aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Use constants instead of sizeof(), sizeof() does not work for function argumentsMartin Willi2009-10-094-71/+76
|
* Calculate missing CK/IK values in USIMMartin Willi2009-10-091-0/+3
|
* Link 3gpp2 EAP-AKA plugin to libgmpMartin Willi2009-10-092-1/+1
|
* Separated 3gpp2 USIM card and provider functionalityMartin Willi2009-10-097-845/+435
|
* Ported AKA functions to 3gpp2 pluginMartin Willi2009-10-093-1/+437
|
* Added a stub for the EAP-AKA backend implementing the 3GPP2 functions in ↵Martin Willi2009-10-0910-0/+539
| | | | software
* Implemented a manager for USIM cards/providers very similar to the SIM managerMartin Willi2009-10-095-0/+294
|
* corrected captionAndreas Steffen2009-10-091-1/+1
|
* created identification_create_from_sockaddr() functionAndreas Steffen2009-10-092-0/+41
|
* Added medsrv.fcgi to gitignoreMartin Willi2009-10-081-0/+1
|
* medsrv.fcgi is not part of the git treeAndreas Steffen2009-10-081-148/+0
|
* hex_str() isn't used externally any moreAndreas Steffen2009-10-083-13/+159
|
* parsing of generalNames is not needed any moreAndreas Steffen2009-10-082-299/+0
|
* use of asn1_build_known_oid()Andreas Steffen2009-10-081-86/+29
|
* migrated public key IDs to identification_tAndreas Steffen2009-10-0820-466/+463
|
* Reenabled acq_expires SA timer using rekey timeoutMartin Willi2009-10-071-1/+1
| | | | | | | While not using a SA expiration for allocating SPIs works fine, the situation is much more problematic for kernel-created temporary SAs from acquires. If the negotiation of such a CHILD_SA fails, the created temporary SA can not be deleted.
* Catch CHILD_SA state changes during acquireMartin Willi2009-10-071-17/+45
| | | | | If an acquire fails due to a TS_UNACCEPTABLE or other CHILD_SA only errors, we have to reset the pending state in the trap manager.
* list subjectAltNamesAndreas Steffen2009-10-061-1/+33
|
* some ipsec listall finetuningAndreas Steffen2009-10-063-10/+9
|
* pluto and charon now have the same ipsec listall output formatAndreas Steffen2009-10-0617-131/+89
|
* streamlined output from get_validity()Andreas Steffen2009-10-0611-134/+52
|
* fixed serial number conversion from hexAndreas Steffen2009-10-051-0/+5
|
* delete group attributes after useAndreas Steffen2009-10-051-0/+1
|
* stroke_list outputs group attributesAndreas Steffen2009-10-051-0/+7
|
* ipsec pki --issue suports --flag authServer optionAndreas Steffen2009-10-056-19/+46
|
* ipsec pki --issue supports --flag ocspSigning optionAndreas Steffen2009-10-052-7/+32
|
* Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word readsMartin Willi2009-10-051-67/+101
|
* Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word readsMartin Willi2009-10-051-99/+108
|
* Distinguish invalid free()s between corrupted magic and invalid pointerMartin Willi2009-10-051-5/+24
|
* pluto now uses x509 plugin for attribute certificate handlingAndreas Steffen2009-10-0527-1441/+981
|
* fixed output of authKeyIDAndreas Steffen2009-10-021-1/+1
|
* mark embedded parsing in debug modeAndreas Steffen2009-10-022-0/+4
|
* added some notBefore/notAfter debugging infoAndreas Steffen2009-10-021-1/+13
|
* verify correctness of X.509 versionsAndreas Steffen2009-10-021-2/+18
|
* added all missing RFC 5280 OIDsAndreas Steffen2009-10-021-0/+18
|
* fixes multiple IPsec SAs with IKEv1 Mode ConfigAndreas Steffen2009-10-011-0/+17
|
* generate known OIDs dynamicallyAndreas Steffen2009-09-301-14/+6
|
* pluto's crl handling now uses the x509 pluginAndreas Steffen2009-09-303-394/+159
|
* scepclient uses pkcs10 from libstrongswanAndreas Steffen2009-09-282-277/+0
|
* abbreviated struct connection by connection_tAndreas Steffen2009-09-2717-289/+269
|
* pluto and scepclient now use the x509 plugin for certificatesAndreas Steffen2009-09-2727-1633/+1129
|
* whitelist Curl_client_writeAndreas Steffen2009-09-271-0/+2
|
* added get_subjectKeyIdentifier() to x509_tAndreas Steffen2009-09-262-14/+39
|
* Do not increase the invalid-KE/Cookie retry counter for additional keyingtry ↵Martin Willi2009-09-241-1/+3
| | | | attempts
* Do not create a replacement IKE_SA if we have CHILD_SAs to route onlyMartin Willi2009-09-241-8/+7
|
* Using the correct type for ME_ENDPOINT payloads in connectivity checks.Tobias Brunner2009-09-241-1/+2
|
* Right-align short options in pki usageMartin Willi2009-09-241-7/+5
|
* certificate subject DNs are in double quotesAndreas Steffen2009-09-231-5/+5
|
* streamlining of credential loading debug outputAndreas Steffen2009-09-231-6/+6
|
* added and fixed debug output of version informationAndreas Steffen2009-09-231-7/+23
|