denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,277 Commits 1 Branch 0 Tags
36524c4844bfb5e36a476af5e85379b44f17b4d2
Commit Graph
291 Commits
Author SHA1 Message Date
Martin Willi 36524c4844 added support for certificate requests for not yet known CAs 2008-03-20 10:09:56 +00:00
Andreas Steffen ae8715f956 attempt to achieve consistent debugging output 2008-03-19 12:06:38 +00:00
Martin Willi 72d68379dc correctly unregister IKE_SA at the bus 2008-03-15 14:08:43 +00:00
Tobias Brunner df3462ddbe two small fixes 2008-03-13 15:03:06 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Andreas Steffen b48bdac20b improved P2P_NAT debugging 2008-02-27 20:30:39 +00:00
Tobias Brunner fb7e7dc484 refactored connect_manager_t to use the find functions on linked lists 2008-02-14 13:42:36 +00:00
Martin Willi 5bbac9ffff split connections with different virtual IPs in different peer_cfgs 
respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA
 2008-02-05 12:39:30 +00:00
Andreas Steffen 663fedbe44 implemented IKEV2 EAP-SIM server and client test module that use triplets stored in a file. For details see the scenario 'ikev2/rw-eap-sim-rsa' 2008-02-04 14:52:06 +00:00
Martin Willi 3b1692c058 use identifiers in EAP_SUCCESS/EAP_FAILURE payloads 2008-02-04 11:43:10 +00:00
Andreas Steffen b0e40caafb NAT-T conditions were not inherited during IKE_SA rekeying 2008-01-29 01:41:47 +00:00
Martin Willi 3a36ce1164 added missing hasher include 2008-01-03 10:42:21 +00:00
Martin Willi b8461a37db fixed EAP-MD5 to accept Name attribute in challenge 2007-12-18 10:44:44 +00:00
Martin Willi 0f806802ae implemented Expanded EAP types to support vendor specific methods 2007-12-13 17:31:21 +00:00
Martin Willi 3243ac6d5e fixed actual ID length when AT_IDENTITY gets padded 2007-12-13 14:39:38 +00:00
Martin Willi 26e2467692 ported EAP-AKA branch into trunk 2007-12-13 10:54:29 +00:00
Martin Willi 4b403e7672 merged EAP-MD5 into trunk 2007-12-12 14:29:10 +00:00
Martin Willi 3895125275 removed c++ style comments 
fixed compiler warnings
 2007-12-04 10:48:27 +00:00
Martin Willi b8249ff5ed fixed mobike/auth_lifetime in conjunction with p2p-natt 2007-12-04 10:05:36 +00:00
Andreas Steffen addc4b3ce4 removed redundant server reflexive endpoint debug message 2007-12-04 00:45:00 +00:00
Andreas Steffen 3af513753a improved P2P_ENDPOINT debugging 2007-12-03 23:06:17 +00:00
Martin Willi 7805ad302d moved AUTH_LIFETIME handling in its own task (cleaner separation, proper payload order) 2007-12-03 10:52:18 +00:00
Tobias Brunner 17d6e9aa00 improving [3361]: moved one of the added return values 2007-11-22 11:22:33 +00:00
Andreas Steffen f210387a6b added two return statements comitted by Marius Tomaschewski 2007-11-21 23:42:27 +00:00
Martin Willi ee61471113 implemented RFC4478 (repeated authentication) 
changed %V printf handler to take a time delta, %#V now takes two arguments
 2007-11-20 12:06:40 +00:00
Martin Willi 91b16af0fa fixed NO_PROPOSAL_CHOSEN response on IKE_SA_INIT 2007-11-14 09:41:08 +00:00
Andreas Steffen d5da42a9e4 fixed _updown target for ipv6 2007-11-06 13:45:54 +00:00
Martin Willi 00fb758755 adding new virtual ip before deleting old one to keep IP on reauthentication 2007-10-25 07:50:23 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Tobias Brunner 56db479192 ID payload with explicit payload type 2007-10-02 11:55:10 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 011fb1b97e removed accidentally checked in debugging code 2007-10-01 12:25:26 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi f215e91999 implemented more aggressive MOBIKE path probing 
do not queue more than one MOBIKE task
 2007-09-28 08:22:37 +00:00
Tobias Brunner 278396b6da typos 2007-09-27 10:36:03 +00:00
Martin Willi d9d69536b0 improved MOBIKE roaming between interfaces 2007-09-24 12:15:25 +00:00
Andreas Steffen 703b4b0332 connection name to IKE_SA initiating 2007-09-15 20:30:04 +00:00
Andreas Steffen a2ab401c56 put IKE_SA and CHILD_SA names in single quotes 2007-09-15 16:06:58 +00:00
Andreas Steffen be682af3e8 log name of IKE_SA in state changes 2007-09-15 15:54:51 +00:00
Andreas Steffen 3f4076b7c8 log name of established IKE_SA 2007-09-15 15:54:30 +00:00
Andreas Steffen 21b3099ac4 log name of established CHILD_SA 2007-09-15 15:53:10 +00:00
Tobias Brunner eff806eb5a added missing 'break' in checkout_by_peer 2007-09-13 13:00:23 +00:00
Martin Willi dd52993068 only switch to port 4500 if we are on 500: fixed reauthentication in NAT 
scenarios
 2007-09-12 11:11:10 +00:00
Andreas Steffen 794d2526b4 removed unused chunk variable 2007-09-12 07:54:56 +00:00
Martin Willi a8827c9b63 moving virtual IP when interface changes due mobike 2007-09-12 07:36:45 +00:00
Martin Willi 12fa4387c6 fixed NAT detection with mobike 2007-09-12 07:14:05 +00:00
Andreas Steffen 1cb2cb622e overwrite shared_key with random bytes before freeing it 2007-09-11 21:06:46 +00:00
Andreas Steffen f0c156fbc9 replaced get_rsa_private_key() by rsa_signature() in order restrict the distribution of private key material 2007-09-11 10:18:25 +00:00
Martin Willi 5474dc6500 implemented routeability checks for mobike (experimental) 2007-09-03 12:37:25 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option 
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
 2007-08-29 12:11:25 +00:00