aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* support if ocsp signing certificatesAndreas Steffen2007-03-084-22/+53
|
* support if ocsp signing certificatesAndreas Steffen2007-03-082-61/+97
|
* fixed payload order in IKE_AUTHMartin Willi2007-03-081-7/+27
|
* removed SHA2 kernel proposals from default, the kernel doesn't support them yetMartin Willi2007-03-081-6/+0
|
* allocation fixes, not completeMartin Willi2007-03-081-8/+16
|
* handling "No policy found" properlyMartin Willi2007-03-081-4/+4
|
* added more debugging output for policy lookupMartin Willi2007-03-081-3/+17
| | | | | returning a (dummy) policy even when TS does not match, so we can properly send a TS_UNACCEPTABLE
* fixed CHILD_SA creation within existing IKE_SAMartin Willi2007-03-081-0/+1
|
* added ocsp_parse_single_responseAndreas Steffen2007-03-081-1/+79
|
* ported changes from EAP branch, renabling EAP frameworkMartin Willi2007-03-082-126/+371
|
* added (not yet supported) sha2 algorithms to kernelMartin Willi2007-03-081-7/+10
| | | | only adding a route if using tunnel mode
* added SHA2 MAC and PRF to default proposalMartin Willi2007-03-081-23/+58
|
* added more debug output Martin Willi2007-03-081-0/+2
|
* experimental SHA2 HMAC and PRF implementationsMartin Willi2007-03-085-4/+40
|
* parsing basic ocsp responseAndreas Steffen2007-03-081-26/+269
|
* forgot to assign public.is_ocsp_signer() methodAndreas Steffen2007-03-071-0/+1
|
* added parsing level to x509_create_from_chunk()Andreas Steffen2007-03-071-1/+1
|
* added parsing level to x509_create_from_chunk() and added is_ocsp_signer() ↵Andreas Steffen2007-03-072-7/+42
| | | | method
* http post fetching using libcurl implementedAndreas Steffen2007-03-076-11/+180
|
* added fetcher.h and fetcher.cAndreas Steffen2007-03-071-0/+1
|
* addedAndreas Steffen2007-03-072-0/+132
|
* corrected @ingroup to utilsAndreas Steffen2007-03-071-1/+1
|
* corrected commentAndreas Steffen2007-03-071-1/+1
|
* start ocsp checking only if there are any ocspuris presentAndreas Steffen2007-03-071-1/+9
|
* nonce in ocsp_t was not properly initializedAndreas Steffen2007-03-071-0/+1
|
* ocsp request is now fully built but without requestor signatureAndreas Steffen2007-03-071-12/+85
|
* starting to build ocsp requestAndreas Steffen2007-03-063-54/+299
|
* prevent from initiating multiple exchanges the same timeMartin Willi2007-03-061-0/+9
|
* updated apidoc documentationMartin Willi2007-03-061-4/+3
|
* fixed notify handling in IKE_AUTHMartin Willi2007-03-062-16/+25
| | | | moved nonce payload before TS in CHILD_SA setup
* moved REKEY_SA notify to the beginning of the messageMartin Willi2007-03-061-7/+7
|
* fixed traffic selector redundancy removal code (not completely tested)Martin Willi2007-03-062-7/+17
|
* add crl and ocsp uris to linked list after partial verificationAndreas Steffen2007-03-061-22/+35
|
* added print hook for certinfo_t printingAndreas Steffen2007-03-061-0/+2
|
* fixed typoAndreas Steffen2007-03-061-1/+1
|
* sending an SPI of 0 as responder when IKE_SA_INIT failsMartin Willi2007-03-061-0/+7
|
* iterate certinfos linked list for matching serialNumberAndreas Steffen2007-03-053-2/+45
|
* some cleanupsMartin Willi2007-03-052-13/+7
| | | | | | not assigning %any virtual IPs to peer anymore
* fixed double free bugMartin Willi2007-03-0510-24/+96
|
* fixed ID selection bug when peer doesn't include IDr payloadMartin Willi2007-03-054-40/+34
| | | | | allowing vendor ID in any messag
* moved listing of crls to local_credential_store and caAndreas Steffen2007-03-031-14/+1
|
* refactored ca_info_tAndreas Steffen2007-03-032-166/+115
|
* refactored ca_info_tAndreas Steffen2007-03-032-26/+259
|
* fixed netlink socket receiver codeMartin Willi2007-03-038-289/+190
| | | | implemented interface enumeration code with netlink: no getifaddrs reqired anymore
* refactored kernel interface, works reliable againMartin Willi2007-03-031-1151/+942
|
* implemented get_iface() using RTM_GETADDRMartin Willi2007-03-022-74/+180
| | | | | added support for multi-header netlink messages really ugly now, need a lot of refactoring
* added debuggin for interface lookupMartin Willi2007-03-011-0/+3
|
* fixed address lookup when !using getifaddrs()Martin Willi2007-03-011-2/+2
|
* added firewalling support when using virtual IPsMartin Willi2007-03-013-16/+40
|
* added support for 0.0.0.0/0 traffic selectorsMartin Willi2007-03-019-40/+162
| | | | fixed routing to make correct 0.0.0.0/0 routes