denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,066 Commits 1 Branch 0 Tags
280469923d931cfcdefee0e2097a0991713454e8
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 280469923d make use of the pem helper plugin to load credentials 2009-08-26 11:23:49 +02:00
Martin Willi c9db16b7dd added file loading support to pem plugin, using mmap() 2009-08-26 11:23:48 +02:00
Martin Willi 160f4c225d moved PEM parsing functionality to its own plugin 2009-08-26 11:23:48 +02:00
Martin Willi eb641993d4 set stroke connection flags to a clear TRUE/FALSE 2009-08-25 19:57:36 +02:00
Martin Willi 469083cc7d disable lifetimes of allocated SPIs 
The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine.
 2009-08-25 18:15:25 +02:00
Martin Willi 1bc0b4f795 remove incomplete SAs with PROTO_ESP 2009-08-25 18:12:55 +02:00
Martin Willi 625b48b558 added URL for git repository served over git:// protocol 2009-08-21 10:52:39 +02:00
Martin Willi dd4c14f37c set protocol to ESP for policies installed as a trap 2009-08-07 16:05:32 +02:00
Martin Willi d9796a4311 fixed printf fromat for length limited string 2009-08-07 10:31:21 +02:00
Martin Willi 51c037cc71 added support for ipsec.secrets "include" directive 2009-08-06 11:48:19 +02:00
Martin Willi 3d2f73b92f parse RDNs in multiple SEQUENCEs in all SETs of a DN 2009-08-03 15:24:48 +02:00
Martin Willi 5cb300e795 compare IKE config when reusing an existing IKE_SA to initiate a CHILD_SA 2009-08-03 14:37:24 +02:00
Martin Willi fcac8f6571 filter objects for segment checksumming by dlpi_name, excludes rare false positives 2009-07-21 15:10:24 +02:00
Martin Willi 7655843ab5 enumerate executable sections only to build checksum 2009-07-21 15:00:18 +02:00
Martin Willi acd4afc997 announce integrity testing only once 2009-07-21 14:58:14 +02:00
Martin Willi e0964e2e26 fixed memleak in SQL config lookup 2009-07-16 15:59:56 +02:00
Martin Willi 88957f54f2 raise an alert() if the RADIUS server is not responding 2009-07-16 15:15:39 +02:00
Martin Willi e85b83c737 added an alert() bus hook to raise critical system errors and notifications 2009-07-16 15:15:39 +02:00
Martin Willi f5410905ac moved the CFLAGS mangling AC_LIB_PREFIX macro behind CFLAG test 2009-07-15 16:04:37 +02:00
Martin Willi 449e90e1af updated debian package 2009-07-15 15:37:23 +02:00
Martin Willi 0a1d168752 updated Standards-Version to 3.8.2 2009-07-15 14:01:47 +02:00
Martin Willi e04c5d9371 added ${misc:Depends} dependency, fixes debhelper-but-no-misc-depends lintian warning 2009-07-15 14:00:42 +02:00
Martin Willi 426e1c3d0f added copyright information, fixes copyright-without-copyright-notice lintian warning 2009-07-15 13:59:25 +02:00
Martin Willi 74b14b4008 cast pointers to uintptr_t for alignement check 2009-07-15 10:39:45 +02:00
Martin Willi 69b8058925 use the configured NM connection id as configuration/IKE_SA name 2009-07-10 11:01:44 +02:00
Martin Willi ce741aa649 fixed state check if establishing the CHILD_SA fails 2009-07-10 09:40:02 +02:00
Martin Willi bad99d5aff use the new updown()/rekey() hooks to track the state of NetworkManager connections 2009-07-10 09:37:27 +02:00
Martin Willi 977ec0c316 implemented ike_down() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi fa1d3c6629 implemented ike_up() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi f5f37cc7fa implemented child_down() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi f669f45333 implemented child_up() bus hook 2009-07-09 15:25:15 +02:00
Martin Willi 622b56a52e implemented ike_rekey()/child_rekey() bus hooks 2009-07-09 15:25:15 +02:00
Martin Willi 7527f43c76 added new listener callbacks to track SAs 2009-07-09 15:25:15 +02:00
Martin Willi a40cc76bc7 moved listener_t interface definition to a separate file 2009-07-09 15:25:14 +02:00
Martin Willi 3f67126226 added a RADIUS id_prefix option to prefix the IMSI 2009-07-09 11:19:41 +02:00
Martin Willi 2eac2578a5 updated ikev2bis draft from 03 to 04 2009-07-09 11:18:32 +02:00
Martin Willi 01e43e3183 memxor does not access unaligned words anymore, but still uses words if possible 2009-07-08 17:19:49 +02:00
Martin Willi 751a65f9da fixed doxygen section pgp 2009-07-08 10:29:12 +02:00
Martin Willi d7b965e931 fixed two doxygen warnings 2009-07-08 10:28:54 +02:00
Martin Willi c99227630c updated HACKING info 2009-07-07 17:26:16 +02:00
Martin Willi efb4bb248f remove obsolete child_cfg_t.equal_traffic_selectors() method 2009-07-07 14:38:55 +02:00
Martin Willi 20188fcad4 child_cfg matching code prefers a config containing the first proposed TS 2009-07-07 14:38:19 +02:00
Martin Willi 2d00984d73 added missing equals() method assignment for ID_ANY identities 2009-07-07 13:42:22 +02:00
Martin Willi 92a65c506a use architecture specific Elf header 2009-07-06 16:36:01 +02:00
Martin Willi 0c31b9db84 centralized ID type specific method assignement in generic constructor 2009-07-06 13:15:29 +02:00
Martin Willi bbf6a4c0ff removed obsolete init_rdn()/get_next_rdn() functions 2009-07-06 13:15:29 +02:00
Martin Willi 8309798fae reimplemented dnota() using RDN enumerator 2009-07-06 13:15:29 +02:00
Martin Willi f48c3c72f4 added a chunk_printable() function (replaces sanitize_chunk) 2009-07-06 13:15:29 +02:00
Martin Willi d692557298 replaced {same,match}_dn() by compare_dn(), using the RDN enumerator 2009-07-06 13:15:29 +02:00
Martin Willi ed680e33c0 fixed memleak if RND parsing fails 2009-07-06 13:15:29 +02:00
Martin Willi dca2eee92a added unit test for identification_t.matches() 2009-07-06 13:15:29 +02:00
Martin Willi 05fe0a7d25 added unit test for identification_t.equals() 2009-07-06 13:15:29 +02:00
Martin Willi 01da687f78 contains_wildcard() for DNs uses RDN enumerator 2009-07-06 13:15:28 +02:00
Martin Willi d35650115b added unit test for identification_t.contains_wildcard() 2009-07-06 13:15:28 +02:00
Martin Willi 2147da40a5 simplified identification_t.clone() using memcpy 2009-07-06 13:15:28 +02:00
Martin Willi 6bdd79d86c use an enumerator to parse RDNs, based on asn1_unwrap() function 2009-07-06 13:15:28 +02:00
Martin Willi 5dd492efff make filter enumerator methods static 2009-07-06 13:15:28 +02:00
Martin Willi 596e0540a5 asn1_unwrap() function to parse ASN.1 objects with length/type 2009-07-06 13:15:28 +02:00
Martin Willi 6e61122727 listen for CHILD_SA state changes only until it has been installed 2009-07-03 16:16:00 +02:00
Martin Willi 90855e965a added additional sanity checks to asn1_length() parsing 2009-07-03 09:26:48 +02:00
Martin Willi 00fcc0f8f3 added -avoid-version to LDFLAGS, plugins are not versioned 2009-07-03 08:57:11 +02:00
Martin Willi 7afd9d6672 defer MOBIKE update if we have no route to the peer 2009-07-02 10:56:13 +02:00
Martin Willi 133623871d do not abort notifying listeners if a listener unregisters 2009-07-02 09:38:12 +02:00
Martin Willi 2b7129f9b3 added mconsole exec patch based on 2.6.30 2009-07-01 13:53:46 +02:00
Martin Willi fb64239cab added mconsole exec patch based on 2.6.29 2009-07-01 13:52:54 +02:00
Martin Willi 4fd40cf6b0 signal tunnel breakage to NetworkManager 2009-06-30 17:47:42 +02:00
Martin Willi 7f9fab77f8 restarting dbus is insufficient, restart network-manager after installation 2009-06-30 17:03:53 +02:00
Martin Willi a2f1bb238e enforce correct RSA signature lenght in gcrypt 2009-06-30 12:10:30 +02:00
Martin Willi d860a9b924 handle --disable-pluto/charon with --enable-integrity-test 2009-06-22 16:37:28 +02:00
Martin Willi f0f420229a deinit() library if integrity check fails 2009-06-22 16:18:53 +02:00
Martin Willi 4f2c48cd3d build and verify on disk file integrity of pluto and charon executables 2009-06-22 15:47:18 +02:00
Martin Willi da2834a280 removed functions from faked symbol list, not needed anymore with RTLD_LAZY 2009-06-22 15:47:18 +02:00
Martin Willi cfe508d911 indicate use if integrity testing at startup 2009-06-22 15:47:18 +02:00
Martin Willi 67a7bb02ef moved checksum_builder/libchechsum to top srcdir to respect build order 2009-06-22 15:47:18 +02:00
Martin Willi e4e6a77a80 check for dladdr() and dl_iterate_phdr() if --enable-integrity-test set 2009-06-22 15:47:17 +02:00
Martin Willi bef508755b build integrity_checker.c only if --enable-integrity-test set 2009-06-22 15:47:17 +02:00
Martin Willi 6a8c8815fe check on-disk and loaded segment integrity of libstrongswan 2009-06-22 15:47:17 +02:00
Martin Willi d88bcee079 reduced verbosity of integrity checker 2009-06-22 15:47:17 +02:00
Martin Willi e3b7be91e1 removed obsolete INTEGRITY_TEST and fips signer code 
--enable-integrity-test now conditionally builds libchecksum
 2009-06-22 15:47:17 +02:00
Martin Willi f1f51395d5 build checksums for charon plugins 2009-06-22 15:47:17 +02:00
Martin Willi a0fc89798a library initialization fails if libstrongswan checksum is invalid 2009-06-22 15:47:17 +02:00
Martin Willi 70f59fab9b checksum.c depends on all libraries 2009-06-22 15:47:17 +02:00
Martin Willi 12c68f1b3a implemented a checksum_builder tool to build the checksum library 2009-06-22 15:47:17 +02:00
Martin Willi 0179d4684a integrity checker accepts an option checksum library on construction 2009-06-22 15:47:17 +02:00
Martin Willi 059c479a2f check integrity of libstrongswan 2009-06-22 15:47:17 +02:00
Martin Willi 960e0c1040 check integrity of plugins before loading 2009-06-22 15:47:17 +02:00
Martin Willi 20d4fc97cf implemented an integrity checker class to build and check code integrity 2009-06-22 15:47:16 +02:00
Martin Willi 2927db377d dist-hook to remove .svn folder not needed anymore 2009-06-22 15:45:24 +02:00
Martin Willi 31b9c10800 removed unneeded newline 2009-06-22 15:35:18 +02:00
Martin Willi 1694e82c7c fixed another 64bit compiler warning 2009-06-19 10:19:55 +02:00
Martin Willi aab814c793 fixed compiler warning 2009-06-19 10:05:27 +02:00
Martin Willi f53b7e00c2 reverted rule_count back to size_t, as it is passed as pointer (fixes 64bit issues) 2009-06-19 10:01:04 +02:00
Martin Willi 80d3a187c5 double check that parsing a list consumes all bytes 2009-06-17 13:38:05 +02:00
Martin Willi df2565a2d5 use signed lengths in parser and generator 2009-06-17 13:22:07 +02:00
Martin Willi 8ae89883e1 fixed copy/paste error in attribute type parsing 2009-06-17 11:42:53 +02:00
Martin Willi fcb06fdbfa use rwlock instead of a mutex in trap_manager, avoids possible deadlock 2009-06-16 17:27:25 +02:00
Martin Willi 4edda6e4a0 load trap_manager before plugins, allowing them to install traps 2009-06-16 17:27:24 +02:00
Martin Willi 04d6583e26 reset IKE_SA on bus after checkout/checkin of replacement SA 2009-06-16 17:27:24 +02:00
Martin Willi 140ea1fe5a instanciate first registered kernel interface immediately 2009-06-16 17:27:24 +02:00
Martin Willi a998276a2b calculating plugin dependencies for eap-sim/aka 2009-06-16 14:53:16 +02:00