Commit Graph

54 Commits

Author SHA1 Message Date
Martin Willi 56d461a1f1 listing routed connection in statusall 2009-05-08 10:04:00 +02:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Andreas Steffen 226308ebc4 l format modifier outputs garbage on 64 bit platforms 2009-04-22 10:43:39 +00:00
Martin Willi a44bb9345f merged multi-auth branch back into trunk 2009-04-14 10:34:24 +00:00
Tobias Brunner d25ce3701e printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms). 2009-03-12 18:07:32 +00:00
Andreas Steffen 77e7eede36 ipsec statusall <conn> also filters address pools 2009-03-03 10:30:59 +00:00
Andreas Steffen a584a231b1 fixed a 64-bit issue with time_t printf hooks 2009-02-11 16:37:16 +00:00
Andreas Steffen 67701cfdce fixed broken listing of connections in ipsec statusall 2009-01-14 08:10:16 +00:00
Martin Willi 6b83549d1a list assigned leases using "ipsec leases" 2008-12-10 13:00:02 +00:00
Martin Willi ed2bcd0315 added IKE_SA established timer to "ipsec statusall" 2008-12-10 09:59:35 +00:00
Martin Willi 2e03196551 list pools and usage in ipsec statusall 2008-12-09 13:24:12 +00:00
Andreas Steffen ad60c249b6 show TRANSPORT_PROXY mode in ipsec status 2008-11-16 21:19:17 +00:00
Martin Willi e13389a7f7 got rid of deprecated create_iterator_locked() 2008-11-05 08:32:38 +00:00
Martin Willi 5dffdea1d7 added hooks for IKE and CHILD keymat 2008-10-30 12:58:54 +00:00
Martin Willi 80853d8498 moved CHILD_SA key derivation to keymat_t
passing key chunks to CHILD_SA, not the PRF
2008-10-29 16:06:16 +00:00
Martin Willi 6a4ff35cc4 moved key derivation and management into keymat object
allows secured implementation of key management (e.g. in kernel or HW)
	only IKE keys for now
2008-10-28 16:07:06 +00:00
Martin Willi 3c8234d408 store IKE proposal implicitly during derive_keys 2008-10-28 10:12:21 +00:00
Martin Willi 20fb671904 fixed reauthentication time in statusall 2008-10-28 09:41:33 +00:00
Martin Willi 85ac2fa547 use more generic stats getter, introducing new stats 2008-10-27 14:51:00 +00:00
Martin Willi 82d20c0588 additional getters for ipcomp and UDP encap 2008-10-24 09:51:48 +00:00
Martin Willi 6e10aeadab more CHILD_SA refactorings 2008-10-24 08:02:35 +00:00
Martin Willi 1df106bf39 cache keys for in and outbound ESP SAs
removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t)
creating TS pairs dynamically using create_policy_enumerator()
2008-10-15 12:24:44 +00:00
Martin Willi 9f4e5f8c47 store ESP keys in CHILD_SA 2008-10-15 08:37:56 +00:00
Andreas Steffen d1cbe55127 implemented ipsec listalgs as a stroke command 2008-10-08 07:00:13 +00:00
Tobias Brunner a341a68fac merging renaming of mode_t to ipsec_mode_t back to trunk 2008-09-25 13:56:23 +00:00
Tobias Brunner 507f26f685 merging modularized kernel interface back to trunk 2008-09-25 07:56:58 +00:00
Andreas Steffen b33c11b6c7 stroke parses and lists AC groups 2008-09-17 02:17:01 +00:00
Andreas Steffen 8fa6f2dc66 streamlined ipsec listalgs output 2008-08-29 05:35:09 +00:00
Martin Willi 9482208633 crypto_factory algorithm enumeration API
implementation of "ipsec listalgs"
2008-08-28 09:24:42 +00:00
Andreas Steffen 41dc6b56b0 ipsec statusall lists eap_type and eap_identity 2008-08-26 19:45:44 +00:00
Andreas Steffen 919019b3cd completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes 2008-08-26 05:15:34 +00:00
Andreas Steffen 3c87e92695 list CA restrictions in ipsec statusall 2008-08-25 12:35:18 +00:00
Martin Willi 822901061b ported parts of two-sim branch
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
2008-08-22 10:44:51 +00:00
Andreas Steffen 32f5ee159e cosmetics 2008-07-22 12:13:48 +00:00
Andreas Steffen 66da78b4bb ipsec status lists IPCOMP CPIs 2008-07-22 12:03:58 +00:00
Andreas Steffen eba7470b76 consistent logging of SPIs and CPIs 2008-07-22 10:16:45 +00:00
Andreas Steffen 2c258d7373 ipsec statusall displays dpd options 2008-07-02 10:48:57 +00:00
Andreas Steffen 5397a7f91d show authentication method in ipsec statusall 2008-06-30 17:08:47 +00:00
Martin Willi eec675bf8c enumerating loaded plugins in "ipsec statusall" 2008-06-24 12:49:04 +00:00
Andreas Steffen bc997f6583 display selected IKE proposal in ipsec statusall 2008-06-22 11:24:33 +00:00
Martin Willi 5a22a02156 DNS resolving of ike_cfg hosts dynamically on demand 2008-06-06 15:05:54 +00:00
Andreas Steffen 0672aa7b0e added display of holderIssuer, holderSerial, and authorityKeyIdentifier 2008-05-23 14:24:24 +00:00
Andreas Steffen 7199d22e77 implement basic listing of attribute certificates 2008-05-22 21:58:22 +00:00
Andreas Steffen a327ee9589 suppress listing of integrity algorithm if it is undefined 2008-05-17 21:52:58 +00:00
Martin Willi a593db5d35 ike_sa_manager enumerable, not iterable 2008-04-14 11:37:46 +00:00
Martin Willi 1749642b15 use cert->equals() to filter out equal certificates in seperate instances 2008-04-07 08:48:08 +00:00
Martin Willi e29ebcb1af fixed compile warnings 2008-04-02 09:54:20 +00:00
Andreas Steffen 392f4e17c2 minimal stroke_list_ocsp() implementation 2008-04-01 12:11:09 +00:00
Andreas Steffen 946d1ecd59 stroke_list groups certificates by issuer 2008-04-01 10:26:27 +00:00