 Martin Willi
|
7827997346
|
also respect the mobike=no setting as responder
|
2008-09-30 12:36:58 +00:00 |
|
|
Tobias Brunner
|
a341a68fac
|
merging renaming of mode_t to ipsec_mode_t back to trunk
|
2008-09-25 13:56:23 +00:00 |
|
|
Tobias Brunner
|
507f26f685
|
merging modularized kernel interface back to trunk
|
2008-09-25 07:56:58 +00:00 |
|
|
Andreas Steffen
|
919019b3cd
|
completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes
|
2008-08-26 05:15:34 +00:00 |
|
|
Martin Willi
|
822901061b
|
ported parts of two-sim branch
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
|
2008-08-22 10:44:51 +00:00 |
|
|
Andreas Steffen
|
342c84ddec
|
initiator sends contents of rightca= if present as a certificate request without searching for further CA certificates
|
2008-08-05 09:05:57 +00:00 |
|
|
Andreas Steffen
|
f6facbe75c
|
completed IKE_SA logging at the AUDIT level
|
2008-07-23 18:46:34 +00:00 |
|
|
Andreas Steffen
|
6410231335
|
IKE_SA rekeying inherits other_host from old IKE_SA
|
2008-07-23 07:44:26 +00:00 |
|
|
Andreas Steffen
|
0eede4a31f
|
cosmetics
|
2008-07-23 06:38:24 +00:00 |
|
|
Andreas Steffen
|
51c8f8261f
|
some more changes to IKE_SA and CHILD_SA logging
|
2008-07-22 17:10:10 +00:00 |
|
|
Andreas Steffen
|
66da78b4bb
|
ipsec status lists IPCOMP CPIs
|
2008-07-22 12:03:58 +00:00 |
|
|
Andreas Steffen
|
eba7470b76
|
consistent logging of SPIs and CPIs
|
2008-07-22 10:16:45 +00:00 |
|
|
Andreas Steffen
|
fb34475b5c
|
consistent logging of IKE and CHILD SAs
|
2008-07-21 12:47:59 +00:00 |
|
|
Martin Willi
|
a4a3e0c7dc
|
introduced an additional bus->signal parameter for signal specific data
added SIG_IKE/SIG_CHD macros for signal emitting
|
2008-07-18 15:51:40 +00:00 |
|
|
Martin Willi
|
7beea2e99f
|
fixed acquire-delay bug by:
installing policies before states
updating policies if protocol has changed
|
2008-07-16 11:51:37 +00:00 |
|
|
Martin Willi
|
62bd123952
|
peer_cfg lookup takes peer addresses into account
|
2008-07-01 09:05:20 +00:00 |
|
|
Martin Willi
|
866ba8e0b6
|
strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if CHILD_SA setup in IKE_AUTH fails
|
2008-07-01 07:54:09 +00:00 |
|
|
Martin Willi
|
d510eaea47
|
sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none found
|
2008-07-01 06:36:52 +00:00 |
|
|
Andreas Steffen
|
125aaf1ab1
|
log received vendor id as a hex value
|
2008-06-27 17:11:54 +00:00 |
|
|
Andreas Steffen
|
bc997f6583
|
display selected IKE proposal in ipsec statusall
|
2008-06-22 11:24:33 +00:00 |
|
|
Tobias Brunner
|
ea0823dffd
|
ECDSA with OpenSSL
|
2008-06-10 09:08:27 +00:00 |
|
|
Martin Willi
|
5a22a02156
|
DNS resolving of ike_cfg hosts dynamically on demand
|
2008-06-06 15:05:54 +00:00 |
|
|
Martin Willi
|
de3d65a132
|
filtering out non matching path probing pairs explicitly
|
2008-05-23 15:43:42 +00:00 |
|
|
Martin Willi
|
85a119bc0b
|
replying to COOKIE2 mobike notify properly
including COOKIE2 ourself after path probing
|
2008-05-21 17:56:21 +00:00 |
|
|
Tobias Brunner
|
d4aad55434
|
IPComp for IKEv2
|
2008-05-08 16:19:11 +00:00 |
|
|
Andreas Steffen
|
1d5d6f9667
|
Hash and URL cosmetics
|
2008-04-18 21:27:08 +00:00 |
|
|
Tobias Brunner
|
6439267a8c
|
support for hash and URL encoded certificate payloads in charon
|
2008-04-18 11:24:45 +00:00 |
|
|
Martin Willi
|
6a365f0740
|
added API for random number generators, served through credential factory
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
|
2008-04-15 05:56:35 +00:00 |
|
|
Martin Willi
|
0644ebd3de
|
implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater
additionally supports a "keep" value to keep the old IKE_SA
|
2008-04-14 13:23:24 +00:00 |
|
|
Martin Willi
|
348af092ac
|
added close_action as a seperate config option to dpd_action
|
2008-04-14 08:17:18 +00:00 |
|
|
Martin Willi
|
45819d7d49
|
fixed rightsourceip=%config scenarios
|
2008-04-14 07:18:16 +00:00 |
|
|
Andreas Steffen
|
b1bdfa4890
|
fixed disabling the sending of cert requests
|
2008-04-13 17:31:07 +00:00 |
|
|
Martin Willi
|
96926b006d
|
using dpd actions to enforce connection state
dpd actions a per child-, not peer ike-sa
|
2008-04-11 08:14:48 +00:00 |
|
|
Tobias Brunner
|
78abba428f
|
enabling reauthentication on mediation connections
|
2008-04-10 08:42:27 +00:00 |
|
|
Tobias Brunner
|
4a03518112
|
fixing a problem if the mediation server initiates the rekeying
|
2008-04-10 07:24:30 +00:00 |
|
|
Tobias Brunner
|
22452f70fc
|
mediation connections should now properly rekey
|
2008-04-09 18:12:22 +00:00 |
|
|
Martin Willi
|
cdcfe777f4
|
implementation of an CFG attribute framework, currently supporting virtual IPs
updated ipsec.conf sourceip parameter to support
CIDR notatation to serve from a pool
%poolname to query a separate (database?) pool
|
2008-04-09 12:54:47 +00:00 |
|
|
Andreas Steffen
|
196b28a470
|
demoted more notify debug messages to level 2
|
2008-04-02 19:15:05 +00:00 |
|
|
Tobias Brunner
|
c3f803c4c6
|
fixing some memory leaks
|
2008-04-02 18:21:03 +00:00 |
|
|
Andreas Steffen
|
1ee637d8b1
|
generate debug output if ocsp response does not contain status information for a given certificate
|
2008-04-02 14:28:17 +00:00 |
|
|
Andreas Steffen
|
080555e76a
|
demoted received notify debug message to level 2
|
2008-04-01 20:22:38 +00:00 |
|
|
Tobias Brunner
|
9c2a905d63
|
stopping connectivity checks on the responders side after receiving an IKE_SA_INIT request with the proper ME_CONNECTID
|
2008-04-01 11:38:18 +00:00 |
|
|
Tobias Brunner
|
9e183cd5b8
|
signal fixed
|
2008-03-31 14:27:16 +00:00 |
|
|
Andreas Steffen
|
dcc777652e
|
changed error message
|
2008-03-29 13:26:53 +00:00 |
|
|
Tobias Brunner
|
54150b3f13
|
checking the size of ME_* notify payloads
|
2008-03-27 10:17:29 +00:00 |
|
|
Tobias Brunner
|
dc04b7c743
|
mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed
|
2008-03-26 18:40:19 +00:00 |
|
|
Martin Willi
|
3c7e72f5b0
|
added equals() method to peer_cfg, ike_cfg, proposals, auth_info
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
|
2008-03-26 10:06:45 +00:00 |
|
|
Martin Willi
|
36524c4844
|
added support for certificate requests for not yet known CAs
|
2008-03-20 10:09:56 +00:00 |
|
|
Andreas Steffen
|
ae8715f956
|
attempt to achieve consistent debugging output
|
2008-03-19 12:06:38 +00:00 |
|
|
Tobias Brunner
|
df3462ddbe
|
two small fixes
|
2008-03-13 15:03:06 +00:00 |
|