denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,155 Commits 1 Branch 0 Tags
05521352136b6def71fc8301ed1af89779364f38
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner 0552135213 Added functions to settings_t to load files dynamically at runtime. 2010-12-03 17:40:52 +01:00
Tobias Brunner 6388a758ba Allow inclusion of other files in strongswan.conf. 2010-12-03 17:38:37 +01:00
Tobias Brunner 65d88a09f5 Loading of strongswan.conf refactored to a separate function. 2010-12-03 17:38:37 +01:00
Tobias Brunner 5e3be75829 Allow to replace/extend previously defined values/sections in strongswan.conf. 2010-12-03 17:38:37 +01:00
Tobias Brunner 3eb23f3864 Don't create a section in parse_section. 
Just add subsections and values to the passed section.
 2010-12-03 17:38:37 +01:00
Tobias Brunner f6037d79cf Removed unused static variable "lev". 2010-12-03 17:38:36 +01:00
Tobias Brunner 413d8fe0e3 Avoid calling globfree twice on failure. 2010-12-03 17:38:36 +01:00
Tobias Brunner e49bc77f90 Removed signing artifact. 2010-11-02 09:30:09 +01:00
Tobias Brunner 5feda42724 pluto: Fixed a regression introduced in f565d0c575. 
Since scx_add could return a previously created smartcard object, using
sc->last_cert to store the newly added certificate could lead to segfaults.
 2010-10-26 09:58:13 +02:00
Tobias Brunner 71711b67b4 pluto: Locking fixed in cert_add. 2010-10-26 09:58:13 +02:00
Tobias Brunner 4915ea8217 Updated Android.mk to latest Makefile.am. 2010-10-21 15:02:32 +02:00
Tobias Brunner ed174fd7e2 Added missing include for RAND_seed and RAND_status. 2010-10-21 14:16:09 +02:00
Tobias Brunner a5477a6fa3 Changed some minor stuff in ipsec.conf(5) man page. 
Also added some "links" to strongswan.conf(5).
 2010-10-19 17:18:30 +02:00
Tobias Brunner 6bcf6016e6 Added accepted values to all options in ipsec.conf(5) man page. 2010-10-19 17:16:07 +02:00
Tobias Brunner a6f8100812 Removed unsupported options from ipsec.conf(5) man page. 2010-10-19 17:06:57 +02:00
Tobias Brunner 8207a74200 Fixed SEE ALSO references in main man pages. 2010-10-19 10:53:54 +02:00
Tobias Brunner 9f8ceffbd9 Added notes about expiry and rekey to ipsec.conf(5) man page. 2010-10-19 10:53:54 +02:00
Tobias Brunner b3cabd1f03 Added some NEWS about Maemo, MOBIKE and the kernel interfaces. 2010-10-15 18:17:09 +02:00
Tobias Brunner 6c6492d7e8 Some Doxygen fixes. 2010-10-15 18:14:48 +02:00
Tobias Brunner 5ce1a63054 Missed one unneeded destructor. 2010-10-15 17:33:57 +02:00
Tobias Brunner fa20849431 Deferred instantiation of socket implmentations until registration. 
Instantiating the implementations on plugin load was problematic
in case multiple socket plugins were loaded. Now, the first one
registered is instantiated.
 2010-10-15 17:30:21 +02:00
Tobias Brunner d3622166dd Added some generated files to .gitignore. 2010-10-15 10:25:08 +02:00
Tobias Brunner cf1bf2656e Moved sources of the NetworkManager plugin to src/frontends. 2010-10-14 17:47:02 +02:00
Tobias Brunner 333bb05122 Maemo: Added a basic debian package for charon. 2010-10-14 17:36:20 +02:00
Tobias Brunner c2fad1916a Avoid recursive loop if no socket implementations are loaded. 2010-10-14 17:36:20 +02:00
Tobias Brunner 070b63d704 Maemo: Added a widget to "unselect" a certificate. 2010-10-14 17:36:20 +02:00
Tobias Brunner 889c7947a6 Avoid duplicate certificates in mem_cred_t. 2010-10-14 17:36:20 +02:00
Tobias Brunner 3a6c5493af Maemo: Load CA certificates from system directories. 2010-10-14 17:36:20 +02:00
Tobias Brunner 31e7a45647 Maemo: OK is default response in password dialog. 2010-10-14 17:36:20 +02:00
Tobias Brunner be26f9a280 Maemo: Handle status changes from charon. 
Use synchronous invocation for "Connect" again.
 2010-10-14 17:36:19 +02:00
Tobias Brunner ef247379ea Maemo: Track the status of the current SA and send changes to the frontend. 2010-10-14 17:36:19 +02:00
Tobias Brunner 6f59971371 Maemo: Properly unregister the RPC callbacks. 2010-10-14 17:36:19 +02:00
Tobias Brunner 9f01ba4044 Maemo: Plugin implements the listener_t interface. 2010-10-14 17:36:19 +02:00
Tobias Brunner 39e5b21310 Maemo: Extracted most plugin code to a separate class, so we can use that as listener. 2010-10-14 17:36:19 +02:00
Tobias Brunner 4fef86d1ed Maemo: Initiate consumes a child_sa reference, so get an additional one. 2010-10-14 17:36:19 +02:00
Tobias Brunner 28c51809a7 Maemo: Basic functionality added to notify the applet about status updates. 2010-10-14 17:36:19 +02:00
Tobias Brunner c213353393 Maemo: Clear the credentials before each connection attempt. 2010-10-14 17:36:19 +02:00
Tobias Brunner 5232ebb1b4 Added function to clear all credentials from mem_cred_t. 2010-10-14 17:36:19 +02:00
Tobias Brunner 8a47cd909b Maemo: Do not store the password in the config file, ask the user for it on demand. 2010-10-14 17:36:19 +02:00
Tobias Brunner 04164cba44 Maemo: Debianized the status applet. 2010-10-14 17:36:18 +02:00
Tobias Brunner 12b61b17ae Maemo: Added basic connect/disconnect functionality to frontend. 2010-10-14 17:36:18 +02:00
Tobias Brunner c0d9c1817b Maemo: Listen for a special "Start" D-BUS call. 
This call is made on the system D-BUS so that charon is started as root.
 2010-10-14 17:36:18 +02:00
Tobias Brunner 174b31bce6 Maemo: Added support for connection initiation and shutdown. 2010-10-14 17:36:18 +02:00
Tobias Brunner e29aa7696f Fixed possible segmentation fault. 2010-10-14 17:36:18 +02:00
Tobias Brunner 9889c9d84c Maemo: Do not unref the dialog. 2010-10-14 17:36:18 +02:00
Tobias Brunner ab02058d78 Maemo: Improved icon loading in status applet. 2010-10-14 17:36:18 +02:00
Tobias Brunner df4f82a9ad Maemo: Register the status applet with libosso. 2010-10-14 17:36:18 +02:00
Tobias Brunner 8464e25a0f Maemo: Register with libosso and init Glib main loop. 2010-10-14 17:36:18 +02:00
Tobias Brunner 2bce814190 Maemo: Register charon as D-BUS system service. 
In order to be able to access this service via libosso, charon is
started with the run-standalone.sh script, which sets up the required
environment.
 2010-10-14 17:36:18 +02:00
Tobias Brunner 8411dc6e70 Maemo: Changed the input mode of several text boxes. 2010-10-14 17:36:17 +02:00
Tobias Brunner ce736b759b Maemo: Ensure that the settings directory exists. 2010-10-14 17:36:17 +02:00
Tobias Brunner 005e45330d Fixed a subtle SIGSEGV. 2010-10-14 17:36:17 +02:00
Tobias Brunner f79161e866 Stub plugin for Maemo specific extensions added. 2010-10-14 17:36:17 +02:00
Tobias Brunner 8df3749c6a Dialog to initiate or terminate connections added. 2010-10-14 17:36:17 +02:00
Tobias Brunner 59df6ff93c Enable dynamic registration of StrongswanConnection(s) type. 
Because status menu plugins get loaded and unloaded dynamically by the
Hildon Desktop, we have to register our Types dynamically.
 2010-10-14 17:36:17 +02:00
Tobias Brunner 41b2fbb29f Initial version of the Hildon Desktop status menu plugin. 2010-10-14 17:36:17 +02:00
Tobias Brunner d8f4efbf7b Adding, editing and deleting connections is now possible in the settings plugin. 2010-10-14 17:36:17 +02:00
Tobias Brunner 2bf0caec66 Adding a dialog to the settings plugin that lists all connections. 2010-10-14 17:36:17 +02:00
Tobias Brunner 980c1b6e07 Helper methods added to StrongSwanConnections to easily show connections in a list widget. 2010-10-14 17:36:17 +02:00
Tobias Brunner 01f7455640 Management class for connection settings added, connections are stored in a simple GKeyFile. 2010-10-14 17:36:17 +02:00
Tobias Brunner 9a09e32b98 Simple GObject based class for connection settings added. 2010-10-14 17:36:16 +02:00
Tobias Brunner d50670d50e Adding a stub plugin for the Hildon control panel. 2010-10-14 17:36:16 +02:00
Tobias Brunner 0261b12419 Adding autotools framework for the maemo frontend. 2010-10-14 17:36:16 +02:00
Tobias Brunner e7e48fff9f Added ssh_config to distribution. 2010-10-14 15:58:26 +02:00
Tobias Brunner 7ec11936e8 testing: Reduce testing runtime by reusing SSH sessions. 
By using the ControlMaster and ControlPath options, existing SSH sessions
are reused (a session to each host is opened at the beginning of a test
run).  Also, RC4 is used as encryption algorithm to further improve the
performance.  These changes reduce the runtime by over 20%.
 2010-10-14 14:01:26 +02:00
Tobias Brunner 972663ccb0 Define explicit IKEv1 keyexchange mode IV. 2010-10-14 13:55:04 +02:00
Tobias Brunner 4d10e260de pluto: Install inbound policies together with outbound policies. 
This avoids an error message when uninstalling the policies and charon
did it already like this.
 2010-10-14 13:53:20 +02:00
Tobias Brunner d4b8f98c1a Store the exit code of executed commands in Dumm::Guest.execstatus. 
Also, no exception is risen for failed exec calls, anymore.
 2010-10-12 15:41:17 +02:00
Tobias Brunner d679266fe1 Map the guests to a ruby hash to avoid creating new ruby objects on each call of Guest.each or Guest[]. 2010-10-12 15:04:38 +02:00
Tobias Brunner 9b0847dd9a Exposed the mutli-overlay functionality in the ruby bindings. 
Overlays can be added to individual guests (which overlays exactly the
supplied directory) or to all guests (which overlays a subdirectory
with the guest's name to each guest).

The template functionality is provided as before.
 2010-10-12 15:03:37 +02:00
Tobias Brunner f29396b87e Added support for multiple overlays to the main library. 
Also implemented the template functionality using the new overlay functions.
 2010-10-12 15:03:27 +02:00
Tobias Brunner 0dbbd47fe7 Added support for multiple overlays to guests (replaces the template functionality). 
Compared to a template an overlay is an arbitrary directory, not the
parent directory of a directory with the guest's name.
 2010-10-12 15:03:26 +02:00
Tobias Brunner 4542920a3e Added support for multiple overlays to the copy-on-write filesystem. 2010-10-12 15:03:19 +02:00
Tobias Brunner 1dbf0ed982 Do not add additional addresses to MOBIKE path probing messages. 2010-10-12 11:11:06 +02:00
Tobias Brunner 5774408898 Change behavior of responder during roaming. 
If the current source address is not available anymore, the responder
uses ike_mobike_t.roam, thus, uses multiple address combinations when
trying to notify the initiator.
 2010-10-12 11:11:05 +02:00
Tobias Brunner c5770f864f Allow responder to use ike_mobike_t.roam. 
After getting a response the responder updates the IPsec SAs.
 2010-10-12 11:11:05 +02:00
Tobias Brunner 261b2572d1 Send list of additional addresses even if current path is still valid. 2010-10-12 11:11:05 +02:00
Tobias Brunner bab56a4abb Extracted path checking in ike_sa_t.roam into separate functions. 2010-10-12 11:11:05 +02:00
Tobias Brunner 769c69facc Added support for responders to change their address via MOBIKE. 
If the original responder updates its list of additional addresses we
check if the remote endpoint changed and update the IPsec SAs if it did,
as we assume the original address became unavailable and the responder
already updated the SAs on its side.
 2010-10-12 11:11:05 +02:00
Tobias Brunner 13876431d6 Explicitly configure MOBIKE tasks to update the list of additional addresses. 2010-10-12 11:11:05 +02:00
Tobias Brunner 31e7dc4dfd Improved check for first IKE_AUTH message in ike_mobike task. 
If the original responder initiated a MOBIKE exchange, the previous
check was not always correct.
 2010-10-12 11:11:05 +02:00
Tobias Brunner c817e7bb90 Migrated ike_mobike task to INIT/METHOD macros. 2010-10-12 11:11:05 +02:00
Tobias Brunner be90134211 Simplified apply_port function in mobike task. 2010-10-12 11:11:04 +02:00
Tobias Brunner ec0c756d07 Do not fire roam events based on local route changes. 
These kernel events are triggered on address changes, which is
problematic when deleting virtual IP addresses.
 2010-10-12 11:11:04 +02:00
Tobias Brunner 29607690a8 If a changed route has no src, try to find it via interface. 2010-10-12 11:11:04 +02:00
Tobias Brunner 0ac6d2e658 Get source address from interface if the route does not provide one. 2010-10-12 11:11:04 +02:00
Tobias Brunner cd26eedc5c Do not update hosts based on retransmitted messages. 2010-10-12 11:11:04 +02:00
Tobias Brunner d5bd775126 Do not update remote host if we are behind a NAT. 2010-10-12 11:11:04 +02:00
Tobias Brunner f22ba072e8 draft-ietf-ipsecme-eap-mutual will be released as RFC 5998. 2010-09-16 10:27:49 +02:00
Tobias Brunner 41f525becd Added missing options (corrected some default values). 2010-09-10 12:01:20 +02:00
Tobias Brunner 3f71c5d95f Moved load-tester configuration to a separate section. 2010-09-10 12:01:20 +02:00
Tobias Brunner b2bcc57737 Added information about logger configuration. 2010-09-10 12:01:20 +02:00
Tobias Brunner fa8c06903f More information about IKEv2 retransmissions added. 2010-09-10 12:01:20 +02:00
Tobias Brunner 320cecd2dd Adding most of the strongswan.conf options from the wiki. 2010-09-10 12:01:20 +02:00
Tobias Brunner 483c1feb7e Added strongswan.conf(5) stub. 2010-09-10 12:01:19 +02:00
Tobias Brunner 0a1233e642 Moved man pages for config files to a separate directory. 2010-09-10 12:01:19 +02:00
Tobias Brunner 3f9ba3be66 Conditional exclusion of tls_test script completed. 2010-09-09 13:21:38 +02:00
Tobias Brunner 6d4ae46768 Fixed typo. 2010-09-09 13:21:38 +02:00
Tobias Brunner b1baa90846 Fixed copy/paste error. 2010-09-09 10:10:43 +02:00
Tobias Brunner 3255e489be Of course, mark is also supported by pluto. 2010-09-06 12:04:26 +02:00