Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							cbb62e8f4c 
							
						 
					 
					
						
						
							
							handle pluto specific certificates under CRED_CERTIFICATE, not as own credential kind  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							f11a78f10a 
							
						 
					 
					
						
						
							
							unified pluto builder implementations  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							94463a33b4 
							
						 
					 
					
						
						
							
							removed obsolete PEM code in pluto/libstrongswan  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							ccd0a624b6 
							
						 
					 
					
						
						
							
							use credential builder to build crls  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							37f5a0da2c 
							
						 
					 
					
						
						
							
							use credential builder to build attribute certificates  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							a5dc4a9585 
							
						 
					 
					
						
						
							
							moved builder hooks to a separate file  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							11aa7e7869 
							
						 
					 
					
						
						
							
							use a pluto specific credential builder to build pluto cert_t's  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							c486fa8158 
							
						 
					 
					
						
						
							
							removed obsolete pgp private key parsing, done by libstrongswan  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							dc816eacdf 
							
						 
					 
					
						
						
							
							use libstrongswan for private key loading, whack callback to read passphrase  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							4d15129160 
							
						 
					 
					
						
						
							
							pass along X509 flags when loading PEM encoded data  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							280469923d 
							
						 
					 
					
						
						
							
							make use of the pem helper plugin to load credentials  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							c9db16b7dd 
							
						 
					 
					
						
						
							
							added file loading support to pem plugin, using mmap()  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:48 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							160f4c225d 
							
						 
					 
					
						
						
							
							moved PEM parsing functionality to its own plugin  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-26 11:23:48 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							5672eae131 
							
						 
					 
					
						
						
							
							make boolean expression less enigmatic  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-25 21:09:54 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							eb641993d4 
							
						 
					 
					
						
						
							
							set stroke connection flags to a clear TRUE/FALSE  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-25 19:57:36 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							469083cc7d 
							
						 
					 
					
						
						
							
							disable lifetimes of allocated SPIs  
						
						 
						
						... 
						
						
						
						The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine. 
						
						
							
						
					 
					
						2009-08-25 18:15:25 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							1bc0b4f795 
							
						 
					 
					
						
						
							
							remove incomplete SAs with PROTO_ESP  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-25 18:12:55 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							625b48b558 
							
						 
					 
					
						
						
							
							added URL for git repository served over git:// protocol  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-21 10:52:39 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							8bc2a8086c 
							
						 
					 
					
						
						
							
							version bump to 4.3.5  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-18 18:35:37 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							fc0ed07c1f 
							
						 
					 
					
						
						
							
							pruned OID tree  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-18 18:24:26 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							c8b543a6fc 
							
						 
					 
					
						
						
							
							fixed wrong emailAddress OID introduced by revision c31687da  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-18 17:52:00 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							333b461aa6 
							
						 
					 
					
						
						
							
							Fixing address resolution via getaddrinfo in libfreeswan.  
						
						 
						
						
						
						
							
  4.3.4
 
						
					 
					
						2009-08-18 12:30:11 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							8a17c1f907 
							
						 
					 
					
						
						
							
							check integrity of pool code file  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-17 15:46:56 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							bde541acf8 
							
						 
					 
					
						
						
							
							integrity test of openac and scepclient code files  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-17 14:25:18 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							430dd08a2b 
							
						 
					 
					
						
						
							
							NEWS for 4.3.4  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-17 13:47:28 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							51dfa7f592 
							
						 
					 
					
						
						
							
							reinitialize print arguments  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-17 10:54:34 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							2f5b1e0eb7 
							
						 
					 
					
						
						
							
							check success of library_init()  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-14 22:13:51 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							f1777dff59 
							
						 
					 
					
						
						
							
							Replacing gethostbyname, gethostbyname2 and their _r variants with getaddrinfo to increase portability.  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-14 16:14:32 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							26965b4ef3 
							
						 
					 
					
						
						
							
							OpenSolaris needs libsocket and libnsl for socket().  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-14 14:50:53 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							932fdc38de 
							
						 
					 
					
						
						
							
							Enable CMSG headers and macros on OpenSolaris.  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-14 14:50:52 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							8c3627c5ae 
							
						 
					 
					
						
						
							
							Added define to get sigwait with two parameters on OpenSolaris.  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-14 14:50:51 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							e580e0a9a2 
							
						 
					 
					
						
						
							
							sockio.h is required on OpenSolaris for SIOCGIFADDR.  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-14 14:50:50 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							647bd246e4 
							
						 
					 
					
						
						
							
							Replaced the strange definitions of IN6ADDR_ANY_INIT and IN6ADDR_LOOPBACK_INIT on OpenSolaris.  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-14 14:50:49 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							cc396286e8 
							
						 
					 
					
						
						
							
							Defined some missing fixed-width int types on OpenSolaris.  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-14 14:50:22 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							a3ccf95f3f 
							
						 
					 
					
						
						
							
							LOG_AUTHPRIV is not defined on OpenSolaris.  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-14 13:37:07 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							3901937d14 
							
						 
					 
					
						
						
							
							OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-14 13:30:59 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							8b6a5ce5ba 
							
						 
					 
					
						
						
							
							We need to include alloca.h on OpenSolaris.  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-14 13:25:22 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							12a699c58d 
							
						 
					 
					
						
						
							
							fixed 4.3 refactoring error  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-11 08:51:16 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							87079f58e1 
							
						 
					 
					
						
						
							
							added -module -avoid-version LDFLAGS  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-11 01:06:45 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							8ddcac4c48 
							
						 
					 
					
						
						
							
							prepare CAMELLIA_CCM ESP encryption  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-10 16:30:42 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							20af53fe33 
							
						 
					 
					
						
						
							
							add ikev1/esp-alg-aes-ctr scenario  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-08 19:20:53 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							453c6aea16 
							
						 
					 
					
						
						
							
							added ikev2/esp-alg-aes-ctr scenario  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-08 19:08:17 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							3974b2fb07 
							
						 
					 
					
						
						
							
							FreeBSD's libc does not support backtrace(), but libexecinfo optionally replicates this function (and the other defined in execinfo.h).  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-07 18:46:25 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							dd4c14f37c 
							
						 
					 
					
						
						
							
							set protocol to ESP for policies installed as a trap  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-07 16:05:32 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Martin Willi 
							
						 
					 
					
						
						
						
						
							
						
						
							d9796a4311 
							
						 
					 
					
						
						
							
							fixed printf fromat for length limited string  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-07 10:31:21 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							4b5b92bfee 
							
						 
					 
					
						
						
							
							%llu correctly prints u_int64_t  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-07 09:50:36 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							4a02deb088 
							
						 
					 
					
						
						
							
							printing u_int64_t caused segfault on 32-bit platforms  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-07 08:47:29 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andreas Steffen 
							
						 
					 
					
						
						
						
						
							
						
						
							99dd42918e 
							
						 
					 
					
						
						
							
							do not set usetime if query_policy() fails  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-07 05:59:09 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							79ff614144 
							
						 
					 
					
						
						
							
							Use LONG_MAX instead of a hard-coded value.  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-06 18:22:01 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tobias Brunner 
							
						 
					 
					
						
						
						
						
							
						
						
							bfca7aa5ed 
							
						 
					 
					
						
						
							
							FreeBSD returns the current policy use time only after specifying a hard lifetime when installing the policy.  
						
						 
						
						
						
						
							
						
					 
					
						2009-08-06 18:14:44 +02:00