denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,596 Commits 1 Branch 0 Tags
6878fa738a0d92554e9ac6d6f1107b34ece9b36c
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi f3884f6da6 reverted [3945], proper fix for zero value ASN1 integer 2008-05-13 14:15:12 +00:00
Martin Willi cb1c54c93e updated Makefile 2008-05-13 13:58:04 +00:00
Martin Willi 6e8840981d tool to calculate KEYIDs from keys 2008-05-13 13:57:42 +00:00
Martin Willi 7af8995cde fixed unsave calculation of mpz_export length 2008-05-13 13:52:45 +00:00
Martin Willi 02ffd89642 decreased plugin load verbosity 2008-05-13 09:14:36 +00:00
Martin Willi 4d4fc2eaa1 fixed "pool --purge" on mysql 2008-05-13 07:39:24 +00:00
Martin Willi 808ca43f92 fixed compiler warning (missing include) 2008-05-13 07:37:08 +00:00
Martin Willi 5373f2a642 fixed lookup for expired leases 
initializing database if in inconsistent state
 2008-05-13 07:24:53 +00:00
Martin Willi 6cf1215e3c ported IP pool to mysql 2008-05-09 15:01:22 +00:00
Martin Willi 7051ef4091 usable prototype of "ipsec pool" tool 2008-05-09 12:55:41 +00:00
Martin Willi 5dc317192a support for left bounded padding in %H and %D 2008-05-09 12:25:39 +00:00
Martin Willi e69f33f6e2 whitelisted gmtime_r 2008-05-09 12:24:11 +00:00
Martin Willi f3bcd7f041 correctly reassigning valid leases 2008-05-09 12:22:20 +00:00
Martin Willi 9f9903a3b3 supporting width modifier in identification_t printf hook (e.g. %30D) 
cleanups in host_t %H printf hook
 2008-05-09 11:34:58 +00:00
Martin Willi ff2d02ed4c fixed interface disconnection 2008-05-09 10:38:18 +00:00
Martin Willi 0f074a4344 implemented append mode for xcbc, testcase 2008-05-08 14:51:37 +00:00
Martin Willi affd7a90ba moved RAW public key support to a separate plugin (pubkey) 2008-05-08 13:16:42 +00:00
Martin Willi 0395eb7c08 fixed compiler warning 2008-05-08 13:12:43 +00:00
Martin Willi 240e727fde renamed PRF_AES128_CBC to PRF_AES128_XCBC 2008-05-08 12:43:27 +00:00
Martin Willi 5b7ec6d4e0 renamed med_db plugin to medsrv, as we will introduce an additional medcli client plugin 2008-05-08 12:11:30 +00:00
Martin Willi 25b12c696b replaced --with-gid/uid by --with-group/user 
using named users, groups
fixed capability dropping in pluto
 2008-05-08 10:58:04 +00:00
Martin Willi f8277a8370 added configure check and support for sqlite3 libraries without sqlite3_prepare_v2 2008-05-07 14:41:13 +00:00
Martin Willi 4ce78f9356 fixed 3DES encryption 2008-05-07 11:54:30 +00:00
Martin Willi 5302703407 prototype of sql pool administration utility 2008-05-07 09:37:08 +00:00
Martin Willi 5d892343fa using capset version 1 if a newer is available 2008-05-07 08:46:37 +00:00
Martin Willi 86ab5636c2 support for @#hex ID_KEY_ID identification_t 2008-05-06 13:45:14 +00:00
Martin Willi bc1f02a860 providing medation configuration through med_db plugin 2008-05-06 13:44:14 +00:00
Martin Willi c963c4bc15 fixed parsing of openssl format public keys 2008-05-06 12:56:36 +00:00
Martin Willi ff6836716c returning reference pointer on get_ref() 2008-05-06 10:55:42 +00:00
Martin Willi cc0cb93553 printf "width" support for hosts (e.g. %15H) 2008-05-05 08:31:43 +00:00
Martin Willi 6c90949f18 resetting old scheduling policy correctly in free() hook 2008-05-05 07:40:21 +00:00
Martin Willi 27d04e055d implemented XCBC algorithms (signer, prf) for IKE on top of a crypter 
supporting ike=...-aesxcbc-... in ipsec.conf 
added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal
AES XCBC testcase
 2008-04-30 14:26:24 +00:00
Martin Willi f5475fa440 crypter_t api supports in-place encryption using NULL as output parameter 2008-04-30 14:02:25 +00:00
Martin Willi a47486b5e4 prototype of dumm GUI 2008-04-28 16:43:30 +00:00
Martin Willi ca37f81657 fixed javascript include using <script> tag 2008-04-28 08:52:17 +00:00
Martin Willi 3444390241 supporting multiple comma seperated subnets in left/rightsubnet definition 
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
 2008-04-25 12:41:37 +00:00
Martin Willi 1aedf08183 added simple Makefile to build scripts 2008-04-25 11:18:09 +00:00
Martin Willi 5e6bbf4f77 added _GNU_SOURCE and limits.h to build against glibc-2.8 2008-04-24 13:49:20 +00:00
Martin Willi c624081a7f added missing base64 chunk test 2008-04-24 13:28:18 +00:00
Martin Willi 9213ad27c2 replaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions 2008-04-24 13:26:22 +00:00
Martin Willi 71983b5cc9 some c-libs require _GNU_SOURCE for pthread_rwlock 2008-04-23 09:45:02 +00:00
Martin Willi 8570c648f1 fixed AES-128 test 2008-04-22 09:00:27 +00:00
Martin Willi 36d62fac65 experimental Padlock plugin supportin SHA1 and AES-128 for VIA C7 Esther 2008-04-22 08:44:56 +00:00
Martin Willi 65456bfe33 added AES-128 unit test 2008-04-22 08:33:55 +00:00
Martin Willi 4d18175997 removed status result from crypter interface to be consistent with other crypto interfaces 2008-04-22 07:14:24 +00:00
Martin Willi b638a1009f proper library initialization for dumm 2008-04-21 13:21:21 +00:00
Martin Willi 66bb16b033 shipping a default strongswan.conf 2008-04-18 12:52:47 +00:00
Martin Willi fa3fe3c1cf sql pool prototype 2008-04-18 11:51:58 +00:00
Martin Willi 4075225466 fixed peer config equality check 2008-04-18 10:30:52 +00:00
Martin Willi 58caabf7b4 more NEWS 2008-04-18 08:09:32 +00:00
Martin Willi c4ec8c9d18 fixed compiler warning 2008-04-17 15:08:48 +00:00
Martin Willi b360e3933d respecting ipsec.conf cachecrls= option 2008-04-17 15:01:57 +00:00
Martin Willi 58126dd295 added missing bits for credential caching 2008-04-17 15:00:51 +00:00
Martin Willi d33fa48bc7 caching of CRLs to /etc/ipsec.d/crls 2008-04-17 14:08:38 +00:00
Martin Willi 72c882d8c0 cosmetics to chunk_write() 2008-04-17 14:06:37 +00:00
Martin Willi 2270b396b3 added missing credential_set method to stroke_ca 2008-04-17 13:00:05 +00:00
Martin Willi 233b853dfa extended credential_set_t interface by a cache_cert() method 
allows persistent or in-memory caching of fetched certificates
 2008-04-17 11:22:37 +00:00
Martin Willi 46a5604a04 splitted IKE_SA manager destroy to allow plugin interaction 2008-04-17 10:46:25 +00:00
Martin Willi e5617e40d1 adding rightsourceip=%poolname properly to peer config 2008-04-17 08:55:32 +00:00
Martin Willi 4904d26120 slightly optimized IKE_SA checkin 2008-04-16 08:43:32 +00:00
Martin Willi 054c9e6031 parallelized trust chain verification 
temporary imported certificates are thread-local only
	read-write locking on credential manager
	credential sets must be thread-save now
 2008-04-16 08:38:15 +00:00
Martin Willi 2c463cdfb1 optimized half-open IKE_SA lookup (no checkout) 2008-04-16 08:34:52 +00:00
Martin Willi 140ed97c0c disable DPD if dpddelay is set but dpdaction=none 2008-04-16 05:50:56 +00:00
Martin Willi 20e32cf86c updated sql testcases to new table schema 2008-04-15 15:14:32 +00:00
Martin Willi 02e4180e48 updated sql plugin to respect config changes 2008-04-15 15:13:53 +00:00
Martin Willi 1822ca740b disabled SQL logging by default, as tests scenarios do not have a logging table 2008-04-15 15:13:08 +00:00
Martin Willi f722fa31db added error logging to sqlite plugin 2008-04-15 15:12:01 +00:00
Martin Willi 0dab0f1d5d fixed build of smp plugin 2008-04-15 11:51:46 +00:00
Martin Willi 82d8368bd7 build plugins after daemon/libstrongswan 2008-04-15 07:57:01 +00:00
Martin Willi 6a365f0740 added API for random number generators, served through credential factory 
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
 2008-04-15 05:56:35 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi a593db5d35 ike_sa_manager enumerable, not iterable 2008-04-14 11:37:46 +00:00
Martin Willi b010310517 updated rightsourceip parameter in man page 2008-04-14 08:27:05 +00:00
Martin Willi 348af092ac added close_action as a seperate config option to dpd_action 2008-04-14 08:17:18 +00:00
Martin Willi cadb5d16e5 fixed jumping IKE_SA unique ids 2008-04-14 07:55:23 +00:00
Martin Willi 45819d7d49 fixed rightsourceip=%config scenarios 2008-04-14 07:18:16 +00:00
Martin Willi 96926b006d using dpd actions to enforce connection state 
dpd actions a per child-, not peer ike-sa
 2008-04-11 08:14:48 +00:00
Martin Willi ad81e51afc implemented a simple attribute provider for stroke 2008-04-09 12:56:20 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Martin Willi 5df92bba51 changed force_encap to forceencaps 2008-04-08 12:53:36 +00:00
Martin Willi f6e7c0f785 removed stale ocsp header 2008-04-08 06:27:04 +00:00
Martin Willi 852abcd3a3 fixed doxygen groups to avoid recursion 2008-04-07 10:37:14 +00:00
Martin Willi 1749642b15 use cert->equals() to filter out equal certificates in seperate instances 2008-04-07 08:48:08 +00:00
Martin Willi da5e7bdb4c try to cache the same instance of equal certificates 2008-04-07 08:44:43 +00:00
Martin Willi b5dbcc6270 compare certificates against full encoding to allow equality check of untrusted certs 2008-04-07 08:28:35 +00:00
Martin Willi 9caadea8c8 fixed bad cleanup which results in segfault if no issuer cert found, fixes #43 2008-04-07 08:06:02 +00:00
Martin Willi ff867d062e added ./configure option --with-strongswan-conf= 
defaults to /etc/strongswan.conf
 2008-04-07 06:56:33 +00:00
Martin Willi 4071ad1e5b fixed segfault when opening a SQLite database fails 2008-04-07 06:49:13 +00:00
Martin Willi 8ec032fc62 added helper scripts to create SQL scripts 2008-04-07 06:06:42 +00:00
Martin Willi a9184df36b do not build leak_detective.o if not enabled 2008-04-04 11:38:16 +00:00
Martin Willi 2429fb4958 defining hook functions ourself as definition in uClibc and glibc differ, fixes #36 2008-04-04 11:37:19 +00:00
Martin Willi 67d147e888 removed unused gmp.h to build libstrongswan without libgmp 2008-04-04 11:13:14 +00:00
Martin Willi cce97b647a redirecting all leak_report information to stderr 2008-04-03 11:25:08 +00:00
Martin Willi 6c45e62242 some code cleanups 2008-04-03 10:22:17 +00:00
Martin Willi 6af29ccf33 configure option in strongswan.conf for thread count 2008-04-03 08:37:24 +00:00
Martin Willi 6e4e27f8de updated test data to use correct encoding data 2008-04-03 06:45:17 +00:00
Martin Willi 473eff33aa updated TODO 2008-04-02 13:21:02 +00:00
Martin Willi 16f5dacd4b added some NEWS for the 4.2 release 2008-04-02 13:20:46 +00:00
Martin Willi d6bd078a65 updated RFCs/drafts 2008-04-02 13:20:14 +00:00
Martin Willi 513f20156a fixed med_db test 2008-04-02 12:27:39 +00:00