strongswan.git
11 years agoDisable rtnetlink defaultroute lookup if pluto is disabled
Martin Willi [Tue, 15 Sep 2009 11:13:45 +0000 (13:13 +0200)]
Disable rtnetlink defaultroute lookup if pluto is disabled

As we do not support Pluto on BSD/Mac, exclude the Linux specific
rtnetlink routing lookup; Charon doesn't require it anyway.

11 years agoGet starter default route via rtnetlink
Heiko Hund [Tue, 8 Sep 2009 09:32:50 +0000 (11:32 +0200)]
Get starter default route via rtnetlink

This patch changes the way routes are fetched from the kernel by starter.

The way it's currently done (via /proc) is limited to routes in the
"main" routing table. Routes from the "default" table are never seen by
starter. Starter may miss the default route even if it's set. Thus, default
routes are now read from the "main" and the "default" table.

The way this code behaves if more than one default route is found is slightly
different to before. Instead of bailing out it just chooses the one with the best
metric. I thought this was be a reasonable change.

11 years agoHandle pki --debug and --options in a generic way for all command
Martin Willi [Tue, 15 Sep 2009 09:49:14 +0000 (11:49 +0200)]
Handle pki --debug and --options in a generic way for all command

11 years agopki tool supports single letter short options
Martin Willi [Tue, 15 Sep 2009 08:20:22 +0000 (10:20 +0200)]
pki tool supports single letter short options

11 years agoExponents of a RSA key in openssl are optional (for PGP)
Martin Willi [Tue, 15 Sep 2009 07:17:04 +0000 (09:17 +0200)]
Exponents of a RSA key in openssl are optional (for PGP)

11 years agoAdded some NEWS
Martin Willi [Tue, 15 Sep 2009 07:13:31 +0000 (09:13 +0200)]
Added some NEWS

11 years agoUse ID_KEY_ID as PGP user id, as it can contain any string
Martin Willi [Tue, 15 Sep 2009 06:45:08 +0000 (08:45 +0200)]
Use ID_KEY_ID as PGP user id, as it can contain any string

11 years agoFall back to default credential set lookup if fingerprint lookup fails
Martin Willi [Tue, 15 Sep 2009 06:44:10 +0000 (08:44 +0200)]
Fall back to default credential set lookup if fingerprint lookup fails

11 years agoImplemented support for preinstalled PGP certificates in charon
Martin Willi [Mon, 14 Sep 2009 18:04:48 +0000 (20:04 +0200)]
Implemented support for preinstalled PGP certificates in charon

11 years agoAdded basic support for PGP certificates (no trust relationships yet)
Martin Willi [Mon, 14 Sep 2009 14:56:54 +0000 (16:56 +0200)]
Added basic support for PGP certificates (no trust relationships yet)

11 years agoMoved generic PGP parsing functions to pgp_utils.[ch]
Martin Willi [Mon, 14 Sep 2009 14:06:19 +0000 (16:06 +0200)]
Moved generic PGP parsing functions to pgp_utils.[ch]

11 years agopki --pub and --keyid accept pkcs10 as input
Andreas Steffen [Tue, 15 Sep 2009 04:23:38 +0000 (06:23 +0200)]
pki --pub and --keyid accept pkcs10 as input

11 years agoreplaced the missed ${confdir} by ${sysconfdir}
Martin Willi [Mon, 14 Sep 2009 15:56:12 +0000 (17:56 +0200)]
replaced the missed ${confdir} by ${sysconfdir}

11 years agocheck if PKCS#10 version is 1
Andreas Steffen [Mon, 14 Sep 2009 17:38:57 +0000 (19:38 +0200)]
check if PKCS#10 version is 1

11 years agocosmetics
Andreas Steffen [Mon, 14 Sep 2009 17:28:56 +0000 (19:28 +0200)]
cosmetics

11 years agoenable debug level setting
Andreas Steffen [Mon, 14 Sep 2009 17:28:25 +0000 (19:28 +0200)]
enable debug level setting

11 years agoFixed pluto certificate parsing
Martin Willi [Mon, 14 Sep 2009 15:17:07 +0000 (17:17 +0200)]
Fixed pluto certificate parsing

11 years agoAdded support to build RSA keys from components in openssl
Martin Willi [Mon, 14 Sep 2009 12:29:10 +0000 (14:29 +0200)]
Added support to build RSA keys from components in openssl

11 years agosupport of PKCS#10 certificate request generation without attributes
Andreas Steffen [Sun, 13 Sep 2009 22:45:51 +0000 (00:45 +0200)]
support of PKCS#10 certificate request generation without attributes

11 years agoextended hasher_signature_algorithm_to_oid() function
Andreas Steffen [Sun, 13 Sep 2009 19:41:51 +0000 (21:41 +0200)]
extended hasher_signature_algorithm_to_oid() function

11 years agoremoved req.h
Andreas Steffen [Sun, 13 Sep 2009 19:03:36 +0000 (21:03 +0200)]
removed req.h

11 years agosupport of PKCS#10 certificate request parsing
Andreas Steffen [Sun, 13 Sep 2009 19:00:15 +0000 (21:00 +0200)]
support of PKCS#10 certificate request parsing

11 years agoparsing error caused segfault in destroy()
Andreas Steffen [Sun, 13 Sep 2009 18:56:12 +0000 (20:56 +0200)]
parsing error caused segfault in destroy()

11 years agoneed two PKCS#9 OIDs
Andreas Steffen [Sat, 12 Sep 2009 22:42:15 +0000 (00:42 +0200)]
need two PKCS#9 OIDs

11 years agocorrected captions
Andreas Steffen [Sat, 12 Sep 2009 15:39:15 +0000 (17:39 +0200)]
corrected captions

11 years agofixed another typo
Andreas Steffen [Sat, 12 Sep 2009 04:44:11 +0000 (06:44 +0200)]
fixed another typo

11 years agofixed typo
Andreas Steffen [Sat, 12 Sep 2009 04:42:35 +0000 (06:42 +0200)]
fixed typo

11 years agopki tool can issue/self-sign certificates with OCSP URIs
Martin Willi [Fri, 11 Sep 2009 15:17:56 +0000 (17:17 +0200)]
pki tool can issue/self-sign certificates with OCSP URIs

11 years agox509 plugin supports encoding of OCSP AuthorityInfo AccessLocations
Martin Willi [Fri, 11 Sep 2009 15:16:22 +0000 (17:16 +0200)]
x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations

11 years agoadded lost session cookie buffer
Martin Willi [Fri, 11 Sep 2009 14:23:15 +0000 (16:23 +0200)]
added lost session cookie buffer

11 years agoRemoved chunk_from_buf() in favor of a simpler chunk_from_chars() macro
Martin Willi [Fri, 11 Sep 2009 13:35:10 +0000 (15:35 +0200)]
Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro

11 years agopki tool can issue certificates with CRL distribution points
Martin Willi [Fri, 11 Sep 2009 09:45:42 +0000 (11:45 +0200)]
pki tool can issue certificates with CRL distribution points

11 years agox509 plugin supports encoding of CRL distribution points
Martin Willi [Fri, 11 Sep 2009 09:45:04 +0000 (11:45 +0200)]
x509 plugin supports encoding of CRL distribution points

11 years agodouble check session id has been initialized
Martin Willi [Thu, 10 Sep 2009 18:51:43 +0000 (20:51 +0200)]
double check session id has been initialized

11 years agopass NULL to library_init() to load settings from default file
Martin Willi [Tue, 8 Sep 2009 18:01:13 +0000 (20:01 +0200)]
pass NULL to library_init() to load settings from default file

11 years agouse NULL to load plugins from default plugin directory
Martin Willi [Tue, 8 Sep 2009 17:48:34 +0000 (19:48 +0200)]
use NULL to load plugins from default plugin directory

11 years agoremove obsolete @brief doxygen tags
Martin Willi [Mon, 7 Sep 2009 16:56:53 +0000 (18:56 +0200)]
remove obsolete @brief doxygen tags

11 years agoUse wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t
Martin Willi [Mon, 7 Sep 2009 16:50:02 +0000 (18:50 +0200)]
Use wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t

11 years agolibfast uses enumerator instead of deprecated iterator
Martin Willi [Mon, 7 Sep 2009 16:28:55 +0000 (18:28 +0200)]
libfast uses enumerator instead of deprecated iterator

11 years agoUpdated x509 plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:24:06 +0000 (16:24 +0200)]
Updated x509 plugin to the new builder API

11 years agoUpdated pubkey plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:23:41 +0000 (16:23 +0200)]
Updated pubkey plugin to the new builder API

11 years agoUpdated pkcs1 plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:23:26 +0000 (16:23 +0200)]
Updated pkcs1 plugin to the new builder API

11 years agoUpdated pgp plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:23:08 +0000 (16:23 +0200)]
Updated pgp plugin to the new builder API

11 years agoUpdated pem plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:22:42 +0000 (16:22 +0200)]
Updated pem plugin to the new builder API

11 years agoUpdated openssl plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:21:21 +0000 (16:21 +0200)]
Updated openssl plugin to the new builder API

11 years agoUpdated gmp plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:20:53 +0000 (16:20 +0200)]
Updated gmp plugin to the new builder API

11 years agoUpdated gcrypt plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:20:35 +0000 (16:20 +0200)]
Updated gcrypt plugin to the new builder API

11 years agoUpdated dnskey plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:19:44 +0000 (16:19 +0200)]
Updated dnskey plugin to the new builder API

11 years agoUpdated agent plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:19:08 +0000 (16:19 +0200)]
Updated agent plugin to the new builder API

11 years agoUpdated pluto to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:18:29 +0000 (16:18 +0200)]
Updated pluto to the new builder API

11 years agoReplaced builder_t objects by simple builder_function_t functions
Martin Willi [Wed, 9 Sep 2009 14:16:34 +0000 (16:16 +0200)]
Replaced builder_t objects by simple builder_function_t functions

11 years agoUse dynamic registration/usage invocation of command types
Martin Willi [Thu, 10 Sep 2009 10:44:06 +0000 (12:44 +0200)]
Use dynamic registration/usage invocation of command types

11 years agosplitted PKI tool to a file per command
Martin Willi [Thu, 10 Sep 2009 10:31:40 +0000 (12:31 +0200)]
splitted PKI tool to a file per command

11 years agouse generic option parsing with usage information
Martin Willi [Thu, 10 Sep 2009 09:18:41 +0000 (11:18 +0200)]
use generic option parsing with usage information

11 years agofixed memleak
Martin Willi [Wed, 9 Sep 2009 15:12:38 +0000 (17:12 +0200)]
fixed memleak

11 years agoevaluate arguments of chunk_clone/clonea/alloc/alloca only once
Martin Willi [Wed, 9 Sep 2009 11:30:31 +0000 (13:30 +0200)]
evaluate arguments of chunk_clone/clonea/alloc/alloca only once

11 years agosplit usage information
Andreas Steffen [Wed, 9 Sep 2009 00:37:17 +0000 (02:37 +0200)]
split usage information

11 years agoupdated usage of ipsec pki --self
Andreas Steffen [Tue, 8 Sep 2009 20:22:09 +0000 (22:22 +0200)]
updated usage of ipsec pki --self

11 years agosupport --options also in ipsec pki --self
Andreas Steffen [Tue, 8 Sep 2009 19:54:00 +0000 (21:54 +0200)]
support --options also in ipsec pki --self

11 years ago--options reads command line options from file
Andreas Steffen [Tue, 8 Sep 2009 19:36:35 +0000 (21:36 +0200)]
--options reads command line options from file

11 years agopki tool supports subjectAltNames in certificates
Martin Willi [Tue, 8 Sep 2009 11:27:35 +0000 (13:27 +0200)]
pki tool supports subjectAltNames in certificates

11 years agox509 certificates support encoding of email, DNS and IP subjectAltNames
Martin Willi [Tue, 8 Sep 2009 11:17:41 +0000 (13:17 +0200)]
x509 certificates support encoding of email, DNS and IP subjectAltNames

11 years agonon self-signed x509 certificates are encoded with authorityKeyIdentifier
Martin Willi [Tue, 8 Sep 2009 09:26:05 +0000 (11:26 +0200)]
non self-signed x509 certificates are encoded with authorityKeyIdentifier

11 years agox509 CA certificates are encoded with a subjectKeyIdentifier
Martin Willi [Tue, 8 Sep 2009 09:02:49 +0000 (11:02 +0200)]
x509 CA certificates are encoded with a subjectKeyIdentifier

11 years agopki tool --issue/--verify operations require a CA with CA basicConstraint
Martin Willi [Tue, 8 Sep 2009 08:44:08 +0000 (10:44 +0200)]
pki tool --issue/--verify operations require a CA with CA basicConstraint

11 years agopki tool can set CA basicConstraint on --self/--issued certificates
Martin Willi [Tue, 8 Sep 2009 08:39:04 +0000 (10:39 +0200)]
pki tool can set CA basicConstraint on --self/--issued certificates

11 years agox509 plugin supports encoding of CA basicConstraint extension
Martin Willi [Tue, 8 Sep 2009 08:38:02 +0000 (10:38 +0200)]
x509 plugin supports encoding of CA basicConstraint extension

11 years agopki tool can issue certificates
Martin Willi [Mon, 7 Sep 2009 14:04:30 +0000 (16:04 +0200)]
pki tool can issue certificates

11 years agouse sysconfdir, no need for an additional confdir variable
Martin Willi [Mon, 7 Sep 2009 13:10:30 +0000 (15:10 +0200)]
use sysconfdir, no need for an additional confdir variable

11 years agoonly add generated m4 files to include path
Martin Willi [Mon, 7 Sep 2009 13:10:01 +0000 (15:10 +0200)]
only add generated m4 files to include path

11 years agoUse macros to define --with options
Martin Willi [Mon, 7 Sep 2009 10:07:57 +0000 (12:07 +0200)]
Use macros to define --with options

11 years agoUse macros to define --enable/--disable options
Martin Willi [Mon, 7 Sep 2009 08:34:14 +0000 (10:34 +0200)]
Use macros to define --enable/--disable options

11 years agoAdded a .gitignore for generated m4 scripts
Martin Willi [Mon, 7 Sep 2009 08:35:22 +0000 (10:35 +0200)]
Added a .gitignore for generated m4 scripts

11 years agouse m4/ autoconf subdirectory
Martin Willi [Mon, 7 Sep 2009 07:31:31 +0000 (09:31 +0200)]
use m4/ autoconf subdirectory

11 years agoRemoved trailing whitespaces in configure.in/Makefile.am
Martin Willi [Mon, 7 Sep 2009 09:46:16 +0000 (11:46 +0200)]
Removed trailing whitespaces in configure.in/Makefile.am

11 years agoCleaned up some code of the mediation extension.
Tobias Brunner [Fri, 4 Sep 2009 13:48:30 +0000 (15:48 +0200)]
Cleaned up some code of the mediation extension.

11 years agoMoved set_state after the DBG0 statement, so that the message gets logged also for...
Tobias Brunner [Fri, 4 Sep 2009 09:10:52 +0000 (11:10 +0200)]
Moved set_state after the DBG0 statement, so that the message gets logged also for mediation connections without CHILD_SA.

11 years agoremove spaces before tabs at the beginning of lines (^( )+\t)
Martin Willi [Fri, 4 Sep 2009 13:02:11 +0000 (15:02 +0200)]
remove spaces before tabs at the beginning of lines (^( )+\t)

11 years agoremove spaces within tabs (\t( )+\t)
Martin Willi [Fri, 4 Sep 2009 12:58:05 +0000 (14:58 +0200)]
remove spaces within tabs (\t( )+\t)

11 years agoreplaces four spaces by tabs, where appropriate
Martin Willi [Fri, 4 Sep 2009 12:50:23 +0000 (14:50 +0200)]
replaces four spaces by tabs, where appropriate

11 years agoremoved trailing spaces ([[:space:]]+$)
Martin Willi [Fri, 4 Sep 2009 11:46:09 +0000 (13:46 +0200)]
removed trailing spaces ([[:space:]]+$)

11 years agofixed open failure debug message in load_secrets
Marius Tomaschewski [Fri, 4 Sep 2009 09:36:36 +0000 (11:36 +0200)]
fixed open failure debug message in load_secrets

11 years agofixed memleak in rekey collissions
Martin Willi [Thu, 3 Sep 2009 16:09:29 +0000 (18:09 +0200)]
fixed memleak in rekey collissions

11 years agoConvert empty CREATE_CHILD_SA exchange to an INFORMATIONAL
Martin Willi [Thu, 3 Sep 2009 15:32:41 +0000 (17:32 +0200)]
Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL

11 years agoUse get_notify() to look up single notifies
Martin Willi [Thu, 3 Sep 2009 15:32:01 +0000 (17:32 +0200)]
Use get_notify() to look up single notifies

11 years agoaccept octet strings in is_asn1() check
Martin Willi [Thu, 3 Sep 2009 13:35:05 +0000 (15:35 +0200)]
accept octet strings in is_asn1() check

11 years agoUse recursive source address lookup if we get a gateway only
Martin Willi [Wed, 2 Sep 2009 09:47:14 +0000 (11:47 +0200)]
Use recursive source address lookup if we get a gateway only

11 years agoFixed load_secrets to acquire/release lock in level 0 only
Marius Tomaschewski [Wed, 2 Sep 2009 11:49:39 +0000 (13:49 +0200)]
Fixed load_secrets to acquire/release lock in level 0 only

The write_lock call fails with EDEADLK and unlocks in the
next recursion level.

11 years agoComplain about rw(un)lock errors
Martin Willi [Thu, 3 Sep 2009 12:27:33 +0000 (14:27 +0200)]
Complain about rw(un)lock errors

11 years agoSimplified the search for ME_CONNECTID notifies.
Tobias Brunner [Wed, 2 Sep 2009 15:29:02 +0000 (17:29 +0200)]
Simplified the search for ME_CONNECTID notifies.

11 years agoFixed some typos; whitespace cleanup.
Tobias Brunner [Wed, 2 Sep 2009 15:26:36 +0000 (17:26 +0200)]
Fixed some typos; whitespace cleanup.

11 years agoMissing commas added.
Tobias Brunner [Wed, 2 Sep 2009 14:12:52 +0000 (16:12 +0200)]
Missing commas added.

11 years agohandle plugin loading failures
Martin Willi [Tue, 1 Sep 2009 14:20:45 +0000 (16:20 +0200)]
handle plugin loading failures

11 years agoplugins marked with a '!' are handled as critical: cancel if loading fails
Martin Willi [Tue, 1 Sep 2009 14:08:28 +0000 (16:08 +0200)]
plugins marked with a '!' are handled as critical: cancel if loading fails

11 years agouse subjectPublicKeyInfo hash for CA certificate lookup
Martin Willi [Tue, 1 Sep 2009 12:05:58 +0000 (14:05 +0200)]
use subjectPublicKeyInfo hash for CA certificate lookup

11 years agoDescription of new lifetime limits added to manpage.
Tobias Brunner [Tue, 1 Sep 2009 10:48:59 +0000 (12:48 +0200)]
Description of new lifetime limits added to manpage.

11 years agoAdded lifetime/margintime keywords as alias for keylife/rekeymargin.
Tobias Brunner [Fri, 28 Aug 2009 15:10:08 +0000 (17:10 +0200)]
Added lifetime/margintime keywords as alias for keylife/rekeymargin.

11 years agoRefactored the lifetime_cfg_t struct to be simpler and more expressive. Initializatio...
Tobias Brunner [Fri, 28 Aug 2009 15:04:35 +0000 (17:04 +0200)]
Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static.

11 years agoHandling of new lifetime limits added to stroke.
Tobias Brunner [Thu, 27 Aug 2009 16:10:39 +0000 (18:10 +0200)]
Handling of new lifetime limits added to stroke.

11 years agoAdded keywords for the new lifetime limits to starter.
Tobias Brunner [Thu, 27 Aug 2009 16:09:26 +0000 (18:09 +0200)]
Added keywords for the new lifetime limits to starter.