denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,450 Commits 1 Branch 0 Tags
4315f5c88bdc3d878d440ffd575cfdb595aeca66
Commit Graph
102 Commits
Author SHA1 Message Date
Martin Willi 4315f5c88b fixed some rekey collision issues 
added retry with jitter when rekeying fails
 2007-03-21 16:11:14 +00:00
Martin Willi a1e5881c42 renamed keyingtries attribute 2007-03-20 08:14:18 +00:00
Martin Willi 7cec30ad8d added AES-192/256 proposals to IKE 2007-03-13 14:55:03 +00:00
Andreas Steffen db0f828413 results from the single responses is stored in the corresponding certinfo_t structs 2007-03-12 13:42:31 +00:00
Andreas Steffen 7c1b9ab784 moved credential_store.h from charon/config/credentials to libstrongswan 2007-03-09 16:50:19 +00:00
Andreas Steffen 5455cf230f fixed a certinfo_t memory leak in verify() 2007-03-09 14:59:28 +00:00
Andreas Steffen 1bcb84605f ocsp signer certificate and ocsp response signature can be verified 2007-03-08 23:29:04 +00:00
Andreas Steffen 162afac75f fixed call of add_auth_certificate() 2007-03-08 19:44:14 +00:00
Andreas Steffen 33d108de22 generalized get_ca_certificate() to get_auth_certificate(auth_flags) 2007-03-08 18:56:43 +00:00
Andreas Steffen 9f4039755d support if ocsp signing certificates 2007-03-08 16:46:50 +00:00
Martin Willi 069f01cfef removed SHA2 kernel proposals from default, the kernel doesn't support them yet 2007-03-08 15:18:51 +00:00
Martin Willi 0cde6c412b added more debugging output for policy lookup 
returning a (dummy) policy even when TS does not match, so we can properly send a TS_UNACCEPTABLE
 2007-03-08 14:40:15 +00:00
Martin Willi 9aa20fdae8 added SHA2 MAC and PRF to default proposal 2007-03-08 00:16:33 +00:00
Martin Willi 9de7540eee fixed traffic selector redundancy removal code (not completely tested) 2007-03-06 20:55:19 +00:00
Andreas Steffen 69351da14d add crl and ocsp uris to linked list after partial verification 2007-03-06 18:51:56 +00:00
Martin Willi 6e1be42744 some cleanups 
not assigning %any virtual IPs to peer anymore
 2007-03-05 22:07:36 +00:00
Martin Willi 02b3101b67 fixed double free bug 2007-03-05 22:02:14 +00:00
Andreas Steffen 81020aaefd refactored ca_info_t 2007-03-03 21:08:07 +00:00
Martin Willi 0c8aba6771 added support for 0.0.0.0/0 traffic selectors 
fixed routing to make correct 0.0.0.0/0 routes
 2007-03-01 11:42:08 +00:00
Martin Willi c60c7694d2 merged tasking branch into trunk 2007-02-28 14:04:36 +00:00
Andreas Steffen 7d119253f6 added support of OCSP accessLocations 2007-02-25 08:14:50 +00:00
Andreas Steffen b3e4211fc3 full support of ca info records 2007-02-24 23:18:31 +00:00
Andreas Steffen 182d20e94e support of ca info records 2007-02-23 15:15:31 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk 
includes a lot of other modifications
 2007-02-12 15:56:47 +00:00
Andreas Steffen 6fda18d99d %T requires time_t ptr 2007-02-08 17:59:37 +00:00
Martin Willi 7995489a6d added support for NULL encryption in ESP 2007-02-08 13:54:42 +00:00
Martin Willi 9425da1816 include NO_EXT_SEQUENCE_NUMBER in default proposal 2007-02-08 13:31:31 +00:00
Martin Willi 21f42524e0 support for transport in create_child_sa 
include TRANSPORT/TUNNEL information in statusall
 2007-01-08 06:55:50 +00:00
Martin Willi 7652be891c added support for transport mode and (experimental!) BEET mode 
support for the type=transport/tunnel parameter in charon
 2006-12-21 14:35:17 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Andreas Steffen 3b62f53fa4 fixed output of proto/port selectors 2006-11-02 07:51:53 +00:00
Andreas Steffen 1f9160614a cosmetics 2006-11-01 17:28:01 +00:00
Martin Willi db7ef62494 better split up of library files "types.h" & "definitions.h" 
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
 2006-10-31 12:27:59 +00:00
Andreas Steffen 29137c0cef preparations to include certreqs in policy decisions 2006-10-31 07:04:15 +00:00
Martin Willi 382b481795 moved typedefs to beginning of files to solve some include problems 
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
 2006-10-30 14:07:05 +00:00
Andreas Steffen a702b731cb support of certreq payload in IKE_AUTH messages 2006-10-28 20:02:26 +00:00
Andreas Steffen 6ae7d265fb added method get_ca_certificate() 2006-10-28 15:32:30 +00:00
Andreas Steffen 5db5740075 added methods get_my_ca() and get_other_ca() 2006-10-28 15:31:42 +00:00
Andreas Steffen af6d6bb954 added methods get_my_ca() and get_other_ca() 2006-10-28 15:31:29 +00:00
Martin Willi b83806d83d improved signal handling and emitting 2006-10-26 09:46:56 +00:00
Martin Willi 191a26a6a7 removed deprecated iterator methods (has_next & current) 
added iterator hook to manipulate iterator the clean way
 2006-10-24 14:20:45 +00:00
Martin Willi 55bbff11ec linked list cleanups 
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
 2006-10-24 08:46:17 +00:00
Martin Willi e706c7f10b code cleanups in printf handlers 2006-10-20 05:57:25 +00:00
Martin Willi 60356f3375 introduced new logging subsystem using bus: 
passive listeners can register on the bus
  active listeners wait for signals actively
  multiplexing allows multiple listeners to receive debug signals
  a lot more...
 2006-10-18 11:46:13 +00:00
Martin Willi 47f5027807 introduced printf() specifiers for: 
host_t (%H)
  identification_t (%D)
  chunk pointers (%B)
  memory pointer/length (%b)
added a signaling bus:
  receives event and debug messages, sends them to its listeners
  stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
 2006-09-27 14:14:44 +00:00
Andreas Steffen 2e5935815d moved auth_method to policy 2006-09-25 05:52:13 +00:00
Andreas Steffen 54c6c4711f added hostaccess support; moved auth_method to policy 2006-09-25 05:51:16 +00:00
Andreas Steffen 833a7cbc50 support of encrypted private key files 2006-09-20 05:48:27 +00:00
Martin Willi b5cac6684d added copyright notice to sha2_hasher 
included SHA2 in build process
 2006-09-19 14:54:01 +00:00
Martin Willi 462129d332 added support for 3DES encryption algorithm in IKE 2006-09-19 11:18:35 +00:00