aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* fixed a certinfo_t memory leak in verify()Andreas Steffen2007-03-091-1/+4
|
* fixed a memory leak in response_tAndreas Steffen2007-03-091-25/+22
|
* ocsp signer certificate and ocsp response signature can be verifiedAndreas Steffen2007-03-088-64/+495
|
* fixed memleaks when using EAP authenticationMartin Willi2007-03-082-43/+64
| | | | | fixed configuration payloads when using EAP
* fixed payload order (again)Martin Willi2007-03-082-6/+6
|
* including peers certificate when his certreq is emptyMartin Willi2007-03-081-2/+11
|
* implemented cookies as initiatorMartin Willi2007-03-082-9/+44
| | | | proper logging of notifies in IKE_SA setup
* disabling routing for IPv6, does not work correctlyMartin Willi2007-03-081-1/+2
|
* fixed call of add_auth_certificate()Andreas Steffen2007-03-082-7/+9
|
* generalized get_ca_certificate() to get_auth_certificate(auth_flags)Andreas Steffen2007-03-084-11/+13
|
* added fetcher_finalize() to clean up libcurlAndreas Steffen2007-03-083-1/+24
|
* some cleanupsMartin Willi2007-03-082-11/+10
| | | | | not installing %any DNS servers
* support of setting and getting authority flagsAndreas Steffen2007-03-082-2/+58
|
* support if ocsp signing certificatesAndreas Steffen2007-03-084-22/+53
|
* support if ocsp signing certificatesAndreas Steffen2007-03-082-61/+97
|
* fixed payload order in IKE_AUTHMartin Willi2007-03-081-7/+27
|
* removed SHA2 kernel proposals from default, the kernel doesn't support them yetMartin Willi2007-03-081-6/+0
|
* allocation fixes, not completeMartin Willi2007-03-081-8/+16
|
* handling "No policy found" properlyMartin Willi2007-03-081-4/+4
|
* added more debugging output for policy lookupMartin Willi2007-03-081-3/+17
| | | | | returning a (dummy) policy even when TS does not match, so we can properly send a TS_UNACCEPTABLE
* fixed CHILD_SA creation within existing IKE_SAMartin Willi2007-03-081-0/+1
|
* added ocsp_parse_single_responseAndreas Steffen2007-03-081-1/+79
|
* ported changes from EAP branch, renabling EAP frameworkMartin Willi2007-03-082-126/+371
|
* added (not yet supported) sha2 algorithms to kernelMartin Willi2007-03-081-7/+10
| | | | only adding a route if using tunnel mode
* added SHA2 MAC and PRF to default proposalMartin Willi2007-03-081-23/+58
|
* added more debug output Martin Willi2007-03-081-0/+2
|
* experimental SHA2 HMAC and PRF implementationsMartin Willi2007-03-085-4/+40
|
* parsing basic ocsp responseAndreas Steffen2007-03-081-26/+269
|
* forgot to assign public.is_ocsp_signer() methodAndreas Steffen2007-03-071-0/+1
|
* added parsing level to x509_create_from_chunk()Andreas Steffen2007-03-071-1/+1
|
* added parsing level to x509_create_from_chunk() and added is_ocsp_signer() ↵Andreas Steffen2007-03-072-7/+42
| | | | method
* http post fetching using libcurl implementedAndreas Steffen2007-03-076-11/+180
|
* added fetcher.h and fetcher.cAndreas Steffen2007-03-071-0/+1
|
* addedAndreas Steffen2007-03-072-0/+132
|
* corrected @ingroup to utilsAndreas Steffen2007-03-071-1/+1
|
* corrected commentAndreas Steffen2007-03-071-1/+1
|
* start ocsp checking only if there are any ocspuris presentAndreas Steffen2007-03-071-1/+9
|
* nonce in ocsp_t was not properly initializedAndreas Steffen2007-03-071-0/+1
|
* ocsp request is now fully built but without requestor signatureAndreas Steffen2007-03-071-12/+85
|
* starting to build ocsp requestAndreas Steffen2007-03-063-54/+299
|
* prevent from initiating multiple exchanges the same timeMartin Willi2007-03-061-0/+9
|
* updated apidoc documentationMartin Willi2007-03-061-4/+3
|
* fixed notify handling in IKE_AUTHMartin Willi2007-03-062-16/+25
| | | | moved nonce payload before TS in CHILD_SA setup
* moved REKEY_SA notify to the beginning of the messageMartin Willi2007-03-061-7/+7
|
* fixed traffic selector redundancy removal code (not completely tested)Martin Willi2007-03-062-7/+17
|
* add crl and ocsp uris to linked list after partial verificationAndreas Steffen2007-03-061-22/+35
|
* added print hook for certinfo_t printingAndreas Steffen2007-03-061-0/+2
|
* fixed typoAndreas Steffen2007-03-061-1/+1
|
* sending an SPI of 0 as responder when IKE_SA_INIT failsMartin Willi2007-03-061-0/+7
|
* iterate certinfos linked list for matching serialNumberAndreas Steffen2007-03-053-2/+45
|