Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Fix boolean return value if an empty RSA signature is detected in gmp plugin | Martin Willi | 2012-05-31 | 1 | -1/+1 | |
| | | | | Fixes CVE-2012-2388. | |||||
* | Fixed check for loaded plugins with feature types that are not compared exactly. | Tobias Brunner | 2012-05-24 | 1 | -25/+13 | |
| | | | | | Previously e.g. RNGs with weaker strength would have overwritten stronger ones. | |||||
* | get_match() method added to hashtable_t. | Tobias Brunner | 2012-05-24 | 2 | -5/+34 | |
| | ||||||
* | Use a hashtable to check for already loaded plugin features. | Tobias Brunner | 2012-05-23 | 1 | -20/+37 | |
| | ||||||
* | Hash function for plugin features added. | Tobias Brunner | 2012-05-23 | 2 | -0/+68 | |
| | ||||||
* | Enumerate correct list while removing nonce_gens, fix deregistration | Martin Willi | 2012-05-21 | 1 | -1/+1 | |
| | ||||||
* | Added a convenience function to dump backtraces for gdb-less debugging | Martin Willi | 2012-05-21 | 2 | -0/+26 | |
| | ||||||
* | Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, ↵ | Tobias Brunner | 2012-05-18 | 1 | -2/+2 | |
| | | | | tasks etc.). | |||||
* | pkcs8: Initialize salt and IV properly. | Tobias Brunner | 2012-05-18 | 1 | -1/+1 | |
| | ||||||
* | Add enumerator for registered nonce generators. | Tobias Brunner | 2012-05-18 | 2 | -9/+33 | |
| | ||||||
* | Add nonce plugin implementation | Adrian-Ken Rueegsegger | 2012-05-18 | 6 | -0/+271 | |
| | | | | | | | This nonce generator uses an RNG to generate nonces. The RNG quality is currently set to RNG_WEAK which is the same value used in IKE init. The plugin is enabled and thus built by default. | |||||
* | Add nonce generator interface | Adrian-Ken Rueegsegger | 2012-05-18 | 6 | -0/+163 | |
| | | | | | | | Nonce generators (nonce_gen_t) can be used to get or allocate nonces. Users can request nonce generators from the crypto factory while nonce plugins register/remove themselves to/from the crypto factory. | |||||
* | Use correct integrity_algorithm_t enum type in bench_signer() | Martin Willi | 2012-05-14 | 1 | -1/+1 | |
| | ||||||
* | Make function pointer defined with METHOD() macro non-const | Martin Willi | 2012-05-14 | 1 | -2/+2 | |
| | | | | | clang complains about it being const, and the object code generated from gcc is the same. | |||||
* | Remove unused return value of INIT(), making clang happy | Martin Willi | 2012-05-14 | 1 | -3/+2 | |
| | ||||||
* | fixed feature dependencies for CERT_TRUSTED_PUBKEY | Andreas Steffen | 2012-05-05 | 1 | -0/+5 | |
| | ||||||
* | If we load new features from a plugin, restart loading from first plugin | Martin Willi | 2012-05-03 | 1 | -0/+4 | |
| | ||||||
* | Building CERT_ANY through PEM requires either a CERT_X509 or a CERT_PGP builder | Martin Willi | 2012-05-03 | 1 | -1/+2 | |
| | ||||||
* | Added recursive read_lock support to our own implementation of rwlock_t. | Tobias Brunner | 2012-05-02 | 1 | -4/+35 | |
| | ||||||
* | Use wrapped semaphore in callback_job_t. | Tobias Brunner | 2012-05-02 | 1 | -12/+9 | |
| | ||||||
* | Added a wrapper class around POSIX semaphores. | Tobias Brunner | 2012-05-02 | 4 | -0/+193 | |
| | ||||||
* | Certificate decoding soft-depends on public key decoding of specific types | Martin Willi | 2012-05-02 | 2 | -0/+6 | |
| | ||||||
* | PEM loading plugin features depend on the same feature, they are helpers only | Martin Willi | 2012-05-02 | 1 | -0/+17 | |
| | ||||||
* | Don't depend on a feature that has a dependency to the same feauture during ↵ | Martin Willi | 2012-05-02 | 1 | -1/+2 | |
| | | | | unload | |||||
* | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 19 | -165/+361 | |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 19 | -165/+359 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | * | chunk_equals_ptr added to compare chunks given as pointers. | Tobias Brunner | 2012-03-20 | 1 | -0/+9 | |
| | | | ||||||
| | * | Use a single set of FDs for all random plugin RNG instances | Martin Willi | 2012-03-20 | 3 | -36/+89 | |
| | | | ||||||
| | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -26/+32 | |
| | | | ||||||
| | * | Fixed create_shared_enumerator method description | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 3 | -17/+73 | |
| | | | ||||||
| | * | Added missing XAuth plugin feature enum names | Martin Willi | 2012-03-20 | 2 | -4/+6 | |
| | | | ||||||
| | * | Fixed fix for XAuth plugin feature matching | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Fix XAuth plugin feature matching | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Added support for iKEIntermediate X.509 extended key usage flag. | Tobias Brunner | 2012-03-20 | 3 | -6/+19 | |
| | | | | | | | | | | | | Mac OS X requires server certificates to have this flag set. | |||||
| | * | Some whitespace fixes. | Tobias Brunner | 2012-03-20 | 2 | -26/+26 | |
| | | | ||||||
| | * | Added an XAUTH identity to use or require for XAuth authentication | Martin Willi | 2012-03-20 | 2 | -0/+11 | |
| | | | ||||||
| | * | Stop checking once a key size constraint is not fulfilled | Martin Willi | 2012-03-20 | 1 | -0/+3 | |
| | | | ||||||
| | * | Fixed IKEv1 prf+ keymat expansion beyond 320 bits | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Remove executable flag from source code files | Martin Willi | 2012-03-20 | 1 | -0/+0 | |
| | | | ||||||
| | * | Free list after removing the last local credential set, fixes a leak report | Martin Willi | 2012-03-20 | 1 | -0/+5 | |
| | | | ||||||
| | * | Remove unused status type | Martin Willi | 2012-03-20 | 1 | -5/+0 | |
| | | | ||||||
| | * | Added missing XAuth auth_class enum name | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Be less verbose if plugin dependecy not satisfied | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Added auth_cfg option to select XAUTH backend to use | Martin Willi | 2012-03-20 | 3 | -2/+14 | |
| | | | ||||||
| | * | Use a string to identify xauth backends, no need for integer types | Martin Willi | 2012-03-20 | 4 | -110/+4 | |
| | | | ||||||
| | * | Use a second authentication config to configure XAUTH authentication | Martin Willi | 2012-03-20 | 1 | -4/+2 | |
| | | | ||||||
| | * | Replace xauth_request task with a new stub where we reimplement it | Martin Willi | 2012-03-20 | 1 | -2/+2 | |
| | | | ||||||
| | * | Added status code to status_t | Clavister OpenSource | 2012-03-20 | 1 | -0/+5 | |
| | | | | | | | | | | | | New status_t enum to allow packets to be sent to peer in task_manager->process | |||||
| | * | Implement htoun/untoh64 with potentially faster htobe64/be64toh macros, if ↵ | Martin Willi | 2012-03-20 | 1 | -0/+14 | |
| | | | | | | | | | | | | available |