denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
20,067 Commits 1 Branch 0 Tags
main
Commit Graph
79 Commits
Author SHA1 Message Date
Tobias Brunner 60846f24bf libfast: Remove FastCGI application server library 
The two users (manager, medsrv) are gone, so there is no reason to keep
this around.
 2026-07-24 14:59:51 +02:00
Tobias Brunner ac690f1a5e medsrv/medcli: Remove prototypical medsrv web application and plugins 
This was from a student project that has never been developed further.
And similar to the manager web application it lacks all sorts of modern
standards.  So just remove it and the two plugins it relied on.

The test scenario is renamed to avoid confusion (neither of the two
p2pnat scenarios uses medsrv/medcli).
 2026-07-24 14:45:27 +02:00
Tobias Brunner f55bb2b384 manager: Remove legacy PoC manager web application 
This has not been developed for years and as far as web applications
go it has some serious (security) issues.  So just remove it.
 2026-07-24 14:17:47 +02:00
Andreas Steffen cbfc12b330 cert-enroll: certificate checking and enrollment 
The cert-enroll script handles the initial enrollment of an X.509
host certificate with a PKI server via the EST or SCEP protocols.

Run as a systemd timer or via a crontab entry the script daily
checks the expiration date of the host certificate. When a given
deadline is reached, the host certificate is automatically renewed
via EST or SCEP re-enrollment based on the possession of the old
private key and the matching certificate.
 2023-10-03 08:45:22 +02:00
Andreas Steffen 8716f7c03c scepclient: Removal and replacement by pki subcommands 
The "ipsec scepclient" tool has been removed and replaced by the
pki subcommands "pki --scep" and "pki --scepca" which implement the
new SCEP RFC 8894 standard that was released in September 2020 and
which supports trusted "certificate renewal" based on the existing
client certificate.
 2022-08-24 20:46:44 +02:00
Tobias Brunner c05fdf387b Remove obsolete _copyright utility 2022-06-28 10:22:55 +02:00
Tobias Brunner 4aa6da69aa tpm_extendpcr: Build does not depend on tpm plugin but libtpmtss 
The utility basically requires a TSS, the tpm plugin is not used at all.
 2021-08-23 10:44:41 +02:00
Tobias Brunner db772305c6 xfrmi: Only build if libcharon is built 
The kernel-netlink plugin is only built if libcharon is.

Closes strongswan/strongswan#167.
 2020-05-07 09:19:27 +02:00
Tobias Brunner d74ddd7893 xfrmi: Move to a separate directory to fix monolithic build 2019-04-04 09:31:38 +02:00
Tobias Brunner 66c4735f99 dumm: Remove the Dynamic UML Mesh Modeler framework 
This has been pretty much defunct for several years (requires a
specially patched UML-enabled guest kernel).
 2018-09-12 15:53:55 +02:00
Andreas Steffen 0fb293fc91 tpm_extendpcr: Extend digests into a TPM PCR 2017-12-13 07:10:28 +01:00
Andreas Steffen b84817375d sec-updater: Checks for security updates 
sec-updater checks for security updates and backports in Debian/
Ubuntu repositories and sets the security flags in the strongTNC
policy database accordingly.
 2017-09-01 11:19:40 +02:00
Andreas Steffen a9383c2b46 checksum: Compile sw-collector before checksum 2017-07-18 20:02:21 +02:00
Andreas Steffen 964bf73237 sw-collector: Moved to its own directory and added man page 2017-07-18 07:25:45 +02:00
Andreas Steffen 4a620a97a0 aikpub2: Removed aikpub2 tool 
The aikpub2 tool has been replaced by pki --pub|--req --keyid hex ..
where keyid indicates the TPM 2.0 private key object handle. Thus
either the public key in PKCS#1 format can be extracted or a PKCS#10
certificate request signed by the TPM private key can be generated.
 2017-03-06 19:35:05 +01:00
Andreas Steffen c08753bdf4 Created libtpmtss library handling access to v1.2 and v2.0 TPMs 2016-06-22 15:33:43 +02:00
Andreas Steffen 87d356dc47 aikpub2: Convert TSS 2.0 AIK public key blob into PKCS#1 format 2016-06-22 15:33:43 +02:00
Tobias Brunner 28649f6d91 libhydra: Remove empty unused library 2016-03-03 17:36:11 +01:00
Tobias Brunner 4e92441d0c Remove obsolete _updown_espmark script 
According to NEWS it was created to support kernels < 2.6.16.
 2015-03-06 16:51:50 +01:00
Andreas Steffen d6fb2cc6e3 Merged libpts into libimcv 2014-10-05 12:55:37 +02:00
Martin Willi 73ed38e74f systemd: Provide a charon-systemd daemon targeting full systemd integration 2014-09-22 13:55:11 +02:00
Tobias Brunner 3986c1e3fd autoconf: Replace --disable-tools option with --disable-scepclient 
Since using a separate option for pki this was the only tool that was still
enabled by that option.
 2014-06-30 13:25:13 +02:00
Martin Willi b70849ada2 configure: Separate pki from --disable-tools 
While pki builds and runs just fine on Windows, this is not true for scepclient.
 2014-06-04 15:53:08 +02:00
Martin Willi df4341747c charon-svc: Implement a Windows IKE service using libcharon 
The resulting binary can be either run as Windows service or directly as
console application.
 2014-06-04 15:53:04 +02:00
Martin Willi e381e69f9b swanctl: Add a stub for a vici based configuration and control utility 2014-05-07 15:48:10 +02:00
Andreas Steffen 9be1c8d175 aikgen generates AIK private/public key pairs 
aikgen outputs a binary AIK private key blob and the AIK public key.
Optionally the Identity Request encrypted with the public key of
the Privacy CA can be output.
 2014-05-03 15:28:17 +02:00
Martin Willi dbd4fc074a openac: Remove obsolete openac utility 
The same functionality is now provided by the pki --acert subcommand.
 2014-03-31 11:39:25 +02:00
Tobias Brunner c75acc4c44 conf: Install strongswan.conf template from a separate directory 2014-02-12 14:34:33 +01:00
Tobias Brunner 6e288ed19c pool: Install SQL schemas from src/pool 
This allows us to install the schemas if either the attr-sql or sql
plugin is enabled, since both use the same schema (at least in parts).
 2014-02-12 14:21:26 +01:00
Tobias Brunner e465c006e5 checksum must be the last subdir included 
Otherwise charon-cmd will not yet be installed when the checksums are
calculated (now from the install dir, not the build dir).

Fixes #496.
 2014-01-23 09:43:45 +01:00
Tobias Brunner ec6ad6b086 pool: Move the pool utility to its own directory in src 2013-10-11 15:16:05 +02:00
Andreas Steffen b38d9d5a54 Implemented SWID prototype IMC/IMV pair 2013-08-15 23:34:23 +02:00
Andreas Steffen 180a2f2642 rapid PT-TLS AR/PDP prototype 2013-08-15 23:34:22 +02:00
Martin Willi 1fed10beb2 charon-cmd: add a stub for charon-cmd, a simple command line IKE client 2013-05-06 15:28:26 +02:00
Reto Buerki 559fe48c50 Introduce TKM specific charon daemon (charon-tkm) 
Analogous to charon-nm the charon-tkm daemon is a specialized charon
instance used in combination with the trusted key manager (TKM) written
in Ada.

The charon-tkm is basically a copy of the charon-nm code which will
register it's own TKM specific plugins.

The daemon binary is built using the gprbuild utility. This is needed
because it uses the tkm-rpc Ada library and consequently the Ada
runtime. gprbuild takes care of the complete binding and linker steps
required to properly initialize the Ada runtime.
 2013-03-19 15:23:45 +01:00
Martin Willi 18d56a1891 Add a libpttls providing NEA PT-TLS / TNC IF-T for TLS transport layer 2013-01-16 13:53:32 +01:00
Tobias Brunner b70139fbfd Stub library for user space IPsec implementation added. 2012-08-08 15:09:31 +02:00
Tobias Brunner fff4b74db2 Bye bye Pluto! 
Charon will take over IKEv1 duties from here.  This also removes
libfreeswan and whack.
 2012-06-11 17:33:32 +02:00
Tobias Brunner 1c7a733e36 Added a small libcharon wrapper intended to directly host the nm plugin. 
For this reason it reclaims the --enable-nm configure option.
 2012-05-03 13:38:14 +02:00
Martin Willi f0f94e2ce6 Moved generic RADIUS protocol support to a dedicated libradius 2012-03-05 18:08:04 +01:00
Andreas Steffen b448e3ece6 moved attestation plugins to libpts in order to resolve circular reference with libimcv 2011-11-28 21:23:59 +01:00
Andreas Steffen f0a8bf47f7 refactored TNC framework 2011-10-25 01:10:16 +02:00
Andreas Steffen f0fa002fd1 moved imc_manager to libtnccs 2011-10-25 01:10:16 +02:00
Andreas Steffen 3ed943c34f created libpts 2011-09-08 12:20:58 +02:00
Andreas Steffen 7c4d4d209d make IMC/IMV pairs independent of libcharon 2011-06-01 16:33:44 +02:00
Andreas Steffen 510f37abd4 implemented the RFC 5792 PA-TNC protocol and an example IMC/IMV pair 2011-05-30 21:30:09 +02:00
Martin Willi 2b52d5cb41 Do not install config files with user/group, as it might not exist on build machine 2011-01-17 18:08:17 +01:00
Andreas Steffen 1f7aad7f58 libcharon plugins depend on libtls and/or libsimaka 2011-01-07 06:28:08 +01:00
Martin Willi 37b3fad782 Install "ipsec" script with tools or conftest 2011-01-05 16:45:56 +01:00
Martin Willi e78ec86d27 Added a Suite B conftest utility skeleton using libcharon 2011-01-05 16:45:40 +01:00