Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | fixed some compiler warnings4.0.4 | Martin Willi | 2006-09-21 | 3 | -10/+10 |
| | |||||
* | extended statusall output | Martin Willi | 2006-09-21 | 2 | -2/+48 |
| | | | | | added job/event-queue statistics added allocation statistics when using LEAK_DETECTIVE | ||||
* | public declaration of all HASH_SIZEs in hasher.h | Martin Willi | 2006-09-20 | 4 | -14/+13 |
| | |||||
* | support of encrypted private key files | Andreas Steffen | 2006-09-20 | 7 | -28/+61 |
| | |||||
* | added copyright notice to sha2_hasher | Martin Willi | 2006-09-19 | 2 | -3/+4 |
| | | | | included SHA2 in build process | ||||
* | implemented sha2_hasher which supports SHA-256, SHA-384 and SHA-512 | Martin Willi | 2006-09-19 | 7 | -50/+741 |
| | |||||
* | added support for 3DES encryption algorithm in IKE | Martin Willi | 2006-09-19 | 5 | -8/+1611 |
| | |||||
* | fixed the ids parsing bug | Andreas Steffen | 2006-09-19 | 1 | -0/+1 |
| | |||||
* | some cleanups here and there | Martin Willi | 2006-09-18 | 4 | -13/+9 |
| | |||||
* | cosmetics | Andreas Steffen | 2006-09-18 | 1 | -1/+0 |
| | |||||
* | verify_emsa_pkcs1_signature returns status_t | Andreas Steffen | 2006-09-18 | 1 | -1/+1 |
| | |||||
* | cosmetics | Andreas Steffen | 2006-09-18 | 1 | -2/+1 |
| | |||||
* | fixed certificate verification bug! | Martin Willi | 2006-09-14 | 2 | -5/+19 |
| | |||||
* | removed unneeded constructor | Martin Willi | 2006-08-31 | 2 | -30/+2 |
| | |||||
* | initial support for IPv6 (more testing needed) | Martin Willi | 2006-08-30 | 2 | -83/+251 |
| | | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support | ||||
* | added stddef.h include for compilers which do not support the offsetof() ↵ | Martin Willi | 2006-08-28 | 1 | -0/+2 |
| | | | | directive | ||||
* | implemented proper refcounting using atomic operations | Martin Willi | 2006-07-28 | 2 | -0/+64 |
| | |||||
* | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 2 | -0/+56 |
| | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | ||||
* | reuse an existing IKE_SA to set up additional CHILD_SAs | Martin Willi | 2006-07-20 | 2 | -20/+20 |
| | |||||
* | introduced refcounting on policy and connections | Martin Willi | 2006-07-20 | 1 | -0/+5 |
| | | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors | ||||
* | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 3 | -57/+34 |
| | | | | | | added proper traffic selector to string conversion some cleanups here & there | ||||
* | leak detective blanks memory on free & alloc, allows further membug detection | Martin Willi | 2006-07-12 | 2 | -13/+27 |
| | |||||
* | code cleanups | Martin Willi | 2006-07-12 | 2 | -84/+43 |
| | |||||
* | identification_t.matches() supports multiple wildcard counts | Andreas Steffen | 2006-07-11 | 2 | -85/+124 |
| | |||||
* | reenabled check_expiry | Martin Willi | 2006-07-07 | 1 | -6/+6 |
| | |||||
* | updated copyright information | Martin Willi | 2006-07-07 | 48 | -48/+96 |
| | |||||
* | updated whitelist (getprotobynumber) | Martin Willi | 2006-07-05 | 1 | -0/+2 |
| | |||||
* | fixed compiler warnings | Martin Willi | 2006-07-05 | 8 | -30/+26 |
| | |||||
* | updated leak detective whitelist | Martin Willi | 2006-07-04 | 1 | -5/+6 |
| | |||||
* | support of cert payloads | Andreas Steffen | 2006-07-03 | 4 | -11/+119 |
| | |||||
* | added X.509 trust chain verification | Andreas Steffen | 2006-06-27 | 12 | -95/+636 |
| | |||||
* | applied new changes from NATT team | Martin Willi | 2006-06-23 | 1 | -0/+1 |
| | | | | | DPD only done when no IPsec and IKE traffic processed minor changes here and there | ||||
* | fixed identification_t clone to apply function pointers | Martin Willi | 2006-06-23 | 1 | -0/+3 |
| | |||||
* | first merge of NATT code | Martin Willi | 2006-06-22 | 3 | -5/+97 |
| | |||||
* | fixed whitelist detection | Martin Willi | 2006-06-20 | 1 | -4/+8 |
| | |||||
* | reworked function ignore mechanism to not-report whitelist | Martin Willi | 2006-06-20 | 1 | -233/+46 |
| | | | | rather than overriding functions | ||||
* | readded local_credential_store | Martin Willi | 2006-06-20 | 1 | -13/+0 |
| | | | | | | added sendcert policy to connection some other cleanups | ||||
* | implemented rereadcrls rereadcacerts | Andreas Steffen | 2006-06-20 | 3 | -4/+22 |
| | |||||
* | added chunk_equals_or_null() | Andreas Steffen | 2006-06-16 | 2 | -26/+43 |
| | |||||
* | added crl support | Andreas Steffen | 2006-06-16 | 1 | -12/+31 |
| | |||||
* | changed tabs from 8 to 4 spaces | Andreas Steffen | 2006-06-16 | 1 | -1/+1 |
| | |||||
* | added crl support | Andreas Steffen | 2006-06-16 | 2 | -0/+604 |
| | |||||
* | cosmetics | Andreas Steffen | 2006-06-16 | 1 | -7/+21 |
| | |||||
* | cosmetics (space) | Andreas Steffen | 2006-06-16 | 1 | -1/+1 |
| | |||||
* | fixed aes code, we support now aes128, aes192, aes256 in IKE | Martin Willi | 2006-06-15 | 1 | -10/+2 |
| | |||||
* | corrected some descriptions | Andreas Steffen | 2006-06-13 | 1 | -5/+5 |
| | |||||
* | moved RSA key size constraints to definitions.h | Andreas Steffen | 2006-06-13 | 2 | -7/+7 |
| | |||||
* | NULL string argument is treated as %any | Andreas Steffen | 2006-06-12 | 1 | -0/+3 |
| | |||||
* | workaround for peers rekeying at the same time | Martin Willi | 2006-06-12 | 2 | -2/+2 |
| | | | | | loading lifetime policies from ipsec.conf | ||||
* | added support for leftsendcert= and left|rightca= parameters | Andreas Steffen | 2006-06-09 | 1 | -0/+12 |
| |