Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | support if ocsp signing certificates | Andreas Steffen | 2007-03-08 | 2 | -61/+97 | |
| | ||||||
* | fixed payload order in IKE_AUTH | Martin Willi | 2007-03-08 | 1 | -7/+27 | |
| | ||||||
* | removed SHA2 kernel proposals from default, the kernel doesn't support them yet | Martin Willi | 2007-03-08 | 1 | -6/+0 | |
| | ||||||
* | allocation fixes, not complete | Martin Willi | 2007-03-08 | 1 | -8/+16 | |
| | ||||||
* | handling "No policy found" properly | Martin Willi | 2007-03-08 | 1 | -4/+4 | |
| | ||||||
* | added more debugging output for policy lookup | Martin Willi | 2007-03-08 | 1 | -3/+17 | |
| | | | | | returning a (dummy) policy even when TS does not match, so we can properly send a TS_UNACCEPTABLE | |||||
* | fixed CHILD_SA creation within existing IKE_SA | Martin Willi | 2007-03-08 | 1 | -0/+1 | |
| | ||||||
* | ported changes from EAP branch, renabling EAP framework | Martin Willi | 2007-03-08 | 2 | -126/+371 | |
| | ||||||
* | added (not yet supported) sha2 algorithms to kernel | Martin Willi | 2007-03-08 | 1 | -7/+10 | |
| | | | | only adding a route if using tunnel mode | |||||
* | added SHA2 MAC and PRF to default proposal | Martin Willi | 2007-03-08 | 1 | -23/+58 | |
| | ||||||
* | added more debug output | Martin Willi | 2007-03-08 | 1 | -0/+2 | |
| | ||||||
* | added parsing level to x509_create_from_chunk() | Andreas Steffen | 2007-03-07 | 1 | -1/+1 | |
| | ||||||
* | http post fetching using libcurl implemented | Andreas Steffen | 2007-03-07 | 2 | -0/+9 | |
| | ||||||
* | prevent from initiating multiple exchanges the same time | Martin Willi | 2007-03-06 | 1 | -0/+9 | |
| | ||||||
* | updated apidoc documentation | Martin Willi | 2007-03-06 | 1 | -4/+3 | |
| | ||||||
* | fixed notify handling in IKE_AUTH | Martin Willi | 2007-03-06 | 2 | -16/+25 | |
| | | | | moved nonce payload before TS in CHILD_SA setup | |||||
* | moved REKEY_SA notify to the beginning of the message | Martin Willi | 2007-03-06 | 1 | -7/+7 | |
| | ||||||
* | fixed traffic selector redundancy removal code (not completely tested) | Martin Willi | 2007-03-06 | 2 | -7/+17 | |
| | ||||||
* | add crl and ocsp uris to linked list after partial verification | Andreas Steffen | 2007-03-06 | 1 | -22/+35 | |
| | ||||||
* | sending an SPI of 0 as responder when IKE_SA_INIT fails | Martin Willi | 2007-03-06 | 1 | -0/+7 | |
| | ||||||
* | some cleanups | Martin Willi | 2007-03-05 | 2 | -13/+7 | |
| | | | | | | not assigning %any virtual IPs to peer anymore | |||||
* | fixed double free bug | Martin Willi | 2007-03-05 | 10 | -24/+96 | |
| | ||||||
* | fixed ID selection bug when peer doesn't include IDr payload | Martin Willi | 2007-03-05 | 4 | -40/+34 | |
| | | | | | allowing vendor ID in any messag | |||||
* | moved listing of crls to local_credential_store and ca | Andreas Steffen | 2007-03-03 | 1 | -14/+1 | |
| | ||||||
* | refactored ca_info_t | Andreas Steffen | 2007-03-03 | 2 | -166/+115 | |
| | ||||||
* | fixed netlink socket receiver code | Martin Willi | 2007-03-03 | 8 | -289/+190 | |
| | | | | implemented interface enumeration code with netlink: no getifaddrs reqired anymore | |||||
* | refactored kernel interface, works reliable again | Martin Willi | 2007-03-03 | 1 | -1151/+942 | |
| | ||||||
* | implemented get_iface() using RTM_GETADDR | Martin Willi | 2007-03-02 | 2 | -74/+180 | |
| | | | | | added support for multi-header netlink messages really ugly now, need a lot of refactoring | |||||
* | added debuggin for interface lookup | Martin Willi | 2007-03-01 | 1 | -0/+3 | |
| | ||||||
* | fixed address lookup when !using getifaddrs() | Martin Willi | 2007-03-01 | 1 | -2/+2 | |
| | ||||||
* | added firewalling support when using virtual IPs | Martin Willi | 2007-03-01 | 3 | -16/+40 | |
| | ||||||
* | added support for 0.0.0.0/0 traffic selectors | Martin Willi | 2007-03-01 | 6 | -40/+158 | |
| | | | | fixed routing to make correct 0.0.0.0/0 routes | |||||
* | preparations for PLUTO_MY_SOURCEIP | Andreas Steffen | 2007-03-01 | 1 | -3/+22 | |
| | ||||||
* | corrected typo | Andreas Steffen | 2007-03-01 | 1 | -1/+1 | |
| | ||||||
* | fixed reauthentication when connections other is %any | Martin Willi | 2007-02-28 | 1 | -0/+2 | |
| | ||||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 85 | -8271/+8224 | |
| | ||||||
* | changed ca info to ca | Andreas Steffen | 2007-02-25 | 1 | -4/+4 | |
| | ||||||
* | added support of OCSP accessLocations | Andreas Steffen | 2007-02-25 | 1 | -5/+17 | |
| | ||||||
* | full support of ca info records | Andreas Steffen | 2007-02-24 | 2 | -22/+111 | |
| | ||||||
* | full support of ca info records | Andreas Steffen | 2007-02-24 | 1 | -7/+45 | |
| | ||||||
* | support of ca info records | Andreas Steffen | 2007-02-23 | 3 | -2/+137 | |
| | ||||||
* | using "left" as my host per default, swapping to "right" when needed | Martin Willi | 2007-02-15 | 1 | -10/+10 | |
| | ||||||
* | respecting source address when sending packets | Martin Willi | 2007-02-15 | 1 | -2/+51 | |
| | ||||||
* | prepared support of ca information records and ocsp functionality | Andreas Steffen | 2007-02-14 | 1 | -0/+36 | |
| | ||||||
* | removed eap aka module due nda | Martin Willi | 2007-02-13 | 2 | -1532/+0 | |
| | ||||||
* | merged EAP framework from branch into trunk | Martin Willi | 2007-02-12 | 30 | -319/+7700 | |
| | | | | | includes a lot of other modifications | |||||
* | %T requires time_t ptr | Andreas Steffen | 2007-02-08 | 1 | -1/+1 | |
| | ||||||
* | added support for NULL encryption in ESP | Martin Willi | 2007-02-08 | 1 | -1/+5 | |
| | ||||||
* | be more liberal in accepting notifies with a protocol id | Martin Willi | 2007-02-08 | 1 | -9/+6 | |
| | ||||||
* | include NO_EXT_SEQUENCE_NUMBER in default proposal | Martin Willi | 2007-02-08 | 1 | -0/+6 | |
| |