denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,373 Commits 1 Branch 0 Tags
281d04502eb37292ef534ee020ce8ffbdc193ae2
Commit Graph
661 Commits
Author SHA1 Message Date
Martin Willi cd08b6880b removed %M printf handler, five more to go 2007-04-11 09:12:21 +00:00
Martin Willi 82240938ca fixed virtual ip configuration bug introduced with the previous commit 2007-04-11 08:34:21 +00:00
Martin Willi 3b138b8422 cleaned up apidoc 
added some comments
removed configuration.[ch], as it does not make sense like it is
 2007-04-11 07:20:39 +00:00
Martin Willi de55c6895f accepting stroke initiation by a name of a child_cfg 2007-04-11 05:58:38 +00:00
Andreas Steffen 86b7215627 fixed bug with roadwarrior and wildcard IDs 2007-04-10 22:39:09 +00:00
Andreas Steffen a07aad39dc edited comment and debug output 2007-04-10 22:38:06 +00:00
Andreas Steffen 4876f521d6 best must be initialized to 2*MAX_WILDCARDS+1 2007-04-10 22:35:45 +00:00
Martin Willi 00ccb87671 requesting the same virtual IP on reauthentication 2007-04-10 15:02:57 +00:00
Martin Willi d3e1da2378 proper notification handling 2007-04-10 15:00:51 +00:00
Martin Willi e0fe765152 restructured file layout 
new configuration structure:
  peer_cfg: configuration related to a peer (authenitcation, ...=
  ike_cfg: config to use for IKE setup (proposals)
  child_Cfg: config for CHILD_SA (proposals, traffic selectors)
  a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
 2007-04-10 06:01:03 +00:00
Andreas Steffen 4c56bd64e5 removed list_crls() and list_ocsp() methods 2007-04-06 09:43:20 +00:00
Andreas Steffen 8883eef7b8 support cachecrls=yes 2007-04-05 17:07:14 +00:00
Andreas Steffen e58afb1a0a support of crlcheckinterval=0 to disable IKEv2 CRL fetching 2007-04-04 07:49:05 +00:00
Martin Willi 80b7162531 improved log output for checkout_by_message() 2007-04-04 07:11:12 +00:00
Andreas Steffen a0eaa59b50 implemented dynamic http-based CRL fetching 2007-04-03 21:11:23 +00:00
Martin Willi 73390cce24 removed unneded includes 2007-03-30 12:24:31 +00:00
Martin Willi 3374c8b1c8 using IFA_LOCAL for interface enumeration to support ppp links 2007-03-30 09:21:48 +00:00
Martin Willi b9e363f86f added IKE_SA_INIT retransmission detection 
fixed thread exhaustion when IKE_SA is blocked for a longer time
 2007-03-29 14:20:10 +00:00
Martin Willi 891e69944f implemented DoS protection with cookies and IP filter 2007-03-29 11:26:55 +00:00
Martin Willi 361e6df8c1 fixed task manager message id bug for cookies 2007-03-29 11:08:30 +00:00
Martin Willi a6bdc731b1 added retry limit for IKE_SA_INIT (give up after 5 cookie failures) 2007-03-29 11:07:49 +00:00
Andreas Steffen 6819e4d754 implemented ipsec purgeocsp 2007-03-28 20:43:38 +00:00
Martin Willi 4deb89485c removed send_queue, handled internally in sender_t know 
do header parsing in receiver, ready for cookie integration
 2007-03-28 13:34:02 +00:00
Martin Willi 077a6fff95 implemented a simple IP blocking filter in receiver thread 2007-03-28 09:23:03 +00:00
Martin Willi 9179ac9667 merged changes from eap-aka trunk 2007-03-28 07:32:54 +00:00
Andreas Steffen 9d9c72e317 is_trusted() adds cert_status to cert_to_be_trusted 2007-03-28 05:38:42 +00:00
Martin Willi c00840478e fixed state and logging of IKE_SA when using EAP authentication 2007-03-27 16:11:29 +00:00
Martin Willi e23a59f635 fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progress 2007-03-27 13:32:12 +00:00
Martin Willi b34f86f545 giving up EAP-SIM authentication after 3 failed challenges 2007-03-27 06:24:17 +00:00
Andreas Steffen 1bf8530507 implemented ipsec listocsp function 2007-03-27 04:40:25 +00:00
Andreas Steffen 0f7995b11e added CERT_ROOF 2007-03-23 22:01:59 +00:00
Andreas Steffen 387c29c62d added CERT_ROOF 2007-03-23 22:01:40 +00:00
Andreas Steffen d7eee6e1ca added certificate encoding OCSP content 2007-03-23 21:53:12 +00:00
Martin Willi 92275b0981 added CHILD_SA compare check for rekeying collisions 2007-03-22 07:34:42 +00:00
Martin Willi ddd1b31595 adjusted rekey-retry delay and jitter 2007-03-21 16:12:16 +00:00
Martin Willi 4315f5c88b fixed some rekey collision issues 
added retry with jitter when rekeying fails
 2007-03-21 16:11:14 +00:00
Martin Willi 6de7cf4e2f fixed SPI byte order 2007-03-21 16:09:27 +00:00
Martin Willi eef0859043 fixed child rekey collision 
implemented ike rekey collision
 2007-03-21 14:42:49 +00:00
Martin Willi 195ada0b4b handling of CHILD_SA rekeying collisions 2007-03-21 09:25:36 +00:00
Martin Willi 403f8fd300 fixed inproper delete of CHILD_SA 2007-03-21 07:01:14 +00:00
Martin Willi 128ca073d2 prevent from initiating to %any 2007-03-21 07:00:04 +00:00
Martin Willi 0f33e8264a fixed some exchange collisions (except IKE/CHILD rekeying) 2007-03-20 16:13:21 +00:00
Martin Willi e70d5576fa fixed statusall rekey time jitter bug (again) 2007-03-20 14:56:41 +00:00
Martin Willi 39a268b867 fixed CHILD_SA rekeying time in statusall 2007-03-20 12:29:42 +00:00
Martin Willi 37c6ebb78b fixed nat detection bug 2007-03-20 12:25:08 +00:00
Martin Willi fdb9b2bdde respecting "keyingtries" parameter on IKE_SA setup 2007-03-20 08:16:16 +00:00
Martin Willi 1edf116cfd cleanups 
fixed reset()
 2007-03-20 08:15:53 +00:00
Martin Willi 44cd2bf0fa not installing a route when policy gets updated 2007-03-20 08:15:18 +00:00
Martin Willi a1e5881c42 renamed keyingtries attribute 2007-03-20 08:14:18 +00:00
Martin Willi 755bdcc274 adjusted loglevels 2007-03-20 08:13:54 +00:00