denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,813 Commits 1 Branch 0 Tags
5c7da9d402a71992a5dc47c5ab25fd6f1479f5a7
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 5c7da9d402 checked in first draft of "Dynamic Uml Mesh Modeler" 2007-07-24 14:22:56 +00:00
Martin Willi ac1557af51 updated XML interface to new schema 2007-07-19 10:57:33 +00:00
Martin Willi c87395908a not touching IKE_SA_INIT from ike_mobike_t anymore 2007-07-19 08:08:22 +00:00
Martin Willi 0308865282 fixed compiler warning 2007-07-16 07:10:14 +00:00
Martin Willi cc68e173fe fixed payload order (Nonce, KE) for IKE_SA_INIT 2007-07-16 07:01:49 +00:00
Martin Willi e5e868e430 doing route lookup in userspace to ignore routes installed by us 2007-07-11 12:37:24 +00:00
Martin Willi 9ba1d73890 using own routing table for installed routes (table 100, prio 100) 2007-07-11 06:55:11 +00:00
Martin Willi 19ff7d2207 added first draft of SMP relax-ng schema 2007-07-06 13:44:43 +00:00
Martin Willi fa1bd44f23 ignoring unkown crl/ocsp uris 2007-07-04 12:00:33 +00:00
Martin Willi 1b8da84913 using correct nexthop for inserted route 2007-07-04 09:10:13 +00:00
Martin Willi 29100db902 changed mobike behavior to NOT use additional responder addresses until we have path discovery 2007-07-04 07:26:34 +00:00
Martin Willi 419201c15d fixed responder initiated CHILD_SA rekeying when using virtual IPs 2007-07-04 06:27:33 +00:00
Martin Willi 7b8bae9941 fixed firewall script invocation when interface is not available anymore 2007-07-03 13:49:29 +00:00
Martin Willi 3bc62fe70e improved MOBIKE: 
prefer address family already used
  do not change address implicit when mobike supported
  handle multiple simultaneous roaming requests more properly
  proper enabling/disabling of UDP encapsulation
 2007-07-03 12:32:38 +00:00
Martin Willi 4979e85871 added message ID to message log 2007-07-03 09:00:16 +00:00
Martin Willi cba7ba7f9d show kind of notify contained in messages in log 2007-07-03 08:50:14 +00:00
Martin Willi e3606f2ba1 updated documentation files 2007-07-02 12:55:43 +00:00
Martin Willi 3d928c9ffd fixed mobike address update from and to NAT 2007-07-02 12:55:07 +00:00
Martin Willi face844a87 proper update of IPsec SA when roaming a host-to-host tunnel 
roaming of IPsec SAs using virtual IPs
 2007-07-02 09:49:22 +00:00
Martin Willi 530dd57c6a fixed memleak 2007-07-02 08:33:15 +00:00
Martin Willi 0d30da5dfd updated charons architecture description 2007-06-29 09:21:28 +00:00
Martin Willi ffbca197c1 fixed dpd=hold when using virtual IPs 2007-06-29 08:03:32 +00:00
Martin Willi 8ba7d34253 removed accidently checked in debbuging code 2007-06-29 07:40:04 +00:00
Martin Willi c532d6460d fixed IKE_SA reestablishment after DPD using port 500 2007-06-28 15:24:24 +00:00
Martin Willi fc2d1c420f further mobike improvements, regarding to NAT-T 2007-06-27 13:10:55 +00:00
Martin Willi 2b3100b5d0 simple roaming of the client works (not MOBIKE conform yet!) 2007-06-26 13:04:13 +00:00
Martin Willi 4cb9d7a758 further fixed for mobike roaming 2007-06-25 13:26:02 +00:00
Martin Willi 17d92e9732 further MOBIKE stuff: 
kernel properly reports network reconfiguration and informs all IKE_SAs
  MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange
  reestablishment of IKE_SAs on network reconfiguration kinda works
  not stable yet!
 2007-06-21 15:25:28 +00:00
Martin Willi c25ef47702 added MOBIKE rfc 2007-06-20 10:12:11 +00:00
Martin Willi cbbb71c4ac don't modify des/3des input key anymore 2007-06-19 07:56:28 +00:00
Martin Willi 6835280041 fixed virtua IP: adding virtual IP to interface address list cache directly 
corrected debug targets
 2007-06-19 06:20:33 +00:00
Martin Willi 3b04350ab2 added extensions management to IKE_SA 
fixed NATD payload (port) when using route lookup
 2007-06-18 10:32:01 +00:00
Martin Willi 7068410b6f source address lookup in kernel interface 
use it for NAT detection if no source address known from config
  support for %any...%any connections
 2007-06-18 07:25:58 +00:00
Martin Willi 209c2e9049 support for left=%any change our address dynamically 2007-06-18 05:57:59 +00:00
Martin Willi ca68a75eaf increased receive buffer to handle more interfaces 2007-06-18 05:56:18 +00:00
Martin Willi 08a8f4496f implemented more flexible iterator hook API 
kernel interface handles interface changes and updates address list
 2007-06-15 13:23:18 +00:00
Martin Willi 02b3ec0a10 implemented address change notification (for MOBIKE) 
implemented up to date address list cache to list interfaces
 2007-06-14 15:16:15 +00:00
Martin Willi fede28be8b fixed memleak when initiating to %any 2007-06-14 08:44:19 +00:00
Martin Willi 04f4e82d53 added missing files to the last commit 2007-06-14 08:17:23 +00:00
Martin Willi 26424f03c3 proper reauthentication: 
IKE_SA is closed completely before the new is initiated, 
  resolves some issues when a dynamic IP is requested from a pool
 2007-06-14 08:13:05 +00:00
Martin Willi eda454a261 case insensitive identification_t.equals() for FQDN and RFC822ADDR 2007-06-14 07:02:01 +00:00
Martin Willi 424e0c467e ported interfaces to new threading functions (incomplete) 2007-06-11 14:24:32 +00:00
Martin Willi 5e564f2bff added setsid() to properly detach from console 2007-06-11 12:21:12 +00:00
Martin Willi 432b298e40 documentation fixes and updates 2007-06-11 12:11:41 +00:00
Martin Willi 9fe1a1ca76 introduced callback_job: 
simple asynchronous method invocation
  use daemons thread pool for all threads
  proper cancellation and cleanups
  cancellation mechanism to dynamically unload multithreaded code
unified event_queue and scheduler => scheduler
unified job_queue and thread_pool => processor
removed job_type_t, not really needed
fixes here, there and everywhere
 2007-06-11 10:57:19 +00:00
Martin Willi 9cc7a29786 disabling leak detective at runtime by setting LEAK_DETECTIVE_DISABLE env var 2007-06-08 07:21:03 +00:00
Martin Willi 8e481be97a included patch from Rene Mayrhofer to respect DESTDIR in make install 2007-06-06 05:55:18 +00:00
Martin Willi 998ca0ea9c updated NEWS for 4.1.3 2007-05-25 11:06:03 +00:00
Martin Willi 532137e70f fixed man page 2007-05-25 07:19:49 +00:00
Martin Willi 8e79d8d3de updated man-page for left/rightsourceip 2007-05-25 07:15:18 +00:00
Martin Willi 1f2a0f8098 removed paranoid module checking 2007-05-25 05:45:41 +00:00
Martin Willi 1fa9bdc4fb added compatibility names (pluto) for sha2 algorithms (sha2_256, ...) 2007-05-25 05:44:53 +00:00
Martin Willi 76042f8471 proper thread cancellation when using the charon->interfaces 2007-05-23 09:08:13 +00:00
Martin Willi 0f6b068259 fixed crash when using 0.0.0.0/0 subnets 2007-05-23 06:33:22 +00:00
Martin Willi b1450b48a0 removed misleading warning when rekeying 2007-05-23 06:32:41 +00:00
Martin Willi 16878f6823 support for virtual IP definition on client side: 
if leftsourceip is defined, it is requested.
  server may define rightsourceip=%config to accept any,
  or it may overwrite it using rightsourceip.
  if server does not return an IP, client enforces its configured leftsourceip.
 2007-05-22 13:49:31 +00:00
Martin Willi a06c068191 fixed memleak 2007-05-22 09:38:42 +00:00
Martin Willi 905438735a using local address as gateway in installed routes 2007-05-22 07:47:16 +00:00
Martin Willi bcd887781a removed route_job, handled all in interface_manager 2007-05-16 08:49:10 +00:00
Martin Willi ce27ac8012 routing/unrouting through interface 2007-05-16 08:32:15 +00:00
Martin Willi 933521270d removed dead folder 2007-05-16 06:42:52 +00:00
Martin Willi 1387e64af1 working dummy for NetworkManager DBUS interface 
more a tech demo
 2007-05-14 13:22:04 +00:00
Martin Willi a6a039aa10 simplified capability dropping 2007-05-09 13:12:06 +00:00
Martin Willi 3cd3f48428 properly implemented interface_managers initiate, terminte_[ike|child] 
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
 2007-05-09 12:33:08 +00:00
Martin Willi d08b27799a properly ignoring signals rised by a thread which is in listening state 2007-05-08 12:58:33 +00:00
Martin Willi 6874bf698c changing UID/GID after startup of pluto/charon 
added --with-uid/--with-gid configure option
 2007-05-07 12:38:46 +00:00
Martin Willi a4a3884c83 extended interface_manager (more work needed here) 2007-05-03 14:22:52 +00:00
Martin Willi 586b7474a2 allow to have listening state TRUE while sending singal ourself 2007-05-03 14:22:15 +00:00
Martin Willi 66560f4267 reducing capabilities of the threads to a minimum 
proper flush of pending packets on daemon shutdown
adding local address as gateway address in dynamic route
 2007-05-03 14:21:22 +00:00
Martin Willi 3d63b7639e setting MALLOC_CHECK_=0 for charon to not use glibc's malloc checker 2007-05-02 09:59:47 +00:00
Martin Willi 0ccb275a93 added more API documentation to backends/interfaces 2007-04-30 10:23:01 +00:00
Martin Willi a84fb01b96 restructuring of configuration backends 
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
  configuration backends
  control interfaces
using pluggable modules as in EAP
 2007-04-27 14:25:08 +00:00
Martin Willi bb1030cb3d removed eap sim config 2007-04-27 14:11:18 +00:00
Martin Willi 594e830eb7 forcing proper autoload of af_key kernel module in charon 2007-04-27 07:43:42 +00:00
Martin Willi d931f4658e updated news 2007-04-26 07:58:50 +00:00
Martin Willi 37fb03554b updated NEWS 2007-04-26 06:33:03 +00:00
Martin Willi f47e450be9 properly checking received IDr as initiator 2007-04-25 06:06:13 +00:00
Martin Willi c80e8ba11a added support for AES-XCBC in kernel using e.g. esp=aes128-aesxcbc (>=linux-2.6.20) 2007-04-23 13:00:20 +00:00
Martin Willi 17712ea866 fixed CHILD_SA proposal selection when not using DH exchange 2007-04-23 12:59:10 +00:00
Martin Willi 63c477244d fixed keyingtries 2007-04-23 12:19:23 +00:00
Martin Willi b7ade11b16 updated man page: proposals using PFS 2007-04-19 14:22:53 +00:00
Martin Willi cd115716fe updated TODO 2007-04-19 14:14:01 +00:00
Martin Willi 0706c39cda added support for EAP methods not establishing an MSK 2007-04-19 12:37:48 +00:00
Martin Willi 04a7b6d868 added most problematic linux headers to distribution 
other/real linux header may be selected using --with-linux-headers=dir
 2007-04-19 08:59:36 +00:00
Martin Willi 1fd5383e61 added PDF support for CHILD_SAs 
support for INVALID_KE_PAYLOAD negotiation for rekeying
 2007-04-19 08:02:19 +00:00
Martin Willi 41ab00da6b fixed memleak in IKE_SA manager 2007-04-19 07:04:35 +00:00
Martin Willi 217e985b41 moved initiate() code to the generic controller_t class 2007-04-16 12:52:49 +00:00
Martin Willi 418dbd6243 cloning %any ID without zero-byte memleak 2007-04-16 08:37:52 +00:00
Martin Willi dd3b7b7147 removed version numbers in autogen 2007-04-16 08:34:22 +00:00
Martin Willi c4d9504a6b added missing #include 2007-04-12 11:33:43 +00:00
Martin Willi 9e3e46a52c updated uClibc note in HACKING 2007-04-12 11:33:28 +00:00
Martin Willi a1b2d82db0 removed %Q, %Y, %W, %U printf handlers 2007-04-12 09:44:26 +00:00
Martin Willi db97fd8298 not using %m printf handler, as late errno interpration over bus may be problematic 2007-04-12 08:52:36 +00:00
Martin Willi 1dad08b035 fixed DPD delay in peer_cfg 2007-04-12 06:20:42 +00:00
Martin Willi 092958c89d fixed payload debug message 2007-04-12 06:20:14 +00:00
Martin Willi 5f088665ad removed IKE_SA_ID (%J) printf hook, two more to go 2007-04-11 13:01:08 +00:00
Martin Willi 3c662c30ee cleanup and fixes for status & statusall 2007-04-11 12:43:52 +00:00
Martin Willi 015912016c using %V time delta for rekeying times 2007-04-11 12:33:02 +00:00
Martin Willi a3ce4bc214 removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to go 2007-04-11 12:14:51 +00:00
Martin Willi cd08b6880b removed %M printf handler, five more to go 2007-04-11 09:12:21 +00:00