Martin Willi
0a3ca29021
fixed cleanup of traffic selector lists
2009-05-12 17:13:09 +02:00
Martin Willi
e1fa02bc62
properly end CERT_PRE task after detecting the final authentication round
2009-05-12 11:26:50 +02:00
Martin Willi
30fc989c9c
fixed configuration payload type as responder
2009-05-11 13:23:15 +02:00
Martin Willi
a3d692ca87
never send a CERT payload in EAP
2009-05-11 11:37:58 +02:00
Martin Willi
25f2d52f30
Fixed EAP authentication regression
...
Use correct nonce/init message again for EAP AUTH payload
sent from responder to initiator.
2009-05-11 10:42:52 +02:00
Martin Willi
b81917ea00
fixed memleak
2009-05-11 10:42:52 +02:00
Martin Willi
c3626c2ce6
initiate trapped CHILD_SAs with same reqid
2009-05-08 10:04:00 +02:00
Martin Willi
8c99451ae1
make use of the new trap-manager
2009-05-08 10:03:58 +02:00
Tobias Brunner
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
Tobias Brunner
d24a74c5b4
merging changes from portability branch back to trunk
...
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Martin Willi
7f56b49461
attribute_manager supports attribute_handler's to handle configuration attributes via plugins
...
moved resolv.conf editing to a separate plugin (resolv_conf)
extended attribute_provider interface to hand out arbitrary attributes
moved strongswan.conf based dns/nbns configuration to a plugin (attr)
2009-04-24 14:13:52 +00:00
Martin Willi
6554b5e412
schedule_job uses seconds to support time values larger than 49 days
...
added schedule_job_ms for ms resolution events
2009-04-21 15:16:56 +00:00
Martin Willi
09f706ec3e
fixed IKE_SA rekeying collisions
2009-04-20 11:29:27 +00:00
Martin Willi
a44bb9345f
merged multi-auth branch back into trunk
2009-04-14 10:34:24 +00:00
Martin Willi
d3fbc75e85
set port for NATD hash calculation in the "include-all" case
2009-03-26 11:49:07 +00:00
Martin Willi
1490ff4d9b
updated Doxyfile
...
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Andreas Steffen
2b1f5f3461
configuration of NBNS server assignment via strongswan.conf
2009-02-13 11:57:50 +00:00
Andreas Steffen
48f9a22b57
configuration of DNS server assignment via strongswan.conf
2009-02-12 09:02:15 +00:00
Martin Willi
b81d8cd3cc
changed [4856] to dynamically choose traffic selector family
2009-02-11 13:09:52 +00:00
Martin Willi
95f1735f87
send proper AUTHENTICATION_FAILED if EAP method is successful, but AUTH mismatches
2009-02-10 17:21:44 +00:00
Andreas Steffen
b59f154b09
proper initialization and disposal of keying material
2009-01-15 01:52:44 +00:00
Martin Willi
12d4186f5c
fixed a potential memory leak when reusing mobike task
2008-12-19 14:34:40 +00:00
Tobias Brunner
58464dd737
improved IKE_SA uniqueness check
2008-12-16 17:21:28 +00:00
Martin Willi
a1466a3ec2
limit number of ADDITIONAL_IPV*_ADDR notifies
2008-12-09 14:32:57 +00:00
Martin Willi
394eb35b0c
some task queueing improvements:
...
- do not pass CHILD_SAs to task constructor, might not
be valid anymore during execution (late lookup)
- use sub-tasks to delete CHILD/IKE_SA after rekeying,
as we want to execute the delete before additional
queued tasks
2008-12-01 18:38:28 +00:00
Martin Willi
ddef455219
pass SKd to derive_ike_keys() to have a more interoperable API
2008-11-28 09:51:44 +00:00
Martin Willi
3aaf7908d1
refactored and cleaned up child_sa interface
...
replaced add/update calls by a install() call
allocating SPIs always externally
support installation of non-allocated CHILD_SAs
some other cleanups
2008-11-19 15:31:27 +00:00
Martin Willi
32ec3c1a8b
fallback to reauthentication if peer does not support CHILD_SA rekeying
2008-11-14 14:05:47 +00:00
Martin Willi
dad8eceea3
fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SAS
2008-11-14 13:58:16 +00:00
Martin Willi
faf9569fdb
moved ike_initiator flag to IKE_SAs condition bitfield
2008-11-12 16:07:17 +00:00
Tobias Brunner
ea625fabf9
merging kernel_klips plugin back into trunk
2008-11-11 09:22:00 +00:00
Andreas Steffen
d487b4b727
preliminary support of Mobile IPv6
2008-11-11 06:37:37 +00:00
Martin Willi
e13389a7f7
got rid of deprecated create_iterator_locked()
2008-11-05 08:32:38 +00:00
Andreas Steffen
f41a4a4e15
corrected typo2
2008-11-05 05:27:42 +00:00
Andreas Steffen
a066f7e6c2
corrected captions
2008-11-02 22:13:17 +00:00
Martin Willi
5dffdea1d7
added hooks for IKE and CHILD keymat
2008-10-30 12:58:54 +00:00
Martin Willi
5a76bb7f7a
store plain skd, not the prf
2008-10-30 09:18:52 +00:00
Martin Willi
80853d8498
moved CHILD_SA key derivation to keymat_t
...
passing key chunks to CHILD_SA, not the PRF
2008-10-29 16:06:16 +00:00
Martin Willi
a64cc8f75f
do not store DH redundant in keymat
2008-10-29 13:35:06 +00:00
Martin Willi
6a4ff35cc4
moved key derivation and management into keymat object
...
allows secured implementation of key management (e.g. in kernel or HW)
only IKE keys for now
2008-10-28 16:07:06 +00:00
Martin Willi
3c8234d408
store IKE proposal implicitly during derive_keys
2008-10-28 10:12:21 +00:00
Martin Willi
85ac2fa547
use more generic stats getter, introducing new stats
2008-10-27 14:51:00 +00:00
Martin Willi
f2e1ff59ab
reset threads IKE_SA after checking other IKE_SAs
...
invoke updown script only if we have valid IKE_SA
2008-10-20 11:38:16 +00:00
Andreas Steffen
7790ab0f37
re-established all previous AUD level messages
2008-10-17 03:44:06 +00:00
Martin Willi
ad3af574a4
moved updown script invocation to an optional plugin
2008-10-16 11:48:18 +00:00
Martin Willi
a985db3ff3
reintegrated bus-refactoring branch
2008-10-14 08:52:13 +00:00
Martin Willi
f0974eb2c2
fixed MOBIKE roaming if clients address changes
2008-10-09 08:25:11 +00:00
Martin Willi
ce5b17082d
mobike: try to keep existing source address before switching to another
2008-10-08 08:23:46 +00:00
Martin Willi
9d9a772ee1
use MOBIKE enabled DPD if we are NATed
...
update SAs if we detect changes in NAT mappings
2008-10-06 13:37:04 +00:00
Martin Willi
aa1b90a5b2
do not run CHILD_SA delete action if rekeying
2008-10-03 16:01:14 +00:00
Martin Willi