denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,094 Commits 1 Branch 0 Tags
3ac5a0db8ca620ab1eb536dbc742c3acf8325b98
Commit Graph
239 Commits
Author SHA1 Message Date
Martin Willi 3ac5a0db8c replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant 2008-11-05 11:29:56 +00:00
Martin Willi e13389a7f7 got rid of deprecated create_iterator_locked() 2008-11-05 08:32:38 +00:00
Martin Willi 31537fd970 do not install route if interface lookup failed 2008-11-05 07:38:55 +00:00
Martin Willi 6a8ecfc8be two new load_testing options: 
request_virtual_ip: request a INTERNAL_IPV4_ADDR as client
	pool: provide addresses from a named virtual IP pool
 2008-11-04 14:55:22 +00:00
Martin Willi 480be6436a added a delay option to delay initiations 2008-11-04 12:59:53 +00:00
Andreas Steffen ec1bddc50c corrected a copy-and-paste error 2008-11-03 23:46:42 +00:00
Andreas Steffen c636285878 updated copyright of kernel interface code 2008-11-03 23:34:23 +00:00
Andreas Steffen bab075b166 added support for xfrm remote kmaddress 2008-11-03 23:29:34 +00:00
Martin Willi 4d901e3584 added fake_kernel option to make dummy kernel implementation optional 2008-11-03 15:11:01 +00:00
Martin Willi 1145ca098d load testing between different hosts 2008-11-03 10:02:39 +00:00
Andreas Steffen a54e3d51c1 removed unused variables 2008-11-03 03:56:03 +00:00
Andreas Steffen ef6d339c09 migrate_job() finds a matching child_cfg 2008-11-03 02:05:41 +00:00
Andreas Steffen 5145ae48be fully implemented the parsing of XFRM and PF_KEY MIGRATE messages 2008-11-02 21:34:52 +00:00
Andreas Steffen b74bc4384c identify attributes of XFRM ACQUIRE and MIGRATE messages 2008-10-31 06:18:48 +00:00
Andreas Steffen e7f4fc537f subscribing XFRM socket for MIGRATE messages 2008-10-31 02:50:01 +00:00
Andreas Steffen e526d22818 parse xfrm and pf_key acquire messages and subscribe to migrate messages 2008-10-31 01:43:23 +00:00
Martin Willi 5dffdea1d7 added hooks for IKE and CHILD keymat 2008-10-30 12:58:54 +00:00
Martin Willi 80853d8498 moved CHILD_SA key derivation to keymat_t 
passing key chunks to CHILD_SA, not the PRF
 2008-10-29 16:06:16 +00:00
Martin Willi 6a4ff35cc4 moved key derivation and management into keymat object 
allows secured implementation of key management (e.g. in kernel or HW)
	only IKE keys for now
 2008-10-28 16:07:06 +00:00
Martin Willi 3c8234d408 store IKE proposal implicitly during derive_keys 2008-10-28 10:12:21 +00:00
Martin Willi 20fb671904 fixed reauthentication time in statusall 2008-10-28 09:41:33 +00:00
Martin Willi 85ac2fa547 use more generic stats getter, introducing new stats 2008-10-27 14:51:00 +00:00
Martin Willi 0935ba328b including a "none" tundev to make NM happy 2008-10-27 11:30:27 +00:00
Martin Willi a1db79b31a fixed some compiler warnings 2008-10-27 11:13:33 +00:00
Martin Willi 82d20c0588 additional getters for ipcomp and UDP encap 2008-10-24 09:51:48 +00:00
Martin Willi 6e10aeadab more CHILD_SA refactorings 2008-10-24 08:02:35 +00:00
Martin Willi f2a5aa4a9d initiate connections simultaneously in load tester 2008-10-22 09:01:36 +00:00
Martin Willi 0fd6e95562 a load testing plugin, to: 
find multi-threading issues
	do performance profiling
 2008-10-21 13:00:38 +00:00
Martin Willi f2e1ff59ab reset threads IKE_SA after checking other IKE_SAs 
invoke updown script only if we have valid IKE_SA
 2008-10-20 11:38:16 +00:00
Martin Willi ad3af574a4 moved updown script invocation to an optional plugin 2008-10-16 11:48:18 +00:00
Martin Willi 1df106bf39 cache keys for in and outbound ESP SAs 
removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t)
creating TS pairs dynamically using create_policy_enumerator()
 2008-10-15 12:24:44 +00:00
Martin Willi 9f4e5f8c47 store ESP keys in CHILD_SA 2008-10-15 08:37:56 +00:00
Martin Willi e517b4b174 passing chunks, not prf+, to kernel interface 
gives us better control of keymat in CHILD_SA
 2008-10-14 15:17:44 +00:00
Martin Willi a985db3ff3 reintegrated bus-refactoring branch 2008-10-14 08:52:13 +00:00
Tobias Brunner 1adaa02bb2 merging kernel_pfkey plugin back from kernel-interface branch 2008-10-14 08:46:31 +00:00
Martin Willi 79a878466c reintegrated two-sim branch providing SIM card plugin API 2008-10-10 08:36:01 +00:00
Andreas Steffen 03d5f41137 faster implementation of addr_in_subnet() 2008-10-09 05:44:00 +00:00
Martin Willi 85be7e5b75 ignore routing events for our own routes 2008-10-08 08:29:49 +00:00
Martin Willi ce5b17082d mobike: try to keep existing source address before switching to another 2008-10-08 08:23:46 +00:00
Andreas Steffen d1cbe55127 implemented ipsec listalgs as a stroke command 2008-10-08 07:00:13 +00:00
Andreas Steffen 51358f9f72 correct fix that replaces Changeset 4378 2008-10-08 06:57:52 +00:00
Andreas Steffen c85862931f removing fix applied by Changeset 4378 2008-10-08 06:15:41 +00:00
Andreas Steffen 7a07cd1c75 fixed loop termination criterion in addr_in_subnet(). Thanks go to Wolfgang Steudel, TU Ilmenau 2008-10-07 21:41:45 +00:00
Martin Willi aa9a300677 userland support to process notifies for new NAT mappings detected in UDP encapsulation 2008-10-07 07:55:28 +00:00
Martin Willi 9c0aa46b64 use dpd_action also for remotely closed tunnels 2008-10-02 13:47:19 +00:00
Tobias Brunner a341a68fac merging renaming of mode_t to ipsec_mode_t back to trunk 2008-09-25 13:56:23 +00:00
Tobias Brunner 507f26f685 merging modularized kernel interface back to trunk 2008-09-25 07:56:58 +00:00
Andreas Steffen b33c11b6c7 stroke parses and lists AC groups 2008-09-17 02:17:01 +00:00
Martin Willi f061d83358 ported NM plugin to upstream NetworkManager changes 
splitted secrets (4031)
	using uuid in auth-dialog (4053)
 2008-09-12 13:28:31 +00:00
Martin Willi 1d03954aad NM plugin supports (encrypted) private key files 2008-09-05 13:26:58 +00:00