denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,860 Commits 1 Branch 0 Tags
3fd9c75717ce96c5a2391d1dd3f299fe2d211969
Commit Graph
364 Commits
Author SHA1 Message Date
Andreas Steffen 3fd9c75717 ignore AUTH_LIFETIME value if reauthentication has already been scheduled earlier 2008-07-28 13:53:04 +00:00
Andreas Steffen f6facbe75c completed IKE_SA logging at the AUDIT level 2008-07-23 18:46:34 +00:00
Andreas Steffen 6410231335 IKE_SA rekeying inherits other_host from old IKE_SA 2008-07-23 07:44:26 +00:00
Andreas Steffen 0eede4a31f cosmetics 2008-07-23 06:38:24 +00:00
Andreas Steffen 51c8f8261f some more changes to IKE_SA and CHILD_SA logging 2008-07-22 17:10:10 +00:00
Andreas Steffen 32f5ee159e cosmetics 2008-07-22 12:13:48 +00:00
Andreas Steffen 66da78b4bb ipsec status lists IPCOMP CPIs 2008-07-22 12:03:58 +00:00
Andreas Steffen c3967e779e own CPI was not deleted due to copy-and-paste error 2008-07-22 10:53:56 +00:00
Andreas Steffen eba7470b76 consistent logging of SPIs and CPIs 2008-07-22 10:16:45 +00:00
Andreas Steffen fb34475b5c consistent logging of IKE and CHILD SAs 2008-07-21 12:47:59 +00:00
Martin Willi a4a3e0c7dc introduced an additional bus->signal parameter for signal specific data 
added SIG_IKE/SIG_CHD macros for signal emitting
 2008-07-18 15:51:40 +00:00
Martin Willi 5353f22ed7 fixed potential segfault in resolve_hosts 2008-07-17 11:06:31 +00:00
Martin Willi 7beea2e99f fixed acquire-delay bug by: 
installing policies before states
  updating policies if protocol has changed
 2008-07-16 11:51:37 +00:00
Martin Willi ef3f717bfe reverted [4125],[4166], reimplemented the proper way 2008-07-11 08:54:56 +00:00
Martin Willi 6b5d95919c setting ike_sa on bus in checkout_new 2008-07-11 08:47:18 +00:00
Martin Willi e7991a2eef do a route lookup to allow routing of left=%any connections 2008-07-09 14:16:19 +00:00
Martin Willi 62bd123952 peer_cfg lookup takes peer addresses into account 2008-07-01 09:05:20 +00:00
Martin Willi 866ba8e0b6 strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if CHILD_SA setup in IKE_AUTH fails 2008-07-01 07:54:09 +00:00
Martin Willi d510eaea47 sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none found 2008-07-01 06:36:52 +00:00
Andreas Steffen 125aaf1ab1 log received vendor id as a hex value 2008-06-27 17:11:54 +00:00
Martin Willi 7e8af02626 flushing task_manager on shutdown while IKE_SA is usable 2008-06-25 11:40:50 +00:00
Martin Willi e9ab669bc2 resolving hosts before route 2008-06-23 08:30:35 +00:00
Andreas Steffen bc997f6583 display selected IKE proposal in ipsec statusall 2008-06-22 11:24:33 +00:00
Andreas Steffen 7d4bb52073 make config_auth_method_t backward compatible to existing sql templates 2008-06-10 20:31:53 +00:00
Tobias Brunner ea0823dffd ECDSA with OpenSSL 2008-06-10 09:08:27 +00:00
Martin Willi 5a22a02156 DNS resolving of ike_cfg hosts dynamically on demand 2008-06-06 15:05:54 +00:00
Martin Willi 011b1cca94 do not roam IKE_SA in created or deleting state 2008-06-04 14:31:06 +00:00
Martin Willi de3d65a132 filtering out non matching path probing pairs explicitly 2008-05-23 15:43:42 +00:00
Martin Willi 85a119bc0b replying to COOKIE2 mobike notify properly 
including COOKIE2 ourself after path probing
 2008-05-21 17:56:21 +00:00
Martin Willi cb9edc54eb using fixed size keys in key derivation for AES-XCBC PRF 2008-05-21 14:58:03 +00:00
Tobias Brunner d4aad55434 IPComp for IKEv2 2008-05-08 16:19:11 +00:00
Andreas Steffen 1d5d6f9667 Hash and URL cosmetics 2008-04-18 21:27:08 +00:00
Tobias Brunner 6439267a8c support for hash and URL encoded certificate payloads in charon 2008-04-18 11:24:45 +00:00
Martin Willi 46a5604a04 splitted IKE_SA manager destroy to allow plugin interaction 2008-04-17 10:46:25 +00:00
Martin Willi 4904d26120 slightly optimized IKE_SA checkin 2008-04-16 08:43:32 +00:00
Martin Willi 2c463cdfb1 optimized half-open IKE_SA lookup (no checkout) 2008-04-16 08:34:52 +00:00
Martin Willi 6a365f0740 added API for random number generators, served through credential factory 
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
 2008-04-15 05:56:35 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi a593db5d35 ike_sa_manager enumerable, not iterable 2008-04-14 11:37:46 +00:00
Martin Willi 348af092ac added close_action as a seperate config option to dpd_action 2008-04-14 08:17:18 +00:00
Martin Willi cadb5d16e5 fixed jumping IKE_SA unique ids 2008-04-14 07:55:23 +00:00
Martin Willi 45819d7d49 fixed rightsourceip=%config scenarios 2008-04-14 07:18:16 +00:00
Andreas Steffen b1bdfa4890 fixed disabling the sending of cert requests 2008-04-13 17:31:07 +00:00
Martin Willi 96926b006d using dpd actions to enforce connection state 
dpd actions a per child-, not peer ike-sa
 2008-04-11 08:14:48 +00:00
Tobias Brunner 4a6474c2c3 enabling acquire for mediated connections 2008-04-10 12:51:04 +00:00
Tobias Brunner 78abba428f enabling reauthentication on mediation connections 2008-04-10 08:42:27 +00:00
Tobias Brunner 4a03518112 fixing a problem if the mediation server initiates the rekeying 2008-04-10 07:24:30 +00:00
Tobias Brunner 22452f70fc mediation connections should now properly rekey 2008-04-09 18:12:22 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Tobias Brunner 4a96521965 signature in connectivity checks is now built with the message id in network byte order 2008-04-08 13:45:30 +00:00