Commit Graph
48 Commits
Author SHA1 Message Date
Martin Willi 3dbbbf3e16 - added misssing stroke.h 2006-04-05 05:59:05 +00:00
Martin Willi f2ee13a7e8 - improved strokeing
- down connection
	- status
- some other tweaks
2006-04-04 12:45:29 +00:00
Martin Willi efadbf79e9 - rewrote a lot of RSA stuff
- done major work for ASN1/decoder
- allow loading of ASN1 der encoded private keys, public keys and certificates
- extracting public key from certificates
- passing certificates from stroke to charon

=> basic authentication with RSA certificates works!
2006-03-30 07:22:01 +00:00
Martin Willi dec598220b - rewrite of logger_manager, uses now one instance per context
- cleanups for logger here and there
- removed critical flag check in payload verification (conformance to IKEv2)
- so thats and theres everywere... ;-)
2006-03-23 15:25:43 +00:00
Martin Willi 87a217f9f1 - works quite well now with ipsec.conf & ipsec starter 2006-03-20 15:43:26 +00:00
Martin Willi e8d25806f3 - belongs to previous commit ;-) 2006-03-16 15:25:41 +00:00
Martin Willi 16b9a73cc4 - reworked configuration framework completly
- configuration is now split up in: connections, policies, credentials and daemon config
- further alloc/free fixes needed!
2006-03-16 15:25:06 +00:00
Martin Willi b1953ccd05 - first attempt for connection loading and starting via "stroke"
- some improvements here and there
2006-03-14 13:22:48 +00:00
Martin Willi 8a49112907 - configuration_manager replaced by configuration_t interface
- current configuration_manager is now static_configuration (testing)
- first draft of starter_configuration, which should once interact with ipsec starter (via whack?)
- some cleanups
- socket_t uses RAW socket, which allows parallel service of pluto/charon
2006-03-07 09:42:15 +00:00
Martin Willi aa5a35a005 - comments and cleanups 2006-03-02 09:56:30 +00:00
Martin Willi 5d187bd234 - working policy installation and removal 2006-03-01 15:56:51 +00:00
Martin Willi a527a426d6 - proposal setup implementation begun 2006-02-22 16:14:40 +00:00
Martin Willi 30b5b412da - installing of child sa works
- need correct IP adresses to actually use IPsec
2006-02-16 09:55:07 +00:00
Martin Willi fc18670524 2006-02-10 15:18:18 +00:00
Martin Willi 5b97779f66 - some fixes here and there 2006-02-09 16:25:02 +00:00
Martin Willi 384efc76d5 - dead end implementation 2006-02-06 14:05:35 +00:00
Martin Willi fb2b73daf2 - added copyright from pluto 2005-12-13 11:19:48 +00:00
Jan Hutter e9c0ca15e1 - added deletion of IKE_SA 2005-12-12 14:14:52 +00:00
Martin Willi 2ed133a80f - comment cleanups 2005-12-11 17:36:37 +00:00
Martin Willi c3903a1861 - removed prime pool 2005-12-07 15:53:34 +00:00
Martin Willi aee3eb5299 ../svn-commit.tmp 2005-12-07 07:57:18 +00:00
Jan Hutter dab28cedbd - log changed 2005-12-06 16:48:17 +00:00
Jan Hutter 3febcf15f0 - code cleaned up 2005-12-06 16:36:42 +00:00
Jan Hutter f104664836 - code cleaned up 2005-12-06 16:04:39 +00:00
Jan Hutter e314700cb5 - implemented jobs DELETE_HALF_OPEN_IKE_SA and DELETE_ESTABLISHED_IKE_SA 2005-12-06 12:27:09 +00:00
Martin Willi d381f36608 - cancelling of busy prime thread allowed 2005-12-06 11:51:40 +00:00
Martin Willi ba425b87dd - kernel interface hacks, works partially
- interface must be redefined
2005-12-05 16:09:42 +00:00
Jan Hutter f6ba78c370 - added payload CERT
- cleaned code of different states
- added additional notify handling
2005-12-05 12:21:38 +00:00
Martin Willi 3ebebc5e96 - started implementation of netlink kernel interface 2005-12-04 19:05:52 +00:00
Martin Willi 25c41f4df7 - logging cleanup
- pid re-replaced with thread_ids, since nptl does not distinguish pids between threads
2005-12-04 11:46:58 +00:00
Martin Willi 26cfe75e4d - logger added 2005-12-04 11:46:14 +00:00
Martin Willi 8ff8c33d1d - implemented RSA, only signing and verifying esma_pkcs1 padded
- removed gmp-helper: chunk_to_mpz is now done with gmp functions, prime generation in prime-pool
- added prime-pool (needs priority fix)
- proof of concept RSA authentication
- mpz uses LEAK_DETECTIVE
- configuration-manager supports rsa keys
2005-12-04 01:30:35 +00:00
Jan Hutter 94b0f906e6 fixed different bugs when checking out ike sa and retransmitting
requests
2005-12-02 15:40:04 +00:00
Jan Hutter 0df63d6be4 - retransmitting of requests implemented 2005-12-02 14:07:36 +00:00
Jan Hutter 5534ee8476 - added new job type retransmit_request_job_t
- fixed memory leaks
2005-12-02 13:20:20 +00:00
Jan Hutter ae3012a0ea - added notify message handling to ike_sa_init_requested_t and
responder_init_t
2005-12-02 11:38:56 +00:00
Jan Hutter 56aeee4936 cleaned code 2005-12-02 07:43:05 +00:00
Martin Willi 0e96f7d8c3 - globals packed in a daemon 2005-11-29 10:25:07 +00:00
Martin Willi df3c59d088 - changed allocation behavior 2005-11-29 08:08:03 +00:00
Martin Willi d048df5cab - return value cleanup 2005-11-28 20:29:47 +00:00
Martin Willi b241048084 - moved hasher_*_t to *_hasher_t
- some logging improvements
2005-11-27 14:04:16 +00:00
Martin Willi c1eb153733 - threads are new identified by pid 2005-11-26 15:44:40 +00:00
Martin Willi ca76df9736 - documentation and cleanup of threads package 2005-11-25 13:42:58 +00:00
Jan Hutter 207dd9b5c0 - added function create_and_checkout to the ike_sa_manager_t 2005-11-24 16:57:53 +00:00
Martin Willi 8277be6053 - moved algorithm definitions from payloads to corresponding transforms
- cleanup of docs in transforms
2005-11-24 16:22:04 +00:00
Martin Willi 5796aa164d - typedefs changed 2005-11-24 11:30:19 +00:00
Martin Willi face0be4c2 - 2005-11-23 13:34:45 +00:00
Martin Willi 867952ad2a - created package threads 2005-11-23 10:00:25 +00:00