tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Encode RSA public keys in RFC 3110 DNSKEY format	Andreas Steffen	2013-02-19	1	-0/+2
\|
*	Fix doxygen grouping regarding containers and PKCS#7	Martin Willi	2012-12-19	1	-4/+4
\|
*	Allocate data returned by pkcs7_t.get_attribute()	Martin Willi	2012-12-19	1	-1/+4
\|
*	Fix enum names for container_type_t	Martin Willi	2012-12-19	1	-1/+1
\|
*	Add an enumerator for PKCS#7 contained certificates	Martin Willi	2012-12-19	1	-0/+7
\|
*	Add a getter for signed PKCS#7 attributes	Martin Willi	2012-12-19	1	-0/+14
\|
*	Add builder parts to generate PKCS#7 containers	Martin Willi	2012-12-19	2	-1/+10
\|
*	Add a generic interface for crypto containers and a more specific PKCS#7 ↵	Martin Willi	2012-12-19	5	-5/+176
\| \| \| \|	interface
*	allow the optional sharing if RSA private keys	Andreas Steffen	2012-11-22	2	-0/+6
\|
*	implemented generation of safe primes	Andreas Steffen	2012-11-18	2	-0/+3
\|
*	Moved debug.[ch] to utils folder	Tobias Brunner	2012-10-24	6	-6/+6
\|
*	Moved data structures to new collections subfolder	Tobias Brunner	2012-10-24	13	-14/+14
\|
*	Fix equality comparison of auth_cfg_t	Tobias Brunner	2012-09-18	1	-2/+16
\| \| \| \| \| \| \|	We previously only confirmed that rules contained in the first config are also contained in the second, but since the number of rules does not have to be equal, it might be that the second config contains rules that the first one doesn't.
*	Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiator	Tobias Brunner	2012-09-18	2	-0/+26
\| \| \| \| \| \|	If it is set on an auth config IDr will not be sent, and later the configured identity will not only be checked against the returned IDr, but also against other identities contained in the responder's certificate.
*	Comment fixed	Tobias Brunner	2012-08-13	1	-1/+1
\|
*	Show which group would be required when failing in constraint check	Martin Willi	2012-07-26	1	-8/+10
\|
*	Add an option to disable libstrongswan certificate caching	Martin Willi	2012-07-09	1	-18/+29
\|
*	Support multiple different public key strength types in constraints	Martin Willi	2012-06-12	1	-41/+38
\|
*	Add signature schemes to auth_cfg during trustchain validation	Martin Willi	2012-06-12	4	-17/+43
\|
*	certificate_t->issued_by takes an argument to receive signature scheme	Martin Willi	2012-06-12	2	-2/+4
\|
*	Define auth_cfg rules for signature schemes	Martin Willi	2012-06-12	2	-0/+53
\|
*	Merge branch 'ikev1'	Martin Willi	2012-05-02	5	-42/+142
\|\ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c
\| *	Merge branch 'ikev1-clean' into ikev1-master	Martin Willi	2012-03-20	5	-42/+140
\| \|\ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins.
\| \| *	Accept NULL auth_cfg_t passed to credential_manager_t.get_private()	Martin Willi	2012-03-20	1	-26/+32
\| \| \|
\| \| *	Fixed create_shared_enumerator method description	Martin Willi	2012-03-20	1	-1/+1
\| \| \|
\| \| *	Added a flag to register local credential sets exclusively, disabling all others	Martin Willi	2012-03-20	2	-16/+72
\| \| \|
\| \| *	Added support for iKEIntermediate X.509 extended key usage flag.	Tobias Brunner	2012-03-20	1	-0/+2
\| \| \| \| \| \| \| \| \| \| \| \|	Mac OS X requires server certificates to have this flag set.
\| \| *	Some whitespace fixes.	Tobias Brunner	2012-03-20	1	-4/+4
\| \| \|
\| \| *	Added an XAUTH identity to use or require for XAuth authentication	Martin Willi	2012-03-20	2	-0/+11
\| \| \|
\| \| *	Stop checking once a key size constraint is not fulfilled	Martin Willi	2012-03-20	1	-0/+3
\| \| \|
\| \| *	Free list after removing the last local credential set, fixes a leak report	Martin Willi	2012-03-20	1	-0/+5
\| \| \|
\| \| *	Added missing XAuth auth_class enum name	Martin Willi	2012-03-20	1	-1/+2
\| \| \|
\| \| *	Added auth_cfg option to select XAUTH backend to use	Martin Willi	2012-03-20	2	-0/+12
\| \| \|
\| \| *	Use a second authentication config to configure XAUTH authentication	Martin Willi	2012-03-20	1	-4/+2
\| \| \|
\| \| *	Map auth_class to auth method and IKEv1 proposal attribute	Martin Willi	2012-03-20	1	-0/+2
\| \| \|
\| \| *	IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle ↵	Clavister OpenSource	2012-03-20	1	-0/+2
\| \| \| \| \| \| \| \| \| \| \| \|	XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response.
* \| \|	Removed auth_cfg_t.replace_value() and replaced usages with add().	Tobias Brunner	2012-04-18	2	-76/+35
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	replace_value() was used to replace identities. Since for these the latest is now returned by get(), adding the new identity with add() is sufficient.
* \| \|	Changed the order and semantics of rules we expect only once in auth_cfg_t.	Tobias Brunner	2012-04-18	2	-114/+212
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	These rules are now inserted at the front of the internal list, this allows to retrieve the rule added last with get(). For other rules the order in which they are added is maintained (this allows to properly enumerate them).
* \| \|	Added a simple method to replace the value of a rule in auth_cfg_t.	Tobias Brunner	2012-04-16	2	-32/+74
\|/ /
* \|	Add builder part for parameters from algorithmIdentifier.	Tobias Brunner	2012-02-01	2	-1/+4
\| \|
* \|	Fixed additional typos in comments and log messages.	Tobias Brunner	2012-01-12	1	-1/+1
\| \|
* \|	Fix whitespaces	Adrian-Ken Rueegsegger	2012-01-12	1	-4/+4
\| \|
* \|	Some documentation corrections	Adrian-Ken Rueegsegger	2012-01-12	8	-33/+32
\| \|
* \|	Reverse the changes made to openssl plugin for signature verification	Sansar Choinyambuu	2011-11-28	2	-3/+0
\| \|
* \|	use openssl rsa_verify function	Sansar Choinyambuu	2011-11-28	2	-0/+3
\| \|
* \|	Reverse the changes made to openssl plugin for signature verification	Sansar Choinyambuu	2011-11-28	2	-3/+0
\| \|
* \|	use openssl rsa_verify function	Sansar Choinyambuu	2011-11-28	2	-0/+3
\| \|
* \|	Fixed missing initializer compiler warning.	Tobias Brunner	2011-11-25	1	-2/+2
\| \|
* \|	Fixed compiler warnings regarding enum comparison.	Tobias Brunner	2011-11-25	1	-3/+3
\|/ \| \| \| \| \| \| \| \|	Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity.
*	Handle certificates being on hold in a CRL	Thomas Egerer	2011-11-04	2	-0/+3
\| \| \| \| \| \| \|	Certificates which are set on hold in a CRL might be removed from any subsequent CRL. Hence you cannot conclude that a certificate is revoked for good in this case, you would try to retrieve an update CRL to see if the certificate on hold is still on it or not.