denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,815 Commits 1 Branch 0 Tags
04ee2b7fed91b4430ba4870a2f1b98ee3e228f50
Commit Graph
99 Commits
Author SHA1 Message Date
Martin Willi 04ee2b7fed Added IKEv1 support to notify payload 2012-03-20 17:30:43 +01:00
Tobias Brunner 043ed1b346 Memory leak fixed. 2012-03-20 17:30:43 +01:00
Tobias Brunner 0b611540ef Store IKE version of an SA on ike_sa_t. 2012-03-20 17:30:43 +01:00
Martin Willi f34b452d56 Implement second exchange in IKEv1 main mode 2012-03-20 17:30:42 +01:00
Martin Willi 683d83ed3e Extended KE payload for IKEv1 support 2012-03-20 17:30:42 +01:00
Martin Willi bcfb0f4096 Extended nonce payload for IKEv1 support 2012-03-20 17:30:42 +01:00
Martin Willi 2e897fe30a Handle first exchange in IKEv1 main mode as responder 2012-03-20 17:30:41 +01:00
Martin Willi c73c832c5a Added an IKEv1 main mode task stub 2012-03-20 17:30:41 +01:00
Martin Willi b0b9d18593 Extend sa_payload for IKEv1 support 2012-03-20 17:30:40 +01:00
Martin Willi 837298c590 Use vendor id payload for IKEv1 payloads, too 2012-03-20 17:30:39 +01:00
Tobias Brunner 5d549cd4e1 Log if charon failed to establish a CHILD_SA but keeps the IKE_SA up. 2011-10-21 18:09:02 +02:00
Tobias Brunner d7c552a25e Fixed compilation of ike_me_t. 2011-10-04 10:19:10 +02:00
Andreas Steffen 4fb6b7a12c Migrated child_delete to INIT/METHOD macros 2011-10-04 08:05:27 +02:00
Andreas Steffen 0fc9dd1194 Migrated child_rekey to INIT/METHOD macros 2011-10-04 07:10:46 +02:00
Andreas Steffen ad8f42e898 Migrated ike_auth_lifetime to INIT/METHOD macros 2011-10-04 06:47:35 +02:00
Andreas Steffen 27d7641641 Migrated ike_cert_post to INIT/METHOD macros 2011-10-04 05:59:09 +02:00
Andreas Steffen 08f9f44176 Migrated ike_cert_pre to INIT/METHOD macros 2011-10-04 05:54:08 +02:00
Andreas Steffen 1bf77c8168 Migrated ike_config to INIT/METHOD macros 2011-10-03 23:55:15 +02:00
Andreas Steffen 2e89c3413b Migrated ike_delete to INIT/METHOD macros 2011-10-03 23:49:44 +02:00
Andreas Steffen 6dab816eb2 Migrated ike_dpd to INIT/METHOD macros 2011-10-03 22:37:44 +02:00
Andreas Steffen c73694e7fb Migrated ike_init to INIT/METHOD macros 2011-10-03 22:28:32 +02:00
Andreas Steffen bb6bbe6ddd Migrated ike_me to INIT/METHOD macros 2011-10-03 22:19:46 +02:00
Andreas Steffen 6ade8d6163 Migrated ike_natd to INIT/METHOD macros 2011-10-03 22:06:56 +02:00
Andreas Steffen 7db8fd0d9a Migrated ike_reauth to INIT/METHOD macros 2011-10-03 21:38:04 +02:00
Andreas Steffen a8bbdb1f26 log entry for outbound hash-and-url 2011-08-24 06:05:44 +02:00
Martin Willi 61cf9f512c Try to detect Windows Clients by looking for INTERNAL_IP4/6_SERVER attribute 2011-08-19 09:16:16 +02:00
Andreas Steffen f69f067958 fix double delete of old IKE_SA during reauthentication 2011-08-16 23:25:45 +02:00
Andreas Steffen 65d5f6bc2b some more typos 2011-08-15 21:43:26 +02:00
Tobias Brunner 7ebf021d37 typos: initator->initiator, authenticaion->authentication. 2011-08-15 16:31:04 +02:00
Tobias Brunner 9af9c6772b If we close a duplicate SA, it is also no authentication failure. 2011-08-12 10:11:39 +02:00
Tobias Brunner d9eaecd373 If local authentication fails, it is not really a peer auth failure. 2011-08-12 10:04:02 +02:00
Tobias Brunner ccbe380377 Throw an alert if authentication of the peer fails (not only for initiator). 2011-08-12 10:04:02 +02:00
Tobias Brunner ff4b25f9b7 Throw an alert via bus_t when remote authentication fails. 2011-08-12 09:59:27 +02:00
Tobias Brunner f3bb1bd039 Fixed common misspellings. 
Mostly found by 'codespell'.
 2011-07-20 16:14:10 +02:00
Tobias Brunner 572abc6cbd Replaced ike_sa_t.create_additional_address_iterator with enumerator. 2011-07-06 09:43:45 +02:00
Tobias Brunner 4bbce1ef37 Replaced ike_sa_t.create_child_sa_iterator with enumerator. 
This required two new methods on ike_sa_t. One returns the number of
CHILD_SAs and one allows to remove a CHILD_SA.
 2011-07-06 09:43:45 +02:00
Tobias Brunner e26304348c Replaced simple iterator usages. 2011-07-06 09:43:45 +02:00
Martin Willi bc20bc1927 Check if colliding task has actually a CHILD, i.e. after a migrate 2011-06-03 10:49:54 +02:00
Martin Willi 52846ec820 Remove superfluous test for peer_cfg on established IKE_SAs 2011-04-20 12:31:29 +02:00
Tobias Brunner 1c004bebd8 Clearly mark switch cases that fall through. 2011-04-19 13:48:50 +02:00
Tobias Brunner 3c0c321776 Neither rekey nor del can be NULL. 2011-04-14 18:10:27 +02:00
Martin Willi 3ced6b51e4 Move establish/inherit of rekeyed IKE_SAs to delete messages 
Having the inherit() function delayed to the IKE_SA establish procedure
was problematic. The task destroy function was never a good place and
results in locking/cleanup problems. After establishing the SA, it
should be really checked in ASAP to avoid any triggered DPD checks
to get lost.
 2011-03-15 15:20:09 +01:00
Martin Willi f42156a8c8 Wrap IKE delete after rekey into rekey task for responder, too 2011-03-15 11:51:53 +01:00
Martin Willi 41080cbbd9 Migrated ike_rekey task to INIT/METHOD macros 2011-03-15 11:30:02 +01:00
Tobias Brunner 84545f6e7c Some typos fixed. 2011-02-07 11:39:41 +01:00
Martin Willi b49d047bfc Invoke the per-round authorize() hook before purging current auth info on IKE_SA 2011-02-03 17:08:39 +01:00
Martin Willi 2b7686b5d8 Migrated ike_auth to INIT/METHOD macros, fixes missing initial_contact initialization 2011-02-02 15:13:39 +01:00
Martin Willi 5c89a00f05 Do not log potentially hundreds of cert requests for unknown CAs at level 1 2011-01-28 08:29:23 +01:00
Martin Willi 983a5e88d3 Revert "Send INITIAL_CONTACT even if we have a unique policy" 
It makes sense to omit INITIAL_CONTACT if don't have a unique policy,
as a client might want to connect from different devices to the same
account.

This reverts commit 719c33b41a.
 2011-01-13 10:50:46 +01:00
Martin Willi 719c33b41a Send INITIAL_CONTACT even if we have a unique policy 2011-01-10 11:54:10 +01:00