martin Willi | 2006-02-08 | 2 | -5/+45 |
| | | | | | - near to working state ;-) | ||||
* | - fixed doxygen warnings | Martin Willi | 2005-12-15 | 1 | -2/+2 |
| | |||||
* | created protected_tester_t for testcases | Jan Hutter | 2005-12-07 | 2 | -32/+51 |
| | |||||
* | - code cleaned up | Jan Hutter | 2005-12-07 | 1 | -0/+4 |
| | |||||
* | ../svn-commit.tmp | Martin Willi | 2005-12-07 | 2 | -12/+20 |
| | |||||
* | - described constructors | Jan Hutter | 2005-12-06 | 1 | -1/+3 |
| | |||||
* | - code cleaned up | Jan Hutter | 2005-12-06 | 11 | -137/+153 |
| | |||||
* | - code cleaned up | Jan Hutter | 2005-12-06 | 4 | -91/+92 |
| | |||||
* | - some doc updates | Martin Willi | 2005-12-05 | 5 | -25/+60 |
| | |||||
* | - kernel interface hacks, works partially | Martin Willi | 2005-12-05 | 1 | -13/+14 |
| | | | | | - interface must be redefined | ||||
* | - added payload CERT | Jan Hutter | 2005-12-05 | 1 | -0/+1 |
| | | | | | | - cleaned code of different states - added additional notify handling | ||||
* | - fixed break | Martin Willi | 2005-12-04 | 1 | -0/+1 |
| | |||||
* | - creation from encoded never failes | Martin Willi | 2005-12-04 | 2 | -23/+42 |
| | |||||
* | - logging cleanup | Martin Willi | 2005-12-04 | 4 | -27/+45 |
| | | | | | - pid re-replaced with thread_ids, since nptl does not distinguish pids between threads | ||||
* | - implemented RSA, only signing and verifying esma_pkcs1 padded | Martin Willi | 2005-12-04 | 5 | -261/+55 |
| | | | | | | | | | | | - removed gmp-helper: chunk_to_mpz is now done with gmp functions, prime generation in prime-pool - added prime-pool (needs priority fix) - proof of concept RSA authentication - mpz uses LEAK_DETECTIVE - configuration-manager supports rsa keys | ||||
* | - preshared secrets are now retrieved over configuration_manager | Jan Hutter | 2005-12-03 | 1 | -4/+6 |
| | |||||
* | - fixed id bug | Martin Willi | 2005-12-02 | 1 | -4/+4 |
| | |||||
* | - fixes | Martin Willi | 2005-12-02 | 1 | -2/+1 |
| | |||||
* | - state ike_sa_init_responded implemented (has some memleaks) | Martin Willi | 2005-12-02 | 2 | -0/+3 |
| | |||||
* | - fixed bugs | Jan Hutter | 2005-12-01 | 3 | -2/+71 |
| | |||||
* | - new configuration support added to ike_sa and states | Jan Hutter | 2005-12-01 | 3 | -0/+31 |
| | |||||
* | - fixed some bugx when !LEAK_DETECTIVE | Martin Willi | 2005-12-01 | 2 | -5/+4 |
| | |||||
* | - implemented sa_config | Martin Willi | 2005-12-01 | 5 | -0/+383 |
| | | | | | | | | - uses identification - and host - untested - ts need further tuning | ||||
* | - added positioned functionality to linked_list_t | Jan Hutter | 2005-11-30 | 2 | -10/+151 |
| | |||||
* | - message encryption verification fully changed | Jan Hutter | 2005-11-30 | 2 | -0/+34 |
| | |||||
* | - added and tested id_payload_t | Jan Hutter | 2005-11-29 | 2 | -3/+1 |
| | |||||
* | - changed creation of iterator | Jan Hutter | 2005-11-29 | 3 | -12/+10 |
| | | | | - chanded all clone calls | ||||
* | fixed bug when inserting with iterator | Jan Hutter | 2005-11-29 | 1 | -0/+1 |
| | |||||
* | - changed allocation behavior | Martin Willi | 2005-11-29 | 1 | -0/+2 |
| | |||||
* | - return value cleanup | Martin Willi | 2005-11-28 | 13 | -572/+186 |
| | |||||
* | (no commit message) | Jan Hutter | 2005-11-28 | 1 | -3/+9 |
| | |||||
* | - encryptino payload | Martin Willi | 2005-11-28 | 1 | -1/+1 |
| | |||||
* | - added compution of all needed keys and also creation of needed | Jan Hutter | 2005-11-28 | 1 | -0/+1 |
| | | | | transform objects | ||||
* | - wrote test for aes_cbc but encryption does not seem to work :-( | Jan Hutter | 2005-11-28 | 1 | -1/+1 |
| | |||||
* | - moved hasher_*_t to *_hasher_t | Martin Willi | 2005-11-27 | 1 | -5/+6 |
| | | | | | - some logging improvements | ||||
* | - code cleanups | Martin Willi | 2005-11-26 | 1 | -7/+7 |
| | |||||
* | - lovlevels specified for each context | Martin Willi | 2005-11-26 | 3 | -47/+56 |
| | | | | | | | - threadsave log_bytes - default logging to stdout, easier for debugging - fixed logging to file |