denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
18,298 Commits 1 Branch 0 Tags
4e5a2037e7b48eed1fd012bfb60ab09cc0fb235c
Commit Graph
18298 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Reto Buerki fb2aab414a Use red color in die() function 
This is the function where red color SHOULD be used.
 2013-01-17 15:22:10 +01:00
Reto Buerki b86866579a Move execute wrappers to function.sh file 2013-01-17 15:22:09 +01:00
Reto Buerki 9574bf7a5e Use log_action, log_status in build-baseimage script 2013-01-17 15:22:09 +01:00
Reto Buerki c120f25e60 Provide log_action and log_status functions 
These two functions are used to log action descriptions and the
corresponding command exit status in a consistent way.
 2013-01-17 15:22:09 +01:00
Reto Buerki 3c9df38c5e Add chroot() helper function 2013-01-17 15:22:09 +01:00
Reto Buerki 3b75c7ddc8 Use execute wrapper to disable root password 2013-01-17 15:22:09 +01:00
Reto Buerki 6022f37aec Simplify test starting and stopping logic 
Reduce the coupling of the different scripts.

make-testing  : Build the testing environment
start-testing : Start switches and guests
do-tests      : Run tests
stop-testing  : Stop switches and guests
 2013-01-17 15:22:09 +01:00
Tobias Brunner 18bce26ea6 Use key(and password-)less SSH authentication 2013-01-17 15:22:09 +01:00
Reto Buerki beff82dd98 Adjust strongSwan version handling in HTML output 2013-01-17 15:22:08 +01:00
Tobias Brunner ffe710ae71 Patch AVP parsing in EAP-TTLS module in FreeRADIUS 2013-01-17 15:22:08 +01:00
Tobias Brunner d47b751850 Add recipes for libtnc and TNC@FHH 2013-01-17 15:22:08 +01:00
Tobias Brunner 669fc9f9ec Copy and display host specific tcpdump.log files 2013-01-17 15:22:08 +01:00
Tobias Brunner b460fb1dd2 Drop SHAREDTREE in favor of mounting the compile dir 2013-01-17 15:22:08 +01:00
Tobias Brunner 633bee03fc Patch EAP-SIM module in FreeRADIUS 2013-01-17 15:22:08 +01:00
Tobias Brunner d94f6a2ff6 Don't generate do-tests 2013-01-17 15:22:08 +01:00
Reto Buerki 533177003c Adapt test configurations 
Adapt test configurations to the new Debian-based system.
 2013-01-17 15:22:07 +01:00
Martin Willi 04a9a99bc1 Create pt_tls_client with separate server address and identity 2013-01-16 16:36:57 +01:00
Martin Willi bb5037a5e5 Create pt_tls_dispatcher with separate server address and identity 2013-01-16 15:02:14 +01:00
Martin Willi 18d56a1891 Add a libpttls providing NEA PT-TLS / TNC IF-T for TLS transport layer 2013-01-16 13:53:32 +01:00
Martin Willi 435348f406 Send TLS close notify during tls_socket_t destruction 2013-01-15 17:43:05 +01:00
Martin Willi 7bbf7aa97a Send TLS close notify if application returns SUCCESS 2013-01-15 17:43:05 +01:00
Martin Willi c43e8fdec4 Block TLS read when sending data, but have to wait for the handshake data first 2013-01-15 17:43:05 +01:00
Martin Willi 9191e5e11a TNCCS plugins don't depend on EAP-TNC, but can be used by other transports, too 2013-01-15 17:43:05 +01:00
Martin Willi 7fb81886b9 Add a bio_reader_t constructor variant freeing passed data during destruction 2013-01-15 17:43:05 +01:00
Martin Willi ee90c78998 Use a more POSIXy tls_socket interface with more flexibility. 
If an unsufficient read buffer is provided, application data gets cached
for subsequent read() calls.
 2013-01-15 17:43:05 +01:00
Martin Willi 47af9848a2 Add a chunk_from_str() initializer that does not include 0-terminator 2013-01-15 17:43:05 +01:00
Martin Willi 1449e6dd55 Reseed rdrand after every 128bit sample only 2013-01-15 17:41:54 +01:00
Andreas Steffen 13b2804204 version bump to 5.0.2rc1 2013-01-15 02:41:22 +01:00
Tobias Brunner 30abe1fd19 android: Properly escape apostrophes in Ukrainian translation 2013-01-14 17:23:52 +01:00
Tobias Brunner b9cda4f3e1 android: Implement kernel_net_t.get_interface via JNI 
This is now required to properly accept/install a virtual IP address.

Fixes #275.
 2013-01-14 17:22:56 +01:00
Tobias Brunner 53ce5c4c91 android: Moved chunk_from_byte_array and byte_array_from_chunk helper functions 2013-01-14 17:19:58 +01:00
Tobias Brunner ecff0e5685 android: Set OPENSSL_NO_CMS in Android.mk as it is not set in opensslconf.h on Android 2013-01-14 17:16:18 +01:00
Tobias Brunner 66bb4f63b2 Properly send IKEv1 packets if no ike_cfg is known yet 
This applies for error notifies.
 2013-01-14 12:14:16 +01:00
Martin Willi c4a49008e8 Don't handle right=%any6 as "loose" identity, but as %any 2013-01-14 10:33:14 +01:00
Martin Willi 426f34baf9 Respect given address family when resolving "%any" 2013-01-14 10:26:12 +01:00
Tobias Brunner 37fb404833 Android.mk of libstrongswan updated 2013-01-14 09:16:33 +01:00
Tobias Brunner 21235e1ec2 Merge branch 'ikev1-fragmentation' 
This adds support for the proprietary IKEv1 fragmentation extension.

Conflicts:
	NEWS
 2013-01-12 11:58:26 +01:00
Tobias Brunner f31b418094 NEWS for fragmentation extension added 
Conflicts:
	NEWS
 2013-01-12 11:56:12 +01:00
Tobias Brunner ee6902ef7f Added an option to configure the maximum size of a fragment 2013-01-12 11:54:58 +01:00
Tobias Brunner 7ae245f685 Properly detect fragmentation capabilities 
Cisco sends 0xc0000000 so we check that part of the VID separately.
 2013-01-12 11:54:54 +01:00
Tobias Brunner 365d9a6f67 Added an option that allows to force IKEv1 fragmentation 2013-01-12 11:54:32 +01:00
Martin Willi 54a1a75b2f Don't use bio_writer_t.skip() to write length field when appending more data 
If the writer reallocates its buffer, the length pointer might not be valid
anymore, or even worse, point to an arbitrary allocation.
 2013-01-11 14:57:08 +01:00
Martin Willi 2f0441a3a6 Add rdrand NEWS 2013-01-11 10:48:57 +01:00
Martin Willi 2cd6c5115b Use raw opcodes for rdrand to build with older binutils 2013-01-11 10:45:14 +01:00
Martin Willi 19ae23452a Provide RNG_TRUE quality in rdrand by mixing reseeded outputs using AES 2013-01-11 10:45:14 +01:00
Martin Willi b9148ea232 Provide RNG_STRONG quality in rdrand by forcing PRNG reseed after every sample 2013-01-11 10:45:14 +01:00
Martin Willi 9fe24b004d Provide RNG_WEAK quality random generator in rdrand 2013-01-11 10:45:14 +01:00
Martin Willi ed8dc6f132 Add a rdrand plugin stub detecting availability of RDRAND instructions 2013-01-11 10:45:14 +01:00
Martin Willi 0e0870aef7 Add NEWS about improved Windows IKEv1 compatibility 2013-01-11 10:31:25 +01:00
Martin Willi 1954cc7720 Streamline debug output when receiving intermediate CA certificates in IKEv1 2013-01-11 10:24:23 +01:00