denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,617 Commits 1 Branch 0 Tags
3f730ec1cd930dc8ceafea3465a32c6104982e26
Commit Graph
334 Commits
Author SHA1 Message Date
Martin Willi 00ccb87671 requesting the same virtual IP on reauthentication 2007-04-10 15:02:57 +00:00
Martin Willi d3e1da2378 proper notification handling 2007-04-10 15:00:51 +00:00
Martin Willi e0fe765152 restructured file layout 
new configuration structure:
  peer_cfg: configuration related to a peer (authenitcation, ...=
  ike_cfg: config to use for IKE setup (proposals)
  child_Cfg: config for CHILD_SA (proposals, traffic selectors)
  a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
 2007-04-10 06:01:03 +00:00
Martin Willi 80b7162531 improved log output for checkout_by_message() 2007-04-04 07:11:12 +00:00
Martin Willi b9e363f86f added IKE_SA_INIT retransmission detection 
fixed thread exhaustion when IKE_SA is blocked for a longer time
 2007-03-29 14:20:10 +00:00
Martin Willi 361e6df8c1 fixed task manager message id bug for cookies 2007-03-29 11:08:30 +00:00
Martin Willi a6bdc731b1 added retry limit for IKE_SA_INIT (give up after 5 cookie failures) 2007-03-29 11:07:49 +00:00
Martin Willi 4deb89485c removed send_queue, handled internally in sender_t know 
do header parsing in receiver, ready for cookie integration
 2007-03-28 13:34:02 +00:00
Martin Willi 9179ac9667 merged changes from eap-aka trunk 2007-03-28 07:32:54 +00:00
Martin Willi c00840478e fixed state and logging of IKE_SA when using EAP authentication 2007-03-27 16:11:29 +00:00
Martin Willi e23a59f635 fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progress 2007-03-27 13:32:12 +00:00
Martin Willi b34f86f545 giving up EAP-SIM authentication after 3 failed challenges 2007-03-27 06:24:17 +00:00
Martin Willi 92275b0981 added CHILD_SA compare check for rekeying collisions 2007-03-22 07:34:42 +00:00
Martin Willi 4315f5c88b fixed some rekey collision issues 
added retry with jitter when rekeying fails
 2007-03-21 16:11:14 +00:00
Martin Willi eef0859043 fixed child rekey collision 
implemented ike rekey collision
 2007-03-21 14:42:49 +00:00
Martin Willi 195ada0b4b handling of CHILD_SA rekeying collisions 2007-03-21 09:25:36 +00:00
Martin Willi 403f8fd300 fixed inproper delete of CHILD_SA 2007-03-21 07:01:14 +00:00
Martin Willi 128ca073d2 prevent from initiating to %any 2007-03-21 07:00:04 +00:00
Martin Willi 0f33e8264a fixed some exchange collisions (except IKE/CHILD rekeying) 2007-03-20 16:13:21 +00:00
Martin Willi e70d5576fa fixed statusall rekey time jitter bug (again) 2007-03-20 14:56:41 +00:00
Martin Willi 39a268b867 fixed CHILD_SA rekeying time in statusall 2007-03-20 12:29:42 +00:00
Martin Willi 37c6ebb78b fixed nat detection bug 2007-03-20 12:25:08 +00:00
Martin Willi fdb9b2bdde respecting "keyingtries" parameter on IKE_SA setup 2007-03-20 08:16:16 +00:00
Martin Willi 1edf116cfd cleanups 
fixed reset()
 2007-03-20 08:15:53 +00:00
Martin Willi 755bdcc274 adjusted loglevels 2007-03-20 08:13:54 +00:00
Martin Willi ccf96c7e43 EAP-SIM cleanups 2007-03-19 09:59:17 +00:00
Martin Willi e05a0b765a fixed CHILD_SA rekeying/delete bug on 64bit machines 
removed obsolete methods in delete_payload
 2007-03-19 08:04:37 +00:00
Martin Willi d560c849e3 added --with-sim-reader option to configure script 
some cleanups in eap_sim
 2007-03-14 15:39:45 +00:00
Martin Willi c105696d1c removed dublicated code in eap_authenticator 2007-03-14 15:25:00 +00:00
Martin Willi 1e93d77153 version number selection fix 
some cleanups
 2007-03-14 11:20:34 +00:00
Martin Willi edfabed069 cleaned up and fixed DPD handling code 2007-03-14 11:07:12 +00:00
Martin Willi b857118bd7 removed cfg-payload dns test code 2007-03-14 11:04:31 +00:00
Martin Willi b0f24449dd added EAP-SIM authentication 
client side only
  uses an external SIM reader library specified with SIM_READER_LIB
  untested
 2007-03-13 15:01:02 +00:00
Martin Willi d2940fd78c not detaching from bus when IKE_SA_INIT is retried 2007-03-13 14:55:53 +00:00
Martin Willi 3bc0b1a88d added generic EAP_IDENTITY client implementation using peers IKEv2 ID 2007-03-13 14:54:24 +00:00
Martin Willi f5fbad4a62 fixed memleaks when using EAP authentication 
fixed configuration payloads when using EAP
 2007-03-08 22:56:14 +00:00
Martin Willi 5744d3e777 fixed payload order (again) 2007-03-08 20:21:17 +00:00
Martin Willi 1216db7e8b including peers certificate when his certreq is empty 2007-03-08 20:19:24 +00:00
Martin Willi e5a7f1cd08 implemented cookies as initiator 
proper logging of notifies in IKE_SA setup
 2007-03-08 20:18:39 +00:00
Martin Willi 8b8dd69dee some cleanups 
not installing %any DNS servers
 2007-03-08 16:58:59 +00:00
Martin Willi f007a70055 allocation fixes, not complete 2007-03-08 14:41:30 +00:00
Martin Willi 2c7fe7f530 handling "No policy found" properly 2007-03-08 14:41:09 +00:00
Martin Willi 9b8b3e5f5c fixed CHILD_SA creation within existing IKE_SA 2007-03-08 12:28:10 +00:00
Martin Willi 49e8ac052d ported changes from EAP branch, renabling EAP framework 2007-03-08 00:27:43 +00:00
Martin Willi ea235d388e added more debug output 2007-03-08 00:15:15 +00:00
Andreas Steffen 4eacb268a0 added parsing level to x509_create_from_chunk() 2007-03-07 22:58:25 +00:00
Martin Willi 2540992a06 prevent from initiating multiple exchanges the same time 2007-03-06 22:17:53 +00:00
Martin Willi c676f2e2a6 fixed notify handling in IKE_AUTH 
moved nonce payload before TS in CHILD_SA setup
 2007-03-06 20:58:39 +00:00
Martin Willi f2d4ec5639 moved REKEY_SA notify to the beginning of the message 2007-03-06 20:56:58 +00:00
Martin Willi ddae0f9673 sending an SPI of 0 as responder when IKE_SA_INIT fails 2007-03-06 13:06:47 +00:00