denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,622 Commits 1 Branch 0 Tags
53f2a7c71251844f83cb288e4837fc9890d136bc
Commit Graph
629 Commits
Author SHA1 Message Date
Martin Willi 53f2a7c712 Added a UNIX socket based control backend to whitelist plugin 2011-02-28 15:00:46 +01:00
Martin Willi 5e603aba4e Implemented a in-memory peer identity whitelist plugin 2011-02-28 15:00:46 +01:00
Tobias Brunner dcab9d39a2 Fixed a possible segfault after termination of IKE and child SAs. 
Because the thread that is actually terminating the SA and thus checking
it in again is not be the same thread that previously checked it out and
queued the termination job, the thread local SA on the bus has to be reset
manually, similar to how it is set in the job which is executing the job.
 2011-02-28 13:29:09 +01:00
Martin Willi e44ebdcfc8 Slightly change IKE_SA destruction order to inherit properly during ike_rekey task destruction 2011-02-28 10:31:36 +00:00
Tobias Brunner 35fe7f8cbd Compiler warning fixed. 2011-02-10 16:49:42 +01:00
Andreas Steffen d390b3b901 [hopefully] fixed pathlen problem on ARM platforms 2011-02-10 15:51:18 +01:00
Andreas Steffen 3cd805a115 Migrated update_sa_job_t to INIT/METHOD macros 2011-02-10 08:31:46 +01:00
Andreas Steffen 51d6a0d44a Migrated send_keepalive_job_t to INIT/METHOD macros 2011-02-10 08:28:19 +01:00
Andreas Steffen bcf071d9d5 Migrated send_dpd_job_t to INIT/METHOD macros 2011-02-10 08:25:41 +01:00
Andreas Steffen e76d12bb9e Migrated roam_job_t to INIT/METHOD macros 2011-02-10 08:22:57 +01:00
Andreas Steffen ac226a1a60 Migrated retransmit_job_t to INIT/METHOD macros 2011-02-10 08:19:47 +01:00
Andreas Steffen 84e8fa47dc Migrated rekey_ike_sa_job_t to INIT/METHOD macros 2011-02-10 08:16:23 +01:00
Andreas Steffen 44836c50ff Migrated rekey_child_sa_job_t to INIT/METHOD macros 2011-02-10 08:13:01 +01:00
Andreas Steffen 76331a6493 Migrated process_message_job_t to INIT/METHOD macros 2011-02-10 08:09:36 +01:00
Andreas Steffen 8125dcca59 Migrated migrate_job_t to INIT/METHOD macros 2011-02-10 08:06:06 +01:00
Andreas Steffen 43c4a21bd9 _ prefix not required 2011-02-10 07:59:43 +01:00
Andreas Steffen fc83263403 Migrated delete_ike_sa_job_t to INIT/METHOD macros 2011-02-10 07:56:53 +01:00
Andreas Steffen 1328423985 Migrated delete_child_sa_job_t to INIT/METHOD macros 2011-02-10 07:53:34 +01:00
Andreas Steffen be02b8a094 Migrated acquire_job_t to INIT/METHOD macros 2011-02-10 07:49:05 +01:00
Andreas Steffen f04d1c2dfe replaced ipsec up %startall command by start_action job 2011-02-09 22:27:04 +01:00
Tobias Brunner feb8ada613 maemo: Create DBUS service file with correct path to charon. 2011-02-08 15:17:36 +01:00
Martin Willi caf20266e0 Fixed tnc-imc/imv library names when building monolithic 2011-02-08 11:22:02 +01:00
Martin Willi 234955d1ea Check for libxml when building tnccs_11, use autoconf libxml CFLAGS/LIBS 2011-02-08 11:11:01 +01:00
Martin Willi 91f8ce562d tnccs_11 does not link against libtls, just uses its headers 2011-02-08 11:09:27 +01:00
Martin Willi 6ccb23e80b Whitespace cleanups in tnc code 2011-02-08 11:03:10 +01:00
Martin Willi c6c7c7001c Add a prefix to the global visible tnc names to avoid name clashes, move to tncifimv 2011-02-08 11:03:10 +01:00
Martin Willi 3683c0424f Fixed compiler warning 2011-02-08 11:03:10 +01:00
Martin Willi 3af88e4657 tnccs_11 does not link to libtnc anymore 2011-02-08 11:03:10 +01:00
Martin Willi 10a6019ec6 Implement correct signature for pb_tnc_msg->process() 2011-02-08 10:57:41 +01:00
Martin Willi 11a6f29944 Fixed doxygen groups in libcharon tnc subtree 2011-02-08 10:57:41 +01:00
Martin Willi 6cc11bccd1 Fixed various doxygen errors in tnc plugins 2011-02-08 10:57:40 +01:00
Martin Willi 0700c153e7 Fixed function parameter description 2011-02-08 10:14:56 +01:00
Martin Willi 94030a670b Report correct key size if a cipher is not supported 2011-02-07 16:39:33 +01:00
Tobias Brunner 84545f6e7c Some typos fixed. 2011-02-07 11:39:41 +01:00
Tobias Brunner 56f57e5814 maemo: Listen for IKE_SA state changes insted of CHILD_SA state changes. 
If the IKE_SA_INIT request fails, there is not yet a CHILD_SA that could
trigger state changes.
 2011-02-04 18:02:48 +01:00
Martin Willi b49d047bfc Invoke the per-round authorize() hook before purging current auth info on IKE_SA 2011-02-03 17:08:39 +01:00
Martin Willi 4536e669a8 Filter out non-matching ike_cfg in backend manager, so backends don't have to 2011-02-03 10:12:16 +01:00
Martin Willi 2b7686b5d8 Migrated ike_auth to INIT/METHOD macros, fixes missing initial_contact initialization 2011-02-02 15:13:39 +01:00
Martin Willi fe79cd4257 Accept non-encrypted INFORMATIONALs for ME connectivity checks 2011-02-01 09:47:36 +01:00
Martin Willi 1d34612f07 Do not use destroyed rng/hasher if IKE_SA has been flush()ed 2011-02-01 09:25:55 +01:00
Andreas Steffen 88e15afc8c added comment to determine_tnccs_protocol() function 2011-01-31 05:31:22 +01:00
Andreas Steffen f652995b21 implemented dynamic detection of TNCCS protocol 2011-01-31 00:59:17 +01:00
Martin Willi 5c89a00f05 Do not log potentially hundreds of cert requests for unknown CAs at level 1 2011-01-28 08:29:23 +01:00
Martin Willi 60b71def1a Use wrapped threading functions in ha plugin 2011-01-20 15:52:29 +01:00
Thomas Egerer f2e2a40550 Fix potential use after free 2011-01-19 09:59:01 +01:00
Martin Willi ff5538e5c0 Use newer Linux capability native API, if available 2011-01-17 18:18:21 +01:00
Martin Willi 983a5e88d3 Revert "Send INITIAL_CONTACT even if we have a unique policy" 
It makes sense to omit INITIAL_CONTACT if don't have a unique policy,
as a client might want to connect from different devices to the same
account.

This reverts commit 719c33b41a.
 2011-01-13 10:50:46 +01:00
Martin Willi 9bac426bf3 Fixed memory cleanup if no DHCP transaction found for an OFFER 2011-01-13 10:36:16 +01:00
Martin Willi 2082417df3 Force port update as responder when initiator switches to 4500 in IKE_AUTH 2011-01-12 14:37:15 +01:00
Martin Willi 8ba805f4db Avoid variable name overloading 2011-01-12 14:37:09 +01:00