denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,657 Commits 1 Branch 0 Tags
27432db6038df71b143be1ba5f17902ea58b501a
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi bcd887781a removed route_job, handled all in interface_manager 2007-05-16 08:49:10 +00:00
Martin Willi ce27ac8012 routing/unrouting through interface 2007-05-16 08:32:15 +00:00
Martin Willi 933521270d removed dead folder 2007-05-16 06:42:52 +00:00
Martin Willi 1387e64af1 working dummy for NetworkManager DBUS interface 
more a tech demo
 2007-05-14 13:22:04 +00:00
Martin Willi a6a039aa10 simplified capability dropping 2007-05-09 13:12:06 +00:00
Martin Willi 3cd3f48428 properly implemented interface_managers initiate, terminte_[ike|child] 
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
 2007-05-09 12:33:08 +00:00
Martin Willi d08b27799a properly ignoring signals rised by a thread which is in listening state 2007-05-08 12:58:33 +00:00
Martin Willi 6874bf698c changing UID/GID after startup of pluto/charon 
added --with-uid/--with-gid configure option
 2007-05-07 12:38:46 +00:00
Martin Willi a4a3884c83 extended interface_manager (more work needed here) 2007-05-03 14:22:52 +00:00
Martin Willi 586b7474a2 allow to have listening state TRUE while sending singal ourself 2007-05-03 14:22:15 +00:00
Martin Willi 66560f4267 reducing capabilities of the threads to a minimum 
proper flush of pending packets on daemon shutdown
adding local address as gateway address in dynamic route
 2007-05-03 14:21:22 +00:00
Martin Willi 3d63b7639e setting MALLOC_CHECK_=0 for charon to not use glibc's malloc checker 2007-05-02 09:59:47 +00:00
Martin Willi 0ccb275a93 added more API documentation to backends/interfaces 2007-04-30 10:23:01 +00:00
Martin Willi a84fb01b96 restructuring of configuration backends 
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
  configuration backends
  control interfaces
using pluggable modules as in EAP
 2007-04-27 14:25:08 +00:00
Martin Willi bb1030cb3d removed eap sim config 2007-04-27 14:11:18 +00:00
Martin Willi 594e830eb7 forcing proper autoload of af_key kernel module in charon 2007-04-27 07:43:42 +00:00
Martin Willi d931f4658e updated news 2007-04-26 07:58:50 +00:00
Martin Willi 37fb03554b updated NEWS 2007-04-26 06:33:03 +00:00
Martin Willi f47e450be9 properly checking received IDr as initiator 2007-04-25 06:06:13 +00:00
Martin Willi c80e8ba11a added support for AES-XCBC in kernel using e.g. esp=aes128-aesxcbc (>=linux-2.6.20) 2007-04-23 13:00:20 +00:00
Martin Willi 17712ea866 fixed CHILD_SA proposal selection when not using DH exchange 2007-04-23 12:59:10 +00:00
Martin Willi 63c477244d fixed keyingtries 2007-04-23 12:19:23 +00:00
Martin Willi b7ade11b16 updated man page: proposals using PFS 2007-04-19 14:22:53 +00:00
Martin Willi cd115716fe updated TODO 2007-04-19 14:14:01 +00:00
Martin Willi 0706c39cda added support for EAP methods not establishing an MSK 2007-04-19 12:37:48 +00:00
Martin Willi 04a7b6d868 added most problematic linux headers to distribution 
other/real linux header may be selected using --with-linux-headers=dir
 2007-04-19 08:59:36 +00:00
Martin Willi 1fd5383e61 added PDF support for CHILD_SAs 
support for INVALID_KE_PAYLOAD negotiation for rekeying
 2007-04-19 08:02:19 +00:00
Martin Willi 41ab00da6b fixed memleak in IKE_SA manager 2007-04-19 07:04:35 +00:00
Martin Willi 217e985b41 moved initiate() code to the generic controller_t class 2007-04-16 12:52:49 +00:00
Martin Willi 418dbd6243 cloning %any ID without zero-byte memleak 2007-04-16 08:37:52 +00:00
Martin Willi dd3b7b7147 removed version numbers in autogen 2007-04-16 08:34:22 +00:00
Martin Willi c4d9504a6b added missing #include 2007-04-12 11:33:43 +00:00
Martin Willi 9e3e46a52c updated uClibc note in HACKING 2007-04-12 11:33:28 +00:00
Martin Willi a1b2d82db0 removed %Q, %Y, %W, %U printf handlers 2007-04-12 09:44:26 +00:00
Martin Willi db97fd8298 not using %m printf handler, as late errno interpration over bus may be problematic 2007-04-12 08:52:36 +00:00
Martin Willi 1dad08b035 fixed DPD delay in peer_cfg 2007-04-12 06:20:42 +00:00
Martin Willi 092958c89d fixed payload debug message 2007-04-12 06:20:14 +00:00
Martin Willi 5f088665ad removed IKE_SA_ID (%J) printf hook, two more to go 2007-04-11 13:01:08 +00:00
Martin Willi 3c662c30ee cleanup and fixes for status & statusall 2007-04-11 12:43:52 +00:00
Martin Willi 015912016c using %V time delta for rekeying times 2007-04-11 12:33:02 +00:00
Martin Willi a3ce4bc214 removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to go 2007-04-11 12:14:51 +00:00
Martin Willi cd08b6880b removed %M printf handler, five more to go 2007-04-11 09:12:21 +00:00
Martin Willi 82240938ca fixed virtual ip configuration bug introduced with the previous commit 2007-04-11 08:34:21 +00:00
Martin Willi f925b42a5d two %any IDs are equal 2007-04-11 07:43:23 +00:00
Martin Willi 3b138b8422 cleaned up apidoc 
added some comments
removed configuration.[ch], as it does not make sense like it is
 2007-04-11 07:20:39 +00:00
Martin Willi 2ed8cee162 added script for sed'ing thhrough all source files 2007-04-11 07:19:17 +00:00
Martin Willi de55c6895f accepting stroke initiation by a name of a child_cfg 2007-04-11 05:58:38 +00:00
Martin Willi 00ccb87671 requesting the same virtual IP on reauthentication 2007-04-10 15:02:57 +00:00
Martin Willi d3e1da2378 proper notification handling 2007-04-10 15:00:51 +00:00
Martin Willi e0fe765152 restructured file layout 
new configuration structure:
  peer_cfg: configuration related to a peer (authenitcation, ...=
  ike_cfg: config to use for IKE setup (proposals)
  child_Cfg: config for CHILD_SA (proposals, traffic selectors)
  a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
 2007-04-10 06:01:03 +00:00
Martin Willi 80b7162531 improved log output for checkout_by_message() 2007-04-04 07:11:12 +00:00
Martin Willi ed284399cd updated NEWS, TODO 2007-03-30 12:49:19 +00:00
Martin Willi 73390cce24 removed unneded includes 2007-03-30 12:24:31 +00:00
Martin Willi 3374c8b1c8 using IFA_LOCAL for interface enumeration to support ppp links 2007-03-30 09:21:48 +00:00
Martin Willi b9e363f86f added IKE_SA_INIT retransmission detection 
fixed thread exhaustion when IKE_SA is blocked for a longer time
 2007-03-29 14:20:10 +00:00
Martin Willi 891e69944f implemented DoS protection with cookies and IP filter 2007-03-29 11:26:55 +00:00
Martin Willi 361e6df8c1 fixed task manager message id bug for cookies 2007-03-29 11:08:30 +00:00
Martin Willi a6bdc731b1 added retry limit for IKE_SA_INIT (give up after 5 cookie failures) 2007-03-29 11:07:49 +00:00
Martin Willi 25eaae17db added chunk_from_thing() macro 2007-03-29 11:06:59 +00:00
Martin Willi 4deb89485c removed send_queue, handled internally in sender_t know 
do header parsing in receiver, ready for cookie integration
 2007-03-28 13:34:02 +00:00
Martin Willi 077a6fff95 implemented a simple IP blocking filter in receiver thread 2007-03-28 09:23:03 +00:00
Martin Willi 9179ac9667 merged changes from eap-aka trunk 2007-03-28 07:32:54 +00:00
Martin Willi c00840478e fixed state and logging of IKE_SA when using EAP authentication 2007-03-27 16:11:29 +00:00
Martin Willi e23a59f635 fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progress 2007-03-27 13:32:12 +00:00
Martin Willi b34f86f545 giving up EAP-SIM authentication after 3 failed challenges 2007-03-27 06:24:17 +00:00
Martin Willi 59c5a85313 updated Changelog/TODO 2007-03-22 08:07:14 +00:00
Martin Willi 92275b0981 added CHILD_SA compare check for rekeying collisions 2007-03-22 07:34:42 +00:00
Martin Willi ddd1b31595 adjusted rekey-retry delay and jitter 2007-03-21 16:12:16 +00:00
Martin Willi 4315f5c88b fixed some rekey collision issues 
added retry with jitter when rekeying fails
 2007-03-21 16:11:14 +00:00
Martin Willi 6de7cf4e2f fixed SPI byte order 2007-03-21 16:09:27 +00:00
Martin Willi eef0859043 fixed child rekey collision 
implemented ike rekey collision
 2007-03-21 14:42:49 +00:00
Martin Willi 195ada0b4b handling of CHILD_SA rekeying collisions 2007-03-21 09:25:36 +00:00
Martin Willi 403f8fd300 fixed inproper delete of CHILD_SA 2007-03-21 07:01:14 +00:00
Martin Willi 128ca073d2 prevent from initiating to %any 2007-03-21 07:00:04 +00:00
Martin Willi 0f33e8264a fixed some exchange collisions (except IKE/CHILD rekeying) 2007-03-20 16:13:21 +00:00
Martin Willi e70d5576fa fixed statusall rekey time jitter bug (again) 2007-03-20 14:56:41 +00:00
Martin Willi 39a268b867 fixed CHILD_SA rekeying time in statusall 2007-03-20 12:29:42 +00:00
Martin Willi 37c6ebb78b fixed nat detection bug 2007-03-20 12:25:08 +00:00
Martin Willi 9b45443dc2 updated NEWS, TODO and man page 2007-03-20 08:59:03 +00:00
Martin Willi fdb9b2bdde respecting "keyingtries" parameter on IKE_SA setup 2007-03-20 08:16:16 +00:00
Martin Willi 1edf116cfd cleanups 
fixed reset()
 2007-03-20 08:15:53 +00:00
Martin Willi 44cd2bf0fa not installing a route when policy gets updated 2007-03-20 08:15:18 +00:00
Martin Willi a1e5881c42 renamed keyingtries attribute 2007-03-20 08:14:18 +00:00
Martin Willi 755bdcc274 adjusted loglevels 2007-03-20 08:13:54 +00:00
Martin Willi e59bd409ab always update reqid on policy install, fixes dpdaction=hold issue 2007-03-19 10:00:56 +00:00
Martin Willi ccf96c7e43 EAP-SIM cleanups 2007-03-19 09:59:17 +00:00
Martin Willi e05a0b765a fixed CHILD_SA rekeying/delete bug on 64bit machines 
removed obsolete methods in delete_payload
 2007-03-19 08:04:37 +00:00
Martin Willi d560c849e3 added --with-sim-reader option to configure script 
some cleanups in eap_sim
 2007-03-14 15:39:45 +00:00
Martin Willi c105696d1c removed dublicated code in eap_authenticator 2007-03-14 15:25:00 +00:00
Martin Willi 05d1685372 fixed carry bug in FIPS prf 2007-03-14 14:54:23 +00:00
Martin Willi 1e93d77153 version number selection fix 
some cleanups
 2007-03-14 11:20:34 +00:00
Martin Willi edfabed069 cleaned up and fixed DPD handling code 2007-03-14 11:07:12 +00:00
Martin Willi b857118bd7 removed cfg-payload dns test code 2007-03-14 11:04:31 +00:00
Martin Willi b0f24449dd added EAP-SIM authentication 
client side only
  uses an external SIM reader library specified with SIM_READER_LIB
  untested
 2007-03-13 15:01:02 +00:00
Martin Willi d2940fd78c not detaching from bus when IKE_SA_INIT is retried 2007-03-13 14:55:53 +00:00
Martin Willi 7cec30ad8d added AES-192/256 proposals to IKE 2007-03-13 14:55:03 +00:00
Martin Willi 3bc0b1a88d added generic EAP_IDENTITY client implementation using peers IKEv2 ID 2007-03-13 14:54:24 +00:00
Martin Willi 96567fc8a2 fixed compilation warnings and errors when not using curl 2007-03-13 14:52:18 +00:00
Martin Willi f5fbad4a62 fixed memleaks when using EAP authentication 
fixed configuration payloads when using EAP
 2007-03-08 22:56:14 +00:00
Martin Willi 5744d3e777 fixed payload order (again) 2007-03-08 20:21:17 +00:00