Commit Graph

65 Commits

Author SHA1 Message Date
Andreas Steffen 4a620a97a0 aikpub2: Removed aikpub2 tool
The aikpub2 tool has been replaced by pki --pub|--req --keyid hex ..
where keyid indicates the TPM 2.0 private key object handle. Thus
either the public key in PKCS#1 format can be extracted or a PKCS#10
certificate request signed by the TPM private key can be generated.
2017-03-06 19:35:05 +01:00
Andreas Steffen c08753bdf4 Created libtpmtss library handling access to v1.2 and v2.0 TPMs 2016-06-22 15:33:43 +02:00
Andreas Steffen 87d356dc47 aikpub2: Convert TSS 2.0 AIK public key blob into PKCS#1 format 2016-06-22 15:33:43 +02:00
Tobias Brunner 28649f6d91 libhydra: Remove empty unused library 2016-03-03 17:36:11 +01:00
Tobias Brunner 4e92441d0c Remove obsolete _updown_espmark script
According to NEWS it was created to support kernels < 2.6.16.
2015-03-06 16:51:50 +01:00
Andreas Steffen d6fb2cc6e3 Merged libpts into libimcv 2014-10-05 12:55:37 +02:00
Martin Willi 73ed38e74f systemd: Provide a charon-systemd daemon targeting full systemd integration 2014-09-22 13:55:11 +02:00
Tobias Brunner 3986c1e3fd autoconf: Replace --disable-tools option with --disable-scepclient
Since using a separate option for pki this was the only tool that was still
enabled by that option.
2014-06-30 13:25:13 +02:00
Martin Willi b70849ada2 configure: Separate pki from --disable-tools
While pki builds and runs just fine on Windows, this is not true for scepclient.
2014-06-04 15:53:08 +02:00
Martin Willi df4341747c charon-svc: Implement a Windows IKE service using libcharon
The resulting binary can be either run as Windows service or directly as
console application.
2014-06-04 15:53:04 +02:00
Martin Willi e381e69f9b swanctl: Add a stub for a vici based configuration and control utility 2014-05-07 15:48:10 +02:00
Andreas Steffen 9be1c8d175 aikgen generates AIK private/public key pairs
aikgen outputs a binary AIK private key blob and the AIK public key.
Optionally the Identity Request encrypted with the public key of
the Privacy CA can be output.
2014-05-03 15:28:17 +02:00
Martin Willi dbd4fc074a openac: Remove obsolete openac utility
The same functionality is now provided by the pki --acert subcommand.
2014-03-31 11:39:25 +02:00
Tobias Brunner c75acc4c44 conf: Install strongswan.conf template from a separate directory 2014-02-12 14:34:33 +01:00
Tobias Brunner 6e288ed19c pool: Install SQL schemas from src/pool
This allows us to install the schemas if either the attr-sql or sql
plugin is enabled, since both use the same schema (at least in parts).
2014-02-12 14:21:26 +01:00
Tobias Brunner e465c006e5 checksum must be the last subdir included
Otherwise charon-cmd will not yet be installed when the checksums are
calculated (now from the install dir, not the build dir).

Fixes #496.
2014-01-23 09:43:45 +01:00
Tobias Brunner ec6ad6b086 pool: Move the pool utility to its own directory in src 2013-10-11 15:16:05 +02:00
Andreas Steffen b38d9d5a54 Implemented SWID prototype IMC/IMV pair 2013-08-15 23:34:23 +02:00
Andreas Steffen 180a2f2642 rapid PT-TLS AR/PDP prototype 2013-08-15 23:34:22 +02:00
Martin Willi 1fed10beb2 charon-cmd: add a stub for charon-cmd, a simple command line IKE client 2013-05-06 15:28:26 +02:00
Reto Buerki 559fe48c50 Introduce TKM specific charon daemon (charon-tkm)
Analogous to charon-nm the charon-tkm daemon is a specialized charon
instance used in combination with the trusted key manager (TKM) written
in Ada.

The charon-tkm is basically a copy of the charon-nm code which will
register it's own TKM specific plugins.

The daemon binary is built using the gprbuild utility. This is needed
because it uses the tkm-rpc Ada library and consequently the Ada
runtime. gprbuild takes care of the complete binding and linker steps
required to properly initialize the Ada runtime.
2013-03-19 15:23:45 +01:00
Martin Willi 18d56a1891 Add a libpttls providing NEA PT-TLS / TNC IF-T for TLS transport layer 2013-01-16 13:53:32 +01:00
Tobias Brunner b70139fbfd Stub library for user space IPsec implementation added. 2012-08-08 15:09:31 +02:00
Tobias Brunner fff4b74db2 Bye bye Pluto!
Charon will take over IKEv1 duties from here.  This also removes
libfreeswan and whack.
2012-06-11 17:33:32 +02:00
Tobias Brunner 1c7a733e36 Added a small libcharon wrapper intended to directly host the nm plugin.
For this reason it reclaims the --enable-nm configure option.
2012-05-03 13:38:14 +02:00
Martin Willi f0f94e2ce6 Moved generic RADIUS protocol support to a dedicated libradius 2012-03-05 18:08:04 +01:00
Andreas Steffen b448e3ece6 moved attestation plugins to libpts in order to resolve circular reference with libimcv 2011-11-28 21:23:59 +01:00
Andreas Steffen f0a8bf47f7 refactored TNC framework 2011-10-25 01:10:16 +02:00
Andreas Steffen f0fa002fd1 moved imc_manager to libtnccs 2011-10-25 01:10:16 +02:00
Andreas Steffen 3ed943c34f created libpts 2011-09-08 12:20:58 +02:00
Andreas Steffen 7c4d4d209d make IMC/IMV pairs independent of libcharon 2011-06-01 16:33:44 +02:00
Andreas Steffen 510f37abd4 implemented the RFC 5792 PA-TNC protocol and an example IMC/IMV pair 2011-05-30 21:30:09 +02:00
Martin Willi 2b52d5cb41 Do not install config files with user/group, as it might not exist on build machine 2011-01-17 18:08:17 +01:00
Andreas Steffen 1f7aad7f58 libcharon plugins depend on libtls and/or libsimaka 2011-01-07 06:28:08 +01:00
Martin Willi 37b3fad782 Install "ipsec" script with tools or conftest 2011-01-05 16:45:56 +01:00
Martin Willi e78ec86d27 Added a Suite B conftest utility skeleton using libcharon 2011-01-05 16:45:40 +01:00
Martin Willi 0f82a47063 Moved TLS stack to its own library 2010-08-03 15:39:26 +02:00
Tobias Brunner 0bf68cbf7c Adding libhydra stub. 2010-03-24 18:53:09 +01:00
Tobias Brunner bd3f8ea30b Convert charon into libcharon. 2010-03-19 13:34:52 +01:00
Martin Willi 23763c2cae scepclient still depends on libfreeswan 2010-03-05 08:52:09 +01:00
Martin Willi f8330d0395 Added a libsimaka library with shared message handling code for EAP-SIM/AKA 2009-11-12 10:33:58 +01:00
Martin Willi 8b3b4a244e Removed trailing whitespaces in configure.in/Makefile.am 2009-09-07 11:48:03 +02:00
Martin Willi 7c577c8ea2 started implementation of a PKI tool, currently supporting RSA|ECDSA key generation 2009-08-26 11:23:55 +02:00
Tobias Brunner 9af7715c3d Fixed installation of config files in out-of-tree builds. 2009-07-20 21:13:45 +02:00
Tobias Brunner 7cdf712d3e Use the numerical UID/GID to install the config files and create the ipsec.d directories. 2009-07-20 21:03:05 +02:00
Martin Willi 67a7bb02ef moved checksum_builder/libchechsum to top srcdir to respect build order 2009-06-22 15:47:18 +02:00
Andreas Steffen 1bfb8007c2 got rid of libcrypto 2009-05-15 01:28:48 +02:00
Tobias Brunner bcbf110938 fixing compilation when using the Vstr string library 2009-04-24 05:30:50 +02:00
Martin Willi 9e9d3ddc12 scepclient requires libcrypto to build 2008-06-16 07:10:48 +00:00
Martin Willi 9529fb6836 added mediation server web frontend
updated charons medsrv plugin to updated database scheme
2008-06-11 14:13:24 +00:00