strongswan.git
13 years agorenewal of end entity certificates
Andreas Steffen [Fri, 18 Sep 2009 19:17:03 +0000 (21:17 +0200)]
renewal of end entity certificates

13 years agofixed --enable-eap-md5 and --enable-eap-gtc options
Andreas Steffen [Fri, 18 Sep 2009 16:23:26 +0000 (18:23 +0200)]
fixed --enable-eap-md5 and --enable-eap-gtc options

13 years agobackwards compatibility with SQL format
Andreas Steffen [Fri, 18 Sep 2009 05:22:07 +0000 (07:22 +0200)]
backwards compatibility with SQL format

13 years agoUse helper functions to handle (non-)skippable attributes
Martin Willi [Fri, 18 Sep 2009 13:08:43 +0000 (15:08 +0200)]
Use helper functions to handle (non-)skippable attributes

13 years agoClients can handle AKA-Identity requests by sending the full identity
Martin Willi [Fri, 18 Sep 2009 12:51:35 +0000 (14:51 +0200)]
Clients can handle AKA-Identity requests by sending the full identity

13 years agonm uses the distributions trusted root CAs if none is explicitly specified
Martin Willi [Fri, 18 Sep 2009 12:29:50 +0000 (14:29 +0200)]
nm uses the distributions trusted root CAs if none is explicitly specified

13 years agosome reformulations
Andreas Steffen [Thu, 17 Sep 2009 20:20:35 +0000 (22:20 +0200)]
some reformulations

13 years agoget_private() in listcacerts requires a valid auth cfg
Martin Willi [Thu, 17 Sep 2009 10:47:03 +0000 (12:47 +0200)]
get_private() in listcacerts requires a valid auth cfg

13 years agoFixed nexthop lookup, used by source route installation
Martin Willi [Wed, 16 Sep 2009 11:55:32 +0000 (13:55 +0200)]
Fixed nexthop lookup, used by source route installation

13 years agoUse continue to advance to next iteration
Martin Willi [Wed, 16 Sep 2009 11:32:47 +0000 (13:32 +0200)]
Use continue to advance to next iteration

13 years agoComplain about missing %defaultroute support only if one is actually used
Martin Willi [Wed, 16 Sep 2009 11:27:49 +0000 (13:27 +0200)]
Complain about missing %defaultroute support only if one is actually used

13 years agoUse the default debug hook if possible
Martin Willi [Wed, 16 Sep 2009 11:16:00 +0000 (13:16 +0200)]
Use the default debug hook if possible

13 years agoDefault logger implementation can be modified by dbg_default_set_level/stream
Martin Willi [Wed, 16 Sep 2009 11:06:16 +0000 (13:06 +0200)]
Default logger implementation can be modified by dbg_default_set_level/stream

13 years agoRemoved obsolete per-command debug level option
Martin Willi [Wed, 16 Sep 2009 10:52:56 +0000 (12:52 +0200)]
Removed obsolete per-command debug level option

13 years agoFixed loading of DER encoded certificate files
Martin Willi [Wed, 16 Sep 2009 09:24:35 +0000 (11:24 +0200)]
Fixed loading of DER encoded certificate files

13 years agocorrected usage
Andreas Steffen [Tue, 15 Sep 2009 20:43:22 +0000 (22:43 +0200)]
corrected usage

13 years agopki --req generates a PKCS#10 certificate request
Andreas Steffen [Tue, 15 Sep 2009 20:33:32 +0000 (22:33 +0200)]
pki --req generates a PKCS#10 certificate request

13 years agoimplemented ASN.1 encoding of PKCS#10 attributes
Andreas Steffen [Tue, 15 Sep 2009 19:55:44 +0000 (21:55 +0200)]
implemented ASN.1 encoding of PKCS#10 attributes

13 years agofixed typo
Andreas Steffen [Tue, 15 Sep 2009 14:48:13 +0000 (16:48 +0200)]
fixed typo

13 years agoDisable rtnetlink defaultroute lookup if pluto is disabled
Martin Willi [Tue, 15 Sep 2009 11:13:45 +0000 (13:13 +0200)]
Disable rtnetlink defaultroute lookup if pluto is disabled

As we do not support Pluto on BSD/Mac, exclude the Linux specific
rtnetlink routing lookup; Charon doesn't require it anyway.

13 years agoGet starter default route via rtnetlink
Heiko Hund [Tue, 8 Sep 2009 09:32:50 +0000 (11:32 +0200)]
Get starter default route via rtnetlink

This patch changes the way routes are fetched from the kernel by starter.

The way it's currently done (via /proc) is limited to routes in the
"main" routing table. Routes from the "default" table are never seen by
starter. Starter may miss the default route even if it's set. Thus, default
routes are now read from the "main" and the "default" table.

The way this code behaves if more than one default route is found is slightly
different to before. Instead of bailing out it just chooses the one with the best
metric. I thought this was be a reasonable change.

13 years agoHandle pki --debug and --options in a generic way for all command
Martin Willi [Tue, 15 Sep 2009 09:49:14 +0000 (11:49 +0200)]
Handle pki --debug and --options in a generic way for all command

13 years agopki tool supports single letter short options
Martin Willi [Tue, 15 Sep 2009 08:20:22 +0000 (10:20 +0200)]
pki tool supports single letter short options

13 years agoExponents of a RSA key in openssl are optional (for PGP)
Martin Willi [Tue, 15 Sep 2009 07:17:04 +0000 (09:17 +0200)]
Exponents of a RSA key in openssl are optional (for PGP)

13 years agoAdded some NEWS
Martin Willi [Tue, 15 Sep 2009 07:13:31 +0000 (09:13 +0200)]
Added some NEWS

13 years agoUse ID_KEY_ID as PGP user id, as it can contain any string
Martin Willi [Tue, 15 Sep 2009 06:45:08 +0000 (08:45 +0200)]
Use ID_KEY_ID as PGP user id, as it can contain any string

13 years agoFall back to default credential set lookup if fingerprint lookup fails
Martin Willi [Tue, 15 Sep 2009 06:44:10 +0000 (08:44 +0200)]
Fall back to default credential set lookup if fingerprint lookup fails

13 years agoImplemented support for preinstalled PGP certificates in charon
Martin Willi [Mon, 14 Sep 2009 18:04:48 +0000 (20:04 +0200)]
Implemented support for preinstalled PGP certificates in charon

13 years agoAdded basic support for PGP certificates (no trust relationships yet)
Martin Willi [Mon, 14 Sep 2009 14:56:54 +0000 (16:56 +0200)]
Added basic support for PGP certificates (no trust relationships yet)

13 years agoMoved generic PGP parsing functions to pgp_utils.[ch]
Martin Willi [Mon, 14 Sep 2009 14:06:19 +0000 (16:06 +0200)]
Moved generic PGP parsing functions to pgp_utils.[ch]

13 years agopki --pub and --keyid accept pkcs10 as input
Andreas Steffen [Tue, 15 Sep 2009 04:23:38 +0000 (06:23 +0200)]
pki --pub and --keyid accept pkcs10 as input

13 years agoreplaced the missed ${confdir} by ${sysconfdir}
Martin Willi [Mon, 14 Sep 2009 15:56:12 +0000 (17:56 +0200)]
replaced the missed ${confdir} by ${sysconfdir}

13 years agocheck if PKCS#10 version is 1
Andreas Steffen [Mon, 14 Sep 2009 17:38:57 +0000 (19:38 +0200)]
check if PKCS#10 version is 1

13 years agocosmetics
Andreas Steffen [Mon, 14 Sep 2009 17:28:56 +0000 (19:28 +0200)]
cosmetics

13 years agoenable debug level setting
Andreas Steffen [Mon, 14 Sep 2009 17:28:25 +0000 (19:28 +0200)]
enable debug level setting

13 years agoFixed pluto certificate parsing
Martin Willi [Mon, 14 Sep 2009 15:17:07 +0000 (17:17 +0200)]
Fixed pluto certificate parsing

13 years agoAdded support to build RSA keys from components in openssl
Martin Willi [Mon, 14 Sep 2009 12:29:10 +0000 (14:29 +0200)]
Added support to build RSA keys from components in openssl

13 years agosupport of PKCS#10 certificate request generation without attributes
Andreas Steffen [Sun, 13 Sep 2009 22:45:51 +0000 (00:45 +0200)]
support of PKCS#10 certificate request generation without attributes

13 years agoextended hasher_signature_algorithm_to_oid() function
Andreas Steffen [Sun, 13 Sep 2009 19:41:51 +0000 (21:41 +0200)]
extended hasher_signature_algorithm_to_oid() function

13 years agoremoved req.h
Andreas Steffen [Sun, 13 Sep 2009 19:03:36 +0000 (21:03 +0200)]
removed req.h

13 years agosupport of PKCS#10 certificate request parsing
Andreas Steffen [Sun, 13 Sep 2009 19:00:15 +0000 (21:00 +0200)]
support of PKCS#10 certificate request parsing

13 years agoparsing error caused segfault in destroy()
Andreas Steffen [Sun, 13 Sep 2009 18:56:12 +0000 (20:56 +0200)]
parsing error caused segfault in destroy()

13 years agoneed two PKCS#9 OIDs
Andreas Steffen [Sat, 12 Sep 2009 22:42:15 +0000 (00:42 +0200)]
need two PKCS#9 OIDs

13 years agocorrected captions
Andreas Steffen [Sat, 12 Sep 2009 15:39:15 +0000 (17:39 +0200)]
corrected captions

13 years agofixed another typo
Andreas Steffen [Sat, 12 Sep 2009 04:44:11 +0000 (06:44 +0200)]
fixed another typo

13 years agofixed typo
Andreas Steffen [Sat, 12 Sep 2009 04:42:35 +0000 (06:42 +0200)]
fixed typo

13 years agopki tool can issue/self-sign certificates with OCSP URIs
Martin Willi [Fri, 11 Sep 2009 15:17:56 +0000 (17:17 +0200)]
pki tool can issue/self-sign certificates with OCSP URIs

13 years agox509 plugin supports encoding of OCSP AuthorityInfo AccessLocations
Martin Willi [Fri, 11 Sep 2009 15:16:22 +0000 (17:16 +0200)]
x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations

13 years agoadded lost session cookie buffer
Martin Willi [Fri, 11 Sep 2009 14:23:15 +0000 (16:23 +0200)]
added lost session cookie buffer

13 years agoRemoved chunk_from_buf() in favor of a simpler chunk_from_chars() macro
Martin Willi [Fri, 11 Sep 2009 13:35:10 +0000 (15:35 +0200)]
Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro

13 years agopki tool can issue certificates with CRL distribution points
Martin Willi [Fri, 11 Sep 2009 09:45:42 +0000 (11:45 +0200)]
pki tool can issue certificates with CRL distribution points

13 years agox509 plugin supports encoding of CRL distribution points
Martin Willi [Fri, 11 Sep 2009 09:45:04 +0000 (11:45 +0200)]
x509 plugin supports encoding of CRL distribution points

13 years agodouble check session id has been initialized
Martin Willi [Thu, 10 Sep 2009 18:51:43 +0000 (20:51 +0200)]
double check session id has been initialized

13 years agopass NULL to library_init() to load settings from default file
Martin Willi [Tue, 8 Sep 2009 18:01:13 +0000 (20:01 +0200)]
pass NULL to library_init() to load settings from default file

13 years agouse NULL to load plugins from default plugin directory
Martin Willi [Tue, 8 Sep 2009 17:48:34 +0000 (19:48 +0200)]
use NULL to load plugins from default plugin directory

13 years agoremove obsolete @brief doxygen tags
Martin Willi [Mon, 7 Sep 2009 16:56:53 +0000 (18:56 +0200)]
remove obsolete @brief doxygen tags

13 years agoUse wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t
Martin Willi [Mon, 7 Sep 2009 16:50:02 +0000 (18:50 +0200)]
Use wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t

13 years agolibfast uses enumerator instead of deprecated iterator
Martin Willi [Mon, 7 Sep 2009 16:28:55 +0000 (18:28 +0200)]
libfast uses enumerator instead of deprecated iterator

13 years agoUpdated x509 plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:24:06 +0000 (16:24 +0200)]
Updated x509 plugin to the new builder API

13 years agoUpdated pubkey plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:23:41 +0000 (16:23 +0200)]
Updated pubkey plugin to the new builder API

13 years agoUpdated pkcs1 plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:23:26 +0000 (16:23 +0200)]
Updated pkcs1 plugin to the new builder API

13 years agoUpdated pgp plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:23:08 +0000 (16:23 +0200)]
Updated pgp plugin to the new builder API

13 years agoUpdated pem plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:22:42 +0000 (16:22 +0200)]
Updated pem plugin to the new builder API

13 years agoUpdated openssl plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:21:21 +0000 (16:21 +0200)]
Updated openssl plugin to the new builder API

13 years agoUpdated gmp plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:20:53 +0000 (16:20 +0200)]
Updated gmp plugin to the new builder API

13 years agoUpdated gcrypt plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:20:35 +0000 (16:20 +0200)]
Updated gcrypt plugin to the new builder API

13 years agoUpdated dnskey plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:19:44 +0000 (16:19 +0200)]
Updated dnskey plugin to the new builder API

13 years agoUpdated agent plugin to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:19:08 +0000 (16:19 +0200)]
Updated agent plugin to the new builder API

13 years agoUpdated pluto to the new builder API
Martin Willi [Wed, 9 Sep 2009 14:18:29 +0000 (16:18 +0200)]
Updated pluto to the new builder API

13 years agoReplaced builder_t objects by simple builder_function_t functions
Martin Willi [Wed, 9 Sep 2009 14:16:34 +0000 (16:16 +0200)]
Replaced builder_t objects by simple builder_function_t functions

13 years agoUse dynamic registration/usage invocation of command types
Martin Willi [Thu, 10 Sep 2009 10:44:06 +0000 (12:44 +0200)]
Use dynamic registration/usage invocation of command types

13 years agosplitted PKI tool to a file per command
Martin Willi [Thu, 10 Sep 2009 10:31:40 +0000 (12:31 +0200)]
splitted PKI tool to a file per command

13 years agouse generic option parsing with usage information
Martin Willi [Thu, 10 Sep 2009 09:18:41 +0000 (11:18 +0200)]
use generic option parsing with usage information

13 years agofixed memleak
Martin Willi [Wed, 9 Sep 2009 15:12:38 +0000 (17:12 +0200)]
fixed memleak

13 years agoevaluate arguments of chunk_clone/clonea/alloc/alloca only once
Martin Willi [Wed, 9 Sep 2009 11:30:31 +0000 (13:30 +0200)]
evaluate arguments of chunk_clone/clonea/alloc/alloca only once

13 years agosplit usage information
Andreas Steffen [Wed, 9 Sep 2009 00:37:17 +0000 (02:37 +0200)]
split usage information

13 years agoupdated usage of ipsec pki --self
Andreas Steffen [Tue, 8 Sep 2009 20:22:09 +0000 (22:22 +0200)]
updated usage of ipsec pki --self

13 years agosupport --options also in ipsec pki --self
Andreas Steffen [Tue, 8 Sep 2009 19:54:00 +0000 (21:54 +0200)]
support --options also in ipsec pki --self

13 years ago--options reads command line options from file
Andreas Steffen [Tue, 8 Sep 2009 19:36:35 +0000 (21:36 +0200)]
--options reads command line options from file

13 years agopki tool supports subjectAltNames in certificates
Martin Willi [Tue, 8 Sep 2009 11:27:35 +0000 (13:27 +0200)]
pki tool supports subjectAltNames in certificates

13 years agox509 certificates support encoding of email, DNS and IP subjectAltNames
Martin Willi [Tue, 8 Sep 2009 11:17:41 +0000 (13:17 +0200)]
x509 certificates support encoding of email, DNS and IP subjectAltNames

13 years agonon self-signed x509 certificates are encoded with authorityKeyIdentifier
Martin Willi [Tue, 8 Sep 2009 09:26:05 +0000 (11:26 +0200)]
non self-signed x509 certificates are encoded with authorityKeyIdentifier

13 years agox509 CA certificates are encoded with a subjectKeyIdentifier
Martin Willi [Tue, 8 Sep 2009 09:02:49 +0000 (11:02 +0200)]
x509 CA certificates are encoded with a subjectKeyIdentifier

13 years agopki tool --issue/--verify operations require a CA with CA basicConstraint
Martin Willi [Tue, 8 Sep 2009 08:44:08 +0000 (10:44 +0200)]
pki tool --issue/--verify operations require a CA with CA basicConstraint

13 years agopki tool can set CA basicConstraint on --self/--issued certificates
Martin Willi [Tue, 8 Sep 2009 08:39:04 +0000 (10:39 +0200)]
pki tool can set CA basicConstraint on --self/--issued certificates

13 years agox509 plugin supports encoding of CA basicConstraint extension
Martin Willi [Tue, 8 Sep 2009 08:38:02 +0000 (10:38 +0200)]
x509 plugin supports encoding of CA basicConstraint extension

13 years agopki tool can issue certificates
Martin Willi [Mon, 7 Sep 2009 14:04:30 +0000 (16:04 +0200)]
pki tool can issue certificates

13 years agouse sysconfdir, no need for an additional confdir variable
Martin Willi [Mon, 7 Sep 2009 13:10:30 +0000 (15:10 +0200)]
use sysconfdir, no need for an additional confdir variable

13 years agoonly add generated m4 files to include path
Martin Willi [Mon, 7 Sep 2009 13:10:01 +0000 (15:10 +0200)]
only add generated m4 files to include path

13 years agoUse macros to define --with options
Martin Willi [Mon, 7 Sep 2009 10:07:57 +0000 (12:07 +0200)]
Use macros to define --with options

13 years agoUse macros to define --enable/--disable options
Martin Willi [Mon, 7 Sep 2009 08:34:14 +0000 (10:34 +0200)]
Use macros to define --enable/--disable options

13 years agoAdded a .gitignore for generated m4 scripts
Martin Willi [Mon, 7 Sep 2009 08:35:22 +0000 (10:35 +0200)]
Added a .gitignore for generated m4 scripts

13 years agouse m4/ autoconf subdirectory
Martin Willi [Mon, 7 Sep 2009 07:31:31 +0000 (09:31 +0200)]
use m4/ autoconf subdirectory

13 years agoRemoved trailing whitespaces in configure.in/Makefile.am
Martin Willi [Mon, 7 Sep 2009 09:46:16 +0000 (11:46 +0200)]
Removed trailing whitespaces in configure.in/Makefile.am

13 years agoCleaned up some code of the mediation extension.
Tobias Brunner [Fri, 4 Sep 2009 13:48:30 +0000 (15:48 +0200)]
Cleaned up some code of the mediation extension.

13 years agoMoved set_state after the DBG0 statement, so that the message gets logged also for...
Tobias Brunner [Fri, 4 Sep 2009 09:10:52 +0000 (11:10 +0200)]
Moved set_state after the DBG0 statement, so that the message gets logged also for mediation connections without CHILD_SA.

13 years agoremove spaces before tabs at the beginning of lines (^( )+\t)
Martin Willi [Fri, 4 Sep 2009 13:02:11 +0000 (15:02 +0200)]
remove spaces before tabs at the beginning of lines (^( )+\t)

13 years agoremove spaces within tabs (\t( )+\t)
Martin Willi [Fri, 4 Sep 2009 12:58:05 +0000 (14:58 +0200)]
remove spaces within tabs (\t( )+\t)

13 years agoreplaces four spaces by tabs, where appropriate
Martin Willi [Fri, 4 Sep 2009 12:50:23 +0000 (14:50 +0200)]
replaces four spaces by tabs, where appropriate

13 years agoremoved trailing spaces ([[:space:]]+$)
Martin Willi [Fri, 4 Sep 2009 11:46:09 +0000 (13:46 +0200)]
removed trailing spaces ([[:space:]]+$)