Martin Willi
f1092e20f4
Fixed encoding of hash-and-url cert payload
2009-09-22 10:07:04 +02:00
Tobias Brunner
0755e98e5c
Cleaned up some code of the mediation extension.
2009-09-04 15:48:30 +02:00
Tobias Brunner
f4b975a65d
Moved set_state after the DBG0 statement, so that the message gets logged also for mediation connections without CHILD_SA.
2009-09-04 15:13:12 +02:00
Martin Willi
b9b8a98f47
remove spaces within tabs (\t( )+\t)
2009-09-04 15:00:19 +02:00
Martin Willi
7daf5226b7
removed trailing spaces ([[:space:]]+$)
2009-09-04 13:46:09 +02:00
Martin Willi
dd2b6f3073
fixed memleak in rekey collissions
2009-09-03 18:09:29 +02:00
Martin Willi
72e2faf291
Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL
2009-09-03 17:32:41 +02:00
Martin Willi
9beb83868f
Use get_notify() to look up single notifies
2009-09-03 17:32:01 +02:00
Tobias Brunner
a20e98749a
Simplified the search for ME_CONNECTID notifies.
2009-09-02 17:30:47 +02:00
Tobias Brunner
484a06bce7
Fixed some typos; whitespace cleanup.
2009-09-02 17:30:46 +02:00
Tobias Brunner
f40c115531
If no inbound CHILD_SA is found, try to find an outbound SA.
...
Due to the new lifetime limits in- and outbound SAs may expire
individually.
2009-09-01 12:53:44 +02:00
Martin Willi
6180a55852
use time_monotonic() instead of time() for statistics and time difference calculations
2009-08-31 18:00:28 +02:00
Martin Willi
64fdbce4da
updated charon to new fingerprinting API
2009-08-26 11:23:53 +02:00
Andreas Steffen
4b5b92bfee
%llu correctly prints u_int64_t
2009-08-07 09:50:36 +02:00
Andreas Steffen
4a02deb088
printing u_int64_t caused segfault on 32-bit platforms
2009-08-07 08:47:29 +02:00
Tobias Brunner
c3a78360a8
Fixed a race condition when querying stats of a child_sa in different order.
2009-08-06 16:47:32 +02:00
Tobias Brunner
b3f8ea8346
Reverted the interface changes introduced in 3f720dc7.
2009-08-06 13:31:54 +02:00
Andreas Steffen
fcdf491a21
output number of transmitted bytes in closing CHILD_SA statement
2009-08-04 23:08:42 +02:00
Andreas Steffen
ecb32c75ce
report installation failure of inbound and/or outbound IPsec SA, separately
2009-07-13 15:13:12 +02:00
Martin Willi
977ec0c316
implemented ike_down() bus hook
2009-07-09 15:25:16 +02:00
Martin Willi
fa1d3c6629
implemented ike_up() bus hook
2009-07-09 15:25:16 +02:00
Martin Willi
f5f37cc7fa
implemented child_down() bus hook
2009-07-09 15:25:16 +02:00
Martin Willi
f669f45333
implemented child_up() bus hook
2009-07-09 15:25:15 +02:00
Martin Willi
622b56a52e
implemented ike_rekey()/child_rekey() bus hooks
2009-07-09 15:25:15 +02:00
Martin Willi
a13c013b6f
include TSi/TSr of triggering packet in acquire
2009-05-20 11:44:43 +02:00
Martin Willi
0a3ca29021
fixed cleanup of traffic selector lists
2009-05-12 17:13:09 +02:00
Martin Willi
e1fa02bc62
properly end CERT_PRE task after detecting the final authentication round
2009-05-12 11:26:50 +02:00
Martin Willi
30fc989c9c
fixed configuration payload type as responder
2009-05-11 13:23:15 +02:00
Martin Willi
a3d692ca87
never send a CERT payload in EAP
2009-05-11 11:37:58 +02:00
Martin Willi
25f2d52f30
Fixed EAP authentication regression
...
Use correct nonce/init message again for EAP AUTH payload
sent from responder to initiator.
2009-05-11 10:42:52 +02:00
Martin Willi
b81917ea00
fixed memleak
2009-05-11 10:42:52 +02:00
Martin Willi
c3626c2ce6
initiate trapped CHILD_SAs with same reqid
2009-05-08 10:04:00 +02:00
Martin Willi
8c99451ae1
make use of the new trap-manager
2009-05-08 10:03:58 +02:00
Tobias Brunner
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
Tobias Brunner
d24a74c5b4
merging changes from portability branch back to trunk
...
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Martin Willi
7f56b49461
attribute_manager supports attribute_handler's to handle configuration attributes via plugins
...
moved resolv.conf editing to a separate plugin (resolv_conf)
extended attribute_provider interface to hand out arbitrary attributes
moved strongswan.conf based dns/nbns configuration to a plugin (attr)
2009-04-24 14:13:52 +00:00
Martin Willi
6554b5e412
schedule_job uses seconds to support time values larger than 49 days
...
added schedule_job_ms for ms resolution events
2009-04-21 15:16:56 +00:00
Martin Willi
09f706ec3e
fixed IKE_SA rekeying collisions
2009-04-20 11:29:27 +00:00
Martin Willi
a44bb9345f
merged multi-auth branch back into trunk
2009-04-14 10:34:24 +00:00
Martin Willi
d3fbc75e85
set port for NATD hash calculation in the "include-all" case
2009-03-26 11:49:07 +00:00
Martin Willi
1490ff4d9b
updated Doxyfile
...
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Andreas Steffen
2b1f5f3461
configuration of NBNS server assignment via strongswan.conf
2009-02-13 11:57:50 +00:00
Andreas Steffen
48f9a22b57
configuration of DNS server assignment via strongswan.conf
2009-02-12 09:02:15 +00:00
Martin Willi
b81d8cd3cc
changed [4856] to dynamically choose traffic selector family
2009-02-11 13:09:52 +00:00
Martin Willi
95f1735f87
send proper AUTHENTICATION_FAILED if EAP method is successful, but AUTH mismatches
2009-02-10 17:21:44 +00:00
Andreas Steffen
b59f154b09
proper initialization and disposal of keying material
2009-01-15 01:52:44 +00:00
Martin Willi
12d4186f5c
fixed a potential memory leak when reusing mobike task
2008-12-19 14:34:40 +00:00
Tobias Brunner
58464dd737
improved IKE_SA uniqueness check
2008-12-16 17:21:28 +00:00
Martin Willi
a1466a3ec2
limit number of ADDITIONAL_IPV*_ADDR notifies
2008-12-09 14:32:57 +00:00
Martin Willi
394eb35b0c
some task queueing improvements:
...
- do not pass CHILD_SAs to task constructor, might not
be valid anymore during execution (late lookup)
- use sub-tasks to delete CHILD/IKE_SA after rekeying,
as we want to execute the delete before additional
queued tasks
2008-12-01 18:38:28 +00:00