denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,295 Commits 1 Branch 0 Tags
02fd225ea590c7ca8bd2dba291e8a79fbd74f695
Commit Graph
615 Commits
Author SHA1 Message Date
Martin Willi 4b403e7672 merged EAP-MD5 into trunk 2007-12-12 14:29:10 +00:00
Martin Willi f9d80d53c3 accept unknown attributes in config payloads 2007-12-09 19:43:41 +00:00
Martin Willi 3895125275 removed c++ style comments 
fixed compiler warnings
 2007-12-04 10:48:27 +00:00
Martin Willi b8249ff5ed fixed mobike/auth_lifetime in conjunction with p2p-natt 2007-12-04 10:05:36 +00:00
Andreas Steffen addc4b3ce4 removed redundant server reflexive endpoint debug message 2007-12-04 00:45:00 +00:00
Andreas Steffen 3af513753a improved P2P_ENDPOINT debugging 2007-12-03 23:06:17 +00:00
Martin Willi cbfb2aff50 added more ./configure build options for 
EAP-Identity module
  ipsec tools (openac, scepclient)
  optional charon/pluto build
  charon stroke interface
 2007-12-03 14:47:15 +00:00
Martin Willi 7805ad302d moved AUTH_LIFETIME handling in its own task (cleaner separation, proper payload order) 2007-12-03 10:52:18 +00:00
Martin Willi 8e78e43220 added a "libcharon-" prefix to plugins to avoid conflicts 2007-12-03 09:03:22 +00:00
Martin Willi 733f336ad3 socket_t implementation withouth raw sockets 
--disable-raw-socket configure option
  prevents charon/pluto to run in parallel
 2007-11-26 11:20:00 +00:00
Tobias Brunner 17d6e9aa00 improving [3361]: moved one of the added return values 2007-11-22 11:22:33 +00:00
Andreas Steffen f210387a6b added two return statements comitted by Marius Tomaschewski 2007-11-21 23:42:27 +00:00
Martin Willi ee61471113 implemented RFC4478 (repeated authentication) 
changed %V printf handler to take a time delta, %#V now takes two arguments
 2007-11-20 12:06:40 +00:00
Martin Willi 7b36b734a4 fixed callback_job cancellation for threads waiting in the bus 2007-11-19 12:32:28 +00:00
Martin Willi 729a6ec965 fixed two leaks in stroke_interface 2007-11-19 11:28:11 +00:00
Andreas Steffen 3a19f38d15 handle right=%any case in strongSwan manager 2007-11-17 23:08:16 +00:00
Andreas Steffen b073aada23 search : delimiter in ipsec.secrets entries from the rear 2007-11-16 20:23:29 +00:00
Martin Willi e101f162ab refactored bus and interface to resolve threading issues (WIP) 2007-11-15 18:35:54 +00:00
Martin Willi 5d4aea685f filtering out IKEv1 configurations for manager 2007-11-15 10:09:14 +00:00
Martin Willi 93fc29c6cf fixed daemon kill before threads are spawned 2007-11-14 10:12:34 +00:00
Martin Willi 91b16af0fa fixed NO_PROPOSAL_CHOSEN response on IKE_SA_INIT 2007-11-14 09:41:08 +00:00
Martin Willi 30a68d715b implemented configuration query and IKE_SA initiation in XML interface 2007-11-13 11:56:52 +00:00
Martin Willi 275cec2eac implemented IKE/CHILD_SA termination through XML interface 2007-11-12 15:06:04 +00:00
Andreas Steffen d5da42a9e4 fixed _updown target for ipv6 2007-11-06 13:45:54 +00:00
Martin Willi 00fb758755 adding new virtual ip before deleting old one to keep IP on reauthentication 2007-10-25 07:50:23 +00:00
Martin Willi bd99d1852a added vsignal todo 2007-10-25 07:49:32 +00:00
Martin Willi 39a8e5a580 fixed some typos 2007-10-05 09:52:23 +00:00
Martin Willi 1169ab4ec7 removed recursive mutex and __USE_UNIX98, should fix uClibc build 2007-10-05 09:47:55 +00:00
Martin Willi 6705052c2d fixed bad cast which resulted in a crash on "ipsec update" 2007-10-05 09:13:03 +00:00
Martin Willi b9bc74979e fixed sqlite_backend compilation to respect changes from [3238] 2007-10-04 08:18:42 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Martin Willi 2970674faf reverted changeset [3215], as we need NULL callback to do asynchronous calls 
added interface_manager_cb_empty function, which calls synchronous but doesn't do anything
 2007-10-03 08:10:03 +00:00
Tobias Brunner 183ddc20a9 typo 2007-10-02 13:56:58 +00:00
Tobias Brunner 9b997daab9 do not attempt to encrypt payloads without crypter or signer (allows to override message rules) 2007-10-02 13:31:12 +00:00
Martin Willi 06d00e4f7b fixed "ipsec statusall" SPI formatting 2007-10-02 13:11:23 +00:00
Martin Willi e4c9b92171 fixed sqlite database path 2007-10-02 11:55:19 +00:00
Tobias Brunner 56db479192 ID payload with explicit payload type 2007-10-02 11:55:10 +00:00
Tobias Brunner 1fbcbe32d0 get_first_payload_type for message_t 2007-10-02 11:42:27 +00:00
Tobias Brunner 17e78a0981 dummy callback added to interface manager 2007-10-02 11:33:16 +00:00
Martin Willi 06011f6882 remove control sockets on startup, as we don't have privileges on shutdown 2007-10-02 11:20:07 +00:00
Martin Willi a3f100fa09 improved debugging code for traffic selector processing 2007-10-02 07:39:56 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 011fb1b97e removed accidentally checked in debugging code 2007-10-01 12:25:26 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi 92232dab33 fixed stuid()/setgid() and error handling 2007-10-01 09:07:10 +00:00
Martin Willi f215e91999 implemented more aggressive MOBIKE path probing 
do not queue more than one MOBIKE task
 2007-09-28 08:22:37 +00:00
Martin Willi 052d58feaf fixed CHILD_SA SPI byte order in XML interface 2007-09-28 07:05:15 +00:00
Martin Willi 055d016b49 changed inheritable capability set to the permitted one to execute firewall script with CAP_NET_ADMIN 2007-09-28 07:04:09 +00:00
Martin Willi 85c6fc0283 reduced debbugging level 2007-09-27 13:09:50 +00:00
Martin Willi 983d7cd292 made add_ip()/del_ip() calls synchron (waiting until kernel event received) 
this should fix MOBIKE route migration with virtual IPs
 2007-09-27 12:48:00 +00:00