denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
819 Commits 1 Branch 0 Tags
50f98119ddc495ae7dddad5169c39bbd1aa3b63c
Commit Graph
120 Commits
Author SHA1 Message Date
Martin Willi 50f98119dd using same reqid if a child sa rekeys an existing one 2006-06-12 08:36:41 +00:00
Andreas Steffen fec9cb332f NULL string argument is treated as %any 2006-06-12 08:26:14 +00:00
Andreas Steffen bc35460db7 add_certificate() now returns pointer to added cert 2006-06-12 07:57:14 +00:00
Andreas Steffen c4a7413e72 cosmetics 2006-06-12 07:55:37 +00:00
Martin Willi a2a3fb3e25 workaround for peers rekeying at the same time 
loading lifetime policies from ipsec.conf
 2006-06-12 07:33:20 +00:00
Martin Willi 695723d4e8 old child_sa gets deleted after rekeying 
rekeying almost complete, but:
	IKE_SA get in an invalid state when both initiate rekeying at the same time,
 2006-06-09 15:12:43 +00:00
Andreas Steffen 2a13996de0 corrected type 2006-06-09 11:06:37 +00:00
Martin Willi b543bef50c improved kernel interface logging 2006-06-09 08:41:41 +00:00
Martin Willi 0bb32cb5f3 fixed clone/destroy behavior when not using CAs 2006-06-09 07:40:40 +00:00
Martin Willi 5c131a016b specifying keysize in bits, as it is required in IKEv2 
added generic kernel SA algorithm handling, which brings us:
        aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
 2006-06-09 07:31:30 +00:00
Andreas Steffen b7f9ca5837 added support for leftsendcert= and left|rightca= parameters 2006-06-09 05:50:41 +00:00
Andreas Steffen ac427e3677 discard cert if CA basic constraints flag is not set and warn if cert is not valide 2006-06-09 05:48:49 +00:00
Andreas Steffen a612f2dd00 added public methods is_ca() and is_valid() 2006-06-09 05:47:00 +00:00
Andreas Steffen 5407d563b7 changed ASN.1 CONTROL log output to LEVEL2 2006-06-09 05:45:37 +00:00
Andreas Steffen 996865b09e cosmetics 2006-06-09 05:44:34 +00:00
Martin Willi 180f924ba5 removed unused Makefile 2006-06-09 05:42:29 +00:00
Andreas Steffen d521714c9a stroke.h requires libstrongswan/types.h 2006-06-09 05:41:31 +00:00
Martin Willi 5238c9afef fixed compile warnings when using -Wall 
further CHILD_SA rekeying work done:
	creation of a new CHILD_SA on a expire from a kernel works
	delete of old CHILD_SA still missing
	some issues when both initiate rekeing
 2006-06-08 14:20:05 +00:00
Martin Willi 8d77eddec2 further work for rekeying: 
get liftimes from policy
  added new state
  initiation of rekeying done
proposal redone:
  removed support for AH+ESP proposals
 2006-06-07 13:26:23 +00:00
Martin Willi a401efd091 proper leak detective hook for realloc 
excluded pthread_setspecific from leak detective
 2006-06-07 13:22:38 +00:00
Martin Willi 6a030ba9ea fixed a memleak 2006-06-07 05:54:09 +00:00
Andreas Steffen fc0afb6810 created IPv6 environment 2006-06-06 05:41:21 +00:00
Martin Willi 32b6500fbf job management: 
moved job code from thread_pool to job, jobs have an "execute" method now
  added two new jobs: delete_child_sa & rekey_child_sa
kernel interface:
  listens now for ACQUIRE & EXPIRE
  supports hard and soft lifetimes
  fires jobs for delete and rekey child sa
ike sa manager:
  can checkout IKE SAs by requid of owned CHILD SAs
we have now the infrastructure to do the rekeying... :-)
 2006-05-31 14:23:15 +00:00
Martin Willi 6f2aba1322 - fixed some memleaks/freebugs 
- leak detective works almost usable now (?!)
 2006-05-31 14:13:26 +00:00
Martin Willi bd72398729 - fixed host-host tunnel traffic selection, host-host works now 2006-05-31 06:52:27 +00:00
Andreas Steffen 1df544d063 bug fixed circumventing an assertion in delete_connection when ikev1 is not set 2006-05-31 05:51:05 +00:00
Andreas Steffen 6848dac603 minimized prefixed on stroke logger output 2006-05-31 05:50:04 +00:00
Andreas Steffen 90ed2e8278 charon outputs strongSwan version 2006-05-31 05:48:32 +00:00
Martin Willi 2d6c3bce06 2006-05-30 14:56:12 +00:00
Martin Willi b93782903f - fixed event queue for events >36min 2006-05-30 13:22:46 +00:00
Martin Willi 8403b34bd9 2006-05-30 13:01:50 +00:00
Martin Willi 0773bdcf3f - included charons module tests to build & dist 2006-05-30 13:00:18 +00:00
Andreas Steffen 6d5e617f7d full support of ikev1 and ikev2 connection flags 2006-05-30 11:10:42 +00:00
Andreas Steffen 9db4f61476 cosmetics in log_status output 2006-05-30 11:07:14 +00:00
Andreas Steffen c11c43d2c3 use of streq 2006-05-30 11:03:55 +00:00
Andreas Steffen 510d54eb59 lookup of private key based on keyid of public key 2006-05-30 07:53:13 +00:00
Andreas Steffen fa896e9a21 new functions to add certificates and retrieve private and public keys 2006-05-30 07:52:25 +00:00
Andreas Steffen d793980f56 changed log level 2006-05-30 07:50:15 +00:00
Andreas Steffen e1c00b96a6 list ca certificates 2006-05-30 07:48:29 +00:00
Andreas Steffen f5a4518a74 computation of SHA-1 hash over publicKeyInfo object 2006-05-30 07:47:19 +00:00
Andreas Steffen 3b58a143a0 moved abbreviated thread_id in front of brackets 2006-05-30 07:45:06 +00:00
Andreas Steffen cdffecf3ba added has_key parameter to log_certificates() 2006-05-30 07:43:39 +00:00
Andreas Steffen c164f8c4a7 log_certificates() now shows keyid and availability of matching private key 2006-05-30 07:42:52 +00:00
Andreas Steffen 7c2e556644 indented loaded file log entry 2006-05-30 07:41:22 +00:00
Andreas Steffen 1a10669080 moved TIMETOA_BUF definition to types.h 2006-05-30 07:40:44 +00:00
Andreas Steffen 79332d28a5 moved TIMETOA_BUF definition from asn1.h 2006-05-30 07:39:44 +00:00
Andreas Steffen abf2be2281 define default CA_CERTIFICATE_DIR 2006-05-30 07:38:41 +00:00
Andreas Steffen 92d30836fd load all ca certificates 2006-05-30 07:37:48 +00:00
Martin Willi db66c624bf - fixed daemon destruction order to prevent 
crashes on termination
 2006-05-30 06:14:23 +00:00
Martin Willi 139ce7871f - fixed memleak when deleting a connection 2006-05-29 11:29:23 +00:00