denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,969 Commits 1 Branch 0 Tags
21b3099ac49b25cde7214c912c6d827cf16990b0
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi bd2e6c0347 added connection name to IKE_SA title 2007-09-14 14:18:09 +00:00
Martin Willi d919f2f8db added missing distribution/install files 2007-09-14 14:17:43 +00:00
Martin Willi c01f7bf989 added subnets of CHILD_SAs to xml interface 
a first design of Managers IKE_SA list page
 2007-09-14 14:07:30 +00:00
Martin Willi 660426ff48 added DATA files to EXTRA_DIST 2007-09-13 08:32:14 +00:00
Martin Willi 6baca3b2f1 fixed 64bit issue with file descriptor 2007-09-13 08:19:15 +00:00
Martin Willi 367f9f01f7 added debugging helper script for manager 2007-09-13 08:15:24 +00:00
Martin Willi acc4aa8637 fixed scenario loading 2007-09-13 08:10:36 +00:00
Martin Willi d8c15900ad added missing enumerator.h to distribution 2007-09-13 08:06:17 +00:00
Martin Willi 068ba02775 replaced a confusing template with an ugly one (ikesalist) 2007-09-13 07:59:51 +00:00
Martin Willi b8c7453a82 manager can query and list IKE_SA status (no layout yet) 2007-09-13 07:45:04 +00:00
Martin Willi dd52993068 only switch to port 4500 if we are on 500: fixed reauthentication in NAT 
scenarios
 2007-09-12 11:11:10 +00:00
Martin Willi a8827c9b63 moving virtual IP when interface changes due mobike 2007-09-12 07:36:45 +00:00
Martin Willi 12fa4387c6 fixed NAT detection with mobike 2007-09-12 07:14:05 +00:00
Martin Willi 39cc6d1ad7 fixed shutdown order to prevent crash when kernel interface schedules events 2007-09-12 07:12:25 +00:00
Martin Willi f25156dfc3 fixed warnings and memory leak 2007-09-12 07:11:41 +00:00
Martin Willi 965e99b5bf first revision of new manager webapp 2007-09-11 15:22:02 +00:00
Martin Willi 5474dc6500 implemented routeability checks for mobike (experimental) 2007-09-03 12:37:25 +00:00
Martin Willi 354242c55a added RADIUS, RADIUS-EAP and EAP-MD5 (CHAP) RFCs 2007-08-30 12:52:44 +00:00
Martin Willi 857ceac9d9 proper initialization of rsa private key 2007-08-30 12:47:38 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option 
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
 2007-08-29 12:11:25 +00:00
Martin Willi dc5a849bf0 signers implemented with HMAC now support NULL output parameters 
to feed signer with more than one block of data.
 2007-08-29 07:52:49 +00:00
Martin Willi 69e56d9dec simple console support through pts devices 2007-08-28 07:53:46 +00:00
Martin Willi 0739cca9d1 default routing table/prio: 220/220 (as 19530 was invalid) 
added configure option --with-routing-table-prio=
 2007-08-27 14:53:42 +00:00
Martin Willi ad9613226b using default routing table 19530 for ipsec routes 2007-08-27 11:30:21 +00:00
Martin Willi 4e411c8361 added --with-routing-table= configure option 2007-08-27 11:15:35 +00:00
Martin Willi 98f97433af rerouting CHILD_SA if its IKE_SA gets deleted 2007-08-27 09:10:12 +00:00
Martin Willi 7acfe286fd fixed build without --enable-uml 2007-08-10 09:14:20 +00:00
Martin Willi 4614d589c0 fixed build without --enable-uml 2007-08-10 08:58:37 +00:00
Martin Willi f8ced47f5c reread notify socket when interrupted (EINTR) through sigchild 2007-08-10 06:01:03 +00:00
Martin Willi 567019c8d5 fixed libstrongswan linking for libdumm 2007-08-09 12:50:01 +00:00
Martin Willi 939e93787e made linked lists invoke() method consistent to clone_*() and destroy_*() methods 2007-08-09 12:43:11 +00:00
Martin Willi 10c6cc0a36 removed Makefile from svn 
support for scenario switching
 2007-08-09 07:14:56 +00:00
Martin Willi fd4ded974d build UML stuff only on --enable-uml 2007-08-08 14:24:25 +00:00
Martin Willi f2d6355eaa added UML modeler to autotools 2007-08-08 14:03:55 +00:00
Martin Willi 7b7201bee6 usable without scenarios 2007-08-08 12:35:24 +00:00
Martin Willi 8f5b363c30 updated NEWS for 4.1.5 2007-08-07 06:48:48 +00:00
Martin Willi 3b574567ea fixed segfault when sourceip in stroke message is NULL 2007-08-06 12:35:28 +00:00
Martin Willi 64a552ae2d cowfs is bootable now! 2007-08-06 11:42:32 +00:00
Martin Willi 9ec19f13f7 allow starter to initiate connections simultaneously (on auto=start) 2007-08-06 07:41:19 +00:00
Martin Willi 5ce04046f7 proper shutdown 
moved signal handler for SIGCHD and SIGHUP to dumm
 2007-08-03 11:47:20 +00:00
Martin Willi 404d3ba58e working cowfs prototype 2007-08-03 09:33:43 +00:00
Martin Willi f8afabcac3 started own cowfs implementation 2007-07-31 15:23:23 +00:00
Martin Willi 725e263ff3 bridging using libbridge 
rewrite of guest, does not change cwd anymore
loading of created scenarios
 2007-07-30 13:20:35 +00:00
Martin Willi 99652427e9 properly shutdown of clients 2007-07-27 10:17:50 +00:00
Martin Willi 539a55a441 support for killing guests properly 2007-07-27 07:37:15 +00:00
Martin Willi 5b608fd7ca implemented mconsole notification to check if guest came up 
slightly modified menu commands
 2007-07-26 13:21:06 +00:00
Martin Willi 369a17c218 fixed tap device setup (requires open/close for each call) 
using more meaningful names for tap devices
 2007-07-26 07:39:49 +00:00
Martin Willi 53b0f3c3b3 fixed mconsole when using multiple guests 
fixed interface enumeration bug
 2007-07-25 14:05:06 +00:00
Martin Willi f85fdda835 added dynamic interface manipulation for guests 
management of tap devices on the host
 2007-07-25 13:23:45 +00:00
Martin Willi 5c7da9d402 checked in first draft of "Dynamic Uml Mesh Modeler" 2007-07-24 14:22:56 +00:00
Martin Willi ac1557af51 updated XML interface to new schema 2007-07-19 10:57:33 +00:00
Martin Willi c87395908a not touching IKE_SA_INIT from ike_mobike_t anymore 2007-07-19 08:08:22 +00:00
Martin Willi 0308865282 fixed compiler warning 2007-07-16 07:10:14 +00:00
Martin Willi cc68e173fe fixed payload order (Nonce, KE) for IKE_SA_INIT 2007-07-16 07:01:49 +00:00
Martin Willi e5e868e430 doing route lookup in userspace to ignore routes installed by us 2007-07-11 12:37:24 +00:00
Martin Willi 9ba1d73890 using own routing table for installed routes (table 100, prio 100) 2007-07-11 06:55:11 +00:00
Martin Willi 19ff7d2207 added first draft of SMP relax-ng schema 2007-07-06 13:44:43 +00:00
Martin Willi fa1bd44f23 ignoring unkown crl/ocsp uris 2007-07-04 12:00:33 +00:00
Martin Willi 1b8da84913 using correct nexthop for inserted route 2007-07-04 09:10:13 +00:00
Martin Willi 29100db902 changed mobike behavior to NOT use additional responder addresses until we have path discovery 2007-07-04 07:26:34 +00:00
Martin Willi 419201c15d fixed responder initiated CHILD_SA rekeying when using virtual IPs 2007-07-04 06:27:33 +00:00
Martin Willi 7b8bae9941 fixed firewall script invocation when interface is not available anymore 2007-07-03 13:49:29 +00:00
Martin Willi 3bc62fe70e improved MOBIKE: 
prefer address family already used
  do not change address implicit when mobike supported
  handle multiple simultaneous roaming requests more properly
  proper enabling/disabling of UDP encapsulation
 2007-07-03 12:32:38 +00:00
Martin Willi 4979e85871 added message ID to message log 2007-07-03 09:00:16 +00:00
Martin Willi cba7ba7f9d show kind of notify contained in messages in log 2007-07-03 08:50:14 +00:00
Martin Willi e3606f2ba1 updated documentation files 2007-07-02 12:55:43 +00:00
Martin Willi 3d928c9ffd fixed mobike address update from and to NAT 2007-07-02 12:55:07 +00:00
Martin Willi face844a87 proper update of IPsec SA when roaming a host-to-host tunnel 
roaming of IPsec SAs using virtual IPs
 2007-07-02 09:49:22 +00:00
Martin Willi 530dd57c6a fixed memleak 2007-07-02 08:33:15 +00:00
Martin Willi 0d30da5dfd updated charons architecture description 2007-06-29 09:21:28 +00:00
Martin Willi ffbca197c1 fixed dpd=hold when using virtual IPs 2007-06-29 08:03:32 +00:00
Martin Willi 8ba7d34253 removed accidently checked in debbuging code 2007-06-29 07:40:04 +00:00
Martin Willi c532d6460d fixed IKE_SA reestablishment after DPD using port 500 2007-06-28 15:24:24 +00:00
Martin Willi fc2d1c420f further mobike improvements, regarding to NAT-T 2007-06-27 13:10:55 +00:00
Martin Willi 2b3100b5d0 simple roaming of the client works (not MOBIKE conform yet!) 2007-06-26 13:04:13 +00:00
Martin Willi 4cb9d7a758 further fixed for mobike roaming 2007-06-25 13:26:02 +00:00
Martin Willi 17d92e9732 further MOBIKE stuff: 
kernel properly reports network reconfiguration and informs all IKE_SAs
  MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange
  reestablishment of IKE_SAs on network reconfiguration kinda works
  not stable yet!
 2007-06-21 15:25:28 +00:00
Martin Willi c25ef47702 added MOBIKE rfc 2007-06-20 10:12:11 +00:00
Martin Willi cbbb71c4ac don't modify des/3des input key anymore 2007-06-19 07:56:28 +00:00
Martin Willi 6835280041 fixed virtua IP: adding virtual IP to interface address list cache directly 
corrected debug targets
 2007-06-19 06:20:33 +00:00
Martin Willi 3b04350ab2 added extensions management to IKE_SA 
fixed NATD payload (port) when using route lookup
 2007-06-18 10:32:01 +00:00
Martin Willi 7068410b6f source address lookup in kernel interface 
use it for NAT detection if no source address known from config
  support for %any...%any connections
 2007-06-18 07:25:58 +00:00
Martin Willi 209c2e9049 support for left=%any change our address dynamically 2007-06-18 05:57:59 +00:00
Martin Willi ca68a75eaf increased receive buffer to handle more interfaces 2007-06-18 05:56:18 +00:00
Martin Willi 08a8f4496f implemented more flexible iterator hook API 
kernel interface handles interface changes and updates address list
 2007-06-15 13:23:18 +00:00
Martin Willi 02b3ec0a10 implemented address change notification (for MOBIKE) 
implemented up to date address list cache to list interfaces
 2007-06-14 15:16:15 +00:00
Martin Willi fede28be8b fixed memleak when initiating to %any 2007-06-14 08:44:19 +00:00
Martin Willi 04f4e82d53 added missing files to the last commit 2007-06-14 08:17:23 +00:00
Martin Willi 26424f03c3 proper reauthentication: 
IKE_SA is closed completely before the new is initiated, 
  resolves some issues when a dynamic IP is requested from a pool
 2007-06-14 08:13:05 +00:00
Martin Willi eda454a261 case insensitive identification_t.equals() for FQDN and RFC822ADDR 2007-06-14 07:02:01 +00:00
Martin Willi 424e0c467e ported interfaces to new threading functions (incomplete) 2007-06-11 14:24:32 +00:00
Martin Willi 5e564f2bff added setsid() to properly detach from console 2007-06-11 12:21:12 +00:00
Martin Willi 432b298e40 documentation fixes and updates 2007-06-11 12:11:41 +00:00
Martin Willi 9fe1a1ca76 introduced callback_job: 
simple asynchronous method invocation
  use daemons thread pool for all threads
  proper cancellation and cleanups
  cancellation mechanism to dynamically unload multithreaded code
unified event_queue and scheduler => scheduler
unified job_queue and thread_pool => processor
removed job_type_t, not really needed
fixes here, there and everywhere
 2007-06-11 10:57:19 +00:00
Martin Willi 9cc7a29786 disabling leak detective at runtime by setting LEAK_DETECTIVE_DISABLE env var 2007-06-08 07:21:03 +00:00
Martin Willi 8e481be97a included patch from Rene Mayrhofer to respect DESTDIR in make install 2007-06-06 05:55:18 +00:00
Martin Willi 998ca0ea9c updated NEWS for 4.1.3 2007-05-25 11:06:03 +00:00
Martin Willi 532137e70f fixed man page 2007-05-25 07:19:49 +00:00
Martin Willi 8e79d8d3de updated man-page for left/rightsourceip 2007-05-25 07:15:18 +00:00
Martin Willi 1f2a0f8098 removed paranoid module checking 2007-05-25 05:45:41 +00:00