denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,452 Commits 1 Branch 0 Tags
38031878dd78e6010c65df85fa1ef3dac6c1f740
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi b42bfc79d9 Added NEWS about streamlined plugin names 2009-10-15 11:12:13 +02:00
Martin Willi f48ceeb1d1 Renamed plugin configuration sections to the actual plugin name 2009-10-15 10:36:17 +02:00
Martin Willi c4d53fe06b Streamlined EAP plugins to use a dash between eap-method, as used in all other places 2009-10-15 10:36:17 +02:00
Martin Willi b76b867c70 Renamed --enable-load-tests to --enable-load-tester, like the plugin itself 2009-10-15 10:36:17 +02:00
Martin Willi 406f335938 Updated configuration directive of resolve plugin, renamed from resolv_conf 2009-10-15 10:14:10 +02:00
Martin Willi d38eb3355e Migrated the lease_history option to the new libstrongswan plugin namespace 2009-10-15 10:14:10 +02:00
Martin Willi bb56e3f962 Improved debugging log in SIM triplet lookup 2009-10-14 09:55:14 +02:00
Martin Willi a2b50c5d60 Fixed assignment of get_triplet() dummy implementation 2009-10-13 11:05:01 +02:00
Martin Willi 073e7dc062 Merged SIM/USIM manager/card/provider, avoids code duplication 2009-10-12 14:40:21 +02:00
Martin Willi f7897b64f6 Added ${shlibs:Depends} dependency to Debian package 2009-10-12 14:06:51 +02:00
Martin Willi 3690d31a2a Added .gitignore for NM Debian package build 2009-10-12 14:06:51 +02:00
Martin Willi 68d23d2401 Pass NULL as other identity in EAP-AKA 3GPP2 to find a match with all plugins 2009-10-12 09:51:46 +02:00
Martin Willi 9b2942f68d Stroke plugin interprets NULL identities as ID_ANY in shared key lookup 2009-10-12 09:51:45 +02:00
Martin Willi 55b045abb5 Added NEWS about EAP-AKA split 2009-10-09 13:31:19 +02:00
Martin Willi 5d5e2853b6 SIM card interface takes IMSI as parameter (same as in USIM) 2009-10-09 13:02:20 +02:00
Martin Willi 31f5280cee Fixed USIM parameter description 2009-10-09 13:02:20 +02:00
Martin Willi 424ddf801c Do not use monotonic time for AKA sequence numbers, it has an undefined starting point 2009-10-09 13:02:20 +02:00
Martin Willi 655728621b Use constants instead of sizeof(), sizeof() does not work for function arguments 2009-10-09 13:02:20 +02:00
Martin Willi aba93dcc32 Calculate missing CK/IK values in USIM 2009-10-09 13:02:20 +02:00
Martin Willi aca7ba0ffc Link 3gpp2 EAP-AKA plugin to libgmp 2009-10-09 13:02:20 +02:00
Martin Willi 53a16b72ab Separated 3gpp2 USIM card and provider functionality 2009-10-09 13:02:20 +02:00
Martin Willi 0030880c6b Ported AKA functions to 3gpp2 plugin 2009-10-09 13:02:19 +02:00
Martin Willi 4720815774 Added a stub for the EAP-AKA backend implementing the 3GPP2 functions in software 2009-10-09 13:02:19 +02:00
Martin Willi 36a3bccfcf Implemented a manager for USIM cards/providers very similar to the SIM manager 2009-10-09 13:02:19 +02:00
Martin Willi a4eb37eed0 Added medsrv.fcgi to gitignore 2009-10-08 13:10:02 +02:00
Martin Willi 4b1cd5a367 Reenabled acq_expires SA timer using rekey timeout 
While not using a SA expiration for allocating SPIs works fine,
the situation is much more problematic for kernel-created temporary
SAs from acquires. If the negotiation of such a CHILD_SA fails,
the created temporary SA can not be deleted.
 2009-10-07 13:09:59 +02:00
Martin Willi 991f7ccd6c Catch CHILD_SA state changes during acquire 
If an acquire fails due to a TS_UNACCEPTABLE or other CHILD_SA only errors,
we have to reset the pending state in the trap manager.
 2009-10-07 13:09:59 +02:00
Martin Willi 6eacaffc72 Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word reads 2009-10-05 14:06:32 +02:00
Martin Willi 3b836fc759 Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word reads 2009-10-05 13:32:41 +02:00
Martin Willi 587ebae722 Distinguish invalid free()s between corrupted magic and invalid pointer 2009-10-05 11:02:54 +02:00
Martin Willi f12d8cf719 Do not increase the invalid-KE/Cookie retry counter for additional keyingtry attempts 2009-09-24 14:49:41 +02:00
Martin Willi cf76c42903 Do not create a replacement IKE_SA if we have CHILD_SAs to route only 2009-09-24 14:49:41 +02:00
Martin Willi 17859fe6cf Right-align short options in pki usage 2009-09-24 11:28:53 +02:00
Martin Willi 840743479a Use mysql_config to query MySQL LIBS and CFLAGS 2009-09-23 12:45:03 +02:00
Martin Willi 0406ed7a16 Fixed a crash in source address lookup 2009-09-23 11:18:30 +02:00
Martin Willi a7f79ee9c1 Define ME for all charon plugins 2009-09-23 11:13:27 +02:00
Martin Willi e20b792108 Correctly handle --enable-mediation option 2009-09-23 10:50:00 +02:00
Martin Willi b262680175 Emit a ALERT_SHUTDOWN_SIGNAL before shutting down the daemon 2009-09-22 17:00:00 +02:00
Martin Willi f1092e20f4 Fixed encoding of hash-and-url cert payload 2009-09-22 10:07:04 +02:00
Martin Willi cb64b21217 Do not assign SIM version to a volatile buffer on stack 2009-09-22 09:11:35 +02:00
Martin Willi 91cb348cc2 CA certificates are looked up using the subjectPublicKeyInfo keyid 2009-09-21 18:13:25 +02:00
Martin Willi c84b139a87 Credential backends use has_fingerprint() methods to select keys/certificates 2009-09-21 17:03:00 +02:00
Martin Willi 640ed4d5a5 Public/Private keys implement a has_fingerprint() method 2009-09-21 16:47:25 +02:00
Martin Willi fde7f5abf8 Correctly serve certificates if CERT_ANY requested 2009-09-21 15:34:29 +02:00
Martin Willi c6a8990bc5 Enforce a local address of the same family as remote address 2009-09-21 15:30:40 +02:00
Martin Willi c331bce51d Return certificates of requested kind only 2009-09-21 14:43:57 +02:00
Martin Willi c7a64d6f41 Use helper functions to handle (non-)skippable attributes 2009-09-18 15:08:43 +02:00
Martin Willi e466139c91 Clients can handle AKA-Identity requests by sending the full identity 2009-09-18 14:51:35 +02:00
Martin Willi 85af7a89c6 nm uses the distributions trusted root CAs if none is explicitly specified 2009-09-18 14:34:27 +02:00
Martin Willi 7aa495d9d0 get_private() in listcacerts requires a valid auth cfg 2009-09-17 12:47:03 +02:00
Martin Willi 4a03e85b37 Fixed nexthop lookup, used by source route installation 2009-09-16 13:55:32 +02:00
Martin Willi 36b7ba5ee3 Use continue to advance to next iteration 2009-09-16 13:32:47 +02:00
Martin Willi 075448fbc8 Complain about missing %defaultroute support only if one is actually used 2009-09-16 13:27:49 +02:00
Martin Willi b538b606da Use the default debug hook if possible 2009-09-16 13:16:00 +02:00
Martin Willi 5289249449 Default logger implementation can be modified by dbg_default_set_level/stream 2009-09-16 13:06:16 +02:00
Martin Willi a474081f1f Removed obsolete per-command debug level option 2009-09-16 12:52:56 +02:00
Martin Willi 4e1cade52f Fixed loading of DER encoded certificate files 2009-09-16 11:24:35 +02:00
Martin Willi 88fdf88a1f Disable rtnetlink defaultroute lookup if pluto is disabled 
As we do not support Pluto on BSD/Mac, exclude the Linux specific
rtnetlink routing lookup; Charon doesn't require it anyway.
 2009-09-15 13:16:39 +02:00
Martin Willi ae7452e87c Handle pki --debug and --options in a generic way for all command 2009-09-15 11:53:46 +02:00
Martin Willi 4fdb9f6f74 pki tool supports single letter short options 2009-09-15 10:20:22 +02:00
Martin Willi 012f62a820 Exponents of a RSA key in openssl are optional (for PGP) 2009-09-15 09:33:00 +02:00
Martin Willi b6b90b68a1 Added some NEWS 2009-09-15 09:13:31 +02:00
Martin Willi 9f45b19fe7 Use ID_KEY_ID as PGP user id, as it can contain any string 2009-09-15 08:45:08 +02:00
Martin Willi e4be5ef8fb Fall back to default credential set lookup if fingerprint lookup fails 2009-09-15 08:44:10 +02:00
Martin Willi 79c6f16212 Implemented support for preinstalled PGP certificates in charon 2009-09-15 08:23:48 +02:00
Martin Willi 4cb0e1bb76 Added basic support for PGP certificates (no trust relationships yet) 2009-09-15 08:23:48 +02:00
Martin Willi 88f3ffa1b1 Moved generic PGP parsing functions to pgp_utils.[ch] 2009-09-15 08:23:47 +02:00
Martin Willi 0912f0d2bc replaced the missed ${confdir} by ${sysconfdir} 2009-09-14 21:38:36 +02:00
Martin Willi af0dfe4987 Fixed pluto certificate parsing 2009-09-14 17:18:43 +02:00
Martin Willi b9fbd66587 Added support to build RSA keys from components in openssl 2009-09-14 14:29:10 +02:00
Martin Willi 06a8df11d9 pki tool can issue/self-sign certificates with OCSP URIs 2009-09-11 17:17:56 +02:00
Martin Willi 6dc57cd02e x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations 2009-09-11 17:16:22 +02:00
Martin Willi 6d24a5d746 added lost session cookie buffer 2009-09-11 16:23:15 +02:00
Martin Willi 3b878dae7e Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro 2009-09-11 15:39:35 +02:00
Martin Willi 3a7bd9bd49 pki tool can issue certificates with CRL distribution points 2009-09-11 15:36:22 +02:00
Martin Willi 881b259943 x509 plugin supports encoding of CRL distribution points 2009-09-11 15:36:22 +02:00
Martin Willi 31f87c29c7 double check session id has been initialized 2009-09-10 20:51:43 +02:00
Martin Willi 356b2b2780 pass NULL to library_init() to load settings from default file 2009-09-10 18:52:42 +02:00
Martin Willi 5b03a350fc use NULL to load plugins from default plugin directory 2009-09-10 18:52:42 +02:00
Martin Willi 6de28173f0 remove obsolete @brief doxygen tags 2009-09-10 18:52:42 +02:00
Martin Willi 6d8e913ab6 Use wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t 2009-09-10 18:52:42 +02:00
Martin Willi 48a606b5ff libfast uses enumerator instead of deprecated iterator 2009-09-10 18:52:42 +02:00
Martin Willi d73f453c29 Updated x509 plugin to the new builder API 2009-09-10 16:20:21 +02:00
Martin Willi 91ef5c66ab Updated pubkey plugin to the new builder API 2009-09-10 16:20:20 +02:00
Martin Willi 872176d350 Updated pkcs1 plugin to the new builder API 2009-09-10 16:20:20 +02:00
Martin Willi 43224e9527 Updated pgp plugin to the new builder API 2009-09-10 16:20:20 +02:00
Martin Willi de408caf93 Updated pem plugin to the new builder API 2009-09-10 16:20:19 +02:00
Martin Willi 30c06407c6 Updated openssl plugin to the new builder API 2009-09-10 16:20:19 +02:00
Martin Willi 1086d00e41 Updated gmp plugin to the new builder API 2009-09-10 16:20:19 +02:00
Martin Willi a94acb58a2 Updated gcrypt plugin to the new builder API 2009-09-10 16:20:18 +02:00
Martin Willi 26135ed9bb Updated dnskey plugin to the new builder API 2009-09-10 16:20:18 +02:00
Martin Willi 0a139eeac9 Updated agent plugin to the new builder API 2009-09-10 16:20:18 +02:00
Martin Willi d3674e25a7 Updated pluto to the new builder API 2009-09-10 16:20:18 +02:00
Martin Willi f678f5c77e Replaced builder_t objects by simple builder_function_t functions 2009-09-10 16:20:17 +02:00
Martin Willi 3ce9438b60 Use dynamic registration/usage invocation of command types 2009-09-10 16:18:30 +02:00
Martin Willi 6be68cc1c7 splitted PKI tool to a file per command 2009-09-10 12:31:40 +02:00
Martin Willi e5e6c6f43c use generic option parsing with usage information 2009-09-10 11:18:41 +02:00
Martin Willi 63ee88745a fixed memleak 2009-09-09 17:16:00 +02:00
Martin Willi 1080a51fd2 evaluate arguments of chunk_clone/clonea/alloc/alloca only once 2009-09-09 16:24:21 +02:00
Martin Willi b5d31b3e56 pki tool supports subjectAltNames in certificates 2009-09-08 13:27:35 +02:00