 Andreas Steffen
|
6c8c268009
|
adapted ikev2/ip-pool-wish scenario to the new stroke ip pool function
|
2009-01-08 21:41:07 +00:00 |
|
|
Andreas Steffen
|
01a8b40b99
|
fixed two bugs introduced by the stroke ip pool refactoring
|
2009-01-08 21:34:44 +00:00 |
|
|
Andreas Steffen
|
b768170bf3
|
missing LOGFILE in debug statement
|
2008-12-23 06:35:16 +00:00 |
|
|
Andreas Steffen
|
c333bb4678
|
extended changeset [4753]
|
2008-12-04 23:16:10 +00:00 |
|
|
Andreas Steffen
|
c165d32d9e
|
suppress output from leak-detective in openac
|
2008-12-04 04:51:05 +00:00 |
|
|
Andreas Steffen
|
cf62817286
|
load openac plugins explicitly
|
2008-12-04 04:36:39 +00:00 |
|
|
Andreas Steffen
|
9c674e7214
|
fixed refactoring error in openac
|
2008-12-04 04:34:49 +00:00 |
|
|
Andreas Steffen
|
04409bbb74
|
suppress leak-detective stderr output in ipsec pool
|
2008-12-04 03:31:53 +00:00 |
|
|
Andreas Steffen
|
9b6f9d14ab
|
fixed double free of host in sadb_address2ts
|
2008-12-04 01:08:19 +00:00 |
|
|
Andreas Steffen
|
17a1045906
|
enable leak-detective and integrity-test in UML tests by default
|
2008-12-04 00:34:59 +00:00 |
|
|
Andreas Steffen
|
9a96ccd485
|
re-established lost default auth sys_logger
|
2008-12-01 01:24:55 +00:00 |
|
|
Andreas Steffen
|
28dd27be64
|
fixed crash due to missing function call parameter
|
2008-11-25 08:11:57 +00:00 |
|
|
Andreas Steffen
|
895a1156d5
|
use static IPsec policy iptables rule for alice in mobike scenario
|
2008-11-25 08:11:14 +00:00 |
|
|
Andreas Steffen
|
50ae86017c
|
version bump to 4.2.10
|
2008-11-18 00:02:59 +00:00 |
|
|
Andreas Steffen
|
08c6ed9f14
|
fixed virtual IP re-installation failure in MOBIKE scenarios introduced with changeset 4662
|
2008-11-17 00:01:34 +00:00 |
|
|
Andreas Steffen
|
9a095db5e8
|
set release number back to 4.2.9
|
2008-11-16 22:25:16 +00:00 |
|
|
Andreas Steffen
|
4dc0dce886
|
added migration to NEWS
|
2008-11-16 21:23:56 +00:00 |
|
|
Andreas Steffen
|
7a915d627d
|
completed migration of MIPv6 connections
|
2008-11-16 21:19:58 +00:00 |
|
|
Andreas Steffen
|
ad60c249b6
|
show TRANSPORT_PROXY mode in ipsec status
|
2008-11-16 21:19:17 +00:00 |
|
|
Andreas Steffen
|
1ad0bacf5b
|
adapted evaltest.dat to changed debug output
|
2008-11-13 21:38:16 +00:00 |
|
|
Andreas Steffen
|
84bec926a3
|
added type=transport_proxy and installpolicy=yes|no to man page
|
2008-11-13 06:29:53 +00:00 |
|
|
Andreas Steffen
|
509e07c5bc
|
added MIPv6 functionality to NEWS
|
2008-11-13 05:46:51 +00:00 |
|
|
Andreas Steffen
|
cd49134837
|
corrected unwanted deletion in comment
|
2008-11-12 22:57:46 +00:00 |
|
|
Andreas Steffen
|
137484895a
|
improved fix
|
2008-11-12 04:08:30 +00:00 |
|
|
Andreas Steffen
|
dbc277d908
|
fixed AES-CCM/GCM authenticated encryption by eliminating generation of superfluous generation of integrity keying material
|
2008-11-12 04:02:10 +00:00 |
|
|
Andreas Steffen
|
c117f24e61
|
renamed proxy to proxy_mode in stroke_msg.h
|
2008-11-11 07:28:52 +00:00 |
|
|
Andreas Steffen
|
e0316183f8
|
deleted obsolete parameter descriptions
|
2008-11-11 07:11:30 +00:00 |
|
|
Andreas Steffen
|
d487b4b727
|
preliminary support of Mobile IPv6
|
2008-11-11 06:37:37 +00:00 |
|
|
Andreas Steffen
|
91db979cdd
|
added the MIPv6 options use_proxy_mode and install_policy
|
2008-11-11 06:29:25 +00:00 |
|
|
Andreas Steffen
|
8ac4651ac3
|
cosmetics in debug output
|
2008-11-11 06:19:37 +00:00 |
|
|
Andreas Steffen
|
e2764b3937
|
use of host_create_any() for %any address
|
2008-11-07 05:15:19 +00:00 |
|
|
Andreas Steffen
|
f11a54bc89
|
SADB_X_EXT_KMADDRESS is not present in old kernels
|
2008-11-07 03:38:56 +00:00 |
|
|
Andreas Steffen
|
2c81539395
|
added retrieval of remote kmaddress via PF_KEY
|
2008-11-07 03:23:59 +00:00 |
|
|
Andreas Steffen
|
746115a0be
|
%any is IP family neutral
|
2008-11-05 05:32:43 +00:00 |
|
|
Andreas Steffen
|
f41a4a4e15
|
corrected typo2
|
2008-11-05 05:27:42 +00:00 |
|
|
Andreas Steffen
|
61670ba284
|
support of %any address string
|
2008-11-05 04:53:45 +00:00 |
|
|
Andreas Steffen
|
7c4fd176db
|
handle 0.0.0.0 string and af == AF_INET6
|
2008-11-05 00:41:46 +00:00 |
|
|
Andreas Steffen
|
ec1bddc50c
|
corrected a copy-and-paste error
|
2008-11-03 23:46:42 +00:00 |
|
|
Andreas Steffen
|
c636285878
|
updated copyright of kernel interface code
|
2008-11-03 23:34:23 +00:00 |
|
|
Andreas Steffen
|
bab075b166
|
added support for xfrm remote kmaddress
|
2008-11-03 23:29:34 +00:00 |
|
|
Andreas Steffen
|
9c33987471
|
migrate job creates a new IKE_SA
|
2008-11-03 07:08:59 +00:00 |
|
|
Andreas Steffen
|
cdf69f103a
|
replace tab by spaces
|
2008-11-03 06:56:22 +00:00 |
|
|
Andreas Steffen
|
a54e3d51c1
|
removed unused variables
|
2008-11-03 03:56:03 +00:00 |
|
|
Andreas Steffen
|
ef6d339c09
|
migrate_job() finds a matching child_cfg
|
2008-11-03 02:05:41 +00:00 |
|
|
Andreas Steffen
|
bd354bee5f
|
corrected parameter description
|
2008-11-03 00:24:38 +00:00 |
|
|
Andreas Steffen
|
a066f7e6c2
|
corrected captions
|
2008-11-02 22:13:17 +00:00 |
|
|
Andreas Steffen
|
5145ae48be
|
fully implemented the parsing of XFRM and PF_KEY MIGRATE messages
|
2008-11-02 21:34:52 +00:00 |
|
|
Andreas Steffen
|
b74bc4384c
|
identify attributes of XFRM ACQUIRE and MIGRATE messages
|
2008-10-31 06:18:48 +00:00 |
|
|
Andreas Steffen
|
e7f4fc537f
|
subscribing XFRM socket for MIGRATE messages
|
2008-10-31 02:50:01 +00:00 |
|
|
Andreas Steffen
|
08571955fb
|
adapted evaltest.dat to extended acquire job message
|
2008-10-31 01:46:37 +00:00 |
|
|
Andreas Steffen
|
e526d22818
|
parse xfrm and pf_key acquire messages and subscribe to migrate messages
|
2008-10-31 01:43:23 +00:00 |
|
|
Andreas Steffen
|
fdaed5289a
|
added Camellia CBC to list of encryption algorithms
|
2008-10-30 03:31:36 +00:00 |
|
|
Andreas Steffen
|
113a4afa55
|
corrected parameter description
|
2008-10-30 00:35:37 +00:00 |
|
|
Andreas Steffen
|
217d95c82e
|
upgrade to linux-2.6.28 headers with support for kmaddress struct
|
2008-10-29 05:32:38 +00:00 |
|
|
Andreas Steffen
|
f5ab7f5f57
|
refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key
|
2008-10-28 01:59:01 +00:00 |
|
|
Andreas Steffen
|
aeaa6a9b45
|
remove unused local DH_EXPONENT_ENTROPY definition
|
2008-10-27 00:02:22 +00:00 |
|
|
Andreas Steffen
|
21a45f2f2d
|
use 512 bits of entropy for secret DH exponents
|
2008-10-26 23:53:52 +00:00 |
|
|
Andreas Steffen
|
2d1000d14e
|
include updown plugin in sql scenarios
|
2008-10-21 22:28:29 +00:00 |
|
|
Andreas Steffen
|
8ceb5fd566
|
use old algorithm nameagain in pfkey/alg-aes-xcbc scenario
|
2008-10-21 03:42:32 +00:00 |
|
|
Andreas Steffen
|
7790ab0f37
|
re-established all previous AUD level messages
|
2008-10-17 03:44:06 +00:00 |
|
|
Andreas Steffen
|
ff93a76cf1
|
activate compilation of the kernel_pfkey plugin
|
2008-10-15 00:22:51 +00:00 |
|
|
Andreas Steffen
|
deb079204e
|
added PFKEYv2 UML scenarios
|
2008-10-15 00:11:00 +00:00 |
|
|
Andreas Steffen
|
c126cdc270
|
name of ESP algorithm changed to AES_XCBC_96-128
|
2008-10-14 23:55:19 +00:00 |
|
|
Andreas Steffen
|
9257c3a287
|
version bump to 4.2.9
|
2008-10-14 01:53:37 +00:00 |
|
|
Andreas Steffen
|
f2780731b0
|
corrected typo
|
2008-10-13 22:54:09 +00:00 |
|
|
Andreas Steffen
|
5dadb16ef8
|
added bug fix for addr_in_subnet() to NEWS
|
2008-10-13 00:15:16 +00:00 |
|
|
Andreas Steffen
|
35c365c2e3
|
add support of --enable-eap-sim-file and --enable-kernel-pfkey configuration options
|
2008-10-13 00:09:44 +00:00 |
|
|
Andreas Steffen
|
b165cfa945
|
remove intermediate CA certs after UML test
|
2008-10-09 22:20:56 +00:00 |
|
|
Andreas Steffen
|
03d5f41137
|
faster implementation of addr_in_subnet()
|
2008-10-09 05:44:00 +00:00 |
|
|
Andreas Steffen
|
e39b271b17
|
raw public key support for charon
|
2008-10-08 07:03:39 +00:00 |
|
|
Andreas Steffen
|
d1cbe55127
|
implemented ipsec listalgs as a stroke command
|
2008-10-08 07:00:13 +00:00 |
|
|
Andreas Steffen
|
51358f9f72
|
correct fix that replaces Changeset 4378
|
2008-10-08 06:57:52 +00:00 |
|
|
Andreas Steffen
|
c85862931f
|
removing fix applied by Changeset 4378
|
2008-10-08 06:15:41 +00:00 |
|
|
Andreas Steffen
|
ec6a88f617
|
added the sql/rw-rsa and sql/rw-rsa-keyid scenarios using raw RSA public keys
|
2008-10-08 03:37:40 +00:00 |
|
|
Andreas Steffen
|
af09048e35
|
get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 hash consistent with the IKEv2 keyid philosophy
|
2008-10-08 03:35:52 +00:00 |
|
|
Andreas Steffen
|
95fd1dedb3
|
Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype
|
2008-10-08 01:19:26 +00:00 |
|
|
Andreas Steffen
|
7a07cd1c75
|
fixed loop termination criterion in addr_in_subnet(). Thanks go to Wolfgang Steudel, TU Ilmenau
|
2008-10-07 21:41:45 +00:00 |
|
|
Andreas Steffen
|
41b1cd6b87
|
wait 5 seconds before deactivating eth1 interface on alice
|
2008-10-07 04:56:50 +00:00 |
|
|
Andreas Steffen
|
e8c58d8e64
|
explicitly load kernel-netlink plugin in UML scenarios
|
2008-10-07 04:51:20 +00:00 |
|
|
Andreas Steffen
|
09d7ef2614
|
added --disable-kernel-netlink configure option
|
2008-10-03 03:27:42 +00:00 |
|
|
Andreas Steffen
|
414caff027
|
version bump to 4.2.8
|
2008-09-18 00:42:22 +00:00 |
|
|
Andreas Steffen
|
b37cda8211
|
completed NEWS for 4.2.7 release
|
2008-09-18 00:34:31 +00:00 |
|
|
Andreas Steffen
|
b33c11b6c7
|
stroke parses and lists AC groups
|
2008-09-17 02:17:01 +00:00 |
|
|
Andreas Steffen
|
07d7f9a402
|
time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s)
|
2008-09-04 16:19:46 +00:00 |
|
|
Andreas Steffen
|
60055b7e1c
|
charon.keep_alive = 0 disables the sending of NAT keep alives
|
2008-09-03 19:00:08 +00:00 |
|
|
Andreas Steffen
|
3dfecde4c0
|
configure NAT keep alive interval using the charon.keep_alive key
|
2008-09-03 18:49:06 +00:00 |
|
|
Andreas Steffen
|
4da0116d78
|
OIDs used by strongSwan
|
2008-09-01 11:38:03 +00:00 |
|
|
Andreas Steffen
|
1a4d27c854
|
added thread_analysis tool
|
2008-09-01 11:19:07 +00:00 |
|
|
Andreas Steffen
|
8fa6f2dc66
|
streamlined ipsec listalgs output
|
2008-08-29 05:35:09 +00:00 |
|
|
Andreas Steffen
|
a9bb69c8a8
|
version bump to 4.2.7
|
2008-08-27 12:01:57 +00:00 |
|
|
Andreas Steffen
|
9f9d6ece39
|
my changes for the 4.2.6 release
|
2008-08-27 07:19:40 +00:00 |
|
|
Andreas Steffen
|
2c6dced953
|
added ikev2/rw-eap-aka-identity scenario
|
2008-08-26 20:02:58 +00:00 |
|
|
Andreas Steffen
|
a44d02627f
|
cosmetics
|
2008-08-26 19:54:47 +00:00 |
|
|
Andreas Steffen
|
41dc6b56b0
|
ipsec statusall lists eap_type and eap_identity
|
2008-08-26 19:45:44 +00:00 |
|
|
Andreas Steffen
|
a625146517
|
enable-eap-identity in UML scenarios
|
2008-08-26 19:17:14 +00:00 |
|
|
Andreas Steffen
|
d9fc51387d
|
added ikev2/multi-level-ca-cr-init and ikev2/multi-level-ca-cr-resp scenarios
|
2008-08-26 05:34:33 +00:00 |
|
|
Andreas Steffen
|
919019b3cd
|
completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes
|
2008-08-26 05:15:34 +00:00 |
|
|
Andreas Steffen
|
bafb220857
|
adapted sql/rw-eap-aka-rsa scenario to new EAP identity type
|
2008-08-25 13:52:26 +00:00 |
|
|
Andreas Steffen
|
3c87e92695
|
list CA restrictions in ipsec statusall
|
2008-08-25 12:35:18 +00:00 |
|
|
Andreas Steffen
|
dc6a2edd0d
|
corrected caption
|
2008-08-21 11:58:58 +00:00 |
|