denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,621 Commits 1 Branch 0 Tags
5eb61e3bca7bab6545507343ef54b4448f47e8e8
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 0ed6b7a7d7 If the NM gateway certificate has the CA constraint set, we use the gateway address as its identity. 
To allow the same certificate deployment for Windows 7 and NetworkManager clients,
the NM plugin now accepts CA certificates. To prevent any certificate holder
to act as a gateway, we bind the identity to the entered gateway address. The
gateways certificate therefore must contain the IP/DNS of the gateway
as subjectAltName.
 2009-05-15 16:35:14 +02:00
Martin Willi d4b403e2f3 updated glade dialog, using tooltip instead of tooltip_text 2009-05-15 16:04:07 +02:00
Martin Willi 6b967fb762 implemented save_secrets hook to avoid crash 2009-05-15 16:04:07 +02:00
Martin Willi a61395676f added .gitignore files to NM applet 2009-05-15 15:33:19 +02:00
Martin Willi 9caceb6ed5 updated prf identifiers 2009-05-15 13:49:05 +02:00
Martin Willi b79ca7858b updated integrity algorithm identifiers 2009-05-15 13:48:44 +02:00
Martin Willi 832427064c added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA 2009-05-15 11:02:56 +02:00
Martin Willi 5cb3210acf stroke accepts "down conn1{*}/[*]" to delete all CHILD/IKE_SAs using a given config 2009-05-15 10:18:43 +02:00
Martin Willi c296e51c40 added eap_start option to radius plugin 
EAP-Start sends an empty EAP message to initiate EAP conversation
before doing EAP-Identity.
 2009-05-14 14:14:29 +02:00
Martin Willi 64e8ca281f simplified SPI allocation after refactorings 2009-05-14 10:28:18 +02:00
Martin Willi d50746febe identation cleanups 2009-05-13 15:57:31 +02:00
Martin Willi ad65a713e4 fixed identation 2009-05-13 14:55:35 +02:00
Martin Willi 0a3ca29021 fixed cleanup of traffic selector lists 2009-05-12 17:13:09 +02:00
Martin Willi 8f0ab613e5 do not destroy packet twice if message generation failed 2009-05-12 14:38:48 +02:00
Martin Willi e1fa02bc62 properly end CERT_PRE task after detecting the final authentication round 2009-05-12 11:26:50 +02:00
Martin Willi 9dd2b42728 do not report increasing rekey times if rekeying currently active 2009-05-12 10:56:49 +02:00
Martin Willi 37974979bc do not report a CHILD_SA rekey time if rekeying disabled 2009-05-12 10:56:48 +02:00
Martin Willi 4a0c97e7d4 also update permission in template/guest folders 
some identation cleanups
 2009-05-11 17:26:13 +02:00
Martin Willi db879fdfac removed @brief doxygen keywords 2009-05-11 17:24:51 +02:00
Martin Willi 5d47f284b8 list available templates using "template" alias 2009-05-11 17:20:01 +02:00
Martin Willi 47a9a48f5b ruby bindings for template enumerator 2009-05-11 17:19:36 +02:00
Martin Willi 608046c09c added a Dumm template enumerator 2009-05-11 17:18:59 +02:00
Martin Willi 05ac17f0e1 allow "others" to read created dumm files/folders 2009-05-11 16:38:04 +02:00
Martin Willi 496064ba45 hand out a IPv4 virtual address if %any6 is requested 2009-05-11 13:33:55 +02:00
Martin Willi 30fc989c9c fixed configuration payload type as responder 2009-05-11 13:23:15 +02:00
Martin Willi a3d692ca87 never send a CERT payload in EAP 2009-05-11 11:37:58 +02:00
Martin Willi 5775283f8b updated MSK calculation in MSCHAPv2, compatible with Win7/2008 RC. 2009-05-11 10:42:53 +02:00
Martin Willi 25f2d52f30 Fixed EAP authentication regression 
Use correct nonce/init message again for EAP AUTH payload
sent from responder to initiator.
 2009-05-11 10:42:52 +02:00
Martin Willi b81917ea00 fixed memleak 2009-05-11 10:42:52 +02:00
Martin Willi 9d737ecfc5 drop acquires we already have a pending connection attempt 2009-05-08 10:04:01 +02:00
Martin Willi c3626c2ce6 initiate trapped CHILD_SAs with same reqid 2009-05-08 10:04:00 +02:00
Martin Willi fda97f2140 removed $Id$ from new template generated files 2009-05-08 10:04:00 +02:00
Martin Willi 56d461a1f1 listing routed connection in statusall 2009-05-08 10:04:00 +02:00
Martin Willi 17339b9a86 removed obsolete route/unroute code from ike_sa/controller 2009-05-08 10:03:59 +02:00
Martin Willi 8c99451ae1 make use of the new trap-manager 2009-05-08 10:03:58 +02:00
Martin Willi eb8ed130af added a trap-manager to handle routed policies outside of IKE_SAs 2009-05-08 10:03:58 +02:00
Martin Willi 0ce19b27a6 instanciate new tasks only if none queued 2009-05-07 15:57:34 +02:00
Martin Willi a627e31f46 properly delete IKE_SA if IKE_SA_INIT processing failed 2009-05-07 15:53:45 +02:00
Martin Willi be85459323 announce EAP method initiation once only 2009-05-07 11:11:56 +02:00
Martin Willi 84f1164c77 some additional .gitignore's 2009-05-07 10:33:30 +02:00
Martin Willi 45a4f3e2cf fixed .gitignore for backup files 2009-05-07 10:21:07 +02:00
Martin Willi a4df55e363 added .gitignore files for dumm 2009-05-07 10:19:19 +02:00
Martin Willi a8d938ca18 fixed removal of child configs 
purge empty peer configs
 2009-05-06 12:56:21 +02:00
Martin Willi 5bbfd264ec fixed remove_child_cfg(), use correct enumerator for remove_at 2009-05-06 11:09:57 +02:00
Martin Willi 94ffefc40c added backup files (*.~) and patch leftovers (*.orig) to .gitignore 2009-05-06 10:36:39 +02:00
Martin Willi e868a564d9 set IKE_SA on bus to catch unroute event properly 2009-05-05 09:51:28 +02:00
Martin Willi cae1ded1dc added apidoc output to .gitignore 2009-05-04 16:11:40 +02:00
Martin Willi 2c36ebb58e moved hasher to the correct doxygen group 2009-05-04 16:10:13 +02:00
Martin Willi 4f734a55b7 fixed dladdr ./configure check, leak detective whitelist 2009-05-04 13:59:44 +02:00
Martin Willi 466f11bfaf added .gitignore files, ready for the switch 2009-04-30 07:42:30 +00:00
Martin Willi 82f0707fa3 updated ikev2bis to 03 2009-04-27 14:57:50 +00:00
Martin Willi 9e080c899e removed .cvsignore files 2009-04-27 14:40:38 +00:00
Martin Willi 18eef5d6b6 added support for AES counter mode in ESP 
proposal keywords: aes128ctr aes192ctr aes256ctr
 2009-04-27 12:16:52 +00:00
Martin Willi 3bf7c2491f added nm NEWS 2009-04-27 11:50:53 +00:00
Martin Willi be0a03be64 set default CFLAGS globally, including -Wno-format 2009-04-27 11:34:07 +00:00
Martin Willi 12c8c3c4be fixed nbns handling, missing break 2009-04-27 10:48:49 +00:00
Martin Willi 568ced956c prefer nm plugin over resolv-conf 2009-04-27 10:46:51 +00:00
Martin Willi 3ab0e8a04b nm plugin handles DNS/NBNS configuration attributes 2009-04-27 09:38:31 +00:00
Martin Willi adc25ec252 added missing configure.in changes for attr/resolv_conf plugins 2009-04-24 14:14:43 +00:00
Martin Willi 7f56b49461 attribute_manager supports attribute_handler's to handle configuration attributes via plugins 
moved resolv.conf editing to a separate plugin (resolv_conf)
extended attribute_provider interface to hand out arbitrary attributes
  moved strongswan.conf based dns/nbns configuration to a plugin (attr)
 2009-04-24 14:13:52 +00:00
Martin Willi da17b0169a added return_true/false() dummy functions 2009-04-24 14:08:42 +00:00
Martin Willi 090ba9453c fixed compiler warnings on 64bit 2009-04-22 08:26:54 +00:00
Martin Willi 134c9d9db0 fixed a bunch of compiler warnings, pgp end certificate listing 2009-04-21 15:36:58 +00:00
Martin Willi c258a3b36a fixed pluto/scepclient out-of-tree builds 2009-04-21 15:24:02 +00:00
Martin Willi 6554b5e412 schedule_job uses seconds to support time values larger than 49 days 
added schedule_job_ms for ms resolution events
 2009-04-21 15:16:56 +00:00
Martin Willi 81fc8e5f77 added more NEWS for 4.3.0 2009-04-21 11:22:52 +00:00
Martin Willi 405e30a4a7 dump CHILD_SA keys in loglevel 4 2009-04-21 09:29:23 +00:00
Martin Willi 09f706ec3e fixed IKE_SA rekeying collisions 2009-04-20 11:29:27 +00:00
Martin Willi 8a36c7e20d do not adopt already initiated tasks after rekeying 2009-04-20 11:28:23 +00:00
Martin Willi c04e75487f added ike_rekey/child_rekey options to load-tester 2009-04-17 12:30:56 +00:00
Martin Willi d5d199ff6b add keylength transform attribute for all algorithms with a keylength != 0 2009-04-17 08:46:02 +00:00
Martin Willi 98e7317daa fixed OID encoding 2009-04-17 08:28:53 +00:00
Martin Willi 5cac9e4c34 fixed some newline encodings 2009-04-16 14:00:14 +00:00
Martin Willi 0bd7ad6cff added create_part_enumerator() to indentity, allows to enumerate RDNs etc. 2009-04-14 14:32:22 +00:00
Martin Willi c31687daa7 moved RDN OIDs to oid.txt, use asn1_get_known_oid() for lookup 2009-04-14 13:53:06 +00:00
Martin Willi 56807f35b9 implemented asn1_get_known_oid(), mapping OID index to ASN1 OID 2009-04-14 13:50:23 +00:00
Martin Willi b63f4c75e2 added missing string.h include 2009-04-14 10:50:29 +00:00
Martin Willi e8a0be4895 fixed proposal_keywords.c generation in out-of-tree builds 2009-04-14 10:49:12 +00:00
Martin Willi a44bb9345f merged multi-auth branch back into trunk 2009-04-14 10:34:24 +00:00
Martin Willi 6e5c8d9413 do not load guests starting with a ".", such as ".svn" 2009-04-09 13:43:26 +00:00
Martin Willi d848b951fc simplified statfs 2009-04-09 12:06:01 +00:00
Martin Willi 79f81838bc added template() shortcut 2009-04-07 17:58:23 +00:00
Martin Willi 8a7d32452c added Dumm.method_missing, allows direct invocation of guests/bridges 2009-04-07 17:54:15 +00:00
Martin Willi cf61575dc3 added booted?/boot methods 2009-04-07 17:13:44 +00:00
Martin Willi 801548155c use safe each() implementations, allowing delete() in block 
implement Client.reset() in ruby
 2009-04-07 14:56:19 +00:00
Martin Willi c4087a8e70 added a reset() method to Dumm and each client 
identation cleanups
 2009-04-07 14:22:02 +00:00
Martin Willi 28970d5967 fixed template loading/unloading 
identation cleanups
 2009-04-07 13:07:13 +00:00
Martin Willi 58da11911b store all templates in a subdirectory 2009-04-07 13:06:33 +00:00
Martin Willi 5ec7ff5675 do not purge interfaces on template load 2009-04-07 12:59:54 +00:00
Martin Willi 15e247922d moved AUTH_HMAC_MD5_128 to IANA defined number 2009-04-02 13:53:20 +00:00
Martin Willi 9d1bd18243 require Message-Authenticator attribute only if we have a EAP-Message 2009-03-27 13:25:34 +00:00
Martin Willi 510be1a32a reserve a socket only during request(), avoids thread pool starvation 
reduced thread pool default to 1
 2009-03-27 10:52:22 +00:00
Martin Willi e82c369519 implementation of contains_wildcards() for ID_DER_ASN1_DN identities 2009-03-26 13:25:46 +00:00
Martin Willi d3fbc75e85 set port for NATD hash calculation in the "include-all" case 2009-03-26 11:49:07 +00:00
Martin Willi 04eb746442 updated NetworkManager applet copyright 2009-03-25 12:03:29 +00:00
Martin Willi 5a5654ed1e added a NEWS file 
release NetworkManager-strongswan-1.1.0
 2009-03-25 07:49:11 +00:00
Martin Willi 1490ff4d9b updated Doxyfile 
properly close all doxygen groups
fixed remaining doxygen warnings
 2009-03-24 17:43:01 +00:00
Martin Willi e4838d02b3 set the default of plutostart/charonstart according to ./configure options 2009-03-24 15:02:12 +00:00
Martin Willi 4a6b84a934 reintegrated eap-radius branch into trunk 2009-03-24 10:24:58 +00:00
Martin Willi bff28074b9 fixed NetworkManager applet debian dependencies 2009-03-20 08:33:02 +00:00