6a365f0740
added API for random number generators, served through credential factory
...
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
2008-04-15 05:56:35 +00:00
a9184df36b
do not build leak_detective.o if not enabled
2008-04-04 11:38:16 +00:00
1aad8bdfad
makeshift fix of --enable-integrity-test option
2008-03-26 20:16:42 +00:00
7b88a983d8
caching of ocsp responses (experimental), no crl caching yet
2008-03-26 15:21:50 +00:00
26930a8c3e
certificate factory can load certs from file
2008-03-25 22:28:27 +00:00
3e6ee16478
defined *_create_from_file() constructors in libstrongswan/credentials/certificates
2008-03-25 10:12:45 +00:00
bdec2e4f52
refactored openac and its attribute certificate factory
2008-03-20 15:23:52 +00:00
552cc11b1f
merged the modularization branch (credentials) back to trunk
2008-03-13 14:14:44 +00:00
e8bfe74289
extended and debugged PKCS#7 signedData support
2008-02-01 14:19:26 +00:00
5f854d7f95
added strneq(x,y,len) macro
2007-10-07 13:35:42 +00:00
d62a4526fd
moved enumerator from libappserv to libstrongswan
2007-10-04 08:21:53 +00:00
b4979ff724
removed some empty lines
2007-09-18 11:23:52 +00:00
15a9d460c0
peer_cfg now knows about group memberships
2007-09-13 15:33:17 +00:00
d8b45dcdd2
build fips_signer and fips_signature with USE_INTEGRITY_TEST condition only
2007-08-29 07:02:13 +00:00
55434a1ba5
started implementation of libstrongswan code integrity check
2007-08-29 00:37:10 +00:00
f880eb2dca
started support of X.509 attribute certificates
2007-04-12 17:49:33 +00:00
241d2ff3bc
support of ldap-based crl fetching
2007-04-06 09:44:06 +00:00
96567fc8a2
fixed compilation warnings and errors when not using curl
2007-03-13 14:52:18 +00:00
1bcb84605f
ocsp signer certificate and ocsp response signature can be verified
2007-03-08 23:29:04 +00:00
bdfff62db9
added fetcher.h and fetcher.c
2007-03-07 14:13:01 +00:00
05bda56556
added ocsp.h and ocsp.c
2007-02-28 20:31:07 +00:00
2ef41cdad9
support of ca info records
2007-02-23 15:14:59 +00:00
f27f6296e6
merged EAP framework from branch into trunk
...
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
db7ef62494
better split up of library files "types.h" & "definitions.h"
...
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
2006-10-31 12:27:59 +00:00
60356f3375
introduced new logging subsystem using bus:
...
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
2006-10-18 11:46:13 +00:00
b5cac6684d
added copyright notice to sha2_hasher
...
included SHA2 in build process
2006-09-19 14:54:01 +00:00
462129d332
added support for 3DES encryption algorithm in IKE
2006-09-19 11:18:35 +00:00
6f74bfd6ac
added X.509 trust chain verification
2006-06-27 08:48:28 +00:00
2f89902d07
applied new changes from NATT team
...
DPD only done when no IPsec and IKE traffic processed
minor changes here and there
2006-06-23 14:02:30 +00:00
307b4ded5e
added crl support
2006-06-16 05:52:52 +00:00
298b06c28c
- build gets perl and gperf from configure now
...
- moved built sources to maintainer-clean
2006-05-24 06:36:46 +00:00
de1584de40
- changed build order to fix build error after distclean
2006-05-23 09:41:18 +00:00
4acc8989ce
- fixed build when using --enable-leak-detective
2006-05-23 08:00:29 +00:00
d6c32b83de
- removed perl-generated oid.c/h from svn,
...
added them to "dist" and "distclean"
2006-05-19 14:16:58 +00:00
3e61d63a3a
- added ipsec.conf template and man page back
...
- removed old Makefiles
- added new strongswan KDevelop project & startup hack
2006-05-18 14:21:58 +00:00
b5e1560659
- applied andreas's patch
...
- logger output improvements
- testin gupdates
- and a lot more
2006-05-18 06:02:28 +00:00
f2c2d395ff
- introduced autotools
...
- first working version
- make dist should work
- things to do:
- UML testing!
- more cleanups
2006-05-16 14:24:03 +00:00
Martin Willi