denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,091 Commits 1 Branch 0 Tags
5ef478aaee11cf8d4b21da603b290c19565210c6
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 5ef478aaee implemented RFC3110 key builder in a plugin, added generic DNSKEY RR parsing 2009-08-26 11:23:51 +02:00
Martin Willi 3addf4e937 renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support other key types 2009-08-26 11:23:51 +02:00
Martin Willi caa00e7ab7 pluto uses KEY_ANY builder to parse PGP public keys 2009-08-26 11:23:50 +02:00
Martin Willi 9493dd2ce0 implemented a pgp plugin providing PGP key parsing builders 2009-08-26 11:23:50 +02:00
Martin Willi 4e3d1e804e make use of the pkcs1 plugin in gcrypt rsa key parsing 2009-08-26 11:23:50 +02:00
Martin Willi 3044774323 removed subjectPublicKeyInfo parsing, provided by pkcs1 plugin 2009-08-26 11:23:50 +02:00
Martin Willi 1e0f69373a implemented a pkcs1 plugin providing PKCS#1 key parsing builders 2009-08-26 11:23:50 +02:00
Martin Willi 750bbcf9a8 added support for %prompt-ing private key passhprases in strokes "ipsec secrets" 2009-08-26 11:23:50 +02:00
Martin Willi 7c2d883af7 show more information if building a credential fails 2009-08-26 11:23:50 +02:00
Martin Willi 833dcfa530 log loaded private key/certificates 2009-08-26 11:23:50 +02:00
Martin Willi 3f9ec06f6f added getnetbyname/gethostbyname2 to leak detective whitelist, used by pluto 2009-08-26 11:23:50 +02:00
Martin Willi d47dc6d170 clone blobs passed to parse functions, check before free 2009-08-26 11:23:50 +02:00
Martin Willi 89556140d0 fixed builder signature 2009-08-26 11:23:50 +02:00
Martin Willi ddf7c6ac7b do not enumerate builders returning NULL 2009-08-26 11:23:50 +02:00
Martin Willi 2b7e085dea updated pubkey_speed test to use pem plugin 2009-08-26 11:23:49 +02:00
Martin Willi cbb62e8f4c handle pluto specific certificates under CRED_CERTIFICATE, not as own credential kind 2009-08-26 11:23:49 +02:00
Martin Willi f11a78f10a unified pluto builder implementations 2009-08-26 11:23:49 +02:00
Martin Willi 94463a33b4 removed obsolete PEM code in pluto/libstrongswan 2009-08-26 11:23:49 +02:00
Martin Willi ccd0a624b6 use credential builder to build crls 2009-08-26 11:23:49 +02:00
Martin Willi 37f5a0da2c use credential builder to build attribute certificates 2009-08-26 11:23:49 +02:00
Martin Willi a5dc4a9585 moved builder hooks to a separate file 2009-08-26 11:23:49 +02:00
Martin Willi 11aa7e7869 use a pluto specific credential builder to build pluto cert_t's 2009-08-26 11:23:49 +02:00
Martin Willi c486fa8158 removed obsolete pgp private key parsing, done by libstrongswan 2009-08-26 11:23:49 +02:00
Martin Willi dc816eacdf use libstrongswan for private key loading, whack callback to read passphrase 2009-08-26 11:23:49 +02:00
Martin Willi 4d15129160 pass along X509 flags when loading PEM encoded data 2009-08-26 11:23:49 +02:00
Martin Willi 280469923d make use of the pem helper plugin to load credentials 2009-08-26 11:23:49 +02:00
Martin Willi c9db16b7dd added file loading support to pem plugin, using mmap() 2009-08-26 11:23:48 +02:00
Martin Willi 160f4c225d moved PEM parsing functionality to its own plugin 2009-08-26 11:23:48 +02:00
Martin Willi eb641993d4 set stroke connection flags to a clear TRUE/FALSE 2009-08-25 19:57:36 +02:00
Martin Willi 469083cc7d disable lifetimes of allocated SPIs 
The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine.
 2009-08-25 18:15:25 +02:00
Martin Willi 1bc0b4f795 remove incomplete SAs with PROTO_ESP 2009-08-25 18:12:55 +02:00
Martin Willi 625b48b558 added URL for git repository served over git:// protocol 2009-08-21 10:52:39 +02:00
Martin Willi dd4c14f37c set protocol to ESP for policies installed as a trap 2009-08-07 16:05:32 +02:00
Martin Willi d9796a4311 fixed printf fromat for length limited string 2009-08-07 10:31:21 +02:00
Martin Willi 51c037cc71 added support for ipsec.secrets "include" directive 2009-08-06 11:48:19 +02:00
Martin Willi 3d2f73b92f parse RDNs in multiple SEQUENCEs in all SETs of a DN 2009-08-03 15:24:48 +02:00
Martin Willi 5cb300e795 compare IKE config when reusing an existing IKE_SA to initiate a CHILD_SA 2009-08-03 14:37:24 +02:00
Martin Willi fcac8f6571 filter objects for segment checksumming by dlpi_name, excludes rare false positives 2009-07-21 15:10:24 +02:00
Martin Willi 7655843ab5 enumerate executable sections only to build checksum 2009-07-21 15:00:18 +02:00
Martin Willi acd4afc997 announce integrity testing only once 2009-07-21 14:58:14 +02:00
Martin Willi e0964e2e26 fixed memleak in SQL config lookup 2009-07-16 15:59:56 +02:00
Martin Willi 88957f54f2 raise an alert() if the RADIUS server is not responding 2009-07-16 15:15:39 +02:00
Martin Willi e85b83c737 added an alert() bus hook to raise critical system errors and notifications 2009-07-16 15:15:39 +02:00
Martin Willi f5410905ac moved the CFLAGS mangling AC_LIB_PREFIX macro behind CFLAG test 2009-07-15 16:04:37 +02:00
Martin Willi 449e90e1af updated debian package 2009-07-15 15:37:23 +02:00
Martin Willi 0a1d168752 updated Standards-Version to 3.8.2 2009-07-15 14:01:47 +02:00
Martin Willi e04c5d9371 added ${misc:Depends} dependency, fixes debhelper-but-no-misc-depends lintian warning 2009-07-15 14:00:42 +02:00
Martin Willi 426e1c3d0f added copyright information, fixes copyright-without-copyright-notice lintian warning 2009-07-15 13:59:25 +02:00
Martin Willi 74b14b4008 cast pointers to uintptr_t for alignement check 2009-07-15 10:39:45 +02:00
Martin Willi 69b8058925 use the configured NM connection id as configuration/IKE_SA name 2009-07-10 11:01:44 +02:00
Martin Willi ce741aa649 fixed state check if establishing the CHILD_SA fails 2009-07-10 09:40:02 +02:00
Martin Willi bad99d5aff use the new updown()/rekey() hooks to track the state of NetworkManager connections 2009-07-10 09:37:27 +02:00
Martin Willi 977ec0c316 implemented ike_down() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi fa1d3c6629 implemented ike_up() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi f5f37cc7fa implemented child_down() bus hook 2009-07-09 15:25:16 +02:00
Martin Willi f669f45333 implemented child_up() bus hook 2009-07-09 15:25:15 +02:00
Martin Willi 622b56a52e implemented ike_rekey()/child_rekey() bus hooks 2009-07-09 15:25:15 +02:00
Martin Willi 7527f43c76 added new listener callbacks to track SAs 2009-07-09 15:25:15 +02:00
Martin Willi a40cc76bc7 moved listener_t interface definition to a separate file 2009-07-09 15:25:14 +02:00
Martin Willi 3f67126226 added a RADIUS id_prefix option to prefix the IMSI 2009-07-09 11:19:41 +02:00
Martin Willi 2eac2578a5 updated ikev2bis draft from 03 to 04 2009-07-09 11:18:32 +02:00
Martin Willi 01e43e3183 memxor does not access unaligned words anymore, but still uses words if possible 2009-07-08 17:19:49 +02:00
Martin Willi 751a65f9da fixed doxygen section pgp 2009-07-08 10:29:12 +02:00
Martin Willi d7b965e931 fixed two doxygen warnings 2009-07-08 10:28:54 +02:00
Martin Willi c99227630c updated HACKING info 2009-07-07 17:26:16 +02:00
Martin Willi efb4bb248f remove obsolete child_cfg_t.equal_traffic_selectors() method 2009-07-07 14:38:55 +02:00
Martin Willi 20188fcad4 child_cfg matching code prefers a config containing the first proposed TS 2009-07-07 14:38:19 +02:00
Martin Willi 2d00984d73 added missing equals() method assignment for ID_ANY identities 2009-07-07 13:42:22 +02:00
Martin Willi 92a65c506a use architecture specific Elf header 2009-07-06 16:36:01 +02:00
Martin Willi 0c31b9db84 centralized ID type specific method assignement in generic constructor 2009-07-06 13:15:29 +02:00
Martin Willi bbf6a4c0ff removed obsolete init_rdn()/get_next_rdn() functions 2009-07-06 13:15:29 +02:00
Martin Willi 8309798fae reimplemented dnota() using RDN enumerator 2009-07-06 13:15:29 +02:00
Martin Willi f48c3c72f4 added a chunk_printable() function (replaces sanitize_chunk) 2009-07-06 13:15:29 +02:00
Martin Willi d692557298 replaced {same,match}_dn() by compare_dn(), using the RDN enumerator 2009-07-06 13:15:29 +02:00
Martin Willi ed680e33c0 fixed memleak if RND parsing fails 2009-07-06 13:15:29 +02:00
Martin Willi dca2eee92a added unit test for identification_t.matches() 2009-07-06 13:15:29 +02:00
Martin Willi 05fe0a7d25 added unit test for identification_t.equals() 2009-07-06 13:15:29 +02:00
Martin Willi 01da687f78 contains_wildcard() for DNs uses RDN enumerator 2009-07-06 13:15:28 +02:00
Martin Willi d35650115b added unit test for identification_t.contains_wildcard() 2009-07-06 13:15:28 +02:00
Martin Willi 2147da40a5 simplified identification_t.clone() using memcpy 2009-07-06 13:15:28 +02:00
Martin Willi 6bdd79d86c use an enumerator to parse RDNs, based on asn1_unwrap() function 2009-07-06 13:15:28 +02:00
Martin Willi 5dd492efff make filter enumerator methods static 2009-07-06 13:15:28 +02:00
Martin Willi 596e0540a5 asn1_unwrap() function to parse ASN.1 objects with length/type 2009-07-06 13:15:28 +02:00
Martin Willi 6e61122727 listen for CHILD_SA state changes only until it has been installed 2009-07-03 16:16:00 +02:00
Martin Willi 90855e965a added additional sanity checks to asn1_length() parsing 2009-07-03 09:26:48 +02:00
Martin Willi 00fcc0f8f3 added -avoid-version to LDFLAGS, plugins are not versioned 2009-07-03 08:57:11 +02:00
Martin Willi 7afd9d6672 defer MOBIKE update if we have no route to the peer 2009-07-02 10:56:13 +02:00
Martin Willi 133623871d do not abort notifying listeners if a listener unregisters 2009-07-02 09:38:12 +02:00
Martin Willi 2b7129f9b3 added mconsole exec patch based on 2.6.30 2009-07-01 13:53:46 +02:00
Martin Willi fb64239cab added mconsole exec patch based on 2.6.29 2009-07-01 13:52:54 +02:00
Martin Willi 4fd40cf6b0 signal tunnel breakage to NetworkManager 2009-06-30 17:47:42 +02:00
Martin Willi 7f9fab77f8 restarting dbus is insufficient, restart network-manager after installation 2009-06-30 17:03:53 +02:00
Martin Willi a2f1bb238e enforce correct RSA signature lenght in gcrypt 2009-06-30 12:10:30 +02:00
Martin Willi d860a9b924 handle --disable-pluto/charon with --enable-integrity-test 2009-06-22 16:37:28 +02:00
Martin Willi f0f420229a deinit() library if integrity check fails 2009-06-22 16:18:53 +02:00
Martin Willi 4f2c48cd3d build and verify on disk file integrity of pluto and charon executables 2009-06-22 15:47:18 +02:00
Martin Willi da2834a280 removed functions from faked symbol list, not needed anymore with RTLD_LAZY 2009-06-22 15:47:18 +02:00
Martin Willi cfe508d911 indicate use if integrity testing at startup 2009-06-22 15:47:18 +02:00
Martin Willi 67a7bb02ef moved checksum_builder/libchechsum to top srcdir to respect build order 2009-06-22 15:47:18 +02:00
Martin Willi e4e6a77a80 check for dladdr() and dl_iterate_phdr() if --enable-integrity-test set 2009-06-22 15:47:17 +02:00