denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,440 Commits 1 Branch 0 Tags
270bb348e3856bad1eb91e74be01d756949d0aaa
Commit Graph
1474 Commits
Author SHA1 Message Date
Martin Willi f6035833fa RNG tests based on FIPS 140-1 2008-12-18 16:24:22 +00:00
Martin Willi 9bcc9bb60e updated documentation 
some minor cleanups
calloc does not need an additional memset(0)
 2008-12-17 09:00:22 +00:00
Tobias Brunner 58464dd737 improved IKE_SA uniqueness check 2008-12-16 17:21:28 +00:00
Martin Willi 097e4b8ff9 purge certificates after IKE_AUTH response has been built 2008-12-16 15:48:36 +00:00
Martin Willi 764e8b2211 reimplemented certificate cache: 
fixes unsafe certificate caching
	use fixed array instead of a list
	fine grained per-slot locking
	use cache hits for housekeeping
 2008-12-15 15:41:48 +00:00
Martin Willi 482218f075 signal each entry condvar after enumeration, required if wait_for_entry is called 2008-12-15 09:19:04 +00:00
Martin Willi 50901d2550 do not respawn cancelled threads if we are shutting down 2008-12-12 15:57:12 +00:00
Martin Willi 248a1f57bb fixed possible deadlock in checkin_and_destroy 2008-12-12 10:40:45 +00:00
Martin Willi d183adbc9d avoid DNS lookup if possible 2008-12-12 10:38:53 +00:00
Martin Willi 3993b91334 execute events if difference is 0, prevents a busywait 2008-12-12 09:16:31 +00:00
Martin Willi 8006835ec1 load tester got a "shutdown_when_complete" option, allows performance test using "time" 2008-12-12 09:14:37 +00:00
Martin Willi 30841a0305 daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill 2008-12-12 09:13:06 +00:00
Martin Willi f2bd424c89 wait until all IKE_SAs are in-house before destroying them 2008-12-12 08:33:48 +00:00
Tobias Brunner f55a7a76dd address extensions refactored 2008-12-11 13:39:30 +00:00
Tobias Brunner 2475560c82 fixing checkout of IKE SAs with only the initiator SPI 2008-12-10 15:58:39 +00:00
Tobias Brunner 97016769fd increasing the performance of checkout_duplicate by using a hash table. 2008-12-10 13:51:21 +00:00
Tobias Brunner 0dbd9788e5 initial size of 1 is nonsense 2008-12-10 13:45:05 +00:00
Martin Willi 6b83549d1a list assigned leases using "ipsec leases" 2008-12-10 13:00:02 +00:00
Martin Willi ed2bcd0315 added IKE_SA established timer to "ipsec statusall" 2008-12-10 09:59:35 +00:00
Martin Willi 6144daba9d fixed load-tester shared key lookup 2008-12-09 14:45:56 +00:00
Martin Willi 7023d49ee1 purge auth_info when IKE_SA is established, releases cert memory 2008-12-09 14:34:15 +00:00
Martin Willi a1466a3ec2 limit number of ADDITIONAL_IPV*_ADDR notifies 2008-12-09 14:32:57 +00:00
Martin Willi 2e03196551 list pools and usage in ipsec statusall 2008-12-09 13:24:12 +00:00
Martin Willi adf9965272 extended stroke in-memory pool to use hash-tables 
supports online/offline leases
	properly reassign addresses to identities
 2008-12-09 13:23:42 +00:00
Martin Willi 15ed045c87 require explicit enabling of load-testing plugin 2008-12-09 09:11:37 +00:00
Martin Willi 5bdc8fc794 generating different initiator identities, configs and certificates on the fly 2008-12-08 19:18:28 +00:00
Martin Willi df68b54f4e basic x509 certificate generation 2008-12-08 15:29:36 +00:00
Martin Willi 19e0010f51 hashtable enumerator enumerates over both, key and values 2008-12-05 10:01:52 +00:00
Martin Willi 876d5c63a3 pass identity to release_address(), allows providers to do a lookup by id 2008-12-05 09:40:50 +00:00
Andreas Steffen c333bb4678 extended changeset [4753] 2008-12-04 23:16:10 +00:00
Tobias Brunner 3fb404d8da implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead of a linked list. 2008-12-04 16:46:08 +00:00
Martin Willi 7710a286ca fixed copy-paste bug (double-free) 2008-12-04 10:10:37 +00:00
Martin Willi d0eee69822 reset pointer for a clean destruction 2008-12-04 10:09:21 +00:00
Martin Willi 3bfd0fe3f2 handling peer_match with higher priority tan ike_match to select correct config if IPs are equal 2008-12-04 10:00:03 +00:00
Andreas Steffen 9b6f9d14ab fixed double free of host in sadb_address2ts 2008-12-04 01:08:19 +00:00
Tobias Brunner 83c42156a2 add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg. 2008-12-03 10:12:20 +00:00
Tobias Brunner c3bdc3cd7f enable quoted tokens in the token enumerator 2008-12-03 10:03:59 +00:00
Tobias Brunner f4bcf49bcb fixed compiler warning 2008-12-03 10:03:02 +00:00
Martin Willi 70691c31b2 fixed double free of host in selector2ts 2008-12-03 09:15:29 +00:00
Martin Willi 2671a8fcee use DBG_ANY to set all loglevels 2008-12-02 08:52:46 +00:00
Martin Willi 394eb35b0c some task queueing improvements: 
- do not pass CHILD_SAs to task constructor, might not
	  be valid anymore during execution (late lookup)
	- use sub-tasks to delete CHILD/IKE_SA after rekeying,
	  as we want to execute the delete before additional
	  queued tasks
 2008-12-01 18:38:28 +00:00
Andreas Steffen 9a96ccd485 re-established lost default auth sys_logger 2008-12-01 01:24:55 +00:00
Martin Willi 405cc1d924 schedule rekeying when activating passive IKE_SAs 2008-11-28 16:19:19 +00:00
Martin Willi dd6b7af3f7 do not delete passive IKE_SAs 2008-11-28 15:44:25 +00:00
Martin Willi c610f42430 added a PASSIVE IKE_SA state to manage it externally 2008-11-28 10:49:14 +00:00
Martin Willi ddef455219 pass SKd to derive_ike_keys() to have a more interoperable API 2008-11-28 09:51:44 +00:00
Martin Willi 9a1263c3c1 fixed a double-unlock bug, showed up when using rwlocks in backend manager 2008-11-28 08:22:55 +00:00
Martin Willi ced41695dc use rwlocks in backend manager to allow simultaneous access 2008-11-27 15:34:17 +00:00
Martin Willi 96eb7b44a0 use a rwlock in attribute manager to allow simultaneous access 2008-11-27 15:22:41 +00:00
Martin Willi c50ad6f613 remove attribute provider in SQL plugin destruction 2008-11-27 14:33:41 +00:00