denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,306 Commits 1 Branch 0 Tags
3c7e72f5b0ed36cc3e0d70216d89b21d2ec806fb
Commit Graph
69 Commits
Author SHA1 Message Date
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Martin Willi 5bbac9ffff split connections with different virtual IPs in different peer_cfgs 
respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA
 2008-02-05 12:39:30 +00:00
Martin Willi 0f806802ae implemented Expanded EAP types to support vendor specific methods 2007-12-13 17:31:21 +00:00
Martin Willi ee61471113 implemented RFC4478 (repeated authentication) 
changed %V printf handler to take a time delta, %#V now takes two arguments
 2007-11-20 12:06:40 +00:00
Martin Willi 729a6ec965 fixed two leaks in stroke_interface 2007-11-19 11:28:11 +00:00
Andreas Steffen 3a19f38d15 handle right=%any case in strongSwan manager 2007-11-17 23:08:16 +00:00
Martin Willi e101f162ab refactored bus and interface to resolve threading issues (WIP) 2007-11-15 18:35:54 +00:00
Martin Willi 5d4aea685f filtering out IKEv1 configurations for manager 2007-11-15 10:09:14 +00:00
Martin Willi 30a68d715b implemented configuration query and IKE_SA initiation in XML interface 2007-11-13 11:56:52 +00:00
Martin Willi 275cec2eac implemented IKE/CHILD_SA termination through XML interface 2007-11-12 15:06:04 +00:00
Martin Willi 6705052c2d fixed bad cast which resulted in a crash on "ipsec update" 2007-10-05 09:13:03 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Martin Willi 2970674faf reverted changeset [3215], as we need NULL callback to do asynchronous calls 
added interface_manager_cb_empty function, which calls synchronous but doesn't do anything
 2007-10-03 08:10:03 +00:00
Martin Willi 06d00e4f7b fixed "ipsec statusall" SPI formatting 2007-10-02 13:11:23 +00:00
Tobias Brunner 17e78a0981 dummy callback added to interface manager 2007-10-02 11:33:16 +00:00
Martin Willi 06011f6882 remove control sockets on startup, as we don't have privileges on shutdown 2007-10-02 11:20:07 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi 052d58feaf fixed CHILD_SA SPI byte order in XML interface 2007-09-28 07:05:15 +00:00
Martin Willi 85c6fc0283 reduced debbugging level 2007-09-27 13:09:50 +00:00
Martin Willi c295d0eb4b refactored strongswan manager 
removed buggy request parsing code, use ClearSilvers CGI kit instead
fixed CHILD_SA listing in manager (needs better design)
using secure XML communication through unix sockets
removed images with questionable (non-GPL) license
 2007-09-26 14:02:21 +00:00
Martin Willi 8f561d4409 prototype implemementation of an sqlite configuration backend 2007-09-18 07:12:21 +00:00
Andreas Steffen cf9cec125a adapted format of IKE SPIs to strongSwan Manager's style 2007-09-15 15:35:02 +00:00
Martin Willi c01f7bf989 added subnets of CHILD_SAs to xml interface 
a first design of Managers IKE_SA list page
 2007-09-14 14:07:30 +00:00
Andreas Steffen 15a9d460c0 peer_cfg now knows about group memberships 2007-09-13 15:33:17 +00:00
Martin Willi 6baca3b2f1 fixed 64bit issue with file descriptor 2007-09-13 08:19:15 +00:00
Martin Willi b8c7453a82 manager can query and list IKE_SA status (no layout yet) 2007-09-13 07:45:04 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option 
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
 2007-08-29 12:11:25 +00:00
Andreas Steffen 8ff58b051c ipsec stroke rereadaacerts|rereadacerts supported 2007-08-10 09:17:34 +00:00
Andreas Steffen 84db83336b support of ipsec rereadsecrets for stroke 2007-08-10 07:16:32 +00:00
Andreas Steffen f51d505e5e implemented listing of attribute certificates 2007-08-07 20:32:11 +00:00
Martin Willi 3b574567ea fixed segfault when sourceip in stroke message is NULL 2007-08-06 12:35:28 +00:00
Martin Willi 9ec19f13f7 allow starter to initiate connections simultaneously (on auto=start) 2007-08-06 07:41:19 +00:00
Martin Willi ac1557af51 updated XML interface to new schema 2007-07-19 10:57:33 +00:00
Martin Willi 19ff7d2207 added first draft of SMP relax-ng schema 2007-07-06 13:44:43 +00:00
Martin Willi 209c2e9049 support for left=%any change our address dynamically 2007-06-18 05:57:59 +00:00
Martin Willi 08a8f4496f implemented more flexible iterator hook API 
kernel interface handles interface changes and updates address list
 2007-06-15 13:23:18 +00:00
Martin Willi 02b3ec0a10 implemented address change notification (for MOBIKE) 
implemented up to date address list cache to list interfaces
 2007-06-14 15:16:15 +00:00
Martin Willi 424e0c467e ported interfaces to new threading functions (incomplete) 2007-06-11 14:24:32 +00:00
Martin Willi 9fe1a1ca76 introduced callback_job: 
simple asynchronous method invocation
  use daemons thread pool for all threads
  proper cancellation and cleanups
  cancellation mechanism to dynamically unload multithreaded code
unified event_queue and scheduler => scheduler
unified job_queue and thread_pool => processor
removed job_type_t, not really needed
fixes here, there and everywhere
 2007-06-11 10:57:19 +00:00
Martin Willi 1f2a0f8098 removed paranoid module checking 2007-05-25 05:45:41 +00:00
Martin Willi 76042f8471 proper thread cancellation when using the charon->interfaces 2007-05-23 09:08:13 +00:00
Martin Willi 16878f6823 support for virtual IP definition on client side: 
if leftsourceip is defined, it is requested.
  server may define rightsourceip=%config to accept any,
  or it may overwrite it using rightsourceip.
  if server does not return an IP, client enforces its configured leftsourceip.
 2007-05-22 13:49:31 +00:00
Andreas Steffen 3eb9630071 support of left|rightgroups parameter 2007-05-20 15:38:36 +00:00
Andreas Steffen 6e04f25313 support of CA-based ipsec policies 2007-05-18 12:25:37 +00:00
Martin Willi bcd887781a removed route_job, handled all in interface_manager 2007-05-16 08:49:10 +00:00
Martin Willi ce27ac8012 routing/unrouting through interface 2007-05-16 08:32:15 +00:00
Martin Willi 1387e64af1 working dummy for NetworkManager DBUS interface 
more a tech demo
 2007-05-14 13:22:04 +00:00
Martin Willi a6a039aa10 simplified capability dropping 2007-05-09 13:12:06 +00:00
Martin Willi 3cd3f48428 properly implemented interface_managers initiate, terminte_[ike|child] 
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
 2007-05-09 12:33:08 +00:00