Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | add support for smartcards in charon by using the ENGINE API provided by ↵ | Tobias Brunner | 2008-12-03 | 1 | -7/+83 |
| | | | | OpenSSL, based on patches by Michael Roßberg. | ||||
* | wrapped all pthread_rwlock_t in profilable rwlock_t | Martin Willi | 2008-11-05 | 1 | -19/+18 |
| | |||||
* | refactored credential builder | Martin Willi | 2008-09-02 | 1 | -0/+1 |
| | | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts | ||||
* | ported parts of two-sim branch | Martin Willi | 2008-08-22 | 1 | -11/+18 |
| | | | | | | eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones | ||||
* | using shared read locks in credential set enumerators to avoid deadlocks | Martin Willi | 2008-07-30 | 1 | -22/+23 |
| | |||||
* | changed ipsec.secrets keyword EC to ECDSA | Tobias Brunner | 2008-06-24 | 1 | -1/+1 |
| | |||||
* | ECDSA with OpenSSL | Tobias Brunner | 2008-06-10 | 1 | -11/+4 |
| | |||||
* | implement basic listing of attribute certificates | Andreas Steffen | 2008-05-22 | 1 | -7/+40 |
| | |||||
* | handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication | Martin Willi | 2008-05-14 | 1 | -2/+10 |
| | |||||
* | added _GNU_SOURCE and limits.h to build against glibc-2.8 | Martin Willi | 2008-04-24 | 1 | -0/+1 |
| | |||||
* | replaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions | Martin Willi | 2008-04-24 | 1 | -19/+15 |
| | |||||
* | changed logging of crl writing to old style | Andreas Steffen | 2008-04-17 | 1 | -4/+4 |
| | |||||
* | respecting ipsec.conf cachecrls= option | Martin Willi | 2008-04-17 | 1 | -1/+20 |
| | |||||
* | caching of CRLs to /etc/ipsec.d/crls | Martin Willi | 2008-04-17 | 1 | -10/+41 |
| | |||||
* | extended credential_set_t interface by a cache_cert() method | Martin Willi | 2008-04-17 | 1 | -0/+9 |
| | | | | allows persistent or in-memory caching of fetched certificates | ||||
* | added API for random number generators, served through credential factory | Martin Willi | 2008-04-15 | 1 | -3/+3 |
| | | | | ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random) | ||||
* | log shared secret with debug level 4 | Andreas Steffen | 2008-04-06 | 1 | -1/+1 |
| | |||||
* | workaround for parsing IPv6 PSKs requires extract_last_token() | Andreas Steffen | 2008-04-01 | 1 | -1/+1 |
| | |||||
* | fixed compile error if --enable-p2p is set | Martin Willi | 2008-03-26 | 1 | -1/+1 |
| | |||||
* | splitted stroke plugin to several files: | Martin Willi | 2008-03-26 | 1 | -0/+887 |
socket: reads messages from socket, dispatching config: process add/del conn, serves configs through backend_t control: controlling of the daemon (up/down/route/...( cred: credential loading, serves creds through credential_set_t ca: ca sections from ipsec.conf, serves cdp's through credential_set_t list: log status information to stroke console (status/statusall/list*) shared_key: shared key implementation for keys read from ipsec.secrets plugin: registers stroke plugin and starts socket w/ thread |