Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | moved assignment of CERT_UNKNOWN4.1.3 | Andreas Steffen | 2007-05-25 | 1 | -2/+2 | |
| | ||||||
* | log trust pathlen | Andreas Steffen | 2007-05-25 | 1 | -4/+6 | |
| | ||||||
* | included a certificate label in the is_trusted() method | Andreas Steffen | 2007-05-25 | 3 | -10/+9 | |
| | ||||||
* | DBG1 level now shows stepping up through the certifiate hierarchy up to the ↵ | Andreas Steffen | 2007-05-25 | 1 | -2/+2 | |
| | | | | trust anchor | |||||
* | set certinfo status to CERT_UNKNOWN before crl and|or ocsp verification | Andreas Steffen | 2007-05-25 | 1 | -3/+7 | |
| | ||||||
* | x509_t* argument in get_issuer() method is not constant any more because a ↵ | Andreas Steffen | 2007-05-25 | 1 | -1/+1 | |
| | | | | short cut to the ca might be set | |||||
* | added parsing of charging and group attributes | Andreas Steffen | 2007-05-25 | 1 | -14/+63 | |
| | ||||||
* | version bump to 4.1.3 | Andreas Steffen | 2007-05-25 | 2 | -1/+5 | |
| | ||||||
* | fixed man page | Martin Willi | 2007-05-25 | 1 | -1/+1 | |
| | ||||||
* | updated man-page for left/rightsourceip | Martin Willi | 2007-05-25 | 1 | -1/+10 | |
| | ||||||
* | removed paranoid module checking | Martin Willi | 2007-05-25 | 2 | -26/+0 | |
| | ||||||
* | added compatibility names (pluto) for sha2 algorithms (sha2_256, ...) | Martin Willi | 2007-05-25 | 1 | -4/+11 | |
| | ||||||
* | added #define LDAP_DEPRECATED in order to use old ldap_init() function | Andreas Steffen | 2007-05-24 | 2 | -0/+6 | |
| | ||||||
* | removed unneeded libdes files speed.c and des_opts.c | Andreas Steffen | 2007-05-24 | 3 | -951/+2 | |
| | ||||||
* | defined ietfAttr_t type and its destroy function | Andreas Steffen | 2007-05-23 | 1 | -2/+26 | |
| | ||||||
* | removed old FreeS/WAN cvs revision entries | Andreas Steffen | 2007-05-23 | 18 | -1587/+0 | |
| | ||||||
* | added #include <linux/types.h> required by 2.6.21 linux headers | Andreas Steffen | 2007-05-23 | 1 | -138/+1 | |
| | ||||||
* | proper thread cancellation when using the charon->interfaces | Martin Willi | 2007-05-23 | 8 | -5/+100 | |
| | ||||||
* | fixed crash when using 0.0.0.0/0 subnets | Martin Willi | 2007-05-23 | 1 | -0/+1 | |
| | ||||||
* | removed misleading warning when rekeying | Martin Willi | 2007-05-23 | 1 | -1/+0 | |
| | ||||||
* | support for virtual IP definition on client side: | Martin Willi | 2007-05-22 | 6 | -31/+59 | |
| | | | | | | | if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip. | |||||
* | fixed memleak | Martin Willi | 2007-05-22 | 1 | -0/+1 | |
| | ||||||
* | using local address as gateway in installed routes | Martin Willi | 2007-05-22 | 1 | -2/+1 | |
| | ||||||
* | support of left|rightgroups parameter | Andreas Steffen | 2007-05-20 | 3 | -31/+30 | |
| | ||||||
* | fixed nextUpdate and until behaviour in the non-strict case | Andreas Steffen | 2007-05-19 | 1 | -10/+8 | |
| | ||||||
* | support of CA-based ipsec policies | Andreas Steffen | 2007-05-18 | 9 | -117/+222 | |
| | ||||||
* | add is_ca() method | Andreas Steffen | 2007-05-18 | 2 | -2/+21 | |
| | ||||||
* | added set_ca_info() and get_ca_info() methods | Andreas Steffen | 2007-05-18 | 2 | -2/+47 | |
| | ||||||
* | output of eap_type_names requires %N format | Andreas Steffen | 2007-05-18 | 1 | -1/+1 | |
| | ||||||
* | added set_other_ca() and get_other_ca() | Andreas Steffen | 2007-05-17 | 1 | -44/+68 | |
| | ||||||
* | added set_other_ca() and get_other_ca() | Andreas Steffen | 2007-05-17 | 1 | -2/+19 | |
| | ||||||
* | export MAX_CA_PATH_LEN | Andreas Steffen | 2007-05-17 | 1 | -1/+2 | |
| | ||||||
* | check self-signedness of certificate at creation time | Andreas Steffen | 2007-05-17 | 1 | -2/+26 | |
| | ||||||
* | removed route_job, handled all in interface_manager | Martin Willi | 2007-05-16 | 5 | -195/+0 | |
| | ||||||
* | routing/unrouting through interface | Martin Willi | 2007-05-16 | 4 | -18/+187 | |
| | ||||||
* | authentication failure is handled in ike_auth.c | Andreas Steffen | 2007-05-15 | 1 | -3/+5 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2007-05-15 | 1 | -5/+5 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2007-05-15 | 2 | -3/+3 | |
| | ||||||
* | adapted authentication failure text to those in the authenticators | Andreas Steffen | 2007-05-15 | 1 | -3/+3 | |
| | ||||||
* | verification of locally loaded peer certificates | Andreas Steffen | 2007-05-15 | 1 | -87/+92 | |
| | ||||||
* | support of multiple certificates with same peer id | Andreas Steffen | 2007-05-15 | 3 | -63/+93 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2007-05-15 | 1 | -9/+7 | |
| | ||||||
* | working dummy for NetworkManager DBUS interface | Martin Willi | 2007-05-14 | 1 | -8/+68 | |
| | | | | | more a tech demo | |||||
* | simplified capability dropping | Martin Willi | 2007-05-09 | 9 | -45/+26 | |
| | ||||||
* | properly implemented interface_managers initiate, terminte_[ike|child] | Martin Willi | 2007-05-09 | 8 | -303/+326 | |
| | | | | | proper thread release when stroke is CTRL+C'ed fixed some permission issues | |||||
* | properly ignoring signals rised by a thread which is in listening state | Martin Willi | 2007-05-08 | 1 | -11/+8 | |
| | ||||||
* | changing UID/GID after startup of pluto/charon | Martin Willi | 2007-05-07 | 15 | -57/+91 | |
| | | | | added --with-uid/--with-gid configure option | |||||
* | extended interface_manager (more work needed here) | Martin Willi | 2007-05-03 | 3 | -3/+243 | |
| | ||||||
* | allow to have listening state TRUE while sending singal ourself | Martin Willi | 2007-05-03 | 1 | -0/+7 | |
| | ||||||
* | reducing capabilities of the threads to a minimum | Martin Willi | 2007-05-03 | 11 | -40/+214 | |
| | | | | | | proper flush of pending packets on daemon shutdown adding local address as gateway address in dynamic route |