denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,876 Commits 1 Branch 0 Tags
092a9b88ad2fd39fd4773739621a6b6cc093d3f8
Commit Graph
881 Commits
Author SHA1 Message Date
Martin Willi 5c6b5bf599 fixed bug: usage of already freed mem 2006-06-20 09:53:25 +00:00
Martin Willi aed58dcc93 readded local_credential_store 
added sendcert policy to connection
some other cleanups
 2006-06-20 08:43:57 +00:00
Andreas Steffen 21b433c641 implemented rereadcrls rereadcacerts 2006-06-20 06:05:01 +00:00
Andreas Steffen db959e6ea3 removed local_credential_store 2006-06-20 05:57:52 +00:00
Martin Willi b965b8456b fixed SPI when acting as initiator of rekeying 2006-06-19 09:27:14 +00:00
Martin Willi c65a4fff3f fixed SPI when rekeying and deleting CHILD_SAs 2006-06-19 08:54:19 +00:00
Martin Willi 891dfaf983 change key derivation order to fullfill RFC 2006-06-19 08:11:42 +00:00
Martin Willi f7eb60dd5e 2006-06-16 14:10:49 +00:00
Andreas Steffen 21e7a724d0 added crl support 2006-06-16 05:55:30 +00:00
Andreas Steffen d92cca4a72 added listcrls 2006-06-16 05:55:02 +00:00
Martin Willi c859ec9592 fixed compilation error 2006-06-15 13:41:06 +00:00
Martin Willi 147fe5095d fixed aes code, we support now aes128, aes192, aes256 in IKE 2006-06-15 13:14:09 +00:00
Martin Willi c095388f7f added support for "ike" and "esp" keywords 
fixed bugs in proposal code
algorithm selection for charon works now with ipsec.conf
a lot of other fixes
 2006-06-15 11:09:11 +00:00
Martin Willi 3efbf98312 implemented clean spi allocation behavior when using multiple proposals 2006-06-15 11:06:22 +00:00
Andreas Steffen b98e0927f4 added default CRL directory path 2006-06-14 12:44:12 +00:00
Andreas Steffen 03442041a9 added option parsing 2006-06-14 12:42:36 +00:00
Martin Willi fa32cd3c47 debug and logging improvements 2006-06-13 10:01:04 +00:00
Andreas Steffen 5347233204 support for stroke listcerts|listcacerts|listall and left|rightca= 2006-06-12 08:43:46 +00:00
Martin Willi 50f98119dd using same reqid if a child sa rekeys an existing one 2006-06-12 08:36:41 +00:00
Andreas Steffen bc35460db7 add_certificate() now returns pointer to added cert 2006-06-12 07:57:14 +00:00
Andreas Steffen c4a7413e72 cosmetics 2006-06-12 07:55:37 +00:00
Martin Willi a2a3fb3e25 workaround for peers rekeying at the same time 
loading lifetime policies from ipsec.conf
 2006-06-12 07:33:20 +00:00
Martin Willi 695723d4e8 old child_sa gets deleted after rekeying 
rekeying almost complete, but:
	IKE_SA get in an invalid state when both initiate rekeying at the same time,
 2006-06-09 15:12:43 +00:00
Martin Willi b543bef50c improved kernel interface logging 2006-06-09 08:41:41 +00:00
Martin Willi 0bb32cb5f3 fixed clone/destroy behavior when not using CAs 2006-06-09 07:40:40 +00:00
Martin Willi 5c131a016b specifying keysize in bits, as it is required in IKEv2 
added generic kernel SA algorithm handling, which brings us:
        aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
 2006-06-09 07:31:30 +00:00
Andreas Steffen b7f9ca5837 added support for leftsendcert= and left|rightca= parameters 2006-06-09 05:50:41 +00:00
Andreas Steffen ac427e3677 discard cert if CA basic constraints flag is not set and warn if cert is not valide 2006-06-09 05:48:49 +00:00
Martin Willi 5238c9afef fixed compile warnings when using -Wall 
further CHILD_SA rekeying work done:
	creation of a new CHILD_SA on a expire from a kernel works
	delete of old CHILD_SA still missing
	some issues when both initiate rekeing
 2006-06-08 14:20:05 +00:00
Martin Willi 8d77eddec2 further work for rekeying: 
get liftimes from policy
  added new state
  initiation of rekeying done
proposal redone:
  removed support for AH+ESP proposals
 2006-06-07 13:26:23 +00:00
Martin Willi 6a030ba9ea fixed a memleak 2006-06-07 05:54:09 +00:00
Andreas Steffen fc0afb6810 created IPv6 environment 2006-06-06 05:41:21 +00:00
Martin Willi 32b6500fbf job management: 
moved job code from thread_pool to job, jobs have an "execute" method now
  added two new jobs: delete_child_sa & rekey_child_sa
kernel interface:
  listens now for ACQUIRE & EXPIRE
  supports hard and soft lifetimes
  fires jobs for delete and rekey child sa
ike sa manager:
  can checkout IKE SAs by requid of owned CHILD SAs
we have now the infrastructure to do the rekeying... :-)
 2006-05-31 14:23:15 +00:00
Martin Willi 6f2aba1322 - fixed some memleaks/freebugs 
- leak detective works almost usable now (?!)
 2006-05-31 14:13:26 +00:00
Martin Willi bd72398729 - fixed host-host tunnel traffic selection, host-host works now 2006-05-31 06:52:27 +00:00
Andreas Steffen 6848dac603 minimized prefixed on stroke logger output 2006-05-31 05:50:04 +00:00
Andreas Steffen 90ed2e8278 charon outputs strongSwan version 2006-05-31 05:48:32 +00:00
Martin Willi 2d6c3bce06 2006-05-30 14:56:12 +00:00
Martin Willi b93782903f - fixed event queue for events >36min 2006-05-30 13:22:46 +00:00
Martin Willi 8403b34bd9 2006-05-30 13:01:50 +00:00
Martin Willi 0773bdcf3f - included charons module tests to build & dist 2006-05-30 13:00:18 +00:00
Andreas Steffen 6d5e617f7d full support of ikev1 and ikev2 connection flags 2006-05-30 11:10:42 +00:00
Andreas Steffen 9db4f61476 cosmetics in log_status output 2006-05-30 11:07:14 +00:00
Andreas Steffen c11c43d2c3 use of streq 2006-05-30 11:03:55 +00:00
Andreas Steffen 510d54eb59 lookup of private key based on keyid of public key 2006-05-30 07:53:13 +00:00
Andreas Steffen fa896e9a21 new functions to add certificates and retrieve private and public keys 2006-05-30 07:52:25 +00:00
Andreas Steffen d793980f56 changed log level 2006-05-30 07:50:15 +00:00
Andreas Steffen e1c00b96a6 list ca certificates 2006-05-30 07:48:29 +00:00
Andreas Steffen abf2be2281 define default CA_CERTIFICATE_DIR 2006-05-30 07:38:41 +00:00
Andreas Steffen 92d30836fd load all ca certificates 2006-05-30 07:37:48 +00:00