denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,079 Commits 1 Branch 0 Tags
3364ef1d56c7947bb23b0a4db9bdb8bf4b329d2e
Commit Graph
179 Commits
Author SHA1 Message Date
Andreas Steffen 3364ef1d56 fixed typo in debug statement 2006-10-25 08:42:16 +00:00
Andreas Steffen 66a09e1d6e redesigned list output format 2006-10-25 08:41:27 +00:00
Martin Willi 191a26a6a7 removed deprecated iterator methods (has_next & current) 
added iterator hook to manipulate iterator the clean way
 2006-10-24 14:20:45 +00:00
Martin Willi 55bbff11ec linked list cleanups 
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
 2006-10-24 08:46:17 +00:00
Martin Willi 5c4cc9a4e3 added verbosity level to stroke 2006-10-24 08:44:47 +00:00
Martin Willi e706c7f10b code cleanups in printf handlers 2006-10-20 05:57:25 +00:00
Martin Willi 490d324d81 added eap authentication draft for ikev2 2006-10-18 11:49:37 +00:00
Martin Willi 60356f3375 introduced new logging subsystem using bus: 
passive listeners can register on the bus
  active listeners wait for signals actively
  multiplexing allows multiple listeners to receive debug signals
  a lot more...
 2006-10-18 11:46:13 +00:00
Martin Willi 9aac18cba8 removed module tests, outdated. We need something more system-test like 2006-10-18 11:38:43 +00:00
Martin Willi c701e73dc1 fixed auxillary message data parsing for IPV6 socket 
using SOL_* constants for socket level
 2006-10-09 12:28:43 +00:00
Martin Willi a3a1b565da fixed IPV6_PKTINFO setsockopt() to work with most kernel headers 
replaced strerror(errno) with %m printf specifier
 2006-10-09 12:14:56 +00:00
Martin Willi 9e22095ef3 fixed DPD to survive IKE_SA rekeying 2006-09-28 06:57:46 +00:00
Martin Willi 47f5027807 introduced printf() specifiers for: 
host_t (%H)
  identification_t (%D)
  chunk pointers (%B)
  memory pointer/length (%b)
added a signaling bus:
  receives event and debug messages, sends them to its listeners
  stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
 2006-09-27 14:14:44 +00:00
Martin Willi f91513e333 added often used RFCs and drafts 2006-09-27 14:10:32 +00:00
Martin Willi 1ce2ad09c3 fixed retransmission policy for responder 2006-09-25 07:24:08 +00:00
Martin Willi 397f344879 fixed dpd for responder 2006-09-25 06:38:58 +00:00
Andreas Steffen 7bd23b7ed5 added hostaccess support 2006-09-25 06:11:36 +00:00
Andreas Steffen b826069dbb moved auth_method to policy 2006-09-25 06:11:09 +00:00
Andreas Steffen d756cd1bd6 added hostaccess support 2006-09-25 06:10:28 +00:00
Andreas Steffen 7968c6a5ff added hostaccess support 2006-09-25 06:10:02 +00:00
Andreas Steffen a8960f997a more consistent authentication logging 2006-09-25 05:59:38 +00:00
Andreas Steffen fff4ee8a85 added hostaccess support 2006-09-25 05:58:45 +00:00
Andreas Steffen 841b7a1f1e moved auth_method to policy 2006-09-25 05:52:50 +00:00
Andreas Steffen 2e5935815d moved auth_method to policy 2006-09-25 05:52:13 +00:00
Andreas Steffen 54c6c4711f added hostaccess support; moved auth_method to policy 2006-09-25 05:51:16 +00:00
Andreas Steffen 380d91b9be added hostaccess support 2006-09-25 05:49:36 +00:00
Martin Willi 73760ca5ff extended statusall output 
added job/event-queue statistics
  added allocation statistics when using LEAK_DETECTIVE
 2006-09-21 07:03:21 +00:00
Andreas Steffen 833a7cbc50 support of encrypted private key files 2006-09-20 05:48:27 +00:00
Martin Willi b5cac6684d added copyright notice to sha2_hasher 
included SHA2 in build process
 2006-09-19 14:54:01 +00:00
Martin Willi 462129d332 added support for 3DES encryption algorithm in IKE 2006-09-19 11:18:35 +00:00
Andreas Steffen 43ead00a2f fixed the ids parsing bug 2006-09-19 06:16:48 +00:00
Martin Willi f534e18a98 updated TODOs 2006-09-18 11:41:04 +00:00
Martin Willi e63c4d8b8b fixed memleak 
fixed proper handling of id parsing errors
proper return value when no PSK found
 2006-09-18 11:39:53 +00:00
Martin Willi 6e9bbf18b8 added HOST_ACCESS for firewall script as default 2006-09-18 11:38:37 +00:00
Martin Willi 5fded5139e more debugging output for PSK authentication 2006-09-18 11:38:11 +00:00
Andreas Steffen e2de376c74 added PSK support 2006-09-18 07:42:57 +00:00
Martin Willi a7371600b0 proper error handling for socket creation 2006-09-18 06:44:38 +00:00
Martin Willi b9024ee058 handle certificate parsing error more generous 2006-09-14 13:14:58 +00:00
Martin Willi 567e2a7822 fixed memleak when receiving invalid certificate 2006-09-14 12:15:41 +00:00
Martin Willi d7934d0cfc implemented updown script to handle firewalling 2006-09-12 13:50:14 +00:00
Martin Willi a095243f60 add priority management for kernel policy 
let ROUTED policies installed, until manuall removed
introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs
ike_sa_manager cleanups
 2006-09-08 13:10:52 +00:00
Martin Willi 1239c6f40b implemented handling of dpdaction and dpddelay ipsec.conf parameters 2006-09-08 06:12:02 +00:00
Martin Willi a655f5c09c reuse reqid when a ROUTED child_sa gets INSTALLED 
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
 2006-09-05 14:07:25 +00:00
Martin Willi da8ab11e91 fixed a at-least-one-year-old bug which caused crashed in the scheduler 2006-08-31 06:48:10 +00:00
Martin Willi c705698293 added raw socket filter for IPv6 2006-08-31 06:18:15 +00:00
Martin Willi 053842f4e7 implemented NAT detection for IPv6 2006-08-31 06:17:41 +00:00
Martin Willi 48d9883a3e initial support for IPv6 (more testing needed) 
socket works (without v6 filter)
  traffic selector handle IPv4/v4 cleanly
    improvements in traffic selector code
  kernel interface accepts v6 traffic selectors and hosts
  host_t class has full IPv6 support
 2006-08-30 17:12:56 +00:00
Martin Willi 4c23a8c9ec moved interface enumeration code to socket, where it belongs 
query interfaces every time we need it to respect changes in network config
added address listing on startup and "ipsec statusall"
 2006-08-28 08:45:22 +00:00
Martin Willi fa8d578d94 fixed crash bug when doing "ipsec down" with an unknown connection 2006-08-25 09:19:42 +00:00
Martin Willi 9be547c0ed added name property in CHILD_SA, allows proper status output 2006-08-25 09:07:37 +00:00