| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | Merge branch 'systime' | Martin Willi | 2013-03-01 | 2 | -10/+69 | |
| |\ \ | | | | | | | | | | | | | | | | Add a systime-fix plugin allowing an embedded system to validate certificates if the system time has not been synchronized after boot. Certificates of established tunnels can be re-validated after the system time gets valid. | |||||
| | * | | Add a cert_validator hook allowing plugins to provide custom lifetime checking | Martin Willi | 2013-02-19 | 2 | -10/+64 | |
| | | | | ||||||
| | * | | Make cert_validator_t.validate optional to implement | Martin Willi | 2013-02-19 | 2 | -0/+5 | |
| | |/ | ||||||
| * | | Fix auth_cfg_t.clone() for single-valued auth rules | Tobias Brunner | 2013-02-28 | 1 | -10/+11 | |
| | | | | | | | | | | | | | | | | | | | | | By using the default list enumerator and adding the rules with the public add() method, clones of auth_cfg_t objects would return the values for single-valued auth rules in the wrong order (i.e. the oldest instead of the newest value was returned). Using the internal enumerator (which the comment already suggested) fixes this, but the clone will not be a full clone as it does not contain any old values for single-valued auth rules. Since these will never be used anyway, this should be fine. | |||||
| * | | Encode RSA public keys in RFC 3110 DNSKEY format | Andreas Steffen | 2013-02-19 | 1 | -0/+2 | |
| |/ | ||||||
| * | Fix doxygen grouping regarding containers and PKCS#7 | Martin Willi | 2012-12-19 | 1 | -4/+4 | |
| | | ||||||
| * | Allocate data returned by pkcs7_t.get_attribute() | Martin Willi | 2012-12-19 | 1 | -1/+4 | |
| | | ||||||
| * | Fix enum names for container_type_t | Martin Willi | 2012-12-19 | 1 | -1/+1 | |
| | | ||||||
| * | Add an enumerator for PKCS#7 contained certificates | Martin Willi | 2012-12-19 | 1 | -0/+7 | |
| | | ||||||
| * | Add a getter for signed PKCS#7 attributes | Martin Willi | 2012-12-19 | 1 | -0/+14 | |
| | | ||||||
| * | Add builder parts to generate PKCS#7 containers | Martin Willi | 2012-12-19 | 2 | -1/+10 | |
| | | ||||||
| * | Add a generic interface for crypto containers and a more specific PKCS#7 ↵ | Martin Willi | 2012-12-19 | 5 | -5/+176 | |
| | | | | | interface | |||||
| * | allow the optional sharing if RSA private keys | Andreas Steffen | 2012-11-22 | 2 | -0/+6 | |
| | | ||||||
| * | implemented generation of safe primes | Andreas Steffen | 2012-11-18 | 2 | -0/+3 | |
| | | ||||||
| * | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 6 | -6/+6 | |
| | | ||||||
| * | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 13 | -14/+14 | |
| | | ||||||
| * | Fix equality comparison of auth_cfg_t | Tobias Brunner | 2012-09-18 | 1 | -2/+16 | |
| | | | | | | | | We previously only confirmed that rules contained in the first config are also contained in the second, but since the number of rules does not have to be equal, it might be that the second config contains rules that the first one doesn't. | |||||
| * | Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiator | Tobias Brunner | 2012-09-18 | 2 | -0/+26 | |
| | | | | | | | If it is set on an auth config IDr will not be sent, and later the configured identity will not only be checked against the returned IDr, but also against other identities contained in the responder's certificate. | |||||
| * | Comment fixed | Tobias Brunner | 2012-08-13 | 1 | -1/+1 | |
| | | ||||||
| * | Show which group would be required when failing in constraint check | Martin Willi | 2012-07-26 | 1 | -8/+10 | |
| | | ||||||
| * | Add an option to disable libstrongswan certificate caching | Martin Willi | 2012-07-09 | 1 | -18/+29 | |
| | | ||||||
| * | Support multiple different public key strength types in constraints | Martin Willi | 2012-06-12 | 1 | -41/+38 | |
| | | ||||||
| * | Add signature schemes to auth_cfg during trustchain validation | Martin Willi | 2012-06-12 | 4 | -17/+43 | |
| | | ||||||
| * | certificate_t->issued_by takes an argument to receive signature scheme | Martin Willi | 2012-06-12 | 2 | -2/+4 | |
| | | ||||||
| * | Define auth_cfg rules for signature schemes | Martin Willi | 2012-06-12 | 2 | -0/+53 | |
| | | ||||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 5 | -42/+142 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 5 | -42/+140 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -26/+32 | |
| | | | | ||||||
| | | * | Fixed create_shared_enumerator method description | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 2 | -16/+72 | |
| | | | | ||||||
| | | * | Added support for iKEIntermediate X.509 extended key usage flag. | Tobias Brunner | 2012-03-20 | 1 | -0/+2 | |
| | | | | | | | | | | | | | Mac OS X requires server certificates to have this flag set. | |||||
| | | * | Some whitespace fixes. | Tobias Brunner | 2012-03-20 | 1 | -4/+4 | |
| | | | | ||||||
| | | * | Added an XAUTH identity to use or require for XAuth authentication | Martin Willi | 2012-03-20 | 2 | -0/+11 | |
| | | | | ||||||
| | | * | Stop checking once a key size constraint is not fulfilled | Martin Willi | 2012-03-20 | 1 | -0/+3 | |
| | | | | ||||||
| | | * | Free list after removing the last local credential set, fixes a leak report | Martin Willi | 2012-03-20 | 1 | -0/+5 | |
| | | | | ||||||
| | | * | Added missing XAuth auth_class enum name | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | | ||||||
| | | * | Added auth_cfg option to select XAUTH backend to use | Martin Willi | 2012-03-20 | 2 | -0/+12 | |
| | | | | ||||||
| | | * | Use a second authentication config to configure XAUTH authentication | Martin Willi | 2012-03-20 | 1 | -4/+2 | |
| | | | | ||||||
| | | * | Map auth_class to auth method and IKEv1 proposal attribute | Martin Willi | 2012-03-20 | 1 | -0/+2 | |
| | | | | ||||||
| | | * | IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle ↵ | Clavister OpenSource | 2012-03-20 | 1 | -0/+2 | |
| | | | | | | | | | | | | | XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response. | |||||
| * | | | Removed auth_cfg_t.replace_value() and replaced usages with add(). | Tobias Brunner | 2012-04-18 | 2 | -76/+35 | |
| | | | | | | | | | | | | | | | | replace_value() was used to replace identities. Since for these the latest is now returned by get(), adding the new identity with add() is sufficient. | |||||
| * | | | Changed the order and semantics of rules we expect only once in auth_cfg_t. | Tobias Brunner | 2012-04-18 | 2 | -114/+212 | |
| | | | | | | | | | | | | | | | | | | | | | | These rules are now inserted at the front of the internal list, this allows to retrieve the rule added last with get(). For other rules the order in which they are added is maintained (this allows to properly enumerate them). | |||||
| * | | | Added a simple method to replace the value of a rule in auth_cfg_t. | Tobias Brunner | 2012-04-16 | 2 | -32/+74 | |
| |/ / | ||||||
| * | | Add builder part for parameters from algorithmIdentifier. | Tobias Brunner | 2012-02-01 | 2 | -1/+4 | |
| | | | ||||||
| * | | Fixed additional typos in comments and log messages. | Tobias Brunner | 2012-01-12 | 1 | -1/+1 | |
| | | | ||||||
| * | | Fix whitespaces | Adrian-Ken Rueegsegger | 2012-01-12 | 1 | -4/+4 | |
| | | | ||||||
| * | | Some documentation corrections | Adrian-Ken Rueegsegger | 2012-01-12 | 8 | -33/+32 | |
| | | | ||||||
| * | | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 2 | -3/+0 | |
| | | | ||||||
| * | | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 2 | -0/+3 | |
| | | | ||||||
| * | | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 2 | -3/+0 | |
| | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |