denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,013 Commits 1 Branch 0 Tags
56ee8fcc96f1e16ae9eeac3ca5bafbb647d2b37c
Commit Graph
1348 Commits
Author SHA1 Message Date
Tobias Brunner 56ee8fcc96 FreeBSD and Mac OS X both set the sequence number of an SADB_X_SPDGET response to zero, we accept that for now. 2009-08-04 11:08:58 +02:00
Martin Willi 5cb300e795 compare IKE config when reusing an existing IKE_SA to initiate a CHILD_SA 2009-08-03 14:37:24 +02:00
Andreas Steffen f35f229fd6 implemented query_sa() for PFKEYv2 2009-08-02 11:46:33 +02:00
Andreas Steffen 47eb87d437 corrected interface definition 2009-07-31 08:57:55 +02:00
Andreas Steffen 3f720dc7c3 update usetime only if usebytes increase 2009-07-30 23:19:42 +02:00
Andreas Steffen 2ad51539f6 display transmitted bytes per SA 2009-07-30 21:33:19 +02:00
Tobias Brunner eab05274f4 Handling of unsupported policy directions (FWD) fixed. 2009-07-30 14:06:26 +02:00
Tobias Brunner e20bd8b6ea Enabling NAT-T on Mac OS X using the private SADB_X_EXT_NATT flag and sadb_sa_2 struct. 2009-07-30 14:06:26 +02:00
Tobias Brunner 789ba17024 Configure the NAT-T port via sysctl on Mac OS X to enable handling of incoming UDP encapsulated ESP packets in the kernel. 2009-07-30 14:06:26 +02:00
Tobias Brunner b2117eee20 Make accept(2) and recvfrom(2) cancellation points on Mac OS X. 2009-07-30 14:06:26 +02:00
Andreas Steffen def1777eca streamlined integrity test output some more 2009-07-18 11:23:27 +02:00
Andreas Steffen eab241fb56 stop strongswan if integrity check of libstrongswan or daemon fails 2009-07-17 20:33:19 +02:00
Andreas Steffen 6b04ba288d streamlined debug output of integrity tests 2009-07-17 17:00:17 +02:00
Andreas Steffen 848133ff1c accelerate lookup in non-concatenated pools 2009-07-17 13:58:29 +02:00
Andreas Steffen 7f522b5fd8 check for an existing lease over all assigned pools first 2009-07-17 11:48:35 +02:00
Andreas Steffen 07be083b7f fixed problem with static leases over multiple pools 2009-07-16 21:53:46 +02:00
Martin Willi e0964e2e26 fixed memleak in SQL config lookup 2009-07-16 15:59:56 +02:00
Martin Willi 88957f54f2 raise an alert() if the RADIUS server is not responding 2009-07-16 15:15:39 +02:00
Martin Willi e85b83c737 added an alert() bus hook to raise critical system errors and notifications 2009-07-16 15:15:39 +02:00
Martin Willi 449e90e1af updated debian package 2009-07-15 15:37:23 +02:00
Martin Willi 0a1d168752 updated Standards-Version to 3.8.2 2009-07-15 14:01:47 +02:00
Martin Willi e04c5d9371 added ${misc:Depends} dependency, fixes debhelper-but-no-misc-depends lintian warning 2009-07-15 14:00:42 +02:00
Martin Willi 426e1c3d0f added copyright information, fixes copyright-without-copyright-notice lintian warning 2009-07-15 13:59:25 +02:00
Andreas Steffen ecb32c75ce report installation failure of inbound and/or outbound IPsec SA, separately 2009-07-13 15:13:12 +02:00
Andreas Steffen c5ebd00517 put variable definitions up front 2009-07-12 00:05:42 +02:00
Andreas Steffen a3ee331b0c added listener.h to charon_SOURCES 2009-07-12 00:05:41 +02:00
Martin Willi 69b8058925 use the configured NM connection id as configuration/IKE_SA name 2009-07-10 11:01:44 +02:00
Martin Willi ce741aa649 fixed state check if establishing the CHILD_SA fails 2009-07-10 09:40:02 +02:00
Martin Willi bad99d5aff use the new updown()/rekey() hooks to track the state of NetworkManager connections 2009-07-10 09:37:27 +02:00
Martin Willi 977ec0c316 implemented ike_down() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi fa1d3c6629 implemented ike_up() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi f5f37cc7fa implemented child_down() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi f669f45333 implemented child_up() bus hook 2009-07-09 15:25:15 +02:00
Martin Willi 622b56a52e implemented ike_rekey()/child_rekey() bus hooks 2009-07-09 15:25:15 +02:00
Martin Willi 7527f43c76 added new listener callbacks to track SAs 2009-07-09 15:25:15 +02:00
Martin Willi a40cc76bc7 moved listener_t interface definition to a separate file 2009-07-09 15:25:14 +02:00
Martin Willi 3f67126226 added a RADIUS id_prefix option to prefix the IMSI 2009-07-09 11:19:41 +02:00
Martin Willi efb4bb248f remove obsolete child_cfg_t.equal_traffic_selectors() method 2009-07-07 14:38:55 +02:00
Martin Willi 20188fcad4 child_cfg matching code prefers a config containing the first proposed TS 2009-07-07 14:38:19 +02:00
Martin Willi dca2eee92a added unit test for identification_t.matches() 2009-07-06 13:15:29 +02:00
Martin Willi 05fe0a7d25 added unit test for identification_t.equals() 2009-07-06 13:15:29 +02:00
Martin Willi d35650115b added unit test for identification_t.contains_wildcard() 2009-07-06 13:15:28 +02:00
Martin Willi 6e61122727 listen for CHILD_SA state changes only until it has been installed 2009-07-03 16:16:00 +02:00
Martin Willi 00fcc0f8f3 added -avoid-version to LDFLAGS, plugins are not versioned 2009-07-03 08:57:11 +02:00
Martin Willi 7afd9d6672 defer MOBIKE update if we have no route to the peer 2009-07-02 10:56:13 +02:00
Martin Willi 133623871d do not abort notifying listeners if a listener unregisters 2009-07-02 09:38:12 +02:00
Martin Willi 4fd40cf6b0 signal tunnel breakage to NetworkManager 2009-06-30 17:47:42 +02:00
Martin Willi 7f9fab77f8 restarting dbus is insufficient, restart network-manager after installation 2009-06-30 17:03:53 +02:00
Martin Willi f0f420229a deinit() library if integrity check fails 2009-06-22 16:18:53 +02:00
Martin Willi 4f2c48cd3d build and verify on disk file integrity of pluto and charon executables 2009-06-22 15:47:18 +02:00