denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,503 Commits 1 Branch 0 Tags
44e8eea17aeae8268ce695aa3674cbaa50f01a29
Commit Graph
1496 Commits
Author SHA1 Message Date
Andreas Steffen 16c6114ee7 this debug statement has only two arguments 2009-02-11 16:41:37 +00:00
Andreas Steffen a584a231b1 fixed a 64-bit issue with time_t printf hooks 2009-02-11 16:37:16 +00:00
Martin Willi b81d8cd3cc changed [4856] to dynamically choose traffic selector family 2009-02-11 13:09:52 +00:00
Martin Willi 8837080353 respect family when assigning pool addresses 2009-02-11 12:50:04 +00:00
Martin Willi 95f1735f87 send proper AUTHENTICATION_FAILED if EAP method is successful, but AUTH mismatches 2009-02-10 17:21:44 +00:00
Martin Willi 04a7a1c309 free unneeded retransmission packet when exchange completes 2009-02-09 10:45:51 +00:00
Andreas Steffen c59825fbfc support of dynamic/128 and %any6 2009-02-05 22:13:48 +00:00
Andreas Steffen 49971c4ce5 disable MOBIKE in load-tester 2009-02-05 10:10:20 +00:00
Andreas Steffen eeb1e2259d output pool name string rather than pool pointer 2009-01-28 00:37:11 +00:00
Andreas Steffen 7d13e08dc4 added two Microsoft proprietary configuration attribute types 2009-01-20 22:55:13 +00:00
Andreas Steffen c369a5999b added notify message types used by RFC 4739 2009-01-19 12:32:42 +00:00
Andreas Steffen b59f154b09 proper initialization and disposal of keying material 2009-01-15 01:52:44 +00:00
Andreas Steffen 6f17bf83d5 fixed ESP NULL encryption 2009-01-15 00:34:42 +00:00
Andreas Steffen 67701cfdce fixed broken listing of connections in ipsec statusall 2009-01-14 08:10:16 +00:00
Andreas Steffen 5a45a5d0bc disable DPD and sending of cert requests in load-tester 2009-01-14 00:13:21 +00:00
Andreas Steffen 37fbc74121 hiding XFRM message names from netlink 2009-01-09 09:37:13 +00:00
Andreas Steffen 40d9388037 renamed chunk 2009-01-09 08:51:41 +00:00
Andreas Steffen 88db1fa3b4 refactored DBG3 output of sent XFRM messages 2009-01-09 08:46:31 +00:00
Andreas Steffen abc177e035 DBG3 output of sent XFRM messages 2009-01-09 08:27:17 +00:00
Andreas Steffen 01a8b40b99 fixed two bugs introduced by the stroke ip pool refactoring 2009-01-08 21:34:44 +00:00
Martin Willi d34030a810 increase nonce size to 32 bytes, required when using SHA384/512 PRFs 2008-12-31 08:58:49 +00:00
Martin Willi 12d4186f5c fixed a potential memory leak when reusing mobike task 2008-12-19 14:34:40 +00:00
Martin Willi f6035833fa RNG tests based on FIPS 140-1 2008-12-18 16:24:22 +00:00
Martin Willi 9bcc9bb60e updated documentation 
some minor cleanups
calloc does not need an additional memset(0)
 2008-12-17 09:00:22 +00:00
Tobias Brunner 58464dd737 improved IKE_SA uniqueness check 2008-12-16 17:21:28 +00:00
Martin Willi 097e4b8ff9 purge certificates after IKE_AUTH response has been built 2008-12-16 15:48:36 +00:00
Martin Willi 764e8b2211 reimplemented certificate cache: 
fixes unsafe certificate caching
	use fixed array instead of a list
	fine grained per-slot locking
	use cache hits for housekeeping
 2008-12-15 15:41:48 +00:00
Martin Willi 482218f075 signal each entry condvar after enumeration, required if wait_for_entry is called 2008-12-15 09:19:04 +00:00
Martin Willi 50901d2550 do not respawn cancelled threads if we are shutting down 2008-12-12 15:57:12 +00:00
Martin Willi 248a1f57bb fixed possible deadlock in checkin_and_destroy 2008-12-12 10:40:45 +00:00
Martin Willi d183adbc9d avoid DNS lookup if possible 2008-12-12 10:38:53 +00:00
Martin Willi 3993b91334 execute events if difference is 0, prevents a busywait 2008-12-12 09:16:31 +00:00
Martin Willi 8006835ec1 load tester got a "shutdown_when_complete" option, allows performance test using "time" 2008-12-12 09:14:37 +00:00
Martin Willi 30841a0305 daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill 2008-12-12 09:13:06 +00:00
Martin Willi f2bd424c89 wait until all IKE_SAs are in-house before destroying them 2008-12-12 08:33:48 +00:00
Tobias Brunner f55a7a76dd address extensions refactored 2008-12-11 13:39:30 +00:00
Tobias Brunner 2475560c82 fixing checkout of IKE SAs with only the initiator SPI 2008-12-10 15:58:39 +00:00
Tobias Brunner 97016769fd increasing the performance of checkout_duplicate by using a hash table. 2008-12-10 13:51:21 +00:00
Tobias Brunner 0dbd9788e5 initial size of 1 is nonsense 2008-12-10 13:45:05 +00:00
Martin Willi 6b83549d1a list assigned leases using "ipsec leases" 2008-12-10 13:00:02 +00:00
Martin Willi ed2bcd0315 added IKE_SA established timer to "ipsec statusall" 2008-12-10 09:59:35 +00:00
Martin Willi 6144daba9d fixed load-tester shared key lookup 2008-12-09 14:45:56 +00:00
Martin Willi 7023d49ee1 purge auth_info when IKE_SA is established, releases cert memory 2008-12-09 14:34:15 +00:00
Martin Willi a1466a3ec2 limit number of ADDITIONAL_IPV*_ADDR notifies 2008-12-09 14:32:57 +00:00
Martin Willi 2e03196551 list pools and usage in ipsec statusall 2008-12-09 13:24:12 +00:00
Martin Willi adf9965272 extended stroke in-memory pool to use hash-tables 
supports online/offline leases
	properly reassign addresses to identities
 2008-12-09 13:23:42 +00:00
Martin Willi 15ed045c87 require explicit enabling of load-testing plugin 2008-12-09 09:11:37 +00:00
Martin Willi 5bdc8fc794 generating different initiator identities, configs and certificates on the fly 2008-12-08 19:18:28 +00:00
Martin Willi df68b54f4e basic x509 certificate generation 2008-12-08 15:29:36 +00:00
Martin Willi 19e0010f51 hashtable enumerator enumerates over both, key and values 2008-12-05 10:01:52 +00:00