denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,100 Commits 1 Branch 0 Tags
5a1979deb9b961322df6745d33f49ae2321aaf5f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 00fb758755 adding new virtual ip before deleting old one to keep IP on reauthentication 2007-10-25 07:50:23 +00:00
Martin Willi bd99d1852a added vsignal todo 2007-10-25 07:49:32 +00:00
Martin Willi 0e0e7d5b71 request_t.redirect takes variable argument list 
request_t.serve to serve non-template data
fixed dispatcher thread locking code
 2007-10-19 19:40:53 +00:00
Martin Willi 04685885f5 added addr2strongline script which helps to resolve leaking symbols in libstrongswan 2007-10-11 13:40:52 +00:00
Martin Willi 39a8e5a580 fixed some typos 2007-10-05 09:52:23 +00:00
Martin Willi 1169ab4ec7 removed recursive mutex and __USE_UNIX98, should fix uClibc build 2007-10-05 09:47:55 +00:00
Martin Willi 6705052c2d fixed bad cast which resulted in a crash on "ipsec update" 2007-10-05 09:13:03 +00:00
Martin Willi 493f377b41 fixed memory leak 2007-10-04 15:20:00 +00:00
Martin Willi c96aefe268 implemented an optional DH public value test 
some other cleanups, using RFC2631 variable names
 2007-10-04 15:19:24 +00:00
Martin Willi 40f10fd88e cleanups, fixes and simplification of diffie hellman code 2007-10-04 12:08:11 +00:00
Martin Willi a7e65d5262 implemented enumerator for linked_list 2007-10-04 08:40:20 +00:00
Martin Willi d62a4526fd moved enumerator from libappserv to libstrongswan 2007-10-04 08:21:53 +00:00
Martin Willi b9bc74979e fixed sqlite_backend compilation to respect changes from [3238] 2007-10-04 08:18:42 +00:00
Martin Willi 99670c3714 proper cleanup on error 2007-10-03 15:07:46 +00:00
Martin Willi 6a8e7381d0 more libstrongswan-like error handling in optionsfrom 2007-10-03 15:02:29 +00:00
Martin Willi 2970674faf reverted changeset [3215], as we need NULL callback to do asynchronous calls 
added interface_manager_cb_empty function, which calls synchronous but doesn't do anything
 2007-10-03 08:10:03 +00:00
Martin Willi a6f31da40a added missing enumerator implementation 2007-10-03 05:29:49 +00:00
Martin Willi 06d00e4f7b fixed "ipsec statusall" SPI formatting 2007-10-02 13:11:23 +00:00
Martin Willi e4c9b92171 fixed sqlite database path 2007-10-02 11:55:19 +00:00
Martin Willi 6e19327473 updated NEWS for 4.1.7 2007-10-02 11:36:54 +00:00
Martin Willi 754f90165f added thread initialization/deinitialization hooks 
moved empty_enumerator to a public implementation
 2007-10-02 11:23:14 +00:00
Martin Willi 06011f6882 remove control sockets on startup, as we don't have privileges on shutdown 2007-10-02 11:20:07 +00:00
Martin Willi a3f100fa09 improved debugging code for traffic selector processing 2007-10-02 07:39:56 +00:00
Martin Willi f9b8417a7c renamed force_encap to forceencaps (as it is named in openswan) 2007-10-02 06:57:58 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 011fb1b97e removed accidentally checked in debugging code 2007-10-01 12:25:26 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi 92232dab33 fixed stuid()/setgid() and error handling 2007-10-01 09:07:10 +00:00
Martin Willi 9f3c55cdc4 fixed updown script privilige inheritance for pluto, too 2007-09-28 09:42:55 +00:00
Martin Willi f215e91999 implemented more aggressive MOBIKE path probing 
do not queue more than one MOBIKE task
 2007-09-28 08:22:37 +00:00
Martin Willi 052d58feaf fixed CHILD_SA SPI byte order in XML interface 2007-09-28 07:05:15 +00:00
Martin Willi 055d016b49 changed inheritable capability set to the permitted one to execute firewall script with CAP_NET_ADMIN 2007-09-28 07:04:09 +00:00
Martin Willi 780050cbc3 implemented proper argument parsing code 2007-09-28 06:43:59 +00:00
Martin Willi a57ab4d690 removed colons from session cookie 2007-09-27 13:10:10 +00:00
Martin Willi 85c6fc0283 reduced debbugging level 2007-09-27 13:09:50 +00:00
Martin Willi 983d7cd292 made add_ip()/del_ip() calls synchron (waiting until kernel event received) 
this should fix MOBIKE route migration with virtual IPs
 2007-09-27 12:48:00 +00:00
Martin Willi 93720075df implemented SHA1 encrypted passwords for manager 2007-09-27 07:15:47 +00:00
Martin Willi 324abae2ef added vsyslog to leak detectives white list 
removed debugging hook on openac cleanup
 2007-09-27 06:40:50 +00:00
Martin Willi 87d0427def updated TODO 2007-09-26 15:08:34 +00:00
Martin Willi 8207e3ea4d fixed argument processing bug 2007-09-26 15:07:34 +00:00
Martin Willi c295d0eb4b refactored strongswan manager 
removed buggy request parsing code, use ClearSilvers CGI kit instead
fixed CHILD_SA listing in manager (needs better design)
using secure XML communication through unix sockets
removed images with questionable (non-GPL) license
 2007-09-26 14:02:21 +00:00
Martin Willi d9d69536b0 improved MOBIKE roaming between interfaces 2007-09-24 12:15:25 +00:00
Martin Willi 740153e6f7 fixed typo / include 2007-09-18 13:30:01 +00:00
Martin Willi 8f561d4409 prototype implemementation of an sqlite configuration backend 2007-09-18 07:12:21 +00:00
Martin Willi c93a608747 removed unneded template logout.cs, fixes #10 2007-09-18 05:37:31 +00:00
Martin Willi bd2e6c0347 added connection name to IKE_SA title 2007-09-14 14:18:09 +00:00
Martin Willi d919f2f8db added missing distribution/install files 2007-09-14 14:17:43 +00:00
Martin Willi c01f7bf989 added subnets of CHILD_SAs to xml interface 
a first design of Managers IKE_SA list page
 2007-09-14 14:07:30 +00:00
Martin Willi 660426ff48 added DATA files to EXTRA_DIST 2007-09-13 08:32:14 +00:00
Martin Willi 6baca3b2f1 fixed 64bit issue with file descriptor 2007-09-13 08:19:15 +00:00
Martin Willi 367f9f01f7 added debugging helper script for manager 2007-09-13 08:15:24 +00:00
Martin Willi acc4aa8637 fixed scenario loading 2007-09-13 08:10:36 +00:00
Martin Willi d8c15900ad added missing enumerator.h to distribution 2007-09-13 08:06:17 +00:00
Martin Willi 068ba02775 replaced a confusing template with an ugly one (ikesalist) 2007-09-13 07:59:51 +00:00
Martin Willi b8c7453a82 manager can query and list IKE_SA status (no layout yet) 2007-09-13 07:45:04 +00:00
Martin Willi dd52993068 only switch to port 4500 if we are on 500: fixed reauthentication in NAT 
scenarios
 2007-09-12 11:11:10 +00:00
Martin Willi a8827c9b63 moving virtual IP when interface changes due mobike 2007-09-12 07:36:45 +00:00
Martin Willi 12fa4387c6 fixed NAT detection with mobike 2007-09-12 07:14:05 +00:00
Martin Willi 39cc6d1ad7 fixed shutdown order to prevent crash when kernel interface schedules events 2007-09-12 07:12:25 +00:00
Martin Willi f25156dfc3 fixed warnings and memory leak 2007-09-12 07:11:41 +00:00
Martin Willi 965e99b5bf first revision of new manager webapp 2007-09-11 15:22:02 +00:00
Martin Willi 5474dc6500 implemented routeability checks for mobike (experimental) 2007-09-03 12:37:25 +00:00
Martin Willi 354242c55a added RADIUS, RADIUS-EAP and EAP-MD5 (CHAP) RFCs 2007-08-30 12:52:44 +00:00
Martin Willi 857ceac9d9 proper initialization of rsa private key 2007-08-30 12:47:38 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option 
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
 2007-08-29 12:11:25 +00:00
Martin Willi dc5a849bf0 signers implemented with HMAC now support NULL output parameters 
to feed signer with more than one block of data.
 2007-08-29 07:52:49 +00:00
Martin Willi 69e56d9dec simple console support through pts devices 2007-08-28 07:53:46 +00:00
Martin Willi 0739cca9d1 default routing table/prio: 220/220 (as 19530 was invalid) 
added configure option --with-routing-table-prio=
 2007-08-27 14:53:42 +00:00
Martin Willi ad9613226b using default routing table 19530 for ipsec routes 2007-08-27 11:30:21 +00:00
Martin Willi 4e411c8361 added --with-routing-table= configure option 2007-08-27 11:15:35 +00:00
Martin Willi 98f97433af rerouting CHILD_SA if its IKE_SA gets deleted 2007-08-27 09:10:12 +00:00
Martin Willi 7acfe286fd fixed build without --enable-uml 2007-08-10 09:14:20 +00:00
Martin Willi 4614d589c0 fixed build without --enable-uml 2007-08-10 08:58:37 +00:00
Martin Willi f8ced47f5c reread notify socket when interrupted (EINTR) through sigchild 2007-08-10 06:01:03 +00:00
Martin Willi 567019c8d5 fixed libstrongswan linking for libdumm 2007-08-09 12:50:01 +00:00
Martin Willi 939e93787e made linked lists invoke() method consistent to clone_*() and destroy_*() methods 2007-08-09 12:43:11 +00:00
Martin Willi 10c6cc0a36 removed Makefile from svn 
support for scenario switching
 2007-08-09 07:14:56 +00:00
Martin Willi fd4ded974d build UML stuff only on --enable-uml 2007-08-08 14:24:25 +00:00
Martin Willi f2d6355eaa added UML modeler to autotools 2007-08-08 14:03:55 +00:00
Martin Willi 7b7201bee6 usable without scenarios 2007-08-08 12:35:24 +00:00
Martin Willi 8f5b363c30 updated NEWS for 4.1.5 2007-08-07 06:48:48 +00:00
Martin Willi 3b574567ea fixed segfault when sourceip in stroke message is NULL 2007-08-06 12:35:28 +00:00
Martin Willi 64a552ae2d cowfs is bootable now! 2007-08-06 11:42:32 +00:00
Martin Willi 9ec19f13f7 allow starter to initiate connections simultaneously (on auto=start) 2007-08-06 07:41:19 +00:00
Martin Willi 5ce04046f7 proper shutdown 
moved signal handler for SIGCHD and SIGHUP to dumm
 2007-08-03 11:47:20 +00:00
Martin Willi 404d3ba58e working cowfs prototype 2007-08-03 09:33:43 +00:00
Martin Willi f8afabcac3 started own cowfs implementation 2007-07-31 15:23:23 +00:00
Martin Willi 725e263ff3 bridging using libbridge 
rewrite of guest, does not change cwd anymore
loading of created scenarios
 2007-07-30 13:20:35 +00:00
Martin Willi 99652427e9 properly shutdown of clients 2007-07-27 10:17:50 +00:00
Martin Willi 539a55a441 support for killing guests properly 2007-07-27 07:37:15 +00:00
Martin Willi 5b608fd7ca implemented mconsole notification to check if guest came up 
slightly modified menu commands
 2007-07-26 13:21:06 +00:00
Martin Willi 369a17c218 fixed tap device setup (requires open/close for each call) 
using more meaningful names for tap devices
 2007-07-26 07:39:49 +00:00
Martin Willi 53b0f3c3b3 fixed mconsole when using multiple guests 
fixed interface enumeration bug
 2007-07-25 14:05:06 +00:00
Martin Willi f85fdda835 added dynamic interface manipulation for guests 
management of tap devices on the host
 2007-07-25 13:23:45 +00:00
Martin Willi 5c7da9d402 checked in first draft of "Dynamic Uml Mesh Modeler" 2007-07-24 14:22:56 +00:00
Martin Willi ac1557af51 updated XML interface to new schema 2007-07-19 10:57:33 +00:00
Martin Willi c87395908a not touching IKE_SA_INIT from ike_mobike_t anymore 2007-07-19 08:08:22 +00:00
Martin Willi 0308865282 fixed compiler warning 2007-07-16 07:10:14 +00:00
Martin Willi cc68e173fe fixed payload order (Nonce, KE) for IKE_SA_INIT 2007-07-16 07:01:49 +00:00
Martin Willi e5e868e430 doing route lookup in userspace to ignore routes installed by us 2007-07-11 12:37:24 +00:00