Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use proper buffer sizes for parse_smartcard() | Tobias Brunner | 2013-01-24 | 1 | -7/+10 |
| | |||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Use explicit, larger buffer sizes for smartcard keyids and modules | Martin Willi | 2012-10-24 | 1 | -8/+8 |
| | |||||
* | Support loading cacert certificates in ipsec.conf ca sections from smartcard | Martin Willi | 2012-10-24 | 1 | -19/+37 |
| | |||||
* | Refactored stroke smartcard token parsing, support module and slot in ↵ | Martin Willi | 2012-10-24 | 1 | -62/+101 |
| | | | | leftcert option | ||||
* | Load ipsec.conf %smartcard leftcerts with pkcs11 builder | Martin Willi | 2012-10-24 | 1 | -8/+20 |
| | |||||
* | Fix leak of PINs from ipsec.secrets | Martin Willi | 2012-10-09 | 1 | -1/+2 |
| | |||||
* | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
| | |||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -1/+2 |
| | | | | Also fixes several whitespace errors. | ||||
* | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 1 | -4/+4 |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | ||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 1 | -4/+4 |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | ||||
| | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 1 | -4/+4 |
| | | | |||||
* | | | added support for raw RSA public keys to stroke | Andreas Steffen | 2012-04-30 | 1 | -0/+73 |
| | | | |||||
* | | | Added method to add additional shared secrets to stroke_cred_t. | Tobias Brunner | 2012-04-17 | 1 | -1/+8 |
|/ / | |||||
* / | Added an option to load CA certificates without CA basic constraint. | Tobias Brunner | 2012-02-01 | 1 | -4/+34 |
|/ | | | | | | Enabling this option treats all certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA certificates even if they do not contain a CA basic constraint. | ||||
* | Added fallback to ipsec.secrets parser if glob(3) is not available. | Tobias Brunner | 2011-10-11 | 1 | -11/+22 |
| | |||||
* | Migrated stroke_cred_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-03 | 1 | -40/+32 |
| | |||||
* | Cast size_t len arguments to %.*s to int | Martin Willi | 2011-04-20 | 1 | -5/+6 |
| | |||||
* | Use strncpy when reading smartcard keyids from ipsec.secrets. | Tobias Brunner | 2011-04-19 | 1 | -1/+1 |
| | |||||
* | Proper cleanup if IDs in ipsec.secrets cannot be parsed. | Tobias Brunner | 2011-04-14 | 1 | -0/+2 |
| | |||||
* | Fix compiler warnings at creation of CRL cache filenames. | Tobias Brunner | 2011-04-14 | 1 | -1/+1 |
| | | | | | | This was not really a problem because ptr is the first member of a chunk_t and it contains a null-terminated string at that point. But it's clearer this way. | ||||
* | Refactored stroke_cred_t to use mem_cred_t. | Tobias Brunner | 2010-12-03 | 1 | -378/+30 |
| | |||||
* | Avoid calling globfree twice on failure. | Tobias Brunner | 2010-12-03 | 1 | -1/+0 |
| | |||||
* | Respect key types in stroke key/certificate backend | Martin Willi | 2010-09-02 | 1 | -15/+24 |
| | |||||
* | Fixed loading of secrets with IDs. | Tobias Brunner | 2010-08-04 | 1 | -1/+1 |
| | | | | | Since the ID string is manually terminated by a null character, write permission is required for the mmapped ipsec.secrets. | ||||
* | Fixed loading of private keys without password. | Tobias Brunner | 2010-08-04 | 1 | -1/+1 |
| | | | | | The chunk storing the password was not correctly initialized, resulting in a segmentation fault when no password was specified in ipsec.secrets. | ||||
* | Pass type of requested key in the callback credential set | Martin Willi | 2010-08-04 | 1 | -1/+12 |
| | |||||
* | Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use ↵ | Martin Willi | 2010-08-04 | 1 | -37/+77 |
| | | | | credential sets | ||||
* | Use credential sets to load smartcard keys | Martin Willi | 2010-08-04 | 1 | -29/+82 |
| | |||||
* | Implemented a callback based credential set, currently for shared keys only | Martin Willi | 2010-08-04 | 1 | -61/+39 |
| | |||||
* | mmap() ipsec.secrets instead malloc(), proper error checking | Martin Willi | 2010-08-04 | 1 | -18/+30 |
| | |||||
* | Splitted up the load_secrets() function | Martin Willi | 2010-08-04 | 1 | -263/+301 |
| | |||||
* | %prompt support for smartcard PIN via "ipsec secrets" | Martin Willi | 2010-08-04 | 1 | -28/+95 |
| | |||||
* | Pass the PKCS11 keyid as chunk, not as string | Martin Willi | 2010-08-04 | 1 | -3/+6 |
| | |||||
* | Reuse generic passphrase build part, not a dedicated PIN part | Martin Willi | 2010-08-04 | 1 | -7/+4 |
| | |||||
* | Support module names in %smartcard specifier, streamlined smartcard building | Martin Willi | 2010-08-04 | 1 | -12/+51 |
| | |||||
* | Support different encoding types in certificate.get_encoding() | Martin Willi | 2010-07-13 | 1 | -3/+5 |
| | |||||
* | Added generic implementations for crl_is_newer/certificate_is_newer | Martin Willi | 2010-05-21 | 1 | -1/+1 |
| | |||||
* | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 1 | -0/+1175 |