denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,440 Commits 1 Branch 0 Tags
270bb348e3856bad1eb91e74be01d756949d0aaa
Commit Graph
1474 Commits
Author SHA1 Message Date
Andreas Steffen 270bb348e3 pluto now supports SQL-based virtual IP pools 2009-10-14 14:30:14 +02:00
Martin Willi bb56e3f962 Improved debugging log in SIM triplet lookup 2009-10-14 09:55:14 +02:00
Andreas Steffen 247794827e move SQL-based pool functionality to new attr-sql libstrongswan plugin 2009-10-13 17:02:29 +02:00
Andreas Steffen 930443afff moved attribute_manager to libstrongswan 2009-10-13 13:46:27 +02:00
Martin Willi a2b50c5d60 Fixed assignment of get_triplet() dummy implementation 2009-10-13 11:05:01 +02:00
Andreas Steffen 88eb0a4235 INTERNAL_IP6_NETMASK needed for ModeConfig 2009-10-12 19:45:12 +02:00
Martin Willi 073e7dc062 Merged SIM/USIM manager/card/provider, avoids code duplication 2009-10-12 14:40:21 +02:00
Martin Willi f7897b64f6 Added ${shlibs:Depends} dependency to Debian package 2009-10-12 14:06:51 +02:00
Martin Willi 3690d31a2a Added .gitignore for NM Debian package build 2009-10-12 14:06:51 +02:00
Martin Willi 68d23d2401 Pass NULL as other identity in EAP-AKA 3GPP2 to find a match with all plugins 2009-10-12 09:51:46 +02:00
Martin Willi 9b2942f68d Stroke plugin interprets NULL identities as ID_ANY in shared key lookup 2009-10-12 09:51:45 +02:00
Martin Willi 5d5e2853b6 SIM card interface takes IMSI as parameter (same as in USIM) 2009-10-09 13:02:20 +02:00
Martin Willi 31f5280cee Fixed USIM parameter description 2009-10-09 13:02:20 +02:00
Martin Willi 424ddf801c Do not use monotonic time for AKA sequence numbers, it has an undefined starting point 2009-10-09 13:02:20 +02:00
Martin Willi 655728621b Use constants instead of sizeof(), sizeof() does not work for function arguments 2009-10-09 13:02:20 +02:00
Martin Willi aba93dcc32 Calculate missing CK/IK values in USIM 2009-10-09 13:02:20 +02:00
Martin Willi aca7ba0ffc Link 3gpp2 EAP-AKA plugin to libgmp 2009-10-09 13:02:20 +02:00
Martin Willi 53a16b72ab Separated 3gpp2 USIM card and provider functionality 2009-10-09 13:02:20 +02:00
Martin Willi 0030880c6b Ported AKA functions to 3gpp2 plugin 2009-10-09 13:02:19 +02:00
Martin Willi 4720815774 Added a stub for the EAP-AKA backend implementing the 3GPP2 functions in software 2009-10-09 13:02:19 +02:00
Martin Willi 36a3bccfcf Implemented a manager for USIM cards/providers very similar to the SIM manager 2009-10-09 13:02:19 +02:00
Martin Willi 4b1cd5a367 Reenabled acq_expires SA timer using rekey timeout 
While not using a SA expiration for allocating SPIs works fine,
the situation is much more problematic for kernel-created temporary
SAs from acquires. If the negotiation of such a CHILD_SA fails,
the created temporary SA can not be deleted.
 2009-10-07 13:09:59 +02:00
Martin Willi 991f7ccd6c Catch CHILD_SA state changes during acquire 
If an acquire fails due to a TS_UNACCEPTABLE or other CHILD_SA only errors,
we have to reset the pending state in the trap manager.
 2009-10-07 13:09:59 +02:00
Andreas Steffen cf85e1319b streamlined output from get_validity() 2009-10-06 14:22:27 +02:00
Andreas Steffen 0da0f3fc3f delete group attributes after use 2009-10-05 23:17:36 +02:00
Andreas Steffen a9fe23cf53 stroke_list outputs group attributes 2009-10-05 23:13:51 +02:00
Andreas Steffen 408e46a324 ipsec pki --issue suports --flag authServer option 2009-10-05 22:44:01 +02:00
Martin Willi 6eacaffc72 Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word reads 2009-10-05 14:06:32 +02:00
Martin Willi 3b836fc759 Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word reads 2009-10-05 13:32:41 +02:00
Martin Willi f12d8cf719 Do not increase the invalid-KE/Cookie retry counter for additional keyingtry attempts 2009-09-24 14:49:41 +02:00
Martin Willi cf76c42903 Do not create a replacement IKE_SA if we have CHILD_SAs to route only 2009-09-24 14:49:41 +02:00
Tobias Brunner 6e6975395e Using the correct type for ME_ENDPOINT payloads in connectivity checks. 2009-09-24 11:29:34 +02:00
Andreas Steffen 02bf410aa9 certificate subject DNs are in double quotes 2009-09-23 22:03:52 +02:00
Andreas Steffen b362cc2382 streamlining of credential loading debug output 2009-09-23 21:55:48 +02:00
Martin Willi 0406ed7a16 Fixed a crash in source address lookup 2009-09-23 11:18:30 +02:00
Martin Willi a7f79ee9c1 Define ME for all charon plugins 2009-09-23 11:13:27 +02:00
Martin Willi e20b792108 Correctly handle --enable-mediation option 2009-09-23 10:50:00 +02:00
Martin Willi b262680175 Emit a ALERT_SHUTDOWN_SIGNAL before shutting down the daemon 2009-09-22 17:00:00 +02:00
Andreas Steffen 4b15ee8cd9 shortened file loading debug output 2009-09-22 12:33:13 +02:00
Martin Willi f1092e20f4 Fixed encoding of hash-and-url cert payload 2009-09-22 10:07:04 +02:00
Martin Willi cb64b21217 Do not assign SIM version to a volatile buffer on stack 2009-09-22 09:11:35 +02:00
Martin Willi c84b139a87 Credential backends use has_fingerprint() methods to select keys/certificates 2009-09-21 17:03:00 +02:00
Martin Willi fde7f5abf8 Correctly serve certificates if CERT_ANY requested 2009-09-21 15:34:29 +02:00
Martin Willi c6a8990bc5 Enforce a local address of the same family as remote address 2009-09-21 15:30:40 +02:00
Martin Willi c331bce51d Return certificates of requested kind only 2009-09-21 14:43:57 +02:00
Andreas Steffen 399ce164ad delete resolv_conf_* files 2009-09-20 21:59:36 +02:00
Andreas Steffen 4819ec6a71 resolv_conf plugin renamed to resolve 2009-09-20 19:06:58 +02:00
Martin Willi c7a64d6f41 Use helper functions to handle (non-)skippable attributes 2009-09-18 15:08:43 +02:00
Martin Willi e466139c91 Clients can handle AKA-Identity requests by sending the full identity 2009-09-18 14:51:35 +02:00
Martin Willi 85af7a89c6 nm uses the distributions trusted root CAs if none is explicitly specified 2009-09-18 14:34:27 +02:00