denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,264 Commits 1 Branch 0 Tags
58464dd737b3050c1d7dd577a015945fb4f7e333
Commit Graph
450 Commits
Author SHA1 Message Date
Tobias Brunner 58464dd737 improved IKE_SA uniqueness check 2008-12-16 17:21:28 +00:00
Martin Willi 097e4b8ff9 purge certificates after IKE_AUTH response has been built 2008-12-16 15:48:36 +00:00
Martin Willi 482218f075 signal each entry condvar after enumeration, required if wait_for_entry is called 2008-12-15 09:19:04 +00:00
Martin Willi 248a1f57bb fixed possible deadlock in checkin_and_destroy 2008-12-12 10:40:45 +00:00
Martin Willi d183adbc9d avoid DNS lookup if possible 2008-12-12 10:38:53 +00:00
Martin Willi f2bd424c89 wait until all IKE_SAs are in-house before destroying them 2008-12-12 08:33:48 +00:00
Tobias Brunner 2475560c82 fixing checkout of IKE SAs with only the initiator SPI 2008-12-10 15:58:39 +00:00
Tobias Brunner 97016769fd increasing the performance of checkout_duplicate by using a hash table. 2008-12-10 13:51:21 +00:00
Martin Willi 7023d49ee1 purge auth_info when IKE_SA is established, releases cert memory 2008-12-09 14:34:15 +00:00
Martin Willi a1466a3ec2 limit number of ADDITIONAL_IPV*_ADDR notifies 2008-12-09 14:32:57 +00:00
Martin Willi 876d5c63a3 pass identity to release_address(), allows providers to do a lookup by id 2008-12-05 09:40:50 +00:00
Martin Willi d0eee69822 reset pointer for a clean destruction 2008-12-04 10:09:21 +00:00
Martin Willi 394eb35b0c some task queueing improvements: 
- do not pass CHILD_SAs to task constructor, might not
	  be valid anymore during execution (late lookup)
	- use sub-tasks to delete CHILD/IKE_SA after rekeying,
	  as we want to execute the delete before additional
	  queued tasks
 2008-12-01 18:38:28 +00:00
Martin Willi 405cc1d924 schedule rekeying when activating passive IKE_SAs 2008-11-28 16:19:19 +00:00
Martin Willi c610f42430 added a PASSIVE IKE_SA state to manage it externally 2008-11-28 10:49:14 +00:00
Martin Willi ddef455219 pass SKd to derive_ike_keys() to have a more interoperable API 2008-11-28 09:51:44 +00:00
Martin Willi d2de674b9a checkin of non-existing IKE_SAs 
removed unneeded checkin() return values
 2008-11-26 14:32:55 +00:00
Tobias Brunner ed6146ffbe performance optimization for the DOS protection. 
* half-open SAs per peer are tracked in a hash table
 * charon.dos_protection setting replaced with charon.cookie_threshold and charon.block_threshold
 * chunk_hash function added
 2008-11-25 13:16:05 +00:00
Andreas Steffen 28dd27be64 fixed crash due to missing function call parameter 2008-11-25 08:11:57 +00:00
Martin Willi f1f09810fb fixed set_message_id() on IKE_SA 
added missing bus->message() hook invocation
whitespace cleanups
 2008-11-24 13:59:30 +00:00
Martin Willi b09ca74720 set message IDs on IKE_SAs 2008-11-24 12:46:06 +00:00
Tobias Brunner ba2ecf6831 optimized ike_sa_manager for concurrent access (default behavior is still as before, needs configuration in strongswan.conf). 2008-11-20 13:30:23 +00:00
Martin Willi 3aaf7908d1 refactored and cleaned up child_sa interface 
replaced add/update calls by a install() call
	allocating SPIs always externally
	support installation of non-allocated CHILD_SAs
	some other cleanups
 2008-11-19 15:31:27 +00:00
Martin Willi 0d1a57e496 setting default port of own address to have a proper fallback if src addr lookup fails 2008-11-18 10:10:36 +00:00
Andreas Steffen 08c6ed9f14 fixed virtual IP re-installation failure in MOBIKE scenarios introduced with changeset 4662 2008-11-17 00:01:34 +00:00
Andreas Steffen 7a915d627d completed migration of MIPv6 connections 2008-11-16 21:19:58 +00:00
Martin Willi 32ec3c1a8b fallback to reauthentication if peer does not support CHILD_SA rekeying 2008-11-14 14:05:47 +00:00
Martin Willi dad8eceea3 fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SAS 2008-11-14 13:58:16 +00:00
Martin Willi 65c907cd71 reset IKE_SA on bus during child_sa destruction 2008-11-14 08:38:53 +00:00
Martin Willi ce42db0921 BEET mode might want forwarding policies 2008-11-12 16:47:19 +00:00
Martin Willi e09481fb91 removed some obsolete includes 2008-11-12 16:10:34 +00:00
Martin Willi faf9569fdb moved ike_initiator flag to IKE_SAs condition bitfield 2008-11-12 16:07:17 +00:00
Martin Willi b8cbb6451c ported some hard-to-merge cherries back to trunk :-/ 
shame, svn, shame: this was ways to complicated
	we should consider a switch to git...
 2008-11-12 15:09:24 +00:00
Martin Willi 9fa5c75f48 fixing keylength bug at the right place: 
we usually don't touch output parameters if operations fails
 2008-11-12 08:27:48 +00:00
Martin Willi 479f295049 fixed compiler warnings issued by: 
gcc 4.3
	curl.h gcc type-checking
	glibc with enabled FORTIFY_SOURCE checking
 2008-11-11 18:37:19 +00:00
Tobias Brunner f967db312d fixing mediation extension 2008-11-11 13:12:05 +00:00
Tobias Brunner 476c61fdcd some typos 2008-11-11 13:11:44 +00:00
Tobias Brunner ea625fabf9 merging kernel_klips plugin back into trunk 2008-11-11 09:22:00 +00:00
Andreas Steffen e0316183f8 deleted obsolete parameter descriptions 2008-11-11 07:11:30 +00:00
Andreas Steffen d487b4b727 preliminary support of Mobile IPv6 2008-11-11 06:37:37 +00:00
Martin Willi 3ac5a0db8c replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant 2008-11-05 11:29:56 +00:00
Martin Willi e13389a7f7 got rid of deprecated create_iterator_locked() 2008-11-05 08:32:38 +00:00
Andreas Steffen 746115a0be %any is IP family neutral 2008-11-05 05:32:43 +00:00
Andreas Steffen f41a4a4e15 corrected typo2 2008-11-05 05:27:42 +00:00
Andreas Steffen cdf69f103a replace tab by spaces 2008-11-03 06:56:22 +00:00
Andreas Steffen a066f7e6c2 corrected captions 2008-11-02 22:13:17 +00:00
Martin Willi 5dffdea1d7 added hooks for IKE and CHILD keymat 2008-10-30 12:58:54 +00:00
Martin Willi 5a76bb7f7a store plain skd, not the prf 2008-10-30 09:18:52 +00:00
Martin Willi 80853d8498 moved CHILD_SA key derivation to keymat_t 
passing key chunks to CHILD_SA, not the PRF
 2008-10-29 16:06:16 +00:00
Martin Willi a64cc8f75f do not store DH redundant in keymat 2008-10-29 13:35:06 +00:00