denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,160 Commits 1 Branch 0 Tags
4c401ea216b411a5c912190d71c54739515cab43
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 4c401ea216 Wrap getters for dpd/close action into CHILD_SA, allows us to override them 2010-06-02 11:48:44 +02:00
Martin Willi 80b5661a9b Added generated manpages to .gitignore 2010-05-31 13:41:25 +02:00
Martin Willi a2cf26f1c1 Changed default lifetime of certificates to 3 years 2010-05-31 13:15:19 +02:00
Martin Willi 70ac7c43a5 Support extendedKeyUsage flags in self-signed certificates 2010-05-31 13:15:05 +02:00
Martin Willi 2e08be79a3 Send empty SIM/AKA-NOTIFICATION response for non-success codes, too 2010-05-27 15:04:25 +02:00
Martin Willi ddf29f5b07 Added support for reading raw PUT/POST data from HTTP request 2010-05-27 09:30:14 +02:00
Martin Willi f00a101590 Unwrap subjectKeyIdentifier from OCTET_STRING 2010-05-26 16:09:50 +02:00
Martin Willi 24632bc0e8 Fixed compiler warning in invocation of crl_is_newer() 2010-05-21 16:41:13 +02:00
Martin Willi 09f38ebe54 Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier 2010-05-21 16:38:19 +02:00
Martin Willi 0c73ceff0a Added a --signcrl command to the pki utility 2010-05-21 16:25:51 +02:00
Martin Willi 13c593f126 Added support for CRL generation to x509 plugin 2010-05-21 16:25:51 +02:00
Martin Willi aab861608a Removed is_newer() from certificate_t, obsoleting all implementations 2010-05-21 16:25:51 +02:00
Martin Willi 8029e5efd2 Added generic implementations for crl_is_newer/certificate_is_newer 2010-05-21 16:25:51 +02:00
Martin Willi 654218a31b Migrated x509_crl_t to INIT/METHOD macros 2010-05-21 16:25:51 +02:00
Martin Willi 6d7eed9a37 Implemented X.509 CRL reading using OpenSSL 2010-05-21 16:25:51 +02:00
Martin Willi 5728c6aa7e Implemented X.509 certificate reading using OpenSSL 2010-05-21 16:25:51 +02:00
Martin Willi 9806381322 Fixed doxygen group 2010-05-20 17:37:18 +02:00
Martin Willi 40b2be16e3 Whitelist OpenSSLs ERR_put_error() in leak-detective 
As we do not invoke ERR_get/clear_error() in all error cases, the
error codes are not removed from the error queue. But it is save
to whitelist the put function, as it uses a circular buffer that
does not grow beyond ERR_NUM_ERRORS errors (16 by default).
 2010-05-20 17:37:18 +02:00
Martin Willi 2e57b21252 Added a --print command to pki that dumps different credentials 2010-05-20 17:37:18 +02:00
Martin Willi 091d178060 Option to skip slow addr2line resolution in leak-detective 2010-05-20 17:37:18 +02:00
Martin Willi ea409980b9 Handle collisions between rekey and the following delete properly 2010-05-18 12:21:38 +02:00
Martin Willi d235274486 Added simple conditional packet receive delay 2010-05-18 12:21:05 +02:00
Martin Willi 45def2147b Added simple conditional packet send delay 2010-05-18 12:20:32 +02:00
Martin Willi 42df8beeb6 Explicitly link gpg-error to gcrypt plugin 2010-05-17 12:36:30 +02:00
Martin Willi 322226c0ce Link to libgpg-error to resolve additional symbols when testing for libgcrypt 2010-05-17 11:08:13 +02:00
Martin Willi 026b0058d5 Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin 2010-05-05 13:49:56 +02:00
Martin Willi 75d4322d68 Do not check pointer, but length of a chunk 2010-05-05 11:35:54 +02:00
Martin Willi 37c2aac89d Double-check that a blob passed to is_asn1() is not empty 2010-05-05 11:35:53 +02:00
Martin Willi c60b69e4bf Do not print filename twice if plugin loading fails, dlerror() contains the filename 2010-05-05 11:16:32 +02:00
Martin Willi b019c38fa2 Implemented base32 encoding of chunks. 2010-05-05 10:41:11 +02:00
Martin Willi b0e789035c Users of PLUGINS depend on config.status, rebuilding them if plugin configuration is updated 2010-04-29 11:28:27 +02:00
Martin Willi eadbc3da2f Fixed RSA key generation with gcrypt 2010-04-29 09:51:37 +02:00
Martin Willi dd04a68f22 PEM encoder supports encoding from RSA components directly, allowing gcrypt plugin to encode in PEM 2010-04-29 09:36:45 +02:00
Martin Willi 40fb7165a9 Reintroduce to_referer(), redirect() does not work with get_referer() 2010-04-28 09:03:08 +02:00
Martin Willi 69e492f2e2 Use a 301 permanent redirect if no controller given 2010-04-28 08:30:21 +02:00
Martin Willi 1f6a707d10 Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no DH group 2010-04-21 08:41:46 +02:00
Martin Willi 4590260b2d Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten 2010-04-19 14:41:20 +02:00
Martin Willi f0212e8837 Accept DHCP replies on bootps port, as we act as a relay agent if server address configured 2010-04-19 11:18:58 +02:00
Martin Willi b34b93dbf7 Store DH generator in a chunk, hide non-public data in a private struct 2010-04-08 15:08:35 +02:00
Martin Willi 613ceca96c Migrated scepclient/openac logging hooks to new signature 2010-04-07 15:51:55 +02:00
Martin Willi 54e354f2d6 Remove to_referer() method, as it fails if no referer was given 2010-04-07 15:36:22 +02:00
Martin Willi f7c32feec0 Renamed clone function to avoid name clash with uclibc 2010-04-07 14:54:22 +02:00
Martin Willi d101a61f87 NEWS about HA plugin 2010-04-07 14:16:52 +02:00
Martin Willi 140418453a Updated HA plugin to new APIs 2010-04-07 13:55:16 +02:00
Martin Willi 647008c8a7 Updated location of traffic selector header 2010-04-07 13:55:16 +02:00
Martin Willi 29a46aacad Moved ha plugin to libcharon 2010-04-07 13:55:16 +02:00
Martin Willi 84aa96e5f5 Invoke updown hook if IKE_SA delete is enforced in deleting state 2010-04-06 12:11:28 +02:00
Martin Willi 360ef1606f Fixed handling of IKE_SAs without a virtual IP in farp plugin 2010-03-30 10:24:47 +02:00
Martin Willi 28df533393 Accept messages with a "sufficient" payload if other payloads (such as V) follow 2010-03-26 16:26:09 +01:00
Martin Willi 89bf11d204 Respect line with in Makefile.am's, other cosmetics 2010-03-25 14:54:56 +01:00
Martin Willi 6d6994c6c9 Added NEWS about the farp plugin 2010-03-25 14:47:23 +01:00
Martin Willi e40a629d4c Added libhydra include to farp plugin 2010-03-25 14:41:51 +01:00
Martin Willi f8e99e012a Implemented ARP sniffing and spoofing functionality 2010-03-25 14:39:32 +01:00
Martin Willi dc70a5bb0b Use message hook to catch virtual IP, as it is not yet set in ike_updown 2010-03-25 14:39:32 +01:00
Martin Willi 479a7b7d17 Added locking to farp listener 2010-03-25 14:39:32 +01:00
Martin Willi 660e16f5b2 Added a listener to the farp plugin that keeps track of active virtual IPs 2010-03-25 14:39:32 +01:00
Martin Willi 0d7b48a388 Added a farp plugin stop to spoof ARP requests 2010-03-25 14:39:32 +01:00
Martin Willi 2d097a0b57 Added NEWS for dhcp plugin 2010-03-25 14:39:10 +01:00
Martin Willi 0e1689e98f Migrated dhcp plugin to moved attribute manager 2010-03-25 14:33:22 +01:00
Martin Willi b262429e0b Include configuration payloads for DNS/WINS server received via DHCP 2010-03-25 14:29:10 +01:00
Martin Willi 913eb69692 Send DHCP RELEASE on virtual IP release 2010-03-25 14:29:10 +01:00
Martin Willi 045833c79d Release virtual IPs with the same identity as we acquired it 2010-03-25 14:29:10 +01:00
Martin Willi e06a6154e2 Added identity_lease option to create random or identity based DHCP leases 2010-03-25 14:28:29 +01:00
Martin Willi 4f0932ecfe Added DHCP request construction, ACK processing 2010-03-25 14:28:29 +01:00
Martin Willi 20ee54d06f Added reception of DHCP responses via PACKET socket 2010-03-25 14:28:29 +01:00
Martin Willi ddc93db612 DHCP plugin framework, send DHCP Discover upon IP request 2010-03-25 14:28:28 +01:00
Martin Willi beaa048eed Added DHCP plugin stub. 2010-03-25 14:28:28 +01:00
Martin Willi 688d106473 Added libhydra include to scepclient 2010-03-25 11:24:58 +01:00
Martin Willi 6150efa885 Added charon to .gitignore 2010-03-19 17:17:54 +01:00
Martin Willi 7c11d10eb8 Removed strayed code fragment 2010-03-19 10:25:12 +01:00
Martin Willi f0da32c58d Introduced ipsec.conf NTLM keyword for NT hashes 2010-03-17 18:51:00 +01:00
Martin Willi a7fb418edd EAP-MSCHAPv2 can use stored NT hashes in addition to plaintext passwords 2010-03-17 18:50:53 +01:00
Martin Willi 520f6b846a Added a very minimalistic SMTP client to send mails via a local Exim 2010-03-11 10:51:16 +01:00
Martin Willi 0fa7d1abb3 Do not disable the default-socket if it was enabled explicitly 2010-03-11 08:52:48 +01:00
Martin Willi 81e9e75940 Set a xy_given variable for a --enable/disable-xy option 
This additional variable allows a check if an option was
explicitly given or implicitly set using the default.
 2010-03-11 08:50:12 +01:00
Martin Willi a3920abb76 Add a getter for the HTTP referer 2010-03-10 15:09:12 +01:00
Martin Willi 40f130dab3 Implemented the PRF_KEYED_SHA1 algorithm in the openssl plugin 2010-03-08 13:16:12 +01:00
Martin Willi 33e4ee59ed Removed accidentally commited files from tree, ignore tarballs and patches 2010-03-08 09:36:46 +01:00
Martin Willi 23763c2cae scepclient still depends on libfreeswan 2010-03-05 08:52:09 +01:00
Martin Willi 3eb633e1e6 Remove the invalid cast in time() parameter, as reported by Marius Tomaschewski. 2010-03-04 08:44:23 +01:00
Martin Willi d02308502f Add braces around empty body in if statement 2010-03-03 16:53:42 +01:00
Martin Willi a5a4b6c9d1 Added charon.send/receive_delay options to simulate different RTTs 2010-03-03 15:59:29 +01:00
Martin Willi 24f058ac74 Migrated receiver_t to METHOD/INIT macros 2010-03-03 15:52:20 +01:00
Martin Willi eb1aa4c537 Migrated sender_t to METHOD/INIT macros 2010-03-03 15:46:53 +01:00
Martin Willi aa59a7f241 Check if we are not using a vendor EAP method in EAP_IDENTITY comparison. 
Bug reported by Ingo Kubbilun with a patch from Reinhard Pfau, secunet AG.
 2010-03-03 12:28:38 +01:00
Martin Willi 1abab9ec4f Use "static const", some GCCs don't like "const static" 2010-03-03 10:44:49 +01:00
Martin Willi 3e6b50ed4a NEWS about the android plugin 2010-02-26 11:57:59 +01:00
Martin Willi 00c60592f2 NEWS about the dynamic socket implementation 2010-02-26 11:52:54 +01:00
Martin Willi 5acb97cebb Link libstrongswan to the new plugins, too 2010-02-26 11:49:04 +01:00
Martin Willi f16ca9e89c Add support for dynamic ports in load tester 2010-02-26 11:44:34 +01:00
Martin Willi 347488bd67 Process ike_vendor task before ike_init, fixes support for private algs in IKE 2010-02-26 11:44:34 +01:00
Martin Willi b3b74e479b Set UDP encapsulation option on all sockets 2010-02-26 11:44:34 +01:00
Martin Willi da2303ca69 Fixed starter left-/rightikeport keyword 2010-02-26 11:44:34 +01:00
Martin Willi 9cb2360e4f Added locking to dynamic socket list 2010-02-26 11:44:34 +01:00
Martin Willi af2c43fdc7 Include ports in ike_cfg equality check 2010-02-26 11:44:34 +01:00
Martin Willi 9ed1bb4842 Added an initiator-only socket implementation which binds ports on demand 2010-02-26 11:44:34 +01:00
Martin Willi 40706b6027 Removed obsolete daemon kill 2010-02-26 11:44:34 +01:00
Martin Willi d6a27ec64e Do not kill daemon, just not use pluggable kernel interface if initialization failed 2010-02-26 11:44:33 +01:00
Martin Willi 54f818590e Pass sockets to bypass to kernel interface, allowing us to register them dynamically 2010-02-26 11:44:33 +01:00
Martin Willi 3e631491a0 Migrated kernel_klips_ipsec to METHOD/INIT macros 2010-02-26 11:44:33 +01:00