3addf4e937
renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support other key types
2009-08-26 11:23:51 +02:00
caa00e7ab7
pluto uses KEY_ANY builder to parse PGP public keys
2009-08-26 11:23:50 +02:00
9493dd2ce0
implemented a pgp plugin providing PGP key parsing builders
2009-08-26 11:23:50 +02:00
4e3d1e804e
make use of the pkcs1 plugin in gcrypt rsa key parsing
2009-08-26 11:23:50 +02:00
3044774323
removed subjectPublicKeyInfo parsing, provided by pkcs1 plugin
2009-08-26 11:23:50 +02:00
1e0f69373a
implemented a pkcs1 plugin providing PKCS#1 key parsing builders
2009-08-26 11:23:50 +02:00
750bbcf9a8
added support for %prompt-ing private key passhprases in strokes "ipsec secrets"
2009-08-26 11:23:50 +02:00
7c2d883af7
show more information if building a credential fails
2009-08-26 11:23:50 +02:00
833dcfa530
log loaded private key/certificates
2009-08-26 11:23:50 +02:00
3f9ec06f6f
added getnetbyname/gethostbyname2 to leak detective whitelist, used by pluto
2009-08-26 11:23:50 +02:00
d47dc6d170
clone blobs passed to parse functions, check before free
2009-08-26 11:23:50 +02:00
89556140d0
fixed builder signature
2009-08-26 11:23:50 +02:00
ddf7c6ac7b
do not enumerate builders returning NULL
2009-08-26 11:23:50 +02:00
2b7e085dea
updated pubkey_speed test to use pem plugin
2009-08-26 11:23:49 +02:00
cbb62e8f4c
handle pluto specific certificates under CRED_CERTIFICATE, not as own credential kind
2009-08-26 11:23:49 +02:00
f11a78f10a
unified pluto builder implementations
2009-08-26 11:23:49 +02:00
94463a33b4
removed obsolete PEM code in pluto/libstrongswan
2009-08-26 11:23:49 +02:00
ccd0a624b6
use credential builder to build crls
2009-08-26 11:23:49 +02:00
37f5a0da2c
use credential builder to build attribute certificates
2009-08-26 11:23:49 +02:00
a5dc4a9585
moved builder hooks to a separate file
2009-08-26 11:23:49 +02:00
11aa7e7869
use a pluto specific credential builder to build pluto cert_t's
2009-08-26 11:23:49 +02:00
c486fa8158
removed obsolete pgp private key parsing, done by libstrongswan
2009-08-26 11:23:49 +02:00
dc816eacdf
use libstrongswan for private key loading, whack callback to read passphrase
2009-08-26 11:23:49 +02:00
4d15129160
pass along X509 flags when loading PEM encoded data
2009-08-26 11:23:49 +02:00
280469923d
make use of the pem helper plugin to load credentials
2009-08-26 11:23:49 +02:00
c9db16b7dd
added file loading support to pem plugin, using mmap()
2009-08-26 11:23:48 +02:00
160f4c225d
moved PEM parsing functionality to its own plugin
2009-08-26 11:23:48 +02:00
5672eae131
make boolean expression less enigmatic
2009-08-25 21:09:54 +02:00
eb641993d4
set stroke connection flags to a clear TRUE/FALSE
2009-08-25 19:57:36 +02:00
469083cc7d
disable lifetimes of allocated SPIs
...
The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine.
2009-08-25 18:15:25 +02:00
1bc0b4f795
remove incomplete SAs with PROTO_ESP
2009-08-25 18:12:55 +02:00
625b48b558
added URL for git repository served over git:// protocol
2009-08-21 10:52:39 +02:00
8bc2a8086c
version bump to 4.3.5
2009-08-18 18:35:37 +02:00
fc0ed07c1f
pruned OID tree
2009-08-18 18:24:26 +02:00
c8b543a6fc
fixed wrong emailAddress OID introduced by revision c31687da
2009-08-18 17:52:00 +02:00
333b461aa6
Fixing address resolution via getaddrinfo in libfreeswan.
2009-08-18 12:30:11 +02:00
8a17c1f907
check integrity of pool code file
2009-08-17 15:46:56 +02:00
bde541acf8
integrity test of openac and scepclient code files
2009-08-17 14:25:18 +02:00
430dd08a2b
NEWS for 4.3.4
2009-08-17 13:47:28 +02:00
51dfa7f592
reinitialize print arguments
2009-08-17 10:54:34 +02:00
2f5b1e0eb7
check success of library_init()
2009-08-14 22:13:51 +02:00
f1777dff59
Replacing gethostbyname, gethostbyname2 and their _r variants with getaddrinfo to increase portability.
2009-08-14 16:14:32 +02:00
26965b4ef3
OpenSolaris needs libsocket and libnsl for socket().
2009-08-14 14:50:53 +02:00
932fdc38de
Enable CMSG headers and macros on OpenSolaris.
2009-08-14 14:50:52 +02:00
8c3627c5ae
Added define to get sigwait with two parameters on OpenSolaris.
2009-08-14 14:50:51 +02:00
e580e0a9a2
sockio.h is required on OpenSolaris for SIOCGIFADDR.
2009-08-14 14:50:50 +02:00
647bd246e4
Replaced the strange definitions of IN6ADDR_ANY_INIT and IN6ADDR_LOOPBACK_INIT on OpenSolaris.
2009-08-14 14:50:49 +02:00
cc396286e8
Defined some missing fixed-width int types on OpenSolaris.
2009-08-14 14:50:22 +02:00
a3ccf95f3f
LOG_AUTHPRIV is not defined on OpenSolaris.
2009-08-14 13:37:07 +02:00
3901937d14
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
2009-08-14 13:30:59 +02:00
Martin Willi