Martin Willi
|
56d461a1f1
|
listing routed connection in statusall
|
2009-05-08 10:04:00 +02:00 |
Tobias Brunner
|
8c5d72cd0b
|
removing svn keyword $Id$ from all files
|
2009-04-30 13:19:35 +00:00 |
Tobias Brunner
|
d24a74c5b4
|
merging changes from portability branch back to trunk
important change for developers: %Y replaces %D to print identities!
|
2009-04-30 11:37:54 +00:00 |
Andreas Steffen
|
226308ebc4
|
l format modifier outputs garbage on 64 bit platforms
|
2009-04-22 10:43:39 +00:00 |
Martin Willi
|
a44bb9345f
|
merged multi-auth branch back into trunk
|
2009-04-14 10:34:24 +00:00 |
Tobias Brunner
|
d25ce3701e
|
printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms).
|
2009-03-12 18:07:32 +00:00 |
Andreas Steffen
|
77e7eede36
|
ipsec statusall <conn> also filters address pools
|
2009-03-03 10:30:59 +00:00 |
Andreas Steffen
|
a584a231b1
|
fixed a 64-bit issue with time_t printf hooks
|
2009-02-11 16:37:16 +00:00 |
Andreas Steffen
|
67701cfdce
|
fixed broken listing of connections in ipsec statusall
|
2009-01-14 08:10:16 +00:00 |
Martin Willi
|
6b83549d1a
|
list assigned leases using "ipsec leases"
|
2008-12-10 13:00:02 +00:00 |
Martin Willi
|
ed2bcd0315
|
added IKE_SA established timer to "ipsec statusall"
|
2008-12-10 09:59:35 +00:00 |
Martin Willi
|
2e03196551
|
list pools and usage in ipsec statusall
|
2008-12-09 13:24:12 +00:00 |
Andreas Steffen
|
ad60c249b6
|
show TRANSPORT_PROXY mode in ipsec status
|
2008-11-16 21:19:17 +00:00 |
Martin Willi
|
e13389a7f7
|
got rid of deprecated create_iterator_locked()
|
2008-11-05 08:32:38 +00:00 |
Martin Willi
|
5dffdea1d7
|
added hooks for IKE and CHILD keymat
|
2008-10-30 12:58:54 +00:00 |
Martin Willi
|
80853d8498
|
moved CHILD_SA key derivation to keymat_t
passing key chunks to CHILD_SA, not the PRF
|
2008-10-29 16:06:16 +00:00 |
Martin Willi
|
6a4ff35cc4
|
moved key derivation and management into keymat object
allows secured implementation of key management (e.g. in kernel or HW)
only IKE keys for now
|
2008-10-28 16:07:06 +00:00 |
Martin Willi
|
3c8234d408
|
store IKE proposal implicitly during derive_keys
|
2008-10-28 10:12:21 +00:00 |
Martin Willi
|
20fb671904
|
fixed reauthentication time in statusall
|
2008-10-28 09:41:33 +00:00 |
Martin Willi
|
85ac2fa547
|
use more generic stats getter, introducing new stats
|
2008-10-27 14:51:00 +00:00 |
Martin Willi
|
82d20c0588
|
additional getters for ipcomp and UDP encap
|
2008-10-24 09:51:48 +00:00 |
Martin Willi
|
6e10aeadab
|
more CHILD_SA refactorings
|
2008-10-24 08:02:35 +00:00 |
Martin Willi
|
1df106bf39
|
cache keys for in and outbound ESP SAs
removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t)
creating TS pairs dynamically using create_policy_enumerator()
|
2008-10-15 12:24:44 +00:00 |
Martin Willi
|
9f4e5f8c47
|
store ESP keys in CHILD_SA
|
2008-10-15 08:37:56 +00:00 |
Andreas Steffen
|
d1cbe55127
|
implemented ipsec listalgs as a stroke command
|
2008-10-08 07:00:13 +00:00 |
Tobias Brunner
|
a341a68fac
|
merging renaming of mode_t to ipsec_mode_t back to trunk
|
2008-09-25 13:56:23 +00:00 |
Tobias Brunner
|
507f26f685
|
merging modularized kernel interface back to trunk
|
2008-09-25 07:56:58 +00:00 |
Andreas Steffen
|
b33c11b6c7
|
stroke parses and lists AC groups
|
2008-09-17 02:17:01 +00:00 |
Andreas Steffen
|
8fa6f2dc66
|
streamlined ipsec listalgs output
|
2008-08-29 05:35:09 +00:00 |
Martin Willi
|
9482208633
|
crypto_factory algorithm enumeration API
implementation of "ipsec listalgs"
|
2008-08-28 09:24:42 +00:00 |
Andreas Steffen
|
41dc6b56b0
|
ipsec statusall lists eap_type and eap_identity
|
2008-08-26 19:45:44 +00:00 |
Andreas Steffen
|
919019b3cd
|
completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes
|
2008-08-26 05:15:34 +00:00 |
Andreas Steffen
|
3c87e92695
|
list CA restrictions in ipsec statusall
|
2008-08-25 12:35:18 +00:00 |
Martin Willi
|
822901061b
|
ported parts of two-sim branch
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
|
2008-08-22 10:44:51 +00:00 |
Andreas Steffen
|
32f5ee159e
|
cosmetics
|
2008-07-22 12:13:48 +00:00 |
Andreas Steffen
|
66da78b4bb
|
ipsec status lists IPCOMP CPIs
|
2008-07-22 12:03:58 +00:00 |
Andreas Steffen
|
eba7470b76
|
consistent logging of SPIs and CPIs
|
2008-07-22 10:16:45 +00:00 |
Andreas Steffen
|
2c258d7373
|
ipsec statusall displays dpd options
|
2008-07-02 10:48:57 +00:00 |
Andreas Steffen
|
5397a7f91d
|
show authentication method in ipsec statusall
|
2008-06-30 17:08:47 +00:00 |
Martin Willi
|
eec675bf8c
|
enumerating loaded plugins in "ipsec statusall"
|
2008-06-24 12:49:04 +00:00 |
Andreas Steffen
|
bc997f6583
|
display selected IKE proposal in ipsec statusall
|
2008-06-22 11:24:33 +00:00 |
Martin Willi
|
5a22a02156
|
DNS resolving of ike_cfg hosts dynamically on demand
|
2008-06-06 15:05:54 +00:00 |
Andreas Steffen
|
0672aa7b0e
|
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
|
2008-05-23 14:24:24 +00:00 |
Andreas Steffen
|
7199d22e77
|
implement basic listing of attribute certificates
|
2008-05-22 21:58:22 +00:00 |
Andreas Steffen
|
a327ee9589
|
suppress listing of integrity algorithm if it is undefined
|
2008-05-17 21:52:58 +00:00 |
Martin Willi
|
a593db5d35
|
ike_sa_manager enumerable, not iterable
|
2008-04-14 11:37:46 +00:00 |
Martin Willi
|
1749642b15
|
use cert->equals() to filter out equal certificates in seperate instances
|
2008-04-07 08:48:08 +00:00 |
Martin Willi
|
e29ebcb1af
|
fixed compile warnings
|
2008-04-02 09:54:20 +00:00 |
Andreas Steffen
|
392f4e17c2
|
minimal stroke_list_ocsp() implementation
|
2008-04-01 12:11:09 +00:00 |
Andreas Steffen
|
946d1ecd59
|
stroke_list groups certificates by issuer
|
2008-04-01 10:26:27 +00:00 |