Commit Graph
211 Commits
Author SHA1 Message Date
Martin Willi f1092e20f4 Fixed encoding of hash-and-url cert payload 2009-09-22 10:07:04 +02:00
Tobias Brunner 0755e98e5c Cleaned up some code of the mediation extension. 2009-09-04 15:48:30 +02:00
Tobias Brunner f4b975a65d Moved set_state after the DBG0 statement, so that the message gets logged also for mediation connections without CHILD_SA. 2009-09-04 15:13:12 +02:00
Martin Willi b9b8a98f47 remove spaces within tabs (\t( )+\t) 2009-09-04 15:00:19 +02:00
Martin Willi 7daf5226b7 removed trailing spaces ([[:space:]]+$) 2009-09-04 13:46:09 +02:00
Martin Willi dd2b6f3073 fixed memleak in rekey collissions 2009-09-03 18:09:29 +02:00
Martin Willi 72e2faf291 Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL 2009-09-03 17:32:41 +02:00
Martin Willi 9beb83868f Use get_notify() to look up single notifies 2009-09-03 17:32:01 +02:00
Tobias Brunner a20e98749a Simplified the search for ME_CONNECTID notifies. 2009-09-02 17:30:47 +02:00
Tobias Brunner 484a06bce7 Fixed some typos; whitespace cleanup. 2009-09-02 17:30:46 +02:00
Tobias Brunner f40c115531 If no inbound CHILD_SA is found, try to find an outbound SA.
Due to the new lifetime limits in- and outbound SAs may expire
individually.
2009-09-01 12:53:44 +02:00
Martin Willi 6180a55852 use time_monotonic() instead of time() for statistics and time difference calculations 2009-08-31 18:00:28 +02:00
Martin Willi 64fdbce4da updated charon to new fingerprinting API 2009-08-26 11:23:53 +02:00
Andreas Steffen 4b5b92bfee %llu correctly prints u_int64_t 2009-08-07 09:50:36 +02:00
Andreas Steffen 4a02deb088 printing u_int64_t caused segfault on 32-bit platforms 2009-08-07 08:47:29 +02:00
Tobias Brunner c3a78360a8 Fixed a race condition when querying stats of a child_sa in different order. 2009-08-06 16:47:32 +02:00
Tobias Brunner b3f8ea8346 Reverted the interface changes introduced in 3f720dc7. 2009-08-06 13:31:54 +02:00
Andreas Steffen fcdf491a21 output number of transmitted bytes in closing CHILD_SA statement 2009-08-04 23:08:42 +02:00
Andreas Steffen ecb32c75ce report installation failure of inbound and/or outbound IPsec SA, separately 2009-07-13 15:13:12 +02:00
Martin Willi 977ec0c316 implemented ike_down() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi fa1d3c6629 implemented ike_up() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi f5f37cc7fa implemented child_down() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi f669f45333 implemented child_up() bus hook 2009-07-09 15:25:15 +02:00
Martin Willi 622b56a52e implemented ike_rekey()/child_rekey() bus hooks 2009-07-09 15:25:15 +02:00
Martin Willi a13c013b6f include TSi/TSr of triggering packet in acquire 2009-05-20 11:44:43 +02:00
Martin Willi 0a3ca29021 fixed cleanup of traffic selector lists 2009-05-12 17:13:09 +02:00
Martin Willi e1fa02bc62 properly end CERT_PRE task after detecting the final authentication round 2009-05-12 11:26:50 +02:00
Martin Willi 30fc989c9c fixed configuration payload type as responder 2009-05-11 13:23:15 +02:00
Martin Willi a3d692ca87 never send a CERT payload in EAP 2009-05-11 11:37:58 +02:00
Martin Willi 25f2d52f30 Fixed EAP authentication regression
Use correct nonce/init message again for EAP AUTH payload
sent from responder to initiator.
2009-05-11 10:42:52 +02:00
Martin Willi b81917ea00 fixed memleak 2009-05-11 10:42:52 +02:00
Martin Willi c3626c2ce6 initiate trapped CHILD_SAs with same reqid 2009-05-08 10:04:00 +02:00
Martin Willi 8c99451ae1 make use of the new trap-manager 2009-05-08 10:03:58 +02:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Martin Willi 7f56b49461 attribute_manager supports attribute_handler's to handle configuration attributes via plugins
moved resolv.conf editing to a separate plugin (resolv_conf)
extended attribute_provider interface to hand out arbitrary attributes
  moved strongswan.conf based dns/nbns configuration to a plugin (attr)
2009-04-24 14:13:52 +00:00
Martin Willi 6554b5e412 schedule_job uses seconds to support time values larger than 49 days
added schedule_job_ms for ms resolution events
2009-04-21 15:16:56 +00:00
Martin Willi 09f706ec3e fixed IKE_SA rekeying collisions 2009-04-20 11:29:27 +00:00
Martin Willi a44bb9345f merged multi-auth branch back into trunk 2009-04-14 10:34:24 +00:00
Martin Willi d3fbc75e85 set port for NATD hash calculation in the "include-all" case 2009-03-26 11:49:07 +00:00
Martin Willi 1490ff4d9b updated Doxyfile
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Andreas Steffen 2b1f5f3461 configuration of NBNS server assignment via strongswan.conf 2009-02-13 11:57:50 +00:00
Andreas Steffen 48f9a22b57 configuration of DNS server assignment via strongswan.conf 2009-02-12 09:02:15 +00:00
Martin Willi b81d8cd3cc changed [4856] to dynamically choose traffic selector family 2009-02-11 13:09:52 +00:00
Martin Willi 95f1735f87 send proper AUTHENTICATION_FAILED if EAP method is successful, but AUTH mismatches 2009-02-10 17:21:44 +00:00
Andreas Steffen b59f154b09 proper initialization and disposal of keying material 2009-01-15 01:52:44 +00:00
Martin Willi 12d4186f5c fixed a potential memory leak when reusing mobike task 2008-12-19 14:34:40 +00:00
Tobias Brunner 58464dd737 improved IKE_SA uniqueness check 2008-12-16 17:21:28 +00:00
Martin Willi a1466a3ec2 limit number of ADDITIONAL_IPV*_ADDR notifies 2008-12-09 14:32:57 +00:00
Martin Willi 394eb35b0c some task queueing improvements:
- do not pass CHILD_SAs to task constructor, might not
	  be valid anymore during execution (late lookup)
	- use sub-tasks to delete CHILD/IKE_SA after rekeying,
	  as we want to execute the delete before additional
	  queued tasks
2008-12-01 18:38:28 +00:00