Andreas Steffen
2f942ba67d
fixed memory corruption
2010-12-08 12:15:53 +01:00
Martin Willi
86993d6b90
Never register IKE_SA during checkout_new, as rekeying keeps it checked out
2010-12-07 16:30:38 +01:00
Andreas Steffen
4332cd7f95
added newline
2010-12-07 09:02:55 +01:00
Andreas Steffen
faccd69068
re-introduced comment
2010-12-07 09:01:28 +01:00
Andreas Steffen
a42aaed64f
Migrated stroke_control_t to INIT/METHOD macros
2010-12-07 08:58:57 +01:00
Andreas Steffen
d31aec9fa7
Migrated stroke_plugin_t to INIT/METHOD macros
2010-12-07 08:01:56 +01:00
Thomas Egerer
76ce213c43
Guarantee entry->other is set when calling put_connected_peers
...
Given the original intent of entry->host, the check for DoS attacks, it
can happen that this value remains NULL when an entry is created. This
is particularly awkward if put_connected_peers is called to check if a
connection to a given peer already exists, since it takes the address
family into consideration (git commit b74219d0) which is gleaned from
entry->host.
This patch guarantees that entry->other is a clone of host before
put_connected_peers is called.
2010-12-06 10:56:57 +01:00
Andreas Steffen
93cbe45c09
stupid typo
2010-12-05 15:48:22 +01:00
Andreas Steffen
fba18c5105
cosmetics
2010-12-05 15:23:18 +01:00
Andreas Steffen
02f08ef910
cosmetics
2010-12-05 15:16:15 +01:00
Andreas Steffen
a6bf8e9118
added parsing checks
2010-12-05 15:01:01 +01:00
Andreas Steffen
2da636fd9b
support of reqid field in SQL database
2010-12-05 11:21:40 +01:00
Andreas Steffen
e150442bed
fixed pb_reason_string_message_t class
2010-12-05 11:20:18 +01:00
Tobias Brunner
503e1c558e
CDP enumerator added to SQL plugin.
2010-12-03 18:07:17 +01:00
Tobias Brunner
37bc379951
Tables added for CAs and CDPs.
2010-12-03 18:07:17 +01:00
Tobias Brunner
ece5d52e38
Migrated sql_cred_t to INIT/METHOD macros.
2010-12-03 18:07:17 +01:00
Tobias Brunner
5b2d9f24f5
Refactored stroke_cred_t to use mem_cred_t.
2010-12-03 18:00:00 +01:00
Tobias Brunner
413d8fe0e3
Avoid calling globfree twice on failure.
2010-12-03 17:38:36 +01:00
Andreas Steffen
375dacca8e
removed superfluous whitespace
2010-12-03 11:26:13 +01:00
Sansar Choinyambuu
e1ee0e20f7
PB-TNC messages implemented
2010-12-03 10:23:04 +01:00
Andreas Steffen
a072c34a63
check for malformed IKE and ESP proposals
2010-12-01 09:50:30 +01:00
Andreas Steffen
e79567d07e
Migrated sql_plugin_t to INIT/METHOD macros
2010-11-30 23:31:24 +01:00
Andreas Steffen
e7f586131e
Migrated sql_config_t to INIT/METHOD macros
2010-11-30 23:27:51 +01:00
Andreas Steffen
cbdcca7fd7
renamed algorithm to proposal
2010-11-30 17:38:49 +01:00
Andreas Steffen
f4e5acef3a
store IKE and ESP proposals in SQL database
2010-11-30 17:03:21 +01:00
Andreas Steffen
c616d84c3f
start and route connections defined in an SQL database via start_action field and ipsec up %startall command
2010-11-28 11:57:49 +01:00
Andreas Steffen
a9ac8c51ea
Migrated stroke_config_t to INIT/METHOD macros
2010-11-27 01:12:58 +01:00
Andreas Steffen
a5ffb559d2
Migrated stroke_cat_t to INIT/METHOD macros
2010-11-27 00:49:15 +01:00
Andreas Steffen
31f6f1513d
Migrated child_cfg_t to INIT/METHOD macros
2010-11-26 16:32:15 +01:00
Andreas Steffen
03a6719f46
Merge branch 'master' of git.strongswan.org:strongswan
2010-11-26 14:07:18 +01:00
Andreas Steffen
6b7897728a
support PEM-encoded certificates stored in SQL databases
2010-11-26 13:47:37 +01:00
Andreas Steffen
efc1c86e21
Migrated backend_manager_t to INIT/METHOD macros
2010-11-25 22:43:19 +01:00
Andreas Steffen
3fe656fdc9
fixed a couple of bugs in the prototype
2010-11-23 16:33:23 +01:00
Andreas Steffen
8d6366e87a
set PB_MSG_PA message type
2010-11-23 16:32:09 +01:00
Andreas Steffen
7a39b9ebf8
prototype implementation using the pb_tnc_message_t class
2010-11-23 14:44:16 +01:00
Andreas Steffen
7828bd1bd6
defined a pb_tnc_message_t interface
2010-11-23 14:27:57 +01:00
Andreas Steffen
6ee5c912e7
implemented create_reason_enumerator() function
2010-11-19 17:23:06 +01:00
Andreas Steffen
8a5c7db860
implemented request_handshake_retry() function
2010-11-19 08:52:18 +01:00
Andreas Steffen
a423a96140
added IMC and IMV IDs as arguments to send_message()
2010-11-17 00:04:10 +01:00
Andreas Steffen
66c30fa244
get_attribute() and set_attribute() are not allowed to use TNC_CONNECTIONID_ANY
2010-11-16 22:43:48 +01:00
Andreas Steffen
04b132e088
initialize chunks and add debug output
2010-11-16 22:28:10 +01:00
Andreas Steffen
c957aaa411
load IMCs and IMVs with RTLD_LAZY
2010-11-16 22:14:20 +01:00
Andreas Steffen
ad7e3b1d1e
fixed memory leak
2010-11-16 21:37:38 +01:00
Andreas Steffen
343f4793a8
implement set_attribute() callback function
2010-11-16 21:07:02 +01:00
Andreas Steffen
92477a0625
implement GetAttribute() callback function
2010-11-16 20:14:48 +01:00
Andreas Steffen
2fe06d33c3
reformulated recommendation policies
2010-11-16 11:00:40 +01:00
Thomas Egerer
e66420566c
Do not checkin a previously destroyed SA
2010-11-16 10:25:33 +01:00
Andreas Steffen
54b1896b31
mutex.h is not needed any more
2010-11-16 09:15:17 +01:00
Andreas Steffen
3b0e64d56e
imv_list consists of linked imv_t instances
2010-11-16 09:09:39 +01:00
Andreas Steffen
7c2201aded
implemented have_recommendation() based on a choice of 3 policies
2010-11-15 18:25:58 +01:00
Andreas Steffen