Import initial strongswan 2.7.0 version into SVN.

1 files changed, 110 insertions, 0 deletions

diff --git a/CREDITS b/CREDITS
new file mode 100644
index 000000000..a0c8eb2fa
--- /dev/null
+++ b/CREDITS
@@ -0,0 +1,110 @@
+We haven't kept proper track of everybody who has helped us, alas, but
+here's a first attempt at acknowledgements...
+
+Most of the FreeS/WAN software has been done by Richard Guy Briggs
+(KLIPS), D. Hugh Redelmeier (Pluto), Michael Richardson (technical lead,
+KLIPS, testing, etc.), Henry Spencer (past technical lead, scripts, 
+libraries, packaging, etc.), Sandy Harris (documentation), Claudia 
+Schmeing (support, documentation), and Sam Sgro (support, releases).
+Peter Onion has collaborated extensively with RGB on PFKEY2 stuff.  The
+original version of our IPComp code came from Svenning Soerensen, who has
+also contributed various bug fixes and improvements. 
+
+The first versions of KLIPS were done by John Ioannidis <ji@hol.gr>.  The
+first versions of Pluto (and further work on KLIPS) were done by Angelos
+D. Keromytis <angelos@dsl.cis.upenn.edu>.
+
+The MD2 implementation is from RSA Data Security Inc., so this package must
+include the following phrase: "RSA Data Security, Inc. MD2 Message Digest
+Algorithm"  It is not under the GPL; see details in programs/pluto/md2.c.
+
+The MD5 implementation is from RSA Data Security Inc., so this package must
+include the following phrase:  "derived from the RSA Data Security, Inc.
+MD5 Message-Digest Algorithm".  It is not under the GPL; see details in
+linux/net/ipsec/ipsec_md5c.c.
+
+The PKCS#11 header files in programs/pluto/rsaref/ are from RSA Security Inc.,
+so they must include the following phrase: "RSA Security Inc. PKCS#11
+Cryptographic Token Interface (Cryptoki)". The headers are not under the GPL;
+see details in programs/pluto/rsaref/pkcs11.h.
+
+The LIBDES library by Eric Young is used.  It is not under the GPL -- see
+details in libdes/COPYRIGHT -- although he has graciously waived the
+advertising clause for FreeS/WAN use of LIBDES. 
+
+The SHA-1 code is derived from Steve Reid's; it is public domain.
+
+Some bits of Linux code, notably drivers/net/new_tunnel.c and net/ipv4/ipip.c,
+are used in heavily modified forms.
+
+The radix-tree code from 4.4BSD is used in a modified form.  It is not
+under the GPL; see details in klips/net/ipsec/radij.c.
+
+The lib/pfkeyv2.h header file contains public-domain material published in
+RFC 2367.
+
+Delete SA code and Notification messages were contributed by Mathieu Lafon.
+He also implemented the vital NAT traversal support.
+
+Peter Onion has been immensely helpful in finding portability bugs in
+general, and in making FreeS/WAN work on the Alpha in particular.  Rob
+Hatfield likewise found and fixed some problems making it work on the
+Netwinder.
+
+John S. Denker of AT&T Shannon Labs has found a number of bugs the hard
+way, has pointed out various problems (some of which we have fixed!) in
+using the software in production applications, and has suggested some
+substantial improvements to the documentation.
+
+Marc Boucher <marc@mbsi.ca> did a quick-and-dirty port of KLIPS to the
+Linux 2.2.x kernels, at a time when we needed it badly, and has helped
+chase down 2.2.xx bugs and keep us current with 2.4.x development.
+
+John Gilmore organized the FreeS/WAN project and continues to direct it.
+Hugh Daniel handles day-to-day management, customer interface, and both
+constructive and destructive testing.  See the project's web page
+<http://www.freeswan.org> for other contributors to this project and
+related ones.
+
+Herbert Xu ported the FreeS/WAN code to the native IPsec stack
+of the Linux 2.6 kernel.
+
+Kai Martius added initial support of OpenPGP certificates.
+
+Andreas Steffen introduced the support of X.509 certificates in 2000
+and has been both maintaining the  X.509 code and adding extensions 
+to it ever since.
+
+Andreas Hess, Patric Lichtsteiner, and Roger Wegmann implemented the
+the initial X.509 certificate support, relying on Kai Martius's work.
+
+Marco Bertossa and Andreas Schleiss implemented the verification of
+the X.509 chain from the peer certificate up to the root CA.
+
+Ueli Galizzi and Ariane Seiler did the original work on the support
+of attribute certificates.
+
+Martin Berner and Lukas Suter implemented the definition of group 
+attributes and dynamic fetching of attribute certificates.
+
+Christoph Gysin and Simon Zwahlen implemented PKCS#15-based
+smartcard suppport and contributed a fully operational OCSP client.
+
+David Buechi and Michael Meier implemented the PKCS#11 smartcard
+interface.
+
+The support of port and protocol selectors was based on Stephen J.
+Bevan's original work.
+
+Stephane Laroche donated the original LDAP and HTTP fetching code
+based on pthreads.
+
+JuanJo Ciarlante introduced the modular support of alternative
+encryption and authentication algorithms (AES, Serpent, twofish, etc).
+
+The ipsec starter is based on Mathieu Lafon's original work.
+
+Jan Hutter and Martin Willi developed the scepclient which fully
+supports Cisco's Simple Certificate Enrollment Protocol (SCEP).
+
+This file is RCSID $Id: CREDITS,v 1.6 2006/01/22 21:28:27 as Exp $