Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Select subjectAltName address family using address length in x509 plugin | Martin Willi | 2010-06-24 | 1 | -1/+11 | |
| | ||||||
* | Fixing compilation of the OpenSSL plugin if ENGINE support is disabled. | Tobias Brunner | 2010-06-22 | 2 | -2/+14 | |
| | | | | | That is, enable compilation if OpenSSL was configured with OPENSSL_NO_ENGINE. | |||||
* | Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled. | Tobias Brunner | 2010-06-22 | 4 | -3/+25 | |
| | | | | | That is, enable compilation if OpenSSL was configured with OPENSSL_NO_EC. | |||||
* | Fixed plugin checks in Android.mk files. | Tobias Brunner | 2010-06-22 | 1 | -2/+2 | |
| | ||||||
* | Adding a remove_at method to the hash table. | Tobias Brunner | 2010-06-07 | 2 | -9/+36 | |
| | | | | This allows to remove key-value pairs while enumerating them. | |||||
* | Migrated hashtable_t to INIT/METHOD macros. | Tobias Brunner | 2010-06-07 | 1 | -59/+45 | |
| | ||||||
* | traffic_selector_t is gone into libstrongswan, migrate printf hook ↵ | Martin Willi | 2010-06-07 | 1 | -5/+8 | |
| | | | | registration, too. | |||||
* | Unwrap subjectKeyIdentifier from OCTET_STRING | Martin Willi | 2010-05-26 | 1 | -4/+12 | |
| | ||||||
* | Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier | Martin Willi | 2010-05-21 | 1 | -1/+1 | |
| | ||||||
* | Added support for CRL generation to x509 plugin | Martin Willi | 2010-05-21 | 5 | -3/+202 | |
| | ||||||
* | Removed is_newer() from certificate_t, obsoleting all implementations | Martin Willi | 2010-05-21 | 10 | -182/+2 | |
| | ||||||
* | Added generic implementations for crl_is_newer/certificate_is_newer | Martin Willi | 2010-05-21 | 4 | -1/+68 | |
| | ||||||
* | Migrated x509_crl_t to INIT/METHOD macros | Martin Willi | 2010-05-21 | 1 | -95/+70 | |
| | ||||||
* | Implemented X.509 CRL reading using OpenSSL | Martin Willi | 2010-05-21 | 4 | -1/+606 | |
| | ||||||
* | Implemented X.509 certificate reading using OpenSSL | Martin Willi | 2010-05-21 | 6 | -2/+1054 | |
| | ||||||
* | Fixed doxygen group | Martin Willi | 2010-05-20 | 1 | -1/+1 | |
| | ||||||
* | Whitelist OpenSSLs ERR_put_error() in leak-detective | Martin Willi | 2010-05-20 | 1 | -0/+1 | |
| | | | | | | | As we do not invoke ERR_get/clear_error() in all error cases, the error codes are not removed from the error queue. But it is save to whitelist the put function, as it uses a circular buffer that does not grow beyond ERR_NUM_ERRORS errors (16 by default). | |||||
* | Option to skip slow addr2line resolution in leak-detective | Martin Willi | 2010-05-20 | 6 | -48/+75 | |
| | ||||||
* | Explicitly link gpg-error to gcrypt plugin | Martin Willi | 2010-05-17 | 1 | -1/+1 | |
| | ||||||
* | Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin | Martin Willi | 2010-05-05 | 2 | -2/+16 | |
| | ||||||
* | Do not check pointer, but length of a chunk | Martin Willi | 2010-05-05 | 1 | -1/+1 | |
| | ||||||
* | Double-check that a blob passed to is_asn1() is not empty | Martin Willi | 2010-05-05 | 1 | -1/+7 | |
| | ||||||
* | Do not print filename twice if plugin loading fails, dlerror() contains the ↵ | Martin Willi | 2010-05-05 | 1 | -2/+1 | |
| | | | | filename | |||||
* | Implemented base32 encoding of chunks. | Martin Willi | 2010-05-05 | 2 | -0/+75 | |
| | ||||||
* | added getprotobyname to whitelist4.4.0 | Andreas Steffen | 2010-05-02 | 1 | -0/+1 | |
| | ||||||
* | We have to rename thread_create on Mac OS X because it conflicts with a syscall. | Tobias Brunner | 2010-04-29 | 1 | -0/+6 | |
| | ||||||
* | The mutex of a thread has to be locked when destroying it. | Tobias Brunner | 2010-04-29 | 1 | -0/+2 | |
| | ||||||
* | Fixed RSA key generation with gcrypt | Martin Willi | 2010-04-29 | 1 | -1/+1 | |
| | ||||||
* | PEM encoder supports encoding from RSA components directly, allowing gcrypt ↵ | Martin Willi | 2010-04-29 | 3 | -37/+42 | |
| | | | | plugin to encode in PEM | |||||
* | Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten | Martin Willi | 2010-04-19 | 7 | -3/+150 | |
| | ||||||
* | Integrating libhydra into the Android build system. | Tobias Brunner | 2010-04-12 | 1 | -3/+0 | |
| | ||||||
* | fixed silly bug | Andreas Steffen | 2010-04-12 | 1 | -1/+1 | |
| | ||||||
* | Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for ↵ | Tobias Brunner | 2010-04-10 | 1 | -1/+1 | |
| | | | | settings in libstrongswan. | |||||
* | Store DH generator in a chunk, hide non-public data in a private struct | Martin Willi | 2010-04-08 | 5 | -313/+305 | |
| | ||||||
* | Renamed clone function to avoid name clash with uclibc | Martin Willi | 2010-04-07 | 1 | -2/+2 | |
| | ||||||
* | Some whitespace fixes. | Tobias Brunner | 2010-04-06 | 5 | -8/+8 | |
| | ||||||
* | Adding DBG_LIB to all calls of libstrongswan's version of DBG*. | Tobias Brunner | 2010-04-06 | 60 | -424/+491 | |
| | ||||||
* | Adding support for debug groups in libstrongswan's logger. | Tobias Brunner | 2010-04-06 | 2 | -11/+14 | |
| | ||||||
* | Move debug groups from charon's bus.h to libstrongswan's debug.h. | Tobias Brunner | 2010-04-06 | 2 | -0/+92 | |
| | ||||||
* | PEM encoding for OpenSSL RSA and EC public and private keys | Andreas Steffen | 2010-04-04 | 5 | -12/+72 | |
| | ||||||
* | PEM encoding for GMP RSA public and private keys | Andreas Steffen | 2010-04-04 | 6 | -3/+167 | |
| | ||||||
* | fixed typo | Andreas Steffen | 2010-04-04 | 1 | -1/+1 | |
| | ||||||
* | fixed doxygen group | Andreas Steffen | 2010-04-03 | 1 | -1/+1 | |
| | ||||||
* | change #define to PEM_BUILDER_H_ | Andreas Steffen | 2010-04-03 | 1 | -3/+3 | |
| | ||||||
* | Attributes moved from libstrongswan to libhydra. | Tobias Brunner | 2010-03-24 | 9 | -778/+0 | |
| | | | | | The attribute_manager_t instance is now located on the new hydra object instead of the lib object. | |||||
* | Moving attr-sql plugin from libstrongswan to libhydra. | Tobias Brunner | 2010-03-24 | 8 | -1996/+0 | |
| | ||||||
* | Fixed some Doxygen warnings. | Tobias Brunner | 2010-03-24 | 1 | -14/+14 | |
| | ||||||
* | Fixed ipsec pool --batch command | Heiko Hund | 2010-03-24 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | --batch mode has shown to be buggy in very obscure ways in the first real life tests. For example a batch file --del pool1 --replace pool2 --addresses file1 returned the error "/usr/libexec/ipsec/pool: unrecognized option '--lace'" which was gone after moving the --del behind --replace. With the patch from below applied everything works like a charm. From the info on the man page it seem to be unrelated to this problem, though: A program that scans multiple argument vectors, or rescans the same vector more than once, and wants to make use of GNU extensions such as '+' and '-' at the start of optstring, or changes the value of POSIXLY_CORRECT between scans, must reinitialize getopt() by resetting optind to 0, rather than the traditional value of 1. (Resetting to 0 forces the invocation of an internal initialization routine that rechecks POSIXLY_CORRECT and checks for GNU exten- sions in optstring.) Signed-off-by: Heiko Hund <hhund@astaro.com> | |||||
* | Use vstr/gmp as shared libraries in the Android build. | Tobias Brunner | 2010-03-23 | 1 | -4/+2 | |
| | ||||||
* | Do not indent the source file lists in Android.mk files so we can easily ↵ | Tobias Brunner | 2010-03-19 | 1 | -58/+58 | |
| | | | | compare them to the lists in the Makefile.am files. |