Andreas Steffen
|
196b28a470
|
demoted more notify debug messages to level 2
|
2008-04-02 19:15:05 +00:00 |
|
Andreas Steffen
|
f342cc08c0
|
make peer IP address and peer IP available to the xauth_module.verify_secret() method
|
2008-04-02 19:04:45 +00:00 |
|
Andreas Steffen
|
97da3d2de0
|
renamed AES_cbc_encrypt to SS_AES_cbc_encrypt due to name collision with OpenSSL library
|
2008-04-02 18:51:10 +00:00 |
|
Andreas Steffen
|
7a9d3ae471
|
support of force_keepalive parameter
|
2008-04-02 18:35:23 +00:00 |
|
Tobias Brunner
|
c3f803c4c6
|
fixing some memory leaks
|
2008-04-02 18:21:03 +00:00 |
|
Tobias Brunner
|
f049b29491
|
securing total_threads with the mutex while destroying the processor
|
2008-04-02 15:28:08 +00:00 |
|
Andreas Steffen
|
1ee637d8b1
|
generate debug output if ocsp response does not contain status information for a given certificate
|
2008-04-02 14:28:17 +00:00 |
|
Martin Willi
|
473eff33aa
|
updated TODO
|
2008-04-02 13:21:02 +00:00 |
|
Martin Willi
|
16f5dacd4b
|
added some NEWS for the 4.2 release
|
2008-04-02 13:20:46 +00:00 |
|
Martin Willi
|
d6bd078a65
|
updated RFCs/drafts
|
2008-04-02 13:20:14 +00:00 |
|
Martin Willi
|
513f20156a
|
fixed med_db test
|
2008-04-02 12:27:39 +00:00 |
|
Martin Willi
|
489e3da0ea
|
updated mediation database to public key authentication
added mysql table definition, test data
testcase
|
2008-04-02 12:25:14 +00:00 |
|
Martin Willi
|
e29ebcb1af
|
fixed compile warnings
|
2008-04-02 09:54:20 +00:00 |
|
Andreas Steffen
|
281d04502e
|
additional debug line makes certificate status checking more understandable
|
2008-04-02 06:25:59 +00:00 |
|
Andreas Steffen
|
9372f44c67
|
workaround for parsing IPv6 PSKs requires extract_last_token()
|
2008-04-01 20:40:29 +00:00 |
|
Andreas Steffen
|
080555e76a
|
demoted received notify debug message to level 2
|
2008-04-01 20:22:38 +00:00 |
|
Andreas Steffen
|
158a62c326
|
adapted ikev2 uml scenarios for the 4.2 version
|
2008-04-01 20:05:02 +00:00 |
|
Martin Willi
|
372b7ac7e2
|
added missing files for commit [3721]
|
2008-04-01 15:03:02 +00:00 |
|
Martin Willi
|
9d1c384b4b
|
loading of subjectPublicKeyInfo wrapped keys using KEY_ANY (openssl format)
testcase
|
2008-04-01 14:51:31 +00:00 |
|
Martin Willi
|
d5a9e6ff3a
|
and a fix for it
|
2008-04-01 14:26:31 +00:00 |
|
Martin Willi
|
68356ab12c
|
simple converter from binary data to a c array
|
2008-04-01 14:19:22 +00:00 |
|
Martin Willi
|
0ea70ca66e
|
removed unneded publicKeyInfo ASN1 structure
|
2008-04-01 13:39:12 +00:00 |
|
Andreas Steffen
|
392f4e17c2
|
minimal stroke_list_ocsp() implementation
|
2008-04-01 12:11:09 +00:00 |
|
Tobias Brunner
|
9c2a905d63
|
stopping connectivity checks on the responders side after receiving an IKE_SA_INIT request with the proper ME_CONNECTID
|
2008-04-01 11:38:18 +00:00 |
|
Martin Willi
|
45d66f5af6
|
some simplifications to trusted_enumerator_t
|
2008-04-01 10:56:08 +00:00 |
|
Martin Willi
|
1bb85edffe
|
checking pretrusted but bad certificates only once
|
2008-04-01 10:43:44 +00:00 |
|
Andreas Steffen
|
946d1ecd59
|
stroke_list groups certificates by issuer
|
2008-04-01 10:26:27 +00:00 |
|
Martin Willi
|
dd2efc2c03
|
replaced the example manager database by a sql script
|
2008-04-01 07:16:48 +00:00 |
|
Martin Willi
|
e411f94d44
|
changed enumerator implementation to handle reentrant code
|
2008-04-01 06:51:55 +00:00 |
|
Andreas Steffen
|
c096472605
|
minor changes in debug output
|
2008-03-31 21:59:32 +00:00 |
|
Andreas Steffen
|
aaa7643b73
|
put DN in double quotes
|
2008-03-31 21:08:56 +00:00 |
|
Andreas Steffen
|
a92ea0ccb3
|
output error message if maximum ca path length is reached
|
2008-03-31 20:42:57 +00:00 |
|
Andreas Steffen
|
eafc0654ca
|
ipsec list suppresses duplicates
|
2008-03-31 20:21:24 +00:00 |
|
Tobias Brunner
|
e5ab32a7ee
|
timing of connectivity checks adjusted
|
2008-03-31 15:04:38 +00:00 |
|
Martin Willi
|
9e72d3bcaf
|
defining ME globally, as we need it in plugins
|
2008-03-31 15:01:43 +00:00 |
|
Andreas Steffen
|
58a05045cc
|
utc argument in %#T was missing
|
2008-03-31 14:36:00 +00:00 |
|
Tobias Brunner
|
9e183cd5b8
|
signal fixed
|
2008-03-31 14:27:16 +00:00 |
|
Andreas Steffen
|
681d56b1bb
|
disabled build of outdated dbus interface
|
2008-03-31 12:59:39 +00:00 |
|
Tobias Brunner
|
f98736aee6
|
changed order of server and peer reflexive endpoints (and also the priorities)
|
2008-03-31 10:56:49 +00:00 |
|
Martin Willi
|
0f7ef3d2a0
|
received certificates have least priority
fixed manager unlocking
|
2008-03-31 08:43:18 +00:00 |
|
Martin Willi
|
d69b267d58
|
fixed refcounting in certificate trustchain validation
|
2008-03-31 07:16:12 +00:00 |
|
Andreas Steffen
|
1c65129148
|
adapted configure options in testing.conf and build-umlrootfs
|
2008-03-29 19:33:02 +00:00 |
|
Andreas Steffen
|
dcc777652e
|
changed error message
|
2008-03-29 13:26:53 +00:00 |
|
Andreas Steffen
|
40f9006845
|
output uptime in status in local time
|
2008-03-29 08:55:09 +00:00 |
|
Andreas Steffen
|
d2aa6fcaeb
|
shortened menu item
|
2008-03-28 22:46:09 +00:00 |
|
Andreas Steffen
|
c63dc50f15
|
demoted ldap debug output to level 2
|
2008-03-28 22:44:45 +00:00 |
|
Andreas Steffen
|
95ef5db5c3
|
remove xml directory
|
2008-03-28 19:49:59 +00:00 |
|
Martin Willi
|
b7ef3f625d
|
leak detective detects heap over- and underflow
|
2008-03-28 14:51:26 +00:00 |
|
Martin Willi
|
7939864dec
|
updated leak_detective whitelist: libxml and clearsilver functions
|
2008-03-28 13:16:36 +00:00 |
|
Martin Willi
|
6b9290ff12
|
renamed xml plugin to smp to avoid confusion
added some dependency checks to configure
configure checks ClearSilver and fastcgi
cleanups in the build system here and there
|
2008-03-28 12:44:01 +00:00 |