denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,238 Commits 1 Branch 0 Tags
552cc11b1f017ce4962fca741f567d098f768574
Commit Graph
116 Commits
Author SHA1 Message Date
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Andreas Steffen b0e40caafb NAT-T conditions were not inherited during IKE_SA rekeying 2008-01-29 01:41:47 +00:00
Martin Willi 3895125275 removed c++ style comments 
fixed compiler warnings
 2007-12-04 10:48:27 +00:00
Martin Willi 7805ad302d moved AUTH_LIFETIME handling in its own task (cleaner separation, proper payload order) 2007-12-03 10:52:18 +00:00
Martin Willi ee61471113 implemented RFC4478 (repeated authentication) 
changed %V printf handler to take a time delta, %#V now takes two arguments
 2007-11-20 12:06:40 +00:00
Martin Willi 91b16af0fa fixed NO_PROPOSAL_CHOSEN response on IKE_SA_INIT 2007-11-14 09:41:08 +00:00
Martin Willi 00fb758755 adding new virtual ip before deleting old one to keep IP on reauthentication 2007-10-25 07:50:23 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi d9d69536b0 improved MOBIKE roaming between interfaces 2007-09-24 12:15:25 +00:00
Andreas Steffen a2ab401c56 put IKE_SA and CHILD_SA names in single quotes 2007-09-15 16:06:58 +00:00
Andreas Steffen be682af3e8 log name of IKE_SA in state changes 2007-09-15 15:54:51 +00:00
Martin Willi 5474dc6500 implemented routeability checks for mobike (experimental) 2007-09-03 12:37:25 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option 
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
 2007-08-29 12:11:25 +00:00
Martin Willi 98f97433af rerouting CHILD_SA if its IKE_SA gets deleted 2007-08-27 09:10:12 +00:00
Martin Willi 29100db902 changed mobike behavior to NOT use additional responder addresses until we have path discovery 2007-07-04 07:26:34 +00:00
Martin Willi 3bc62fe70e improved MOBIKE: 
prefer address family already used
  do not change address implicit when mobike supported
  handle multiple simultaneous roaming requests more properly
  proper enabling/disabling of UDP encapsulation
 2007-07-03 12:32:38 +00:00
Martin Willi 3d928c9ffd fixed mobike address update from and to NAT 2007-07-02 12:55:07 +00:00
Martin Willi face844a87 proper update of IPsec SA when roaming a host-to-host tunnel 
roaming of IPsec SAs using virtual IPs
 2007-07-02 09:49:22 +00:00
Martin Willi ffbca197c1 fixed dpd=hold when using virtual IPs 2007-06-29 08:03:32 +00:00
Martin Willi c532d6460d fixed IKE_SA reestablishment after DPD using port 500 2007-06-28 15:24:24 +00:00
Martin Willi fc2d1c420f further mobike improvements, regarding to NAT-T 2007-06-27 13:10:55 +00:00
Martin Willi 2b3100b5d0 simple roaming of the client works (not MOBIKE conform yet!) 2007-06-26 13:04:13 +00:00
Martin Willi 4cb9d7a758 further fixed for mobike roaming 2007-06-25 13:26:02 +00:00
Martin Willi 17d92e9732 further MOBIKE stuff: 
kernel properly reports network reconfiguration and informs all IKE_SAs
  MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange
  reestablishment of IKE_SAs on network reconfiguration kinda works
  not stable yet!
 2007-06-21 15:25:28 +00:00
Martin Willi 3b04350ab2 added extensions management to IKE_SA 
fixed NATD payload (port) when using route lookup
 2007-06-18 10:32:01 +00:00
Martin Willi 7068410b6f source address lookup in kernel interface 
use it for NAT detection if no source address known from config
  support for %any...%any connections
 2007-06-18 07:25:58 +00:00
Martin Willi fede28be8b fixed memleak when initiating to %any 2007-06-14 08:44:19 +00:00
Martin Willi 26424f03c3 proper reauthentication: 
IKE_SA is closed completely before the new is initiated, 
  resolves some issues when a dynamic IP is requested from a pool
 2007-06-14 08:13:05 +00:00
Martin Willi 9fe1a1ca76 introduced callback_job: 
simple asynchronous method invocation
  use daemons thread pool for all threads
  proper cancellation and cleanups
  cancellation mechanism to dynamically unload multithreaded code
unified event_queue and scheduler => scheduler
unified job_queue and thread_pool => processor
removed job_type_t, not really needed
fixes here, there and everywhere
 2007-06-11 10:57:19 +00:00
Martin Willi 76042f8471 proper thread cancellation when using the charon->interfaces 2007-05-23 09:08:13 +00:00
Andreas Steffen ec3c02a303 added set_other_ca() and get_other_ca() 2007-05-17 17:55:29 +00:00
Martin Willi bcd887781a removed route_job, handled all in interface_manager 2007-05-16 08:49:10 +00:00
Martin Willi ce27ac8012 routing/unrouting through interface 2007-05-16 08:32:15 +00:00
Martin Willi 3cd3f48428 properly implemented interface_managers initiate, terminte_[ike|child] 
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
 2007-05-09 12:33:08 +00:00
Martin Willi a84fb01b96 restructuring of configuration backends 
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
  configuration backends
  control interfaces
using pluggable modules as in EAP
 2007-04-27 14:25:08 +00:00
Martin Willi f47e450be9 properly checking received IDr as initiator 2007-04-25 06:06:13 +00:00
Martin Willi 0706c39cda added support for EAP methods not establishing an MSK 2007-04-19 12:37:48 +00:00
Martin Willi db97fd8298 not using %m printf handler, as late errno interpration over bus may be problematic 2007-04-12 08:52:36 +00:00
Martin Willi a3ce4bc214 removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to go 2007-04-11 12:14:51 +00:00
Martin Willi 3b138b8422 cleaned up apidoc 
added some comments
removed configuration.[ch], as it does not make sense like it is
 2007-04-11 07:20:39 +00:00
Andreas Steffen 86b7215627 fixed bug with roadwarrior and wildcard IDs 2007-04-10 22:39:09 +00:00
Martin Willi 00ccb87671 requesting the same virtual IP on reauthentication 2007-04-10 15:02:57 +00:00
Martin Willi e0fe765152 restructured file layout 
new configuration structure:
  peer_cfg: configuration related to a peer (authenitcation, ...=
  ike_cfg: config to use for IKE setup (proposals)
  child_Cfg: config for CHILD_SA (proposals, traffic selectors)
  a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
 2007-04-10 06:01:03 +00:00
Martin Willi b9e363f86f added IKE_SA_INIT retransmission detection 
fixed thread exhaustion when IKE_SA is blocked for a longer time
 2007-03-29 14:20:10 +00:00
Martin Willi 4deb89485c removed send_queue, handled internally in sender_t know 
do header parsing in receiver, ready for cookie integration
 2007-03-28 13:34:02 +00:00
Martin Willi e23a59f635 fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progress 2007-03-27 13:32:12 +00:00
Martin Willi 128ca073d2 prevent from initiating to %any 2007-03-21 07:00:04 +00:00
Martin Willi 0f33e8264a fixed some exchange collisions (except IKE/CHILD rekeying) 2007-03-20 16:13:21 +00:00