Martin Willi
ebdddb74d4
some improvements in signaling code
2006-10-27 10:46:56 +00:00
Martin Willi
ec92107923
include only source NATD payloads really needed
2006-10-27 10:46:35 +00:00
Martin Willi
b83806d83d
improved signal handling and emitting
2006-10-26 09:46:56 +00:00
Andreas Steffen
3364ef1d56
fixed typo in debug statement
2006-10-25 08:42:16 +00:00
Andreas Steffen
66a09e1d6e
redesigned list output format
2006-10-25 08:41:27 +00:00
Martin Willi
191a26a6a7
removed deprecated iterator methods (has_next & current)
...
added iterator hook to manipulate iterator the clean way
2006-10-24 14:20:45 +00:00
Martin Willi
55bbff11ec
linked list cleanups
...
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
2006-10-24 08:46:17 +00:00
Martin Willi
5c4cc9a4e3
added verbosity level to stroke
2006-10-24 08:44:47 +00:00
Martin Willi
e706c7f10b
code cleanups in printf handlers
2006-10-20 05:57:25 +00:00
Martin Willi
490d324d81
added eap authentication draft for ikev2
2006-10-18 11:49:37 +00:00
Martin Willi
60356f3375
introduced new logging subsystem using bus:
...
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
2006-10-18 11:46:13 +00:00
Martin Willi
9aac18cba8
removed module tests, outdated. We need something more system-test like
2006-10-18 11:38:43 +00:00
Martin Willi
c701e73dc1
fixed auxillary message data parsing for IPV6 socket
...
using SOL_* constants for socket level
2006-10-09 12:28:43 +00:00
Martin Willi
a3a1b565da
fixed IPV6_PKTINFO setsockopt() to work with most kernel headers
...
replaced strerror(errno) with %m printf specifier
2006-10-09 12:14:56 +00:00
Martin Willi
9e22095ef3
fixed DPD to survive IKE_SA rekeying
2006-09-28 06:57:46 +00:00
Martin Willi
47f5027807
introduced printf() specifiers for:
...
host_t (%H)
identification_t (%D)
chunk pointers (%B)
memory pointer/length (%b)
added a signaling bus:
receives event and debug messages, sends them to its listeners
stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
2006-09-27 14:14:44 +00:00
Martin Willi
f91513e333
added often used RFCs and drafts
2006-09-27 14:10:32 +00:00
Martin Willi
1ce2ad09c3
fixed retransmission policy for responder
2006-09-25 07:24:08 +00:00
Martin Willi
397f344879
fixed dpd for responder
2006-09-25 06:38:58 +00:00
Andreas Steffen
7bd23b7ed5
added hostaccess support
2006-09-25 06:11:36 +00:00
Andreas Steffen
b826069dbb
moved auth_method to policy
2006-09-25 06:11:09 +00:00
Andreas Steffen
d756cd1bd6
added hostaccess support
2006-09-25 06:10:28 +00:00
Andreas Steffen
7968c6a5ff
added hostaccess support
2006-09-25 06:10:02 +00:00
Andreas Steffen
a8960f997a
more consistent authentication logging
2006-09-25 05:59:38 +00:00
Andreas Steffen
fff4ee8a85
added hostaccess support
2006-09-25 05:58:45 +00:00
Andreas Steffen
841b7a1f1e
moved auth_method to policy
2006-09-25 05:52:50 +00:00
Andreas Steffen
2e5935815d
moved auth_method to policy
2006-09-25 05:52:13 +00:00
Andreas Steffen
54c6c4711f
added hostaccess support; moved auth_method to policy
2006-09-25 05:51:16 +00:00
Andreas Steffen
380d91b9be
added hostaccess support
2006-09-25 05:49:36 +00:00
Martin Willi
73760ca5ff
extended statusall output
...
added job/event-queue statistics
added allocation statistics when using LEAK_DETECTIVE
2006-09-21 07:03:21 +00:00
Andreas Steffen
833a7cbc50
support of encrypted private key files
2006-09-20 05:48:27 +00:00
Martin Willi
b5cac6684d
added copyright notice to sha2_hasher
...
included SHA2 in build process
2006-09-19 14:54:01 +00:00
Martin Willi
462129d332
added support for 3DES encryption algorithm in IKE
2006-09-19 11:18:35 +00:00
Andreas Steffen
43ead00a2f
fixed the ids parsing bug
2006-09-19 06:16:48 +00:00
Martin Willi
f534e18a98
updated TODOs
2006-09-18 11:41:04 +00:00
Martin Willi
e63c4d8b8b
fixed memleak
...
fixed proper handling of id parsing errors
proper return value when no PSK found
2006-09-18 11:39:53 +00:00
Martin Willi
6e9bbf18b8
added HOST_ACCESS for firewall script as default
2006-09-18 11:38:37 +00:00
Martin Willi
5fded5139e
more debugging output for PSK authentication
2006-09-18 11:38:11 +00:00
Andreas Steffen
e2de376c74
added PSK support
2006-09-18 07:42:57 +00:00
Martin Willi
a7371600b0
proper error handling for socket creation
2006-09-18 06:44:38 +00:00
Martin Willi
b9024ee058
handle certificate parsing error more generous
2006-09-14 13:14:58 +00:00
Martin Willi
567e2a7822
fixed memleak when receiving invalid certificate
2006-09-14 12:15:41 +00:00
Martin Willi
d7934d0cfc
implemented updown script to handle firewalling
2006-09-12 13:50:14 +00:00
Martin Willi
a095243f60
add priority management for kernel policy
...
let ROUTED policies installed, until manuall removed
introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs
ike_sa_manager cleanups
2006-09-08 13:10:52 +00:00
Martin Willi
1239c6f40b
implemented handling of dpdaction and dpddelay ipsec.conf parameters
2006-09-08 06:12:02 +00:00
Martin Willi
a655f5c09c
reuse reqid when a ROUTED child_sa gets INSTALLED
...
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
2006-09-05 14:07:25 +00:00
Martin Willi
da8ab11e91
fixed a at-least-one-year-old bug which caused crashed in the scheduler
2006-08-31 06:48:10 +00:00
Martin Willi
c705698293
added raw socket filter for IPv6
2006-08-31 06:18:15 +00:00
Martin Willi
053842f4e7
implemented NAT detection for IPv6
2006-08-31 06:17:41 +00:00
Martin Willi
48d9883a3e
initial support for IPv6 (more testing needed)
...
socket works (without v6 filter)
traffic selector handle IPv4/v4 cleanly
improvements in traffic selector code
kernel interface accepts v6 traffic selectors and hosts
host_t class has full IPv6 support
2006-08-30 17:12:56 +00:00
Martin Willi