denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,102 Commits 1 Branch 0 Tags
64e77e8fbbfa9885d6fa3757a8f2b809237af63d
Commit Graph
876 Commits
Author SHA1 Message Date
Andreas Steffen 2e7b7faf0c cosmetics 2006-09-18 07:43:44 +00:00
Martin Willi 8a95c322c5 fixed certificate verification bug! 2006-09-14 12:22:08 +00:00
Martin Willi 1f7fd2ced8 removed unneeded constructor 2006-08-31 06:16:52 +00:00
Martin Willi 48d9883a3e initial support for IPv6 (more testing needed) 
socket works (without v6 filter)
  traffic selector handle IPv4/v4 cleanly
    improvements in traffic selector code
  kernel interface accepts v6 traffic selectors and hosts
  host_t class has full IPv6 support
 2006-08-30 17:12:56 +00:00
Martin Willi 51d4876814 added stddef.h include for compilers which do not support the offsetof() directive 2006-08-28 09:02:51 +00:00
Martin Willi f698448ea3 implemented proper refcounting using atomic operations 2006-07-28 09:45:18 +00:00
Martin Willi fe04e93a8b implemented IKE_SA rekeying 
uses ikelifetime, rekeymargin and rekeyfuzz config settings
	no handling of simultaneus exchanges yet!
 2006-07-27 12:18:40 +00:00
Martin Willi c0593835f4 reuse an existing IKE_SA to set up additional CHILD_SAs 2006-07-20 14:57:49 +00:00
Martin Willi 8dfbe71b34 introduced refcounting on policy and connections 
aren't stored in the IKE_SA anymore, they are queried on the fly
	are immutable now, allows it to share them
policy selection based on traffic selectors, leads to valid lookup results
	rekeying queries the policy based on its traffic selectors
 2006-07-20 10:09:32 +00:00
Martin Willi 92ee45a0ee cleanups in kernel interface code 
added proper traffic selector to string conversion
some cleanups here & there
 2006-07-18 12:53:54 +00:00
Martin Willi 269f7f448b leak detective blanks memory on free & alloc, allows further membug detection 2006-07-12 11:15:31 +00:00
Martin Willi 4c19900ce8 code cleanups 2006-07-12 11:13:48 +00:00
Andreas Steffen 40f29769fa identification_t.matches() supports multiple wildcard counts 2006-07-11 06:11:59 +00:00
Martin Willi af2faa1f1d reenabled check_expiry 2006-07-07 12:25:25 +00:00
Martin Willi c71d53ba4e updated copyright information 2006-07-07 08:49:06 +00:00
Martin Willi b190424716 updated whitelist (getprotobynumber) 2006-07-05 13:10:47 +00:00
Martin Willi b12af2ead6 fixed compiler warnings 2006-07-05 10:09:42 +00:00
Martin Willi 318dc7b6c4 updated leak detective whitelist 2006-07-04 13:26:20 +00:00
Andreas Steffen 971218c3ae support of cert payloads 2006-07-03 06:27:45 +00:00
Andreas Steffen 6f74bfd6ac added X.509 trust chain verification 2006-06-27 08:48:28 +00:00
Martin Willi 2f89902d07 applied new changes from NATT team 
DPD only done when no IPsec and IKE traffic processed
	minor changes here and there
 2006-06-23 14:02:30 +00:00
Martin Willi eecb2da87d fixed identification_t clone to apply function pointers 2006-06-23 13:20:17 +00:00
Martin Willi 1396815afb first merge of NATT code 2006-06-22 06:36:28 +00:00
Martin Willi b29bfa7c76 fixed whitelist detection 2006-06-20 11:03:47 +00:00
Martin Willi 986d23bd6e reworked function ignore mechanism to not-report whitelist 
rather than overriding functions
 2006-06-20 10:05:56 +00:00
Martin Willi aed58dcc93 readded local_credential_store 
added sendcert policy to connection
some other cleanups
 2006-06-20 08:43:57 +00:00
Andreas Steffen 76dafed7a7 implemented rereadcrls rereadcacerts 2006-06-20 06:08:33 +00:00
Andreas Steffen 23e9fda8a5 added chunk_equals_or_null() 2006-06-16 05:53:47 +00:00
Andreas Steffen 307b4ded5e added crl support 2006-06-16 05:52:52 +00:00
Andreas Steffen 277379620c changed tabs from 8 to 4 spaces 2006-06-16 05:52:26 +00:00
Andreas Steffen c345ff0b1e added crl support 2006-06-16 05:51:36 +00:00
Andreas Steffen 63b86f5641 cosmetics 2006-06-16 05:51:16 +00:00
Andreas Steffen d2c9d37d6f cosmetics (space) 2006-06-16 05:50:28 +00:00
Martin Willi 147fe5095d fixed aes code, we support now aes128, aes192, aes256 in IKE 2006-06-15 13:14:09 +00:00
Andreas Steffen b3b4c0e44b corrected some descriptions 2006-06-13 11:33:13 +00:00
Andreas Steffen 3c846c630a moved RSA key size constraints to definitions.h 2006-06-13 11:32:12 +00:00
Andreas Steffen fec9cb332f NULL string argument is treated as %any 2006-06-12 08:26:14 +00:00
Martin Willi a2a3fb3e25 workaround for peers rekeying at the same time 
loading lifetime policies from ipsec.conf
 2006-06-12 07:33:20 +00:00
Andreas Steffen b7f9ca5837 added support for leftsendcert= and left|rightca= parameters 2006-06-09 05:50:41 +00:00
Andreas Steffen a612f2dd00 added public methods is_ca() and is_valid() 2006-06-09 05:47:00 +00:00
Andreas Steffen 5407d563b7 changed ASN.1 CONTROL log output to LEVEL2 2006-06-09 05:45:37 +00:00
Andreas Steffen 996865b09e cosmetics 2006-06-09 05:44:34 +00:00
Martin Willi a401efd091 proper leak detective hook for realloc 
excluded pthread_setspecific from leak detective
 2006-06-07 13:22:38 +00:00
Andreas Steffen 6848dac603 minimized prefixed on stroke logger output 2006-05-31 05:50:04 +00:00
Andreas Steffen f5a4518a74 computation of SHA-1 hash over publicKeyInfo object 2006-05-30 07:47:19 +00:00
Andreas Steffen 3b58a143a0 moved abbreviated thread_id in front of brackets 2006-05-30 07:45:06 +00:00
Andreas Steffen cdffecf3ba added has_key parameter to log_certificates() 2006-05-30 07:43:39 +00:00
Andreas Steffen c164f8c4a7 log_certificates() now shows keyid and availability of matching private key 2006-05-30 07:42:52 +00:00
Andreas Steffen 7c2e556644 indented loaded file log entry 2006-05-30 07:41:22 +00:00
Andreas Steffen 1a10669080 moved TIMETOA_BUF definition to types.h 2006-05-30 07:40:44 +00:00