| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiator | Tobias Brunner | 2012-09-18 | 2 | -0/+26 | |
| | | | | | | | If it is set on an auth config IDr will not be sent, and later the configured identity will not only be checked against the returned IDr, but also against other identities contained in the responder's certificate. | |||||
| * | Comment fixed | Tobias Brunner | 2012-08-13 | 1 | -1/+1 | |
| | | ||||||
| * | Show which group would be required when failing in constraint check | Martin Willi | 2012-07-26 | 1 | -8/+10 | |
| | | ||||||
| * | Add an option to disable libstrongswan certificate caching | Martin Willi | 2012-07-09 | 1 | -18/+29 | |
| | | ||||||
| * | Support multiple different public key strength types in constraints | Martin Willi | 2012-06-12 | 1 | -41/+38 | |
| | | ||||||
| * | Add signature schemes to auth_cfg during trustchain validation | Martin Willi | 2012-06-12 | 4 | -17/+43 | |
| | | ||||||
| * | certificate_t->issued_by takes an argument to receive signature scheme | Martin Willi | 2012-06-12 | 2 | -2/+4 | |
| | | ||||||
| * | Define auth_cfg rules for signature schemes | Martin Willi | 2012-06-12 | 2 | -0/+53 | |
| | | ||||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 5 | -42/+142 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 5 | -42/+140 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -26/+32 | |
| | | | | ||||||
| | | * | Fixed create_shared_enumerator method description | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 2 | -16/+72 | |
| | | | | ||||||
| | | * | Added support for iKEIntermediate X.509 extended key usage flag. | Tobias Brunner | 2012-03-20 | 1 | -0/+2 | |
| | | | | | | | | | | | | | Mac OS X requires server certificates to have this flag set. | |||||
| | | * | Some whitespace fixes. | Tobias Brunner | 2012-03-20 | 1 | -4/+4 | |
| | | | | ||||||
| | | * | Added an XAUTH identity to use or require for XAuth authentication | Martin Willi | 2012-03-20 | 2 | -0/+11 | |
| | | | | ||||||
| | | * | Stop checking once a key size constraint is not fulfilled | Martin Willi | 2012-03-20 | 1 | -0/+3 | |
| | | | | ||||||
| | | * | Free list after removing the last local credential set, fixes a leak report | Martin Willi | 2012-03-20 | 1 | -0/+5 | |
| | | | | ||||||
| | | * | Added missing XAuth auth_class enum name | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | | ||||||
| | | * | Added auth_cfg option to select XAUTH backend to use | Martin Willi | 2012-03-20 | 2 | -0/+12 | |
| | | | | ||||||
| | | * | Use a second authentication config to configure XAUTH authentication | Martin Willi | 2012-03-20 | 1 | -4/+2 | |
| | | | | ||||||
| | | * | Map auth_class to auth method and IKEv1 proposal attribute | Martin Willi | 2012-03-20 | 1 | -0/+2 | |
| | | | | ||||||
| | | * | IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle ↵ | Clavister OpenSource | 2012-03-20 | 1 | -0/+2 | |
| | | | | | | | | | | | | | XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response. | |||||
| * | | | Removed auth_cfg_t.replace_value() and replaced usages with add(). | Tobias Brunner | 2012-04-18 | 2 | -76/+35 | |
| | | | | | | | | | | | | | | | | replace_value() was used to replace identities. Since for these the latest is now returned by get(), adding the new identity with add() is sufficient. | |||||
| * | | | Changed the order and semantics of rules we expect only once in auth_cfg_t. | Tobias Brunner | 2012-04-18 | 2 | -114/+212 | |
| | | | | | | | | | | | | | | | | | | | | | | These rules are now inserted at the front of the internal list, this allows to retrieve the rule added last with get(). For other rules the order in which they are added is maintained (this allows to properly enumerate them). | |||||
| * | | | Added a simple method to replace the value of a rule in auth_cfg_t. | Tobias Brunner | 2012-04-16 | 2 | -32/+74 | |
| |/ / | ||||||
| * | | Add builder part for parameters from algorithmIdentifier. | Tobias Brunner | 2012-02-01 | 2 | -1/+4 | |
| | | | ||||||
| * | | Fixed additional typos in comments and log messages. | Tobias Brunner | 2012-01-12 | 1 | -1/+1 | |
| | | | ||||||
| * | | Fix whitespaces | Adrian-Ken Rueegsegger | 2012-01-12 | 1 | -4/+4 | |
| | | | ||||||
| * | | Some documentation corrections | Adrian-Ken Rueegsegger | 2012-01-12 | 8 | -33/+32 | |
| | | | ||||||
| * | | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 2 | -3/+0 | |
| | | | ||||||
| * | | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 2 | -0/+3 | |
| | | | ||||||
| * | | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 2 | -3/+0 | |
| | | | ||||||
| * | | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 2 | -0/+3 | |
| | | | ||||||
| * | | Fixed missing initializer compiler warning. | Tobias Brunner | 2011-11-25 | 1 | -2/+2 | |
| | | | ||||||
| * | | Fixed compiler warnings regarding enum comparison. | Tobias Brunner | 2011-11-25 | 1 | -3/+3 | |
| |/ | | | | | | | | | Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity. | |||||
| * | Handle certificates being on hold in a CRL | Thomas Egerer | 2011-11-04 | 2 | -0/+3 | |
| | | | | | | | | Certificates which are set on hold in a CRL might be removed from any subsequent CRL. Hence you cannot conclude that a certificate is revoked for good in this case, you would try to retrieve an update CRL to see if the certificate on hold is still on it or not. | |||||
| * | Include KEY_ANY in key_type_names | Martin Willi | 2011-10-14 | 1 | -1/+2 | |
| | | ||||||
| * | Migrated cred_encoding to INIT/METHOD macros | Andreas Steffen | 2011-10-02 | 1 | -36/+28 | |
| | | ||||||
| * | Migrated auth_cfg to INIT/METHOD macros | Andreas Steffen | 2011-10-02 | 1 | -40/+30 | |
| | | ||||||
| * | Migrated ietf_attributes to INIT/METHOD macros | Andreas Steffen | 2011-09-29 | 1 | -40/+42 | |
| | | ||||||
| * | Migrated shared_key to INIT/METHOD macros | Andreas Steffen | 2011-09-29 | 1 | -26/+21 | |
| | | ||||||
| * | Migrated auth_cfg_wrapper to INIT/METHOD macros | Andreas Steffen | 2011-09-29 | 1 | -20/+19 | |
| | | ||||||
| * | Migrated cert_cache to INIT/METHOD macros | Andreas Steffen | 2011-09-29 | 1 | -28/+24 | |
| | | ||||||
| * | Migrated ocsp_response_wrapper to INIT/METHOD macros | Andreas Steffen | 2011-09-29 | 1 | -20/+20 | |
| | | ||||||
| * | fixed typo | Andreas Steffen | 2011-09-08 | 1 | -1/+1 | |
| | | ||||||
| * | Remove obsolete values from builder_part_names | Thomas Egerer | 2011-09-02 | 1 | -2/+0 | |
| | | | | | | Adds removal of builder parts obsoleted with git commit 15177f5785bcec6700f2a1a698cd8392c9bba5e9. | |||||
| * | Added missing auth_rule_names | Martin Willi | 2011-08-22 | 1 | -1/+6 | |
| | | ||||||
| * | Moved auth_rule_names back to auth_cfg.c | Martin Willi | 2011-08-22 | 1 | -0/+18 | |
| | | ||||||
| * | Readded docs for some arguments to global functions. | Tobias Brunner | 2011-07-21 | 4 | -11/+17 | |
| | | | | | Those were overzealously removed in 28623fc5389829858c78c759a214aa5c64ea26c6. | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |