| a029281fff6b28b379bd69602f8f5649f0a2740d |
|
01-Oct-2014 |
Adam Langley <agl@google.com> |
ipsec-tools: update for BoringSSL.
BoringSSL is Google's version of OpenSSL[1] with lots of things cleaned
up and removed. This change makes ipsec-tools work with both BoringSSL
and Android's existing version of OpenSSL.
Some changes are generally applicable but upstream ipsec-tools appears
to be dead. I've followed the existing practice of #ifdef'ing the
changes but, if there's no upstream, then I'd be happy to be more
aggressive about that.
Otherwise, apart from a couple of tweaks, the big changes are to the way
that the ENGINE works and to replace the PKCS#7 parsing code.
[1] https://www.imperialviolet.org/2014/06/20/boringssl.html
Change-Id: I32d7eb4e0e0a90f92cf5e8f9675dac4a8edc7a4a
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| c91307af2622f6625525f3c1f9c954376df950ad |
|
26-Mar-2012 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: back-port 0.7.3 to Android.
Lots of checks and features were added to ipsec-tools 0.8.0.
However, they broke the compatibility with existing VPN servers.
I was unable to fix all of them in 0.8.0, so I chose to port
0.7.3 back with the new VPN types we added in ICS release.
Bug: 6191668
Change-Id: I86a7218f7f5146d4a9b129d46c89839a82b0008f
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| 8f3b38855d8849959825acc45dd11144adc7d862 |
|
07-Jul-2011 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: use pname instead of lcconf->chroot for the android magic.
Change-Id: Id62ce8de798389d9a6504d436a15317a4127ffb8
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| fd76ec530c3f9cd0b9cc03501d02b6cb3ba705ed |
|
07-Jul-2011 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: Use getpathname() to get the right path.
Change-Id: I169b0ea84113234875c9c0be436384365f95dd89
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| e9fc376dc7e9ee22358b872c3eb2808fa42160f0 |
|
07-Jul-2011 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: Support IPSec RSA sessions again.
This change supports command-line usage and android service at
the same time. It also removes the access to native keystore.
Change-Id: Ia3d931b0ba8f83624d668de97c9dfc10280bef3b
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| f8a6a7636d53a5730c58ae041e4e09ae12e1657c |
|
05-Jul-2011 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: Update to 0.8.0.
This change updates ipsec-tools to 0.8.0. However, a quick test reveals
a regression in IPSec PSK sessions. The server rejects the first packet
of phase 2 negotiation with INVALID-ID-INFORMATION error. After testing
files one by one, it turns out that using the old ipsec_doi.c fixes the
problem. Then the next error shows that identity check is failed. This
can be fixed by marking few lines in isakmp_quick.c just like 0.7.3.
This change adds ipsec_doi-0.7.3.c as a temporary fix. I will come back
and see if I can find the real problem. IPSec RSA sessions will be
covered in the next change.
Change-Id: I48f0026c3be07f506b3901b59202081bf88f41c9
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| b2f80fde2d9ba7f7747873623ca7f6f969b40033 |
|
08-Mar-2010 |
Chia-chi Yeh <chiachi@android.com> |
modify according to the change of keystore interface.
Change-Id: I110aadb17235a9ce240636371ce457c880b63968
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| 4fa9505300a7249a6c216da88a3180a3a37ef078 |
|
18-Sep-2009 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: switch to multi-user keystore.
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| 051f86dfca525c160855397f7b6a4fb5ef8df2b5 |
|
02-Sep-2009 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: updated to 0.7.3.
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| 5cbb57af3a64593fc4bfbb2c42c3d24553e8bae4 |
|
24-Jul-2009 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: Support multiple CA certificates in PEM.
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| 8af8eaa380e1775ad04bc3250648fe44c57beb83 |
|
13-Jul-2009 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: Free x509 object after inserted into X509_STORE.
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| b880c6609b0f748abe0ce19fea3b1b2fdfd991be |
|
06-Jul-2009 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: Get certificates, private keys, and pre-shared keys from keystore.
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| 458fe1ef88671dfe580c488973d5573194839087 |
|
26-Jun-2009 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: Integrate racoon with Android framework.
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| 1c71527b277e2dc256262da2ed2169c566c5bf4d |
|
21-Jun-2009 |
Chia-chi Yeh <chiachi@android.com> |
ipsec-tools: Update to 0.7.2.
Android specific files will be added in the next change.
/external/ipsec-tools/src/racoon/crypto_openssl.c
|
| 0a1907d434839af6a9cb6329bbde60b237bf53dc |
|
22-Apr-2009 |
Chung-yih Wang <cywang@google.com> |
Migrate from perforce repository.
/external/ipsec-tools/src/racoon/crypto_openssl.c
|