 Martin Willi
|
f1092e20f4
|
Fixed encoding of hash-and-url cert payload
|
2009-09-22 10:07:04 +02:00 |
|
|
Martin Willi
|
c6a8990bc5
|
Enforce a local address of the same family as remote address
|
2009-09-21 15:30:40 +02:00 |
|
|
Tobias Brunner
|
0755e98e5c
|
Cleaned up some code of the mediation extension.
|
2009-09-04 15:48:30 +02:00 |
|
|
Tobias Brunner
|
f4b975a65d
|
Moved set_state after the DBG0 statement, so that the message gets logged also for mediation connections without CHILD_SA.
|
2009-09-04 15:13:12 +02:00 |
|
|
Martin Willi
|
7b3814f75d
|
remove spaces before tabs at the beginning of lines (^( )+\t)
|
2009-09-04 15:02:11 +02:00 |
|
|
Martin Willi
|
b9b8a98f47
|
remove spaces within tabs (\t( )+\t)
|
2009-09-04 15:00:19 +02:00 |
|
|
Martin Willi
|
323f9f990f
|
replaces four spaces by tabs, where appropriate
|
2009-09-04 14:50:23 +02:00 |
|
|
Martin Willi
|
7daf5226b7
|
removed trailing spaces ([[:space:]]+$)
|
2009-09-04 13:46:09 +02:00 |
|
|
Martin Willi
|
dd2b6f3073
|
fixed memleak in rekey collissions
|
2009-09-03 18:09:29 +02:00 |
|
|
Martin Willi
|
72e2faf291
|
Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL
|
2009-09-03 17:32:41 +02:00 |
|
|
Martin Willi
|
9beb83868f
|
Use get_notify() to look up single notifies
|
2009-09-03 17:32:01 +02:00 |
|
|
Tobias Brunner
|
a20e98749a
|
Simplified the search for ME_CONNECTID notifies.
|
2009-09-02 17:30:47 +02:00 |
|
|
Tobias Brunner
|
484a06bce7
|
Fixed some typos; whitespace cleanup.
|
2009-09-02 17:30:46 +02:00 |
|
|
Tobias Brunner
|
e75f423753
|
Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static.
|
2009-09-01 12:54:33 +02:00 |
|
|
Tobias Brunner
|
f40c115531
|
If no inbound CHILD_SA is found, try to find an outbound SA.
Due to the new lifetime limits in- and outbound SAs may expire
individually.
|
2009-09-01 12:53:44 +02:00 |
|
|
Tobias Brunner
|
e3c7e72973
|
Terminology and return value of get_lifetime of child_sa_t corrected.
|
2009-09-01 12:53:44 +02:00 |
|
|
Tobias Brunner
|
cb123493d1
|
child_sa_t adapted to the new lifetime configuration.
|
2009-09-01 12:53:43 +02:00 |
|
|
Martin Willi
|
6180a55852
|
use time_monotonic() instead of time() for statistics and time difference calculations
|
2009-08-31 18:00:28 +02:00 |
|
|
Martin Willi
|
de5784452b
|
use time_monotonic() instead of gettimeofday() for time difference calculations
|
2009-08-31 15:25:03 +02:00 |
|
|
Martin Willi
|
64fdbce4da
|
updated charon to new fingerprinting API
|
2009-08-26 11:23:53 +02:00 |
|
|
Martin Willi
|
1bc0b4f795
|
remove incomplete SAs with PROTO_ESP
|
2009-08-25 18:12:55 +02:00 |
|
|
Tobias Brunner
|
3901937d14
|
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
|
2009-08-14 13:30:59 +02:00 |
|
|
Andreas Steffen
|
8ddcac4c48
|
prepare CAMELLIA_CCM ESP encryption
|
2009-08-10 16:30:42 +02:00 |
|
|
Martin Willi
|
dd4c14f37c
|
set protocol to ESP for policies installed as a trap
|
2009-08-07 16:05:32 +02:00 |
|
|
Andreas Steffen
|
4b5b92bfee
|
%llu correctly prints u_int64_t
|
2009-08-07 09:50:36 +02:00 |
|
|
Andreas Steffen
|
4a02deb088
|
printing u_int64_t caused segfault on 32-bit platforms
|
2009-08-07 08:47:29 +02:00 |
|
|
Andreas Steffen
|
99dd42918e
|
do not set usetime if query_policy() fails
|
2009-08-07 05:59:09 +02:00 |
|
|
Tobias Brunner
|
c3a78360a8
|
Fixed a race condition when querying stats of a child_sa in different order.
|
2009-08-06 16:47:32 +02:00 |
|
|
Tobias Brunner
|
dd83c6d490
|
Don't query the policy usetime if there was no traffic on the SA.
This helps in cases where a policy is assigned to more than one SA. That
is, SAs now should have different usetimes even if they use the same policy.
|
2009-08-06 15:14:54 +02:00 |
|
|
Tobias Brunner
|
b3f8ea8346
|
Reverted the interface changes introduced in 3f720dc7.
|
2009-08-06 13:31:54 +02:00 |
|
|
Andreas Steffen
|
fcdf491a21
|
output number of transmitted bytes in closing CHILD_SA statement
|
2009-08-04 23:08:42 +02:00 |
|
|
Martin Willi
|
5cb300e795
|
compare IKE config when reusing an existing IKE_SA to initiate a CHILD_SA
|
2009-08-03 14:37:24 +02:00 |
|
|
Andreas Steffen
|
47eb87d437
|
corrected interface definition
|
2009-07-31 08:57:55 +02:00 |
|
|
Andreas Steffen
|
3f720dc7c3
|
update usetime only if usebytes increase
|
2009-07-30 23:19:42 +02:00 |
|
|
Andreas Steffen
|
2ad51539f6
|
display transmitted bytes per SA
|
2009-07-30 21:33:19 +02:00 |
|
|
Andreas Steffen
|
ecb32c75ce
|
report installation failure of inbound and/or outbound IPsec SA, separately
|
2009-07-13 15:13:12 +02:00 |
|
|
Martin Willi
|
977ec0c316
|
implemented ike_down() bus hook
|
2009-07-09 15:25:16 +02:00 |
|
|
Martin Willi
|
fa1d3c6629
|
implemented ike_up() bus hook
|
2009-07-09 15:25:16 +02:00 |
|
|
Martin Willi
|
f5f37cc7fa
|
implemented child_down() bus hook
|
2009-07-09 15:25:16 +02:00 |
|
|
Martin Willi
|
f669f45333
|
implemented child_up() bus hook
|
2009-07-09 15:25:15 +02:00 |
|
|
Martin Willi
|
622b56a52e
|
implemented ike_rekey()/child_rekey() bus hooks
|
2009-07-09 15:25:15 +02:00 |
|
|
Martin Willi
|
7afd9d6672
|
defer MOBIKE update if we have no route to the peer
|
2009-07-02 10:56:13 +02:00 |
|
|
Martin Willi
|
fcb06fdbfa
|
use rwlock instead of a mutex in trap_manager, avoids possible deadlock
|
2009-06-16 17:27:25 +02:00 |
|
|
Martin Willi
|
04d6583e26
|
reset IKE_SA on bus after checkout/checkin of replacement SA
|
2009-06-16 17:27:24 +02:00 |
|
|
Martin Willi
|
a13c013b6f
|
include TSi/TSr of triggering packet in acquire
|
2009-05-20 11:44:43 +02:00 |
|
|
Martin Willi
|
cd37e13133
|
properly terminate EAP authentication if EAP method fails
|
2009-05-20 09:24:18 +02:00 |
|
|
Martin Willi
|
64e8ca281f
|
simplified SPI allocation after refactorings
|
2009-05-14 10:28:18 +02:00 |
|
|
Martin Willi
|
0a3ca29021
|
fixed cleanup of traffic selector lists
|
2009-05-12 17:13:09 +02:00 |
|
|
Martin Willi
|
8f0ab613e5
|
do not destroy packet twice if message generation failed
|
2009-05-12 14:38:48 +02:00 |
|
|
Martin Willi
|
e1fa02bc62
|
properly end CERT_PRE task after detecting the final authentication round
|
2009-05-12 11:26:50 +02:00 |
|