denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15,803 Commits 1 Branch 0 Tags
44107cb7b75551e02afd56061534495c10b94de3
Commit Graph
15803 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi b8aeaea80c Fix use of snprintf() in pluto subjectAltName enumeration 2010-07-28 10:54:48 +02:00
Martin Willi c118559afe Fix use of snprintf() in IETF attributes to string conversion 2010-07-28 10:54:48 +02:00
Martin Willi 018543f3a8 Fix use of snprintf() in identification DN to ASCII conversion 2010-07-28 10:54:47 +02:00
Martin Willi c8bd06c7cf More NEWS for HA functionality 2010-07-28 10:49:58 +02:00
Martin Willi 98d0343870 Implemented a HA enabled in-memory address pool 2010-07-28 10:06:19 +02:00
Martin Willi 7455ab063f Added a function to segmentate a generic integer 2010-07-28 10:06:19 +02:00
Andreas Steffen ff7b0dd289 added NETMAP rules for the reverse direction 2010-07-27 21:16:44 +02:00
Andreas Steffen c100dd6b5f fixed description of ikev2/net2net-same-nets scenario 2010-07-27 20:50:28 +02:00
Martin Willi c03b64a4ac Reserving does not work, as our pools do not support acquiring arbitrary addresses 
This reverts commit d1384080b3.
 2010-07-27 12:05:39 +02:00
Martin Willi 45c992474c Mem pool does not support multiple leases for an identity 2010-07-27 09:54:27 +02:00
Martin Willi 7eeb687d59 Flush any remaining cache state if an IKE_SA goes down 2010-07-27 09:18:06 +02:00
Martin Willi 1c1f132abe Added NEWS related to HA functionality 2010-07-26 15:41:33 +02:00
Martin Willi fa4f71c819 Synchronize EAP-Identity of remote peer 2010-07-26 15:10:54 +02:00
Martin Willi d1384080b3 Reserve virtual IP of passive IKE_SAs in the local pool 2010-07-26 15:01:24 +02:00
Martin Willi 65d15aff73 Added strongswan.conf options for HA heartbeat 2010-07-26 14:30:19 +02:00
Martin Willi 08e266a119 Log CHILD_SA segment responsibility 2010-07-26 13:53:54 +02:00
Martin Willi 3e6736f67e Pass initiator parameter to distinguish between original and exchange initiator 2010-07-26 13:53:53 +02:00
Martin Willi b2e447e24a Pass the CREATE_CHILD_SA initiator flag to the child_keys parameter 2010-07-26 13:53:53 +02:00
Martin Willi aa334daa9b Use a sync message cache to resynchronize IKE_SAs without rekeying 2010-07-26 13:53:49 +02:00
Martin Willi 2031002d42 Log received HA message types 2010-07-26 11:33:00 +02:00
Martin Willi f2eebed2a3 Add enum names for HA message types 2010-07-26 11:33:00 +02:00
Martin Willi 51217527e6 Delay resynchronization request until starter has loaded the configurations 2010-07-26 11:33:00 +02:00
Martin Willi 2cbc48ecab Replaces in_segment() by a more generic get_segment() function 2010-07-26 11:33:00 +02:00
Martin Willi ad2488fcdf Use distinct message types for HA message ID updates 2010-07-26 10:15:17 +02:00
Martin Willi 00c1bd0606 Migrated ha plugin to INIT/METHOD macros 2010-07-26 10:15:17 +02:00
Andreas Steffen c74c4c2a20 added net2net-same-nets 2010-07-25 11:56:33 +02:00
Martin Willi fe2434cfd7 Added NEWS for the eap-simaka-sql plugin 2010-07-23 16:02:28 +02:00
Andreas Steffen b59340a2c3 NEWS cosmetics 2010-07-21 21:43:43 +02:00
Martin Willi e87b78c6ad Multiple RADIUS server NEWS 2010-07-21 17:27:06 +02:00
Martin Willi ce7967c50c Implemented support for multiple RADIUS servers 2010-07-21 17:25:09 +02:00
Martin Willi 58d2ef6e14 Migrated eap-radius plugin to INIT/METHOD macros 2010-07-21 17:09:27 +02:00
Martin Willi 5b6c220d13 Added log statement if peer requests EAP, but current config does not allow it 2010-07-21 17:09:15 +02:00
Andreas Steffen e93f452825 remove the private updown scripts after use 2010-07-17 23:25:15 +02:00
Andreas Steffen 15fd135564 minor fixes in the ikev2/rw-mark-in-out scenarios 2010-07-17 17:36:04 +02:00
Andreas Steffen b22bb9f21c updated NEWS 2010-07-17 17:25:01 +02:00
Andreas Steffen f5baa5c4cf some reformulations 2010-07-17 17:19:26 +02:00
Andreas Steffen d2d7ed9227 the ikev2/nat-two-rw-mark and ikev2/rw-mark-in-out scenarios use the PLUTO_MARK_IN and PLUTO_ESP_ENC variables in the mark_update script 2010-07-17 16:32:47 +02:00
Andreas Steffen 16c97c8e59 documented the new PLUTO environment variables available in the updown script 2010-07-17 13:41:40 +02:00
Andreas Steffen ae0e3b03b7 in a ESP_IN_UDP situation make UDP port available in the updown script 2010-07-17 13:27:19 +02:00
Andreas Steffen 34e93c0280 fix html error in scenario description 2010-07-17 13:09:28 +02:00
Andreas Steffen 14665981a5 make xfrm marks available in the updown scripts 2010-07-17 13:08:50 +02:00
Andreas Steffen ff090f8781 check for mark changes in ipsec update 2010-07-17 09:13:48 +02:00
Andreas Steffen cde633d632 all x509 based sql scenarios require the revocation plugin 2010-07-15 23:19:52 +02:00
Andreas Steffen c349a68b2e all x509 based pfkey scenarios require the revocation plugin 2010-07-15 23:17:37 +02:00
Andreas Steffen f5731b4579 all x509 based p2pnat scenarios require the revocation plugin 2010-07-15 23:07:12 +02:00
Andreas Steffen 295d9cc313 all x509 based ipv6/*-ikev2 scenarios require the revocation plugin 2010-07-15 23:02:17 +02:00
Andreas Steffen 84fe65bd43 all x509 based ike scenarios require the revocation plugin 2010-07-15 22:40:20 +02:00
Andreas Steffen 001787b3eb all x509 based openssl-ikev2 scenarios require the revocation plugin 2010-07-15 22:33:05 +02:00
Andreas Steffen 6c2bd2a7d8 all x509 based gcrypt-ikev2 scenarios require the revocation plugin 2010-07-15 22:03:16 +02:00
Andreas Steffen 2cf4d34f2f all x509 based ikev2 scenarios require the revocation plugin 2010-07-15 21:39:01 +02:00