Martin Willi
4274885855
do not access unaligned words/half-words directly
2009-05-18 13:34:09 +02:00
Martin Willi
57ae766af8
cleaned up parser code
2009-05-18 13:13:12 +02:00
Martin Willi
12806574b8
removed trailing spaces/tabs
2009-05-18 13:13:12 +02:00
Tobias Brunner
68173e1fea
typo
2009-05-18 13:04:18 +02:00
Martin Willi
24cd2ca6ee
moved very stroke specific x509 flag handling out of core library
2009-05-18 10:42:16 +02:00
Andreas Steffen
7b72af2eba
another lease identity to be single-quoted
2009-05-16 11:05:15 +02:00
Andreas Steffen
433cb51bb9
moved IKEv2 proposals and transforms to libstrongswan
2009-05-15 22:43:48 +02:00
Martin Willi
0ed6b7a7d7
If the NM gateway certificate has the CA constraint set, we use the gateway address as its identity.
...
To allow the same certificate deployment for Windows 7 and NetworkManager clients,
the NM plugin now accepts CA certificates. To prevent any certificate holder
to act as a gateway, we bind the identity to the entered gateway address. The
gateways certificate therefore must contain the IP/DNS of the gateway
as subjectAltName.
2009-05-15 16:35:14 +02:00
Martin Willi
d4b403e2f3
updated glade dialog, using tooltip instead of tooltip_text
2009-05-15 16:04:07 +02:00
Martin Willi
6b967fb762
implemented save_secrets hook to avoid crash
2009-05-15 16:04:07 +02:00
Martin Willi
a61395676f
added .gitignore files to NM applet
2009-05-15 15:33:19 +02:00
Tobias Brunner
28154e35be
documented the idea behind the current implementation of the scheduler
2009-05-15 14:43:15 +02:00
Martin Willi
832427064c
added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA
2009-05-15 11:02:56 +02:00
Martin Willi
5cb3210acf
stroke accepts "down conn1{*}/[*]" to delete all CHILD/IKE_SAs using a given config
2009-05-15 10:18:43 +02:00
Tobias Brunner
7cdb1ddf08
Mac OS X doesn't have SADB_X_AALG_AES_XCBC_MAC
2009-05-14 17:38:36 +02:00
Tobias Brunner
9f090745cf
added another possible location for the ipsec.h header file
2009-05-14 17:38:32 +02:00
Tobias Brunner
c1532e840d
fixed compiler warning
2009-05-14 17:38:27 +02:00
Tobias Brunner
9015c073de
make socket_t compatible with RFC 2292 (that got obsoleted by RFC 3542)
2009-05-14 17:16:21 +02:00
Martin Willi
c296e51c40
added eap_start option to radius plugin
...
EAP-Start sends an empty EAP message to initiate EAP conversation
before doing EAP-Identity.
2009-05-14 14:14:29 +02:00
Martin Willi
64e8ca281f
simplified SPI allocation after refactorings
2009-05-14 10:28:18 +02:00
Martin Willi
d50746febe
identation cleanups
2009-05-13 15:57:31 +02:00
Martin Willi
ad65a713e4
fixed identation
2009-05-13 14:55:35 +02:00
Tobias Brunner
75a354bb6b
fixing compilation of socket_t on systems that have neither IP_PKTINFO (Linux) nor IP_SENDSRCADDR (FreeBSD)
2009-05-12 17:40:43 +02:00
Martin Willi
0a3ca29021
fixed cleanup of traffic selector lists
2009-05-12 17:13:09 +02:00
Martin Willi
8f0ab613e5
do not destroy packet twice if message generation failed
2009-05-12 14:38:48 +02:00
Martin Willi
e1fa02bc62
properly end CERT_PRE task after detecting the final authentication round
2009-05-12 11:26:50 +02:00
Martin Willi
9dd2b42728
do not report increasing rekey times if rekeying currently active
2009-05-12 10:56:49 +02:00
Martin Willi
37974979bc
do not report a CHILD_SA rekey time if rekeying disabled
2009-05-12 10:56:48 +02:00
Andreas Steffen
20da0b5ca5
quote identities
2009-05-11 22:07:49 +02:00
Martin Willi
496064ba45
hand out a IPv4 virtual address if %any6 is requested
2009-05-11 13:33:55 +02:00
Martin Willi
30fc989c9c
fixed configuration payload type as responder
2009-05-11 13:23:15 +02:00
Martin Willi
a3d692ca87
never send a CERT payload in EAP
2009-05-11 11:37:58 +02:00
Martin Willi
5775283f8b
updated MSK calculation in MSCHAPv2, compatible with Win7/2008 RC.
2009-05-11 10:42:53 +02:00
Martin Willi
25f2d52f30
Fixed EAP authentication regression
...
Use correct nonce/init message again for EAP AUTH payload
sent from responder to initiator.
2009-05-11 10:42:52 +02:00
Martin Willi
b81917ea00
fixed memleak
2009-05-11 10:42:52 +02:00
Martin Willi
9d737ecfc5
drop acquires we already have a pending connection attempt
2009-05-08 10:04:01 +02:00
Martin Willi
c3626c2ce6
initiate trapped CHILD_SAs with same reqid
2009-05-08 10:04:00 +02:00
Martin Willi
fda97f2140
removed $Id$ from new template generated files
2009-05-08 10:04:00 +02:00
Martin Willi
56d461a1f1
listing routed connection in statusall
2009-05-08 10:04:00 +02:00
Martin Willi
17339b9a86
removed obsolete route/unroute code from ike_sa/controller
2009-05-08 10:03:59 +02:00
Martin Willi
8c99451ae1
make use of the new trap-manager
2009-05-08 10:03:58 +02:00
Martin Willi
eb8ed130af
added a trap-manager to handle routed policies outside of IKE_SAs
2009-05-08 10:03:58 +02:00
Tobias Brunner
ca39743f06
Merge branch 'master' of git.strongswan.org:~/strongswan into HEAD
2009-05-07 17:47:48 +02:00
Tobias Brunner
433c0968e4
properly initialize buffer when printing loaded plugins.
2009-05-07 17:40:19 +02:00
Martin Willi
0ce19b27a6
instanciate new tasks only if none queued
2009-05-07 15:57:34 +02:00
Martin Willi
a627e31f46
properly delete IKE_SA if IKE_SA_INIT processing failed
2009-05-07 15:53:45 +02:00
Martin Willi
be85459323
announce EAP method initiation once only
2009-05-07 11:11:56 +02:00
Martin Willi
84f1164c77
some additional .gitignore's
2009-05-07 10:33:30 +02:00
Martin Willi
a8d938ca18
fixed removal of child configs
...
purge empty peer configs
2009-05-06 12:56:21 +02:00
Martin Willi
5bbfd264ec
fixed remove_child_cfg(), use correct enumerator for remove_at
2009-05-06 11:09:57 +02:00
Martin Willi