denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,562 Commits 1 Branch 0 Tags
33f6b3d6d0faa2470e3e56a5455289e3af1b94bd
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 33f6b3d6d0 Add features support to hmac plugin 2011-10-14 10:05:45 +02:00
Martin Willi 130661b275 Add features support to md5 plugin 2011-10-14 10:05:45 +02:00
Martin Willi 30ab1a6ed9 Add features support to sha2 plugin 2011-10-14 10:05:44 +02:00
Martin Willi cec7dd14eb Add features support to sha1 plugin 2011-10-14 10:05:44 +02:00
Martin Willi 2d2ffa58f6 Added a listplugins stroke command to show plugin features 2011-10-14 10:05:44 +02:00
Martin Willi fa7c8338ca Plugin enumerator enumerates over loaded features, too 2011-10-14 10:05:44 +02:00
Martin Willi 36b4f05b14 Added a generic callback to register EAP methods using plugin features 2011-10-14 10:05:44 +02:00
Martin Willi 62b9e2f938 Added support for plugin features 2011-10-14 10:05:44 +02:00
Martin Willi 658c993c78 Include KEY_ANY in key_type_names 2011-10-14 10:04:45 +02:00
Martin Willi e3edd7e75e Add enum names for database drivers 2011-10-14 10:04:45 +02:00
Martin Willi 9cd7f384ba Include library.h in plugin.h 2011-10-14 10:04:45 +02:00
Martin Willi dc299da8e5 Added additional debug info to peer config matching 2011-10-11 09:46:24 +02:00
Martin Willi 5976e149eb Don't allocate extra memory to MAC the TLS header 2011-09-28 17:32:23 +02:00
Martin Willi b79bb79a66 Verify TLS MAC even if padding is invalid to prevent timing attacks 2011-09-28 17:16:09 +02:00
Martin Willi 3946821937 Load eap-aka plugin before shared simaka helpers depending on it 2011-09-26 13:43:38 +00:00
Martin Willi e3c881aff9 Return allocated variable in INIT() 2011-09-12 13:03:20 +02:00
Martin Willi f8437dd8d2 Clear traps during shutdown before unloading kernel plugins 2011-09-12 13:02:51 +02:00
Martin Willi 40e53c40d4 Destroy kernel interface during deregistration, as the plugin goes afterwards 2011-09-12 13:02:15 +02:00
Martin Willi e6816e4670 Add missing semicolon 2011-09-12 13:01:40 +02:00
Martin Willi 6fde6cfaf8 NetworkManager-strongSwan Debian release 1.3.0 2011-09-07 16:09:18 +02:00
Martin Willi 24fa80ac91 Fixed compiler warnings in openssl plugin 2011-09-07 14:23:27 +02:00
Martin Willi 791c93f3ea Migrated NM frontend plugin to NetworkManager 0.9 
Use GtkBuilder, drop gconf dependency.
 2011-09-05 17:14:28 +02:00
Martin Willi 40921edc38 Support resolution of "allow_any" DNS names in charon (%hostname) 2011-09-02 13:42:45 +02:00
Martin Willi f9a0f55657 Check if ClearSilver actually requires zlib 2011-09-02 13:40:38 +02:00
Martin Willi d0e1b237be Properly remove listener when listen() times out 2011-08-31 16:50:06 +02:00
Martin Willi e59a50009c starter passes unresolved DNS names to charon 
Based on an initial patch by Mirko Parthey.
 2011-08-29 09:58:18 +02:00
Martin Willi 8e3f14baab bus->listen() and the controller wrappers accept a timeout to wait for callbacks 2011-08-26 10:44:25 +02:00
Martin Willi 071903235a Register manager of pkcs11 plugin as library object 2011-08-24 15:45:59 +02:00
Martin Willi 3f455c739d Added a certexpire empty_string option 2011-08-22 18:42:33 +02:00
Martin Willi e64fdfa172 Implemented CSV export functionality in certexpire plugin 2011-08-22 18:42:33 +02:00
Martin Willi d2aeb8fdfd Added generic cron style callback execution to certexpire plugin 2011-08-22 18:42:33 +02:00
Martin Willi f4bdc6a3aa Cache trustchain lifetimes for export 2011-08-22 18:42:33 +02:00
Martin Willi b274f20a1d Register a certexpire listener collecting trustchain information 2011-08-22 18:42:33 +02:00
Martin Willi 87ddfcc655 Added missing auth_rule_names 2011-08-22 18:42:32 +02:00
Martin Willi c991645ff5 Moved auth_rule_names back to auth_cfg.c 2011-08-22 18:42:32 +02:00
Martin Willi ba2201edf0 Added plugin stub of certexpire plugin 2011-08-22 18:42:32 +02:00
Martin Willi bff1025201 Don't rekey but delete CHILD_SA to resying against NATed Windows clients 2011-08-19 09:16:17 +02:00
Martin Willi f54bcf35af Sync newer IKE_SA condition/extension flags in ha plugin 2011-08-19 09:16:16 +02:00
Martin Willi 61cf9f512c Try to detect Windows Clients by looking for INTERNAL_IP4/6_SERVER attribute 2011-08-19 09:16:16 +02:00
Martin Willi 18c4d010f4 Install and use libtls as dynamic library, as we have our private libdir now 2011-08-08 13:41:09 +02:00
Martin Willi f9152a56ab Migrated simaka_message to INIT/METHOD macros 2011-08-08 13:36:56 +02:00
Martin Willi d1196ffe58 Migratd simaka_crypto to INIT/METHOD macros 2011-08-08 13:36:56 +02:00
Martin Willi efee3ed80f Migrated all SIM/AKA code to libsimaka, use SIM and AKA backend managers registered by name 2011-08-08 13:36:56 +02:00
Martin Willi 4c199e6f81 Add a non-clonig variant of eap_payload_create_data 2011-08-08 13:36:55 +02:00
Martin Willi b4853f12f5 Install and link libsimaka as dynamic library 2011-08-08 13:19:02 +02:00
Martin Willi 2ce569cc35 Provide generic object registration by name on libstrongswan 2011-08-08 13:19:02 +02:00
Martin Willi 994fb9bcf0 Fixed function descriptions 2011-08-08 13:19:02 +02:00
Martin Willi 61e13630f8 Show error code of Microsoft specific error notify 2011-08-03 12:01:15 +02:00
Martin Willi 06912a5eb4 Added Microsoft specific error notify 2011-08-03 12:00:50 +02:00
Martin Willi caa451557f ha plugin does not need Linux headers anymore 2011-08-02 17:08:41 +02:00
Martin Willi 6e5118e9e3 Check for kernel version and use appropriate jhash version in HA plugin 2011-08-02 17:00:59 +02:00
Martin Willi aaaa7bc544 Remove the Linux jhash.h copy, as the implementation changed for 2.6.37 
There are now different version for jhash, use --with-linux-headers
targeting the headers of the kernel used with the HA plugin.
 2011-08-02 14:14:43 +02:00
Martin Willi 5d6b981572 Inherit authentication information during IKE_SA rekeying 2011-07-25 14:19:17 +02:00
Martin Willi b93d77ce67 Fix parentheses in write() to CLUSTERIP control files 2011-07-14 15:56:10 +02:00
Martin Willi 75fc9d3136 Linked list style cleanups 2011-07-06 09:43:46 +02:00
Martin Willi 6a5c8ee7a5 Initialize trap_manager listener with INIT macro, too 2011-06-28 17:19:20 +02:00
Martin Willi 6fe53bde24 We actually need to link against libz, as neo libraries are often static 
This reverts commit 3c0630a797.
 2011-06-15 12:23:21 +02:00
Martin Willi 38dc106cde Set cookies for the complete domain 2011-06-15 12:22:41 +02:00
Martin Willi 7804b7f420 Migrated libfast to INIT/METHOD macros 2011-06-15 11:25:53 +02:00
Martin Willi 4876f896a4 Added documentation and NEWS for closeaction 2011-06-07 12:07:22 +02:00
Martin Willi f34ebc845b Add a closeaction ipsec.conf keyword to configure close action 2011-06-07 12:07:21 +02:00
Martin Willi bc20bc1927 Check if colliding task has actually a CHILD, i.e. after a migrate 2011-06-03 10:49:54 +02:00
Martin Willi ff6aab9e85 Fix alignement compiler warning 2011-06-03 10:49:54 +02:00
Martin Willi 91b9bc3e0f Load af-alg with higher priority 2011-06-01 12:03:44 +02:00
Martin Willi ea90042233 Provide recursive mutex' just in case the PKCS#11 library requires it 2011-06-01 12:03:44 +02:00
Martin Willi 3c0630a797 libfast does not depend on zlib directly, clearsilver can be built without compression support 2011-06-01 12:03:44 +02:00
Martin Willi 60d4a323a0 Include m4/config directory in git, supporting autoregen -i of a fresh clone 2011-06-01 12:03:44 +02:00
Martin Willi c140757221 Fix initialization of NM plugin 2011-05-31 18:12:56 +02:00
Martin Willi 35c9347921 Use better packing of leak-detective memory_header to align pointers 2011-05-25 19:56:47 +02:00
Martin Willi eb4f4551a1 Summarize leaks with identical backtraces, as we do it with memusage 2011-05-25 19:56:43 +02:00
Martin Willi 0eef27074d Don't use a strongswan.conf in checksum_builder, disables checksumming 2011-05-25 11:06:25 +02:00
Martin Willi f147b731e0 Force link of checksum builder against libhydra/libcharon 2011-05-25 10:40:30 +02:00
Martin Willi 3dbc5dfeda Checksum plugins only for components we actually build 2011-05-25 10:33:14 +02:00
Martin Willi 628f285778 Fix strict aliasing warning 2011-05-25 10:09:16 +02:00
Martin Willi 8ed3c9fba5 Enable strict-aliasing warnings, we should really get rid of them 2011-05-24 12:04:35 +02:00
Martin Willi d45b242b60 Fix memwipe() of leading unaligned bytes 2011-05-24 11:49:20 +02:00
Martin Willi 8c1bfe6545 Link libstrongswan against libdumm, fixes build of ruby extension 2011-05-20 14:59:17 +02:00
Martin Willi 4ae7f7d13e Use spaces in Makefile.am identation, autotools don't like tabs 2011-05-20 10:09:09 +02:00
Martin Willi afd53de627 Add md5 to script plugins 2011-05-20 10:08:57 +02:00
Martin Willi b8509b7164 Link libstrongswan directly to dumm/irdumm, fixes build with newer binutils 2011-05-19 15:47:40 +02:00
Martin Willi 513701f41b Fix some warnings triggered by gcc 4.6 -Wunused-but-set-variable 2011-05-19 15:47:40 +02:00
Martin Willi 4baf1f3bfe Migrated controller_t to INIT/METHOD macros 2011-05-16 15:24:15 +02:00
Martin Willi 83245de0ac Provide get_priority() method in controller jobs 2011-05-16 15:24:15 +02:00
Martin Willi c8972da757 Added a load tester strongswan.conf option to throttle initiation 2011-05-16 15:24:15 +02:00
Martin Willi 8606725676 Migrated load_tester_listern to INIT/METHOD macros 2011-05-16 15:24:15 +02:00
Martin Willi a4c040d536 Added strongswan.conf option to override half open IKE_SA timeout 2011-05-16 15:24:15 +02:00
Martin Willi 14bf2f689d Use CRITICAL job priority class for long running dispatcher jobs 2011-05-16 15:24:15 +02:00
Martin Willi 1c8f58adb9 Introduce a highest priority job for critical thread services 2011-05-16 15:24:15 +02:00
Martin Willi 4cf6f101d8 Show total and half-open SA count in statusall 2011-05-16 15:24:15 +02:00
Martin Willi 9a96ba4b6e Added a get_count() method to IKE_SA manager 2011-05-16 15:24:15 +02:00
Martin Willi a836cf8085 Fixed identiation in private_ike_sa_manager 2011-05-16 15:24:15 +02:00
Martin Willi c6089e252d Added a callback_job constructor supporting custom priorities 2011-05-16 15:24:15 +02:00
Martin Willi 0b04bdde30 Added a DPD option for load-tester 2011-05-16 15:24:14 +02:00
Martin Willi 015c15688c Don't simulate traffic on load-tester kernel interface 2011-05-16 15:24:14 +02:00
Martin Willi c726b1a6a5 Show how many threads are active in each class in statusall 2011-05-16 15:24:14 +02:00
Martin Willi 877fdcf0b8 Count number of threads active in each class, and reserve threads only if none active 2011-05-16 15:24:14 +02:00
Martin Willi a694b481ee Added a statusallnb stroke command to show status non-blocking 2011-05-16 15:24:14 +02:00
Martin Willi a2302d2322 Added init_limit_half_open and a init_limit_job_load (replacing job_threshold) options, some refactorings 2011-05-16 15:24:14 +02:00
Martin Willi a1bf879a43 Added preshared_key/eap_password load_tester options to set custom credentials 2011-05-16 15:24:14 +02:00
Martin Willi ac96ca80eb Added initiator/responder_id load tester options to enforce different identities 2011-05-16 15:24:14 +02:00