denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,388 Commits 1 Branch 0 Tags
400df4ca7c659d2f371129d18c6dedf82840c2ea
Commit Graph
695 Commits
Author SHA1 Message Date
Martin Willi 8365f7cd81 fixed crash in crl listing 2009-08-31 10:21:38 +02:00
Martin Willi 500f515a64 moved chunk_increment() function to libstrongswan 2009-08-26 14:07:26 +02:00
Martin Willi 9c3d2b3d60 updated medsrv and test to new fingerprint/encoding API 2009-08-26 11:23:55 +02:00
Martin Willi 1cd0d7969a updated load-tester plugin to new fingerprinting API 2009-08-26 11:23:53 +02:00
Martin Willi 8eefe4617f use only KEY_ID_PUBKEY_SHA1 fingerprint charon internally 2009-08-26 11:23:53 +02:00
Martin Willi 87d2026341 updated nm plugin to new fingerprinting API 2009-08-26 11:23:53 +02:00
Martin Willi c5cd195c6c updated stroke plugin to fingerprinting API 2009-08-26 11:23:53 +02:00
Martin Willi 750bbcf9a8 added support for %prompt-ing private key passhprases in strokes "ipsec secrets" 2009-08-26 11:23:50 +02:00
Martin Willi 280469923d make use of the pem helper plugin to load credentials 2009-08-26 11:23:49 +02:00
Martin Willi 469083cc7d disable lifetimes of allocated SPIs 
The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine.
 2009-08-25 18:15:25 +02:00
Andreas Steffen 8a17c1f907 check integrity of pool code file 2009-08-17 15:46:56 +02:00
Andreas Steffen 2f5b1e0eb7 check success of library_init() 2009-08-14 22:13:51 +02:00
Tobias Brunner 3901937d14 OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t. 2009-08-14 13:30:59 +02:00
Andreas Steffen 8ddcac4c48 prepare CAMELLIA_CCM ESP encryption 2009-08-10 16:30:42 +02:00
Andreas Steffen 4b5b92bfee %llu correctly prints u_int64_t 2009-08-07 09:50:36 +02:00
Andreas Steffen 4a02deb088 printing u_int64_t caused segfault on 32-bit platforms 2009-08-07 08:47:29 +02:00
Tobias Brunner 79ff614144 Use LONG_MAX instead of a hard-coded value. 2009-08-06 18:22:01 +02:00
Tobias Brunner bfca7aa5ed FreeBSD returns the current policy use time only after specifying a hard lifetime when installing the policy. 2009-08-06 18:14:44 +02:00
Tobias Brunner c3a78360a8 Fixed a race condition when querying stats of a child_sa in different order. 2009-08-06 16:47:32 +02:00
Tobias Brunner b3f8ea8346 Reverted the interface changes introduced in 3f720dc7. 2009-08-06 13:31:54 +02:00
Martin Willi 51c037cc71 added support for ipsec.secrets "include" directive 2009-08-06 11:48:19 +02:00
Tobias Brunner 1e7b4b0028 Reversed the check for udp.h, fixes compilation on Linux. 2009-08-06 10:01:59 +02:00
Tobias Brunner 524f9ac470 FreeBSD only reports a policy's usetime if a lifetime has been specified when the policy was added (we only specify a lifetime on the SA, not on the policy). 2009-08-04 11:08:58 +02:00
Tobias Brunner 56ee8fcc96 FreeBSD and Mac OS X both set the sequence number of an SADB_X_SPDGET response to zero, we accept that for now. 2009-08-04 11:08:58 +02:00
Andreas Steffen f35f229fd6 implemented query_sa() for PFKEYv2 2009-08-02 11:46:33 +02:00
Andreas Steffen 3f720dc7c3 update usetime only if usebytes increase 2009-07-30 23:19:42 +02:00
Andreas Steffen 2ad51539f6 display transmitted bytes per SA 2009-07-30 21:33:19 +02:00
Tobias Brunner eab05274f4 Handling of unsupported policy directions (FWD) fixed. 2009-07-30 14:06:26 +02:00
Tobias Brunner e20bd8b6ea Enabling NAT-T on Mac OS X using the private SADB_X_EXT_NATT flag and sadb_sa_2 struct. 2009-07-30 14:06:26 +02:00
Tobias Brunner b2117eee20 Make accept(2) and recvfrom(2) cancellation points on Mac OS X. 2009-07-30 14:06:26 +02:00
Andreas Steffen 848133ff1c accelerate lookup in non-concatenated pools 2009-07-17 13:58:29 +02:00
Andreas Steffen 7f522b5fd8 check for an existing lease over all assigned pools first 2009-07-17 11:48:35 +02:00
Andreas Steffen 07be083b7f fixed problem with static leases over multiple pools 2009-07-16 21:53:46 +02:00
Martin Willi e0964e2e26 fixed memleak in SQL config lookup 2009-07-16 15:59:56 +02:00
Martin Willi 88957f54f2 raise an alert() if the RADIUS server is not responding 2009-07-16 15:15:39 +02:00
Martin Willi 449e90e1af updated debian package 2009-07-15 15:37:23 +02:00
Martin Willi 0a1d168752 updated Standards-Version to 3.8.2 2009-07-15 14:01:47 +02:00
Martin Willi e04c5d9371 added ${misc:Depends} dependency, fixes debhelper-but-no-misc-depends lintian warning 2009-07-15 14:00:42 +02:00
Martin Willi 426e1c3d0f added copyright information, fixes copyright-without-copyright-notice lintian warning 2009-07-15 13:59:25 +02:00
Andreas Steffen c5ebd00517 put variable definitions up front 2009-07-12 00:05:42 +02:00
Martin Willi 69b8058925 use the configured NM connection id as configuration/IKE_SA name 2009-07-10 11:01:44 +02:00
Martin Willi ce741aa649 fixed state check if establishing the CHILD_SA fails 2009-07-10 09:40:02 +02:00
Martin Willi bad99d5aff use the new updown()/rekey() hooks to track the state of NetworkManager connections 2009-07-10 09:37:27 +02:00
Martin Willi 3f67126226 added a RADIUS id_prefix option to prefix the IMSI 2009-07-09 11:19:41 +02:00
Martin Willi dca2eee92a added unit test for identification_t.matches() 2009-07-06 13:15:29 +02:00
Martin Willi 05fe0a7d25 added unit test for identification_t.equals() 2009-07-06 13:15:29 +02:00
Martin Willi d35650115b added unit test for identification_t.contains_wildcard() 2009-07-06 13:15:28 +02:00
Martin Willi 6e61122727 listen for CHILD_SA state changes only until it has been installed 2009-07-03 16:16:00 +02:00
Martin Willi 00fcc0f8f3 added -avoid-version to LDFLAGS, plugins are not versioned 2009-07-03 08:57:11 +02:00
Martin Willi 4fd40cf6b0 signal tunnel breakage to NetworkManager 2009-06-30 17:47:42 +02:00