denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,351 Commits 1 Branch 0 Tags
0406ed7a166e732f1b237ecf6198922825f027a7
Commit Graph
211 Commits
Author SHA1 Message Date
Martin Willi ddef455219 pass SKd to derive_ike_keys() to have a more interoperable API 2008-11-28 09:51:44 +00:00
Martin Willi 3aaf7908d1 refactored and cleaned up child_sa interface 
replaced add/update calls by a install() call
	allocating SPIs always externally
	support installation of non-allocated CHILD_SAs
	some other cleanups
 2008-11-19 15:31:27 +00:00
Martin Willi 32ec3c1a8b fallback to reauthentication if peer does not support CHILD_SA rekeying 2008-11-14 14:05:47 +00:00
Martin Willi dad8eceea3 fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SAS 2008-11-14 13:58:16 +00:00
Martin Willi faf9569fdb moved ike_initiator flag to IKE_SAs condition bitfield 2008-11-12 16:07:17 +00:00
Tobias Brunner ea625fabf9 merging kernel_klips plugin back into trunk 2008-11-11 09:22:00 +00:00
Andreas Steffen d487b4b727 preliminary support of Mobile IPv6 2008-11-11 06:37:37 +00:00
Martin Willi e13389a7f7 got rid of deprecated create_iterator_locked() 2008-11-05 08:32:38 +00:00
Andreas Steffen f41a4a4e15 corrected typo2 2008-11-05 05:27:42 +00:00
Andreas Steffen a066f7e6c2 corrected captions 2008-11-02 22:13:17 +00:00
Martin Willi 5dffdea1d7 added hooks for IKE and CHILD keymat 2008-10-30 12:58:54 +00:00
Martin Willi 5a76bb7f7a store plain skd, not the prf 2008-10-30 09:18:52 +00:00
Martin Willi 80853d8498 moved CHILD_SA key derivation to keymat_t 
passing key chunks to CHILD_SA, not the PRF
 2008-10-29 16:06:16 +00:00
Martin Willi a64cc8f75f do not store DH redundant in keymat 2008-10-29 13:35:06 +00:00
Martin Willi 6a4ff35cc4 moved key derivation and management into keymat object 
allows secured implementation of key management (e.g. in kernel or HW)
	only IKE keys for now
 2008-10-28 16:07:06 +00:00
Martin Willi 3c8234d408 store IKE proposal implicitly during derive_keys 2008-10-28 10:12:21 +00:00
Martin Willi 85ac2fa547 use more generic stats getter, introducing new stats 2008-10-27 14:51:00 +00:00
Martin Willi f2e1ff59ab reset threads IKE_SA after checking other IKE_SAs 
invoke updown script only if we have valid IKE_SA
 2008-10-20 11:38:16 +00:00
Andreas Steffen 7790ab0f37 re-established all previous AUD level messages 2008-10-17 03:44:06 +00:00
Martin Willi ad3af574a4 moved updown script invocation to an optional plugin 2008-10-16 11:48:18 +00:00
Martin Willi a985db3ff3 reintegrated bus-refactoring branch 2008-10-14 08:52:13 +00:00
Martin Willi f0974eb2c2 fixed MOBIKE roaming if clients address changes 2008-10-09 08:25:11 +00:00
Martin Willi ce5b17082d mobike: try to keep existing source address before switching to another 2008-10-08 08:23:46 +00:00
Martin Willi 9d9a772ee1 use MOBIKE enabled DPD if we are NATed 
update SAs if we detect changes in NAT mappings
 2008-10-06 13:37:04 +00:00
Martin Willi aa1b90a5b2 do not run CHILD_SA delete action if rekeying 2008-10-03 16:01:14 +00:00
Martin Willi 7827997346 also respect the mobike=no setting as responder 2008-09-30 12:36:58 +00:00
Tobias Brunner a341a68fac merging renaming of mode_t to ipsec_mode_t back to trunk 2008-09-25 13:56:23 +00:00
Tobias Brunner 507f26f685 merging modularized kernel interface back to trunk 2008-09-25 07:56:58 +00:00
Andreas Steffen 919019b3cd completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes 2008-08-26 05:15:34 +00:00
Martin Willi 822901061b ported parts of two-sim branch 
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
 2008-08-22 10:44:51 +00:00
Andreas Steffen 342c84ddec initiator sends contents of rightca= if present as a certificate request without searching for further CA certificates 2008-08-05 09:05:57 +00:00
Andreas Steffen f6facbe75c completed IKE_SA logging at the AUDIT level 2008-07-23 18:46:34 +00:00
Andreas Steffen 6410231335 IKE_SA rekeying inherits other_host from old IKE_SA 2008-07-23 07:44:26 +00:00
Andreas Steffen 0eede4a31f cosmetics 2008-07-23 06:38:24 +00:00
Andreas Steffen 51c8f8261f some more changes to IKE_SA and CHILD_SA logging 2008-07-22 17:10:10 +00:00
Andreas Steffen 66da78b4bb ipsec status lists IPCOMP CPIs 2008-07-22 12:03:58 +00:00
Andreas Steffen eba7470b76 consistent logging of SPIs and CPIs 2008-07-22 10:16:45 +00:00
Andreas Steffen fb34475b5c consistent logging of IKE and CHILD SAs 2008-07-21 12:47:59 +00:00
Martin Willi a4a3e0c7dc introduced an additional bus->signal parameter for signal specific data 
added SIG_IKE/SIG_CHD macros for signal emitting
 2008-07-18 15:51:40 +00:00
Martin Willi 7beea2e99f fixed acquire-delay bug by: 
installing policies before states
  updating policies if protocol has changed
 2008-07-16 11:51:37 +00:00
Martin Willi 62bd123952 peer_cfg lookup takes peer addresses into account 2008-07-01 09:05:20 +00:00
Martin Willi 866ba8e0b6 strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if CHILD_SA setup in IKE_AUTH fails 2008-07-01 07:54:09 +00:00
Martin Willi d510eaea47 sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none found 2008-07-01 06:36:52 +00:00
Andreas Steffen 125aaf1ab1 log received vendor id as a hex value 2008-06-27 17:11:54 +00:00
Andreas Steffen bc997f6583 display selected IKE proposal in ipsec statusall 2008-06-22 11:24:33 +00:00
Tobias Brunner ea0823dffd ECDSA with OpenSSL 2008-06-10 09:08:27 +00:00
Martin Willi 5a22a02156 DNS resolving of ike_cfg hosts dynamically on demand 2008-06-06 15:05:54 +00:00
Martin Willi de3d65a132 filtering out non matching path probing pairs explicitly 2008-05-23 15:43:42 +00:00
Martin Willi 85a119bc0b replying to COOKIE2 mobike notify properly 
including COOKIE2 ourself after path probing
 2008-05-21 17:56:21 +00:00
Tobias Brunner d4aad55434 IPComp for IKEv2 2008-05-08 16:19:11 +00:00