denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,765 Commits 1 Branch 0 Tags
667b73721a48cce4005eb2e2eda6c5e99d8ce888
Commit Graph
601 Commits
Author SHA1 Message Date
Martin Willi 9b2942f68d Stroke plugin interprets NULL identities as ID_ANY in shared key lookup 2009-10-12 09:51:45 +02:00
Martin Willi 5d5e2853b6 SIM card interface takes IMSI as parameter (same as in USIM) 2009-10-09 13:02:20 +02:00
Martin Willi 424ddf801c Do not use monotonic time for AKA sequence numbers, it has an undefined starting point 2009-10-09 13:02:20 +02:00
Martin Willi 655728621b Use constants instead of sizeof(), sizeof() does not work for function arguments 2009-10-09 13:02:20 +02:00
Martin Willi aba93dcc32 Calculate missing CK/IK values in USIM 2009-10-09 13:02:20 +02:00
Martin Willi aca7ba0ffc Link 3gpp2 EAP-AKA plugin to libgmp 2009-10-09 13:02:20 +02:00
Martin Willi 53a16b72ab Separated 3gpp2 USIM card and provider functionality 2009-10-09 13:02:20 +02:00
Martin Willi 0030880c6b Ported AKA functions to 3gpp2 plugin 2009-10-09 13:02:19 +02:00
Martin Willi 4720815774 Added a stub for the EAP-AKA backend implementing the 3GPP2 functions in software 2009-10-09 13:02:19 +02:00
Martin Willi 4b1cd5a367 Reenabled acq_expires SA timer using rekey timeout 
While not using a SA expiration for allocating SPIs works fine,
the situation is much more problematic for kernel-created temporary
SAs from acquires. If the negotiation of such a CHILD_SA fails,
the created temporary SA can not be deleted.
 2009-10-07 13:09:59 +02:00
Andreas Steffen 0da0f3fc3f delete group attributes after use 2009-10-05 23:17:36 +02:00
Andreas Steffen a9fe23cf53 stroke_list outputs group attributes 2009-10-05 23:13:51 +02:00
Andreas Steffen 408e46a324 ipsec pki --issue suports --flag authServer option 2009-10-05 22:44:01 +02:00
Martin Willi 6eacaffc72 Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word reads 2009-10-05 14:06:32 +02:00
Martin Willi 3b836fc759 Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word reads 2009-10-05 13:32:41 +02:00
Andreas Steffen 02bf410aa9 certificate subject DNs are in double quotes 2009-09-23 22:03:52 +02:00
Andreas Steffen b362cc2382 streamlining of credential loading debug output 2009-09-23 21:55:48 +02:00
Martin Willi 0406ed7a16 Fixed a crash in source address lookup 2009-09-23 11:18:30 +02:00
Andreas Steffen 4b15ee8cd9 shortened file loading debug output 2009-09-22 12:33:13 +02:00
Martin Willi cb64b21217 Do not assign SIM version to a volatile buffer on stack 2009-09-22 09:11:35 +02:00
Martin Willi c84b139a87 Credential backends use has_fingerprint() methods to select keys/certificates 2009-09-21 17:03:00 +02:00
Martin Willi fde7f5abf8 Correctly serve certificates if CERT_ANY requested 2009-09-21 15:34:29 +02:00
Martin Willi c331bce51d Return certificates of requested kind only 2009-09-21 14:43:57 +02:00
Andreas Steffen 399ce164ad delete resolv_conf_* files 2009-09-20 21:59:36 +02:00
Andreas Steffen 4819ec6a71 resolv_conf plugin renamed to resolve 2009-09-20 19:06:58 +02:00
Martin Willi c7a64d6f41 Use helper functions to handle (non-)skippable attributes 2009-09-18 15:08:43 +02:00
Martin Willi e466139c91 Clients can handle AKA-Identity requests by sending the full identity 2009-09-18 14:51:35 +02:00
Martin Willi 85af7a89c6 nm uses the distributions trusted root CAs if none is explicitly specified 2009-09-18 14:34:27 +02:00
Martin Willi 7aa495d9d0 get_private() in listcacerts requires a valid auth cfg 2009-09-17 12:47:03 +02:00
Martin Willi 4a03e85b37 Fixed nexthop lookup, used by source route installation 2009-09-16 13:55:32 +02:00
Martin Willi 36b7ba5ee3 Use continue to advance to next iteration 2009-09-16 13:32:47 +02:00
Martin Willi b538b606da Use the default debug hook if possible 2009-09-16 13:16:00 +02:00
Martin Willi 79c6f16212 Implemented support for preinstalled PGP certificates in charon 2009-09-15 08:23:48 +02:00
Martin Willi 3b878dae7e Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro 2009-09-11 15:39:35 +02:00
Martin Willi 356b2b2780 pass NULL to library_init() to load settings from default file 2009-09-10 18:52:42 +02:00
Martin Willi 5b03a350fc use NULL to load plugins from default plugin directory 2009-09-10 18:52:42 +02:00
Martin Willi faa4bd49fb use sysconfdir, no need for an additional confdir variable 2009-09-07 15:10:30 +02:00
Martin Willi b7b5653386 Use macros to define --with options 2009-09-07 15:00:45 +02:00
Martin Willi 8b3b4a244e Removed trailing whitespaces in configure.in/Makefile.am 2009-09-07 11:48:03 +02:00
Martin Willi 7b3814f75d remove spaces before tabs at the beginning of lines (^( )+\t) 2009-09-04 15:02:11 +02:00
Martin Willi b9b8a98f47 remove spaces within tabs (\t( )+\t) 2009-09-04 15:00:19 +02:00
Martin Willi 323f9f990f replaces four spaces by tabs, where appropriate 2009-09-04 14:50:23 +02:00
Martin Willi 7daf5226b7 removed trailing spaces ([[:space:]]+$) 2009-09-04 13:46:09 +02:00
Marius Tomaschewski 7d1b030446 fixed open failure debug message in load_secrets 2009-09-04 11:52:28 +02:00
Martin Willi d176994235 Use recursive source address lookup if we get a gateway only 2009-09-03 14:46:39 +02:00
Marius Tomaschewski dece3d8efc Fixed load_secrets to acquire/release lock in level 0 only 
The write_lock call fails with EDEADLK and unlocks in the
next recursion level.
 2009-09-03 14:46:36 +02:00
Tobias Brunner 484a06bce7 Fixed some typos; whitespace cleanup. 2009-09-02 17:30:46 +02:00
Tobias Brunner 5293b02945 Missing commas added. 2009-09-02 17:29:44 +02:00
Martin Willi 8fb4edc4ff handle plugin loading failures 2009-09-01 16:20:45 +02:00
Tobias Brunner e75f423753 Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static. 2009-09-01 12:54:33 +02:00