strongswan.git
10 years agoImplemented support for preinstalled PGP certificates in charon
Martin Willi [Mon, 14 Sep 2009 18:04:48 +0000 (20:04 +0200)]
Implemented support for preinstalled PGP certificates in charon

10 years agoAdded basic support for PGP certificates (no trust relationships yet)
Martin Willi [Mon, 14 Sep 2009 14:56:54 +0000 (16:56 +0200)]
Added basic support for PGP certificates (no trust relationships yet)

10 years agoMoved generic PGP parsing functions to pgp_utils.[ch]
Martin Willi [Mon, 14 Sep 2009 14:06:19 +0000 (16:06 +0200)]
Moved generic PGP parsing functions to pgp_utils.[ch]

10 years agopki --pub and --keyid accept pkcs10 as input
Andreas Steffen [Tue, 15 Sep 2009 04:23:38 +0000 (06:23 +0200)]
pki --pub and --keyid accept pkcs10 as input

10 years agoreplaced the missed ${confdir} by ${sysconfdir}
Martin Willi [Mon, 14 Sep 2009 15:56:12 +0000 (17:56 +0200)]
replaced the missed ${confdir} by ${sysconfdir}

10 years agocheck if PKCS#10 version is 1
Andreas Steffen [Mon, 14 Sep 2009 17:38:57 +0000 (19:38 +0200)]
check if PKCS#10 version is 1

10 years agocosmetics
Andreas Steffen [Mon, 14 Sep 2009 17:28:56 +0000 (19:28 +0200)]
cosmetics

10 years agoenable debug level setting
Andreas Steffen [Mon, 14 Sep 2009 17:28:25 +0000 (19:28 +0200)]
enable debug level setting

10 years agoFixed pluto certificate parsing
Martin Willi [Mon, 14 Sep 2009 15:17:07 +0000 (17:17 +0200)]
Fixed pluto certificate parsing

10 years agoAdded support to build RSA keys from components in openssl
Martin Willi [Mon, 14 Sep 2009 12:29:10 +0000 (14:29 +0200)]
Added support to build RSA keys from components in openssl

10 years agosupport of PKCS#10 certificate request generation without attributes
Andreas Steffen [Sun, 13 Sep 2009 22:45:51 +0000 (00:45 +0200)]
support of PKCS#10 certificate request generation without attributes

10 years agoextended hasher_signature_algorithm_to_oid() function
Andreas Steffen [Sun, 13 Sep 2009 19:41:51 +0000 (21:41 +0200)]
extended hasher_signature_algorithm_to_oid() function

10 years agoremoved req.h
Andreas Steffen [Sun, 13 Sep 2009 19:03:36 +0000 (21:03 +0200)]
removed req.h

10 years agosupport of PKCS#10 certificate request parsing
Andreas Steffen [Sun, 13 Sep 2009 19:00:15 +0000 (21:00 +0200)]
support of PKCS#10 certificate request parsing

10 years agoparsing error caused segfault in destroy()
Andreas Steffen [Sun, 13 Sep 2009 18:56:12 +0000 (20:56 +0200)]
parsing error caused segfault in destroy()

10 years agoneed two PKCS#9 OIDs
Andreas Steffen [Sat, 12 Sep 2009 22:42:15 +0000 (00:42 +0200)]
need two PKCS#9 OIDs

10 years agocorrected captions
Andreas Steffen [Sat, 12 Sep 2009 15:39:15 +0000 (17:39 +0200)]
corrected captions

10 years agofixed another typo
Andreas Steffen [Sat, 12 Sep 2009 04:44:11 +0000 (06:44 +0200)]
fixed another typo

10 years agofixed typo
Andreas Steffen [Sat, 12 Sep 2009 04:42:35 +0000 (06:42 +0200)]
fixed typo

10 years agopki tool can issue/self-sign certificates with OCSP URIs
Martin Willi [Fri, 11 Sep 2009 15:17:56 +0000 (17:17 +0200)]
pki tool can issue/self-sign certificates with OCSP URIs

10 years agox509 plugin supports encoding of OCSP AuthorityInfo AccessLocations
Martin Willi [Fri, 11 Sep 2009 15:16:22 +0000 (17:16 +0200)]
x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations

10 years agoadded lost session cookie buffer
Martin Willi [Fri, 11 Sep 2009 14:23:15 +0000 (16:23 +0200)]
added lost session cookie buffer

10 years agoRemoved chunk_from_buf() in favor of a simpler chunk_from_chars() macro
Martin Willi [Fri, 11 Sep 2009 13:35:10 +0000 (15:35 +0200)]
Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro

10 years agopki tool can issue certificates with CRL distribution points
Martin Willi [Fri, 11 Sep 2009 09:45:42 +0000 (11:45 +0200)]
pki tool can issue certificates with CRL distribution points

10 years agox509 plugin supports encoding of CRL distribution points
Martin Willi [Fri, 11 Sep 2009 09:45:04 +0000 (11:45 +0200)]
x509 plugin supports encoding of CRL distribution points

10 years agodouble check session id has been initialized
Martin Willi [Thu, 10 Sep 2009 18:51:43 +0000 (20:51 +0200)]
double check session id has been initialized

10 years agopass NULL to library_init() to load settings from default file
Martin Willi [Tue, 8 Sep 2009 18:01:13 +0000 (20:01 +0200)]
pass NULL to library_init() to load settings from default file

10 years agouse NULL to load plugins from default plugin directory
Martin Willi [Tue, 8 Sep 2009 17:48:34 +0000 (19:48 +0200)]
use NULL to load plugins from default plugin directory

10 years agoremove obsolete @brief doxygen tags
Martin Willi [Mon, 7 Sep 2009 16:56:53 +0000 (18:56 +0200)]
remove obsolete @brief doxygen tags

10 years agoUse wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t
Martin Willi [Mon, 7 Sep 2009 16:50:02 +0000 (18:50 +0200)]
Use wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t

10 years agolibfast uses enumerator instead of deprecated iterator
Martin Willi [Mon, 7 Sep 2009 16:28:55 +0000 (18:28 +0200)]
libfast uses enumerator instead of deprecated iterator

10 years agoUpdated x509 plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:24:06 +0000 (16:24 +0200)]
Updated x509 plugin to the new builder API

10 years agoUpdated pubkey plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:23:41 +0000 (16:23 +0200)]
Updated pubkey plugin to the new builder API

10 years agoUpdated pkcs1 plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:23:26 +0000 (16:23 +0200)]
Updated pkcs1 plugin to the new builder API

10 years agoUpdated pgp plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:23:08 +0000 (16:23 +0200)]
Updated pgp plugin to the new builder API

10 years agoUpdated pem plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:22:42 +0000 (16:22 +0200)]
Updated pem plugin to the new builder API

10 years agoUpdated openssl plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:21:21 +0000 (16:21 +0200)]
Updated openssl plugin to the new builder API

10 years agoUpdated gmp plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:20:53 +0000 (16:20 +0200)]
Updated gmp plugin to the new builder API

10 years agoUpdated gcrypt plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:20:35 +0000 (16:20 +0200)]
Updated gcrypt plugin to the new builder API

10 years agoUpdated dnskey plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:19:44 +0000 (16:19 +0200)]
Updated dnskey plugin to the new builder API

10 years agoUpdated agent plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:19:08 +0000 (16:19 +0200)]
Updated agent plugin to the new builder API

10 years agoUpdated pluto to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:18:29 +0000 (16:18 +0200)]
Updated pluto to the new builder API

10 years agoReplaced builder_t objects by simple builder_function_t functions
Martin Willi [Wed, 9 Sep 2009 14:16:34 +0000 (16:16 +0200)]
Replaced builder_t objects by simple builder_function_t functions

10 years agoUse dynamic registration/usage invocation of command types
Martin Willi [Thu, 10 Sep 2009 10:44:06 +0000 (12:44 +0200)]
Use dynamic registration/usage invocation of command types

10 years agosplitted PKI tool to a file per command
Martin Willi [Thu, 10 Sep 2009 10:31:40 +0000 (12:31 +0200)]
splitted PKI tool to a file per command

10 years agouse generic option parsing with usage information
Martin Willi [Thu, 10 Sep 2009 09:18:41 +0000 (11:18 +0200)]
use generic option parsing with usage information

10 years agofixed memleak
Martin Willi [Wed, 9 Sep 2009 15:12:38 +0000 (17:12 +0200)]
fixed memleak

10 years agoevaluate arguments of chunk_clone/clonea/alloc/alloca only once
Martin Willi [Wed, 9 Sep 2009 11:30:31 +0000 (13:30 +0200)]
evaluate arguments of chunk_clone/clonea/alloc/alloca only once

10 years agosplit usage information
Andreas Steffen [Wed, 9 Sep 2009 00:37:17 +0000 (02:37 +0200)]
split usage information

10 years agoupdated usage of ipsec pki --self
Andreas Steffen [Tue, 8 Sep 2009 20:22:09 +0000 (22:22 +0200)]
updated usage of ipsec pki --self

10 years agosupport --options also in ipsec pki --self
Andreas Steffen [Tue, 8 Sep 2009 19:54:00 +0000 (21:54 +0200)]
support --options also in ipsec pki --self

10 years ago--options reads command line options from file
Andreas Steffen [Tue, 8 Sep 2009 19:36:35 +0000 (21:36 +0200)]
--options reads command line options from file

10 years agopki tool supports subjectAltNames in certificates
Martin Willi [Tue, 8 Sep 2009 11:27:35 +0000 (13:27 +0200)]
pki tool supports subjectAltNames in certificates

10 years agox509 certificates support encoding of email, DNS and IP subjectAltNames
Martin Willi [Tue, 8 Sep 2009 11:17:41 +0000 (13:17 +0200)]
x509 certificates support encoding of email, DNS and IP subjectAltNames

10 years agonon self-signed x509 certificates are encoded with authorityKeyIdentifier
Martin Willi [Tue, 8 Sep 2009 09:26:05 +0000 (11:26 +0200)]
non self-signed x509 certificates are encoded with authorityKeyIdentifier

10 years agox509 CA certificates are encoded with a subjectKeyIdentifier
Martin Willi [Tue, 8 Sep 2009 09:02:49 +0000 (11:02 +0200)]
x509 CA certificates are encoded with a subjectKeyIdentifier

10 years agopki tool --issue/--verify operations require a CA with CA basicConstraint
Martin Willi [Tue, 8 Sep 2009 08:44:08 +0000 (10:44 +0200)]
pki tool --issue/--verify operations require a CA with CA basicConstraint

10 years agopki tool can set CA basicConstraint on --self/--issued certificates
Martin Willi [Tue, 8 Sep 2009 08:39:04 +0000 (10:39 +0200)]
pki tool can set CA basicConstraint on --self/--issued certificates

10 years agox509 plugin supports encoding of CA basicConstraint extension
Martin Willi [Tue, 8 Sep 2009 08:38:02 +0000 (10:38 +0200)]
x509 plugin supports encoding of CA basicConstraint extension

10 years agopki tool can issue certificates
Martin Willi [Mon, 7 Sep 2009 14:04:30 +0000 (16:04 +0200)]
pki tool can issue certificates

10 years agouse sysconfdir, no need for an additional confdir variable
Martin Willi [Mon, 7 Sep 2009 13:10:30 +0000 (15:10 +0200)]
use sysconfdir, no need for an additional confdir variable

10 years agoonly add generated m4 files to include path
Martin Willi [Mon, 7 Sep 2009 13:10:01 +0000 (15:10 +0200)]
only add generated m4 files to include path

10 years agoUse macros to define --with options
Martin Willi [Mon, 7 Sep 2009 10:07:57 +0000 (12:07 +0200)]
Use macros to define --with options

10 years agoUse macros to define --enable/--disable options
Martin Willi [Mon, 7 Sep 2009 08:34:14 +0000 (10:34 +0200)]
Use macros to define --enable/--disable options

10 years agoAdded a .gitignore for generated m4 scripts
Martin Willi [Mon, 7 Sep 2009 08:35:22 +0000 (10:35 +0200)]
Added a .gitignore for generated m4 scripts

10 years agouse m4/ autoconf subdirectory
Martin Willi [Mon, 7 Sep 2009 07:31:31 +0000 (09:31 +0200)]
use m4/ autoconf subdirectory

10 years agoRemoved trailing whitespaces in configure.in/Makefile.am
Martin Willi [Mon, 7 Sep 2009 09:46:16 +0000 (11:46 +0200)]
Removed trailing whitespaces in configure.in/Makefile.am

10 years agoCleaned up some code of the mediation extension.
Tobias Brunner [Fri, 4 Sep 2009 13:48:30 +0000 (15:48 +0200)]
Cleaned up some code of the mediation extension.

10 years agoMoved set_state after the DBG0 statement, so that the message gets logged also for...
Tobias Brunner [Fri, 4 Sep 2009 09:10:52 +0000 (11:10 +0200)]
Moved set_state after the DBG0 statement, so that the message gets logged also for mediation connections without CHILD_SA.

10 years agoremove spaces before tabs at the beginning of lines (^( )+\t)
Martin Willi [Fri, 4 Sep 2009 13:02:11 +0000 (15:02 +0200)]
remove spaces before tabs at the beginning of lines (^( )+\t)

10 years agoremove spaces within tabs (\t( )+\t)
Martin Willi [Fri, 4 Sep 2009 12:58:05 +0000 (14:58 +0200)]
remove spaces within tabs (\t( )+\t)

10 years agoreplaces four spaces by tabs, where appropriate
Martin Willi [Fri, 4 Sep 2009 12:50:23 +0000 (14:50 +0200)]
replaces four spaces by tabs, where appropriate

10 years agoremoved trailing spaces ([[:space:]]+$)
Martin Willi [Fri, 4 Sep 2009 11:46:09 +0000 (13:46 +0200)]
removed trailing spaces ([[:space:]]+$)

10 years agofixed open failure debug message in load_secrets
Marius Tomaschewski [Fri, 4 Sep 2009 09:36:36 +0000 (11:36 +0200)]
fixed open failure debug message in load_secrets

10 years agofixed memleak in rekey collissions
Martin Willi [Thu, 3 Sep 2009 16:09:29 +0000 (18:09 +0200)]
fixed memleak in rekey collissions

10 years agoConvert empty CREATE_CHILD_SA exchange to an INFORMATIONAL
Martin Willi [Thu, 3 Sep 2009 15:32:41 +0000 (17:32 +0200)]
Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL

10 years agoUse get_notify() to look up single notifies
Martin Willi [Thu, 3 Sep 2009 15:32:01 +0000 (17:32 +0200)]
Use get_notify() to look up single notifies

10 years agoaccept octet strings in is_asn1() check
Martin Willi [Thu, 3 Sep 2009 13:35:05 +0000 (15:35 +0200)]
accept octet strings in is_asn1() check

10 years agoUse recursive source address lookup if we get a gateway only
Martin Willi [Wed, 2 Sep 2009 09:47:14 +0000 (11:47 +0200)]
Use recursive source address lookup if we get a gateway only

10 years agoFixed load_secrets to acquire/release lock in level 0 only
Marius Tomaschewski [Wed, 2 Sep 2009 11:49:39 +0000 (13:49 +0200)]
Fixed load_secrets to acquire/release lock in level 0 only

The write_lock call fails with EDEADLK and unlocks in the
next recursion level.

10 years agoComplain about rw(un)lock errors
Martin Willi [Thu, 3 Sep 2009 12:27:33 +0000 (14:27 +0200)]
Complain about rw(un)lock errors

10 years agoSimplified the search for ME_CONNECTID notifies.
Tobias Brunner [Wed, 2 Sep 2009 15:29:02 +0000 (17:29 +0200)]
Simplified the search for ME_CONNECTID notifies.

10 years agoFixed some typos; whitespace cleanup.
Tobias Brunner [Wed, 2 Sep 2009 15:26:36 +0000 (17:26 +0200)]
Fixed some typos; whitespace cleanup.

10 years agoMissing commas added.
Tobias Brunner [Wed, 2 Sep 2009 14:12:52 +0000 (16:12 +0200)]
Missing commas added.

10 years agohandle plugin loading failures
Martin Willi [Tue, 1 Sep 2009 14:20:45 +0000 (16:20 +0200)]
handle plugin loading failures

10 years agoplugins marked with a '!' are handled as critical: cancel if loading fails
Martin Willi [Tue, 1 Sep 2009 14:08:28 +0000 (16:08 +0200)]
plugins marked with a '!' are handled as critical: cancel if loading fails

10 years agouse subjectPublicKeyInfo hash for CA certificate lookup
Martin Willi [Tue, 1 Sep 2009 12:05:58 +0000 (14:05 +0200)]
use subjectPublicKeyInfo hash for CA certificate lookup

10 years agoDescription of new lifetime limits added to manpage.
Tobias Brunner [Tue, 1 Sep 2009 10:48:59 +0000 (12:48 +0200)]
Description of new lifetime limits added to manpage.

10 years agoAdded lifetime/margintime keywords as alias for keylife/rekeymargin.
Tobias Brunner [Fri, 28 Aug 2009 15:10:08 +0000 (17:10 +0200)]
Added lifetime/margintime keywords as alias for keylife/rekeymargin.

10 years agoRefactored the lifetime_cfg_t struct to be simpler and more expressive. Initializatio...
Tobias Brunner [Fri, 28 Aug 2009 15:04:35 +0000 (17:04 +0200)]
Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static.

10 years agoHandling of new lifetime limits added to stroke.
Tobias Brunner [Thu, 27 Aug 2009 16:10:39 +0000 (18:10 +0200)]
Handling of new lifetime limits added to stroke.

10 years agoAdded keywords for the new lifetime limits to starter.
Tobias Brunner [Thu, 27 Aug 2009 16:09:26 +0000 (18:09 +0200)]
Added keywords for the new lifetime limits to starter.

10 years agoAdded parser for unsigned long long ints to starter.
Tobias Brunner [Thu, 27 Aug 2009 16:03:17 +0000 (18:03 +0200)]
Added parser for unsigned long long ints to starter.

10 years agoIf no inbound CHILD_SA is found, try to find an outbound SA.
Tobias Brunner [Thu, 27 Aug 2009 14:16:23 +0000 (16:16 +0200)]
If no inbound CHILD_SA is found, try to find an outbound SA.

Due to the new lifetime limits in- and outbound SAs may expire
individually.

10 years agoSet the packet and byte limits in the netlink and pfkey kernel interfaces.
Tobias Brunner [Thu, 27 Aug 2009 14:07:30 +0000 (16:07 +0200)]
Set the packet and byte limits in the netlink and pfkey kernel interfaces.

10 years agoTerminology and return value of get_lifetime of child_sa_t corrected.
Tobias Brunner [Thu, 27 Aug 2009 09:46:35 +0000 (11:46 +0200)]
Terminology and return value of get_lifetime of child_sa_t corrected.

10 years agochild_sa_t adapted to the new lifetime configuration.
Tobias Brunner [Thu, 27 Aug 2009 09:45:36 +0000 (11:45 +0200)]
child_sa_t adapted to the new lifetime configuration.

10 years agoAdapted the kernel interfaces to the new lifetime configuration.
Tobias Brunner [Thu, 27 Aug 2009 09:41:52 +0000 (11:41 +0200)]
Adapted the kernel interfaces to the new lifetime configuration.

10 years agoAdapted the config backends to the new lifetime configuration.
Tobias Brunner [Thu, 27 Aug 2009 09:38:13 +0000 (11:38 +0200)]
Adapted the config backends to the new lifetime configuration.

10 years agochild_cfg_t now takes a lifetime_cfg_t to configure the lifetime limits. Also adjuste...
Tobias Brunner [Thu, 27 Aug 2009 09:27:10 +0000 (11:27 +0200)]
child_cfg_t now takes a lifetime_cfg_t to configure the lifetime limits. Also adjusted the jitter calculation, so it works for values > RAND_MAX.