Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | support if ocsp signing certificates | Andreas Steffen | 2007-03-08 | 4 | -22/+53 | |
| | ||||||
* | support if ocsp signing certificates | Andreas Steffen | 2007-03-08 | 2 | -61/+97 | |
| | ||||||
* | fixed payload order in IKE_AUTH | Martin Willi | 2007-03-08 | 1 | -7/+27 | |
| | ||||||
* | removed SHA2 kernel proposals from default, the kernel doesn't support them yet | Martin Willi | 2007-03-08 | 1 | -6/+0 | |
| | ||||||
* | allocation fixes, not complete | Martin Willi | 2007-03-08 | 1 | -8/+16 | |
| | ||||||
* | handling "No policy found" properly | Martin Willi | 2007-03-08 | 1 | -4/+4 | |
| | ||||||
* | added more debugging output for policy lookup | Martin Willi | 2007-03-08 | 1 | -3/+17 | |
| | | | | | returning a (dummy) policy even when TS does not match, so we can properly send a TS_UNACCEPTABLE | |||||
* | fixed CHILD_SA creation within existing IKE_SA | Martin Willi | 2007-03-08 | 1 | -0/+1 | |
| | ||||||
* | added ocsp_parse_single_response | Andreas Steffen | 2007-03-08 | 1 | -1/+79 | |
| | ||||||
* | ported changes from EAP branch, renabling EAP framework | Martin Willi | 2007-03-08 | 2 | -126/+371 | |
| | ||||||
* | added (not yet supported) sha2 algorithms to kernel | Martin Willi | 2007-03-08 | 1 | -7/+10 | |
| | | | | only adding a route if using tunnel mode | |||||
* | added SHA2 MAC and PRF to default proposal | Martin Willi | 2007-03-08 | 1 | -23/+58 | |
| | ||||||
* | added more debug output | Martin Willi | 2007-03-08 | 1 | -0/+2 | |
| | ||||||
* | experimental SHA2 HMAC and PRF implementations | Martin Willi | 2007-03-08 | 5 | -4/+40 | |
| | ||||||
* | parsing basic ocsp response | Andreas Steffen | 2007-03-08 | 1 | -26/+269 | |
| | ||||||
* | forgot to assign public.is_ocsp_signer() method | Andreas Steffen | 2007-03-07 | 1 | -0/+1 | |
| | ||||||
* | added parsing level to x509_create_from_chunk() | Andreas Steffen | 2007-03-07 | 1 | -1/+1 | |
| | ||||||
* | added parsing level to x509_create_from_chunk() and added is_ocsp_signer() ↵ | Andreas Steffen | 2007-03-07 | 2 | -7/+42 | |
| | | | | method | |||||
* | http post fetching using libcurl implemented | Andreas Steffen | 2007-03-07 | 6 | -11/+180 | |
| | ||||||
* | added fetcher.h and fetcher.c | Andreas Steffen | 2007-03-07 | 1 | -0/+1 | |
| | ||||||
* | added | Andreas Steffen | 2007-03-07 | 2 | -0/+132 | |
| | ||||||
* | corrected @ingroup to utils | Andreas Steffen | 2007-03-07 | 1 | -1/+1 | |
| | ||||||
* | corrected comment | Andreas Steffen | 2007-03-07 | 1 | -1/+1 | |
| | ||||||
* | start ocsp checking only if there are any ocspuris present | Andreas Steffen | 2007-03-07 | 1 | -1/+9 | |
| | ||||||
* | nonce in ocsp_t was not properly initialized | Andreas Steffen | 2007-03-07 | 1 | -0/+1 | |
| | ||||||
* | ocsp request is now fully built but without requestor signature | Andreas Steffen | 2007-03-07 | 1 | -12/+85 | |
| | ||||||
* | starting to build ocsp request | Andreas Steffen | 2007-03-06 | 3 | -54/+299 | |
| | ||||||
* | prevent from initiating multiple exchanges the same time | Martin Willi | 2007-03-06 | 1 | -0/+9 | |
| | ||||||
* | updated apidoc documentation | Martin Willi | 2007-03-06 | 1 | -4/+3 | |
| | ||||||
* | fixed notify handling in IKE_AUTH | Martin Willi | 2007-03-06 | 2 | -16/+25 | |
| | | | | moved nonce payload before TS in CHILD_SA setup | |||||
* | moved REKEY_SA notify to the beginning of the message | Martin Willi | 2007-03-06 | 1 | -7/+7 | |
| | ||||||
* | fixed traffic selector redundancy removal code (not completely tested) | Martin Willi | 2007-03-06 | 2 | -7/+17 | |
| | ||||||
* | add crl and ocsp uris to linked list after partial verification | Andreas Steffen | 2007-03-06 | 1 | -22/+35 | |
| | ||||||
* | added print hook for certinfo_t printing | Andreas Steffen | 2007-03-06 | 1 | -0/+2 | |
| | ||||||
* | fixed typo | Andreas Steffen | 2007-03-06 | 1 | -1/+1 | |
| | ||||||
* | sending an SPI of 0 as responder when IKE_SA_INIT fails | Martin Willi | 2007-03-06 | 1 | -0/+7 | |
| | ||||||
* | iterate certinfos linked list for matching serialNumber | Andreas Steffen | 2007-03-05 | 3 | -2/+45 | |
| | ||||||
* | some cleanups | Martin Willi | 2007-03-05 | 2 | -13/+7 | |
| | | | | | | not assigning %any virtual IPs to peer anymore | |||||
* | fixed double free bug | Martin Willi | 2007-03-05 | 10 | -24/+96 | |
| | ||||||
* | fixed ID selection bug when peer doesn't include IDr payload | Martin Willi | 2007-03-05 | 4 | -40/+34 | |
| | | | | | allowing vendor ID in any messag | |||||
* | moved listing of crls to local_credential_store and ca | Andreas Steffen | 2007-03-03 | 1 | -14/+1 | |
| | ||||||
* | refactored ca_info_t | Andreas Steffen | 2007-03-03 | 2 | -166/+115 | |
| | ||||||
* | refactored ca_info_t | Andreas Steffen | 2007-03-03 | 2 | -26/+259 | |
| | ||||||
* | fixed netlink socket receiver code | Martin Willi | 2007-03-03 | 8 | -289/+190 | |
| | | | | implemented interface enumeration code with netlink: no getifaddrs reqired anymore | |||||
* | refactored kernel interface, works reliable again | Martin Willi | 2007-03-03 | 1 | -1151/+942 | |
| | ||||||
* | implemented get_iface() using RTM_GETADDR | Martin Willi | 2007-03-02 | 2 | -74/+180 | |
| | | | | | added support for multi-header netlink messages really ugly now, need a lot of refactoring | |||||
* | added debuggin for interface lookup | Martin Willi | 2007-03-01 | 1 | -0/+3 | |
| | ||||||
* | fixed address lookup when !using getifaddrs() | Martin Willi | 2007-03-01 | 1 | -2/+2 | |
| | ||||||
* | added firewalling support when using virtual IPs | Martin Willi | 2007-03-01 | 3 | -16/+40 | |
| | ||||||
* | added support for 0.0.0.0/0 traffic selectors | Martin Willi | 2007-03-01 | 9 | -40/+162 | |
| | | | | fixed routing to make correct 0.0.0.0/0 routes |