denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,233 Commits 1 Branch 0 Tags
6d61e334f7c22882520e5277206397469b0dfed8
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner 0f21ebc81d The signature of keystore_get changed again. 
With Android 2.2 (Froyo) the interface of keystore_get was changed once
again. The change was made to allow the keys to contain \0 characters.
 2010-06-28 17:18:53 +02:00
Tobias Brunner 6f52d3b077 Compiler warning fixed. 2010-06-28 08:50:30 +02:00
Tobias Brunner c0914c457b Increased the loglevel for the arguments received via Android control socket. 2010-06-24 14:46:25 +02:00
Tobias Brunner e9e2a4fecf Terminate charon from the Android plugin if the tunnel goes down after it was initiated successfully. 2010-06-24 14:30:06 +02:00
Tobias Brunner 7913a74c36 Initiate the tunnel in the Android plugin asynchronously. 
Also track its initiation using the registered listener.
 2010-06-24 14:30:05 +02:00
Tobias Brunner 8b775e99ea Implement the listener_t interface in the Android plugin to track the status of an SA. 2010-06-24 14:30:05 +02:00
Tobias Brunner 94ec9adc10 Helper function added to notify the Android frontend about status changes. 2010-06-24 14:30:05 +02:00
Tobias Brunner 024dd37fa0 Initiate consumes a child_sa reference, so get an additional one. 2010-06-24 14:30:05 +02:00
Tobias Brunner 5eb9eeb130 Use the same error code constants as in the Java frontend. 2010-06-24 14:30:05 +02:00
Tobias Brunner 359063caf7 Flush and destroy the send queue before unloading the socket plugins. 2010-06-24 14:30:05 +02:00
Tobias Brunner 9eb7f46b3d Do not install routes in the PF_KEY kernel interface if interface lookup failed. 2010-06-23 11:43:31 +02:00
Tobias Brunner a427e98da1 The signature of keystore_get was changed with Android 2.x. 2010-06-22 16:19:55 +02:00
Tobias Brunner f283520faf Avoid a segmentation fault if opening the Android control socket failed. 2010-06-22 16:18:22 +02:00
Tobias Brunner 61c950d9aa OpenSSL in Android 2.1+ lacks Elliptic Curve and ENGINE support. 
Unfortunately, opensslconf.h was not changed accordingly.
 2010-06-22 16:15:10 +02:00
Tobias Brunner c03ed4835c Allow to enable the kernel-pfkey plugin via Android.mk. 2010-06-22 16:14:14 +02:00
Tobias Brunner b7900d3258 Fixing the PF_KEY kernel interface on Android. 
In Android's in.h IPPROTO_COMP is not #defined but just an enum member.
 2010-06-22 16:12:07 +02:00
Tobias Brunner 1e3d66f8d3 Fixing compilation of the OpenSSL plugin if ENGINE support is disabled. 
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_ENGINE.
 2010-06-22 11:55:34 +02:00
Tobias Brunner 5a367e99c3 Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled. 
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_EC.
 2010-06-22 11:55:33 +02:00
Tobias Brunner 9b6db5cd2e Fixed plugin checks in Android.mk files. 2010-06-22 10:40:34 +02:00
Tobias Brunner 4f9b82bc1d Fixed compiler warning. 2010-06-15 19:58:59 +02:00
Tobias Brunner 499af811c0 Use vpn.dns* to store DNS servers (Android manages net.dns* using these). 2010-06-15 19:58:58 +02:00
Tobias Brunner be00d219cc Adding an interface that interacts with the Android Settings frontend. 2010-06-15 19:58:58 +02:00
Tobias Brunner c373f14947 Adding an Android specific credential set. 2010-06-15 19:58:58 +02:00
Tobias Brunner 51a00fb275 Adding an Android specific logger. 2010-06-15 19:58:58 +02:00
Tobias Brunner 946be4d357 Adding support for the native Linux capabilities interface. 
Note that this interface is deprecated and mainly added to support
Android. Use libcap, if possible.
 2010-06-15 19:58:30 +02:00
Tobias Brunner b77e493bea Explicitly refer to LIBCAP in Makefiles. 2010-06-15 19:57:31 +02:00
Tobias Brunner 404960e522 Run as vpn user on Android. 2010-06-15 19:57:31 +02:00
Tobias Brunner b02a03a5dd Truncate the PID file so that even if we fail to unlink it, the daemon can be restarted properly. 2010-06-15 19:57:14 +02:00
Tobias Brunner 4e9d313ff8 Explicitly include stdint.h for UINT64_MAX. 
This is required on FreeBSD 8.
 2010-06-15 15:31:46 +02:00
Tobias Brunner ed76b21652 Check for SADB_X_NAT_T_NEW_MAPPING in PF_KEY kernel interface. 
FreeBSD 8 does not support SADB_X_NAT_T_NEW_MAPPING whereas Linux and
the previous FreeBSD NAT-T patch both do.
 2010-06-15 15:31:10 +02:00
Tobias Brunner 668e84d904 Set the ports of all hosts installed via the PF_KEY kernel interface to zero. 2010-06-15 10:11:57 +02:00
Tobias Brunner 2e8a5e12ef Adding a basic unit test for hashtable_t. 2010-06-07 16:40:32 +02:00
Tobias Brunner b2ddaf0775 Adding a remove_at method to the hash table. 
This allows to remove key-value pairs while enumerating them.
 2010-06-07 16:36:26 +02:00
Tobias Brunner 88b6f14143 Migrated hashtable_t to INIT/METHOD macros. 2010-06-07 15:53:36 +02:00
Tobias Brunner 3d829c4c0a IPSEC_CONFDIR in ipsec script fixed. 2010-05-30 13:07:32 +02:00
Tobias Brunner 8f76653a4c Adding the version number to the most relevant manual pages. 2010-05-30 13:03:04 +02:00
Tobias Brunner 1d3a48b559 Updated and corrected the ipsec.secrets(5) manual page. 2010-05-30 12:29:32 +02:00
Tobias Brunner f115838bee Updated and corrected the ipsec.conf(5) manual page. 2010-05-30 12:29:26 +02:00
Tobias Brunner 28550caaa8 Updated and corrected the ipsec(8) manual page. 2010-05-30 12:29:18 +02:00
Tobias Brunner d070e0a6d1 Do not install trap policy if remote host is %any. 2010-05-28 15:43:12 +02:00
Tobias Brunner e3dd6b1475 Only include C files that start with the plugin name when building for Android. 2010-05-20 12:01:12 +02:00
Tobias Brunner 9ffb475e5d Typo fixed. 2010-05-18 13:59:23 +02:00
Tobias Brunner 9d843ee6fa Do a proper cleanup when printing usage info. 2010-05-04 18:34:27 +02:00
Tobias Brunner 6d7f4e0653 Moved syslog.h include. 2010-05-04 18:34:20 +02:00
Tobias Brunner 6b57f5edff Compiler warning fixed. 2010-05-04 18:28:28 +02:00
Tobias Brunner 726c0ae9d3 We have to rename thread_create on Mac OS X because it conflicts with a syscall. 2010-04-29 14:52:20 +02:00
Tobias Brunner 1c31d34ed5 Initialize libstrongswan in stroke (fixes Vstr logging). 2010-04-29 14:51:44 +02:00
Tobias Brunner 26a3d7e78e Initialize libstrongswan in starter (fixes Vstr logging). 2010-04-29 14:33:29 +02:00
Tobias Brunner 361f416d2c The mutex of a thread has to be locked when destroying it. 2010-04-29 13:30:51 +02:00
Tobias Brunner 257e27df07 Fixing out-of-tree build after adding dependency to config.status. 2010-04-29 13:29:53 +02:00
Tobias Brunner 6edbe1652b Integrating libhydra into the Android build system. 2010-04-12 16:47:47 +02:00
Tobias Brunner b73b3a033f Use openssl in Android by default. 2010-04-12 15:54:48 +02:00
Tobias Brunner 355c3a66b1 When logging to the database, the IDs of an IKE SA are initially NULL. 2010-04-12 13:51:10 +02:00
Tobias Brunner 9f4b02e31d Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan. 2010-04-10 12:10:04 +02:00
Tobias Brunner 0a4dc78755 Some whitespace fixes. 2010-04-06 12:56:06 +02:00
Tobias Brunner e41932320c Explicitly unload plugins before deinitializing libhydra and libstrongswan in pluto. 2010-04-06 12:47:41 +02:00
Tobias Brunner 894936ce9e Replaced some DBG_LIB with more specific groups. 2010-04-06 12:47:40 +02:00
Tobias Brunner 8b0e09103b Adding DBG_LIB to all calls of libstrongswan's version of DBG*. 2010-04-06 12:47:40 +02:00
Tobias Brunner 9ed6341d3f Adding support for debug groups in libstrongswan's logger. 2010-04-06 12:47:40 +02:00
Tobias Brunner 3fdee23f18 Move debug groups from charon's bus.h to libstrongswan's debug.h. 2010-04-06 12:47:40 +02:00
Tobias Brunner 9f3df622e4 Manually loading the pluto.(n)dns* settings is not needed anymore. 2010-04-06 12:47:40 +02:00
Tobias Brunner 7ac6060e8d Use daemon-specific config for the attr plugin. 2010-04-06 12:47:40 +02:00
Tobias Brunner a5ec302547 Moved attr plugin from libcharon to libhydra. 2010-04-06 12:47:40 +02:00
Tobias Brunner facf887253 Store the name of the daemon that initialized libhydra to load daemon-specific settings. 2010-04-06 12:47:40 +02:00
Tobias Brunner e82b5755be Added pluto/whack output to 'ipsec leases'. 2010-04-06 12:47:40 +02:00
Tobias Brunner 6bfa8e907c Added options to whack to query in-memory leases. 2010-04-06 12:47:39 +02:00
Tobias Brunner 4db0af9080 Added function to list the leases of the in-memory pools. 2010-04-06 12:47:39 +02:00
Tobias Brunner 4e06abe0fa Delete the in-memory IP address pools if a connection gets deleted. 
This fixes ipsec reload.
 2010-04-06 12:47:39 +02:00
Tobias Brunner bd22823358 Use whack_attribute in pluto to provide in-memory IP address pools. 
The pools are configured by setting rightsourceip in ipsec.conf to a
network in CIDR notation.
 2010-04-06 12:47:39 +02:00
Tobias Brunner 89715bd790 Adding a whack_attribute class which manages in-memory pools in pluto and is very similar to stroke_attribute. 2010-04-06 12:47:39 +02:00
Tobias Brunner c9235353f8 Use a read-write lock in stroke_attribute to increase concurrency. 2010-04-06 12:47:39 +02:00
Tobias Brunner fb111e5507 Make in-memory pool thread-safe. 2010-04-06 12:47:39 +02:00
Tobias Brunner 8c9f5bad8b Migrated stroke_attribute_t to METHOD/INIT macros. 2010-04-06 12:47:38 +02:00
Tobias Brunner ac5fb545c5 Extracted in-memory IP address pool from stroke plugin to libhydra. 2010-04-06 12:47:38 +02:00
Tobias Brunner 18c68f22c7 Revert "Use the same formatting as in the Makefiles of the other plugins. Makes refactorings easier." 
This reverts commit e91b116a62. Missed to
notice commit 89bf11d204.
 2010-03-26 10:47:09 +01:00
Tobias Brunner e91b116a62 Use the same formatting as in the Makefiles of the other plugins. Makes refactorings easier. 2010-03-26 10:40:14 +01:00
Tobias Brunner 70d70c8a2e Link libhydra to checksum_builder so the hydra object is defined. 2010-03-24 18:54:26 +01:00
Tobias Brunner 58f86d0f0f Changed all usages of lib->attributes to hydra->attributes. 2010-03-24 18:54:26 +01:00
Tobias Brunner 567d3f1463 Attributes moved from libstrongswan to libhydra. 
The attribute_manager_t instance is now located on the new hydra object
instead of the lib object.
 2010-03-24 18:53:10 +01:00
Tobias Brunner 83218f0d65 Fixing Doxygen for libhydra. 2010-03-24 18:53:10 +01:00
Tobias Brunner 1f4e0f61dd Segment check added for libhydra. 2010-03-24 18:53:10 +01:00
Tobias Brunner a1f90c7a85 Fixed deinit for charon --version. 2010-03-24 18:53:10 +01:00
Tobias Brunner 52bff307e1 Init/deinit libhydra in charon and pluto. 2010-03-24 18:53:10 +01:00
Tobias Brunner f9b1db1631 Adding libhydra_init, which is currently only needed for integrity checks. 2010-03-24 18:53:10 +01:00
Tobias Brunner 39856897e6 Link pluto and charon to libhydra, fixes monolithic build. 2010-03-24 18:53:10 +01:00
Tobias Brunner bde5163ae0 Moving attr-sql config in strongswan.conf to libhydra. 2010-03-24 18:53:09 +01:00
Tobias Brunner 2cba58c5b7 Fixing integrity-checks after moving the attr-sql plugin and adding libhydra. 2010-03-24 18:53:09 +01:00
Tobias Brunner 75dc019252 Moving attr-sql plugin from libstrongswan to libhydra. 2010-03-24 18:53:09 +01:00
Tobias Brunner 0bf68cbf7c Adding libhydra stub. 2010-03-24 18:53:09 +01:00
Tobias Brunner dc9ddba6e3 Adapted test_pool to the libstrongswan threading. 2010-03-24 18:51:52 +01:00
Tobias Brunner 48aa81a67a Link libcharon to checksum_builder in order to get rid of the fake symbols. 2010-03-24 17:54:07 +01:00
Tobias Brunner d7e977aced Fixed some Doxygen warnings. 2010-03-24 15:45:06 +01:00
Tobias Brunner 037fb02493 Fixed compiler warning. 2010-03-24 12:03:08 +01:00
Tobias Brunner cf46ff6875 Use vstr/gmp as shared libraries in the Android build. 2010-03-23 11:39:58 +01:00
Tobias Brunner c92c94542a Missed to include charon's Android.mk in the distribution. 2010-03-22 11:32:20 +01:00
Tobias Brunner d92b337fe9 Do not indent the source file lists in Android.mk files so we can easily compare them to the lists in the Makefile.am files. 2010-03-19 13:34:53 +01:00
Tobias Brunner 0f5a043989 Use wildcards to gather plugin source files. 2010-03-19 13:34:53 +01:00
Tobias Brunner 52c7257366 Adding support for the build of libcharon (and charon) on Android. 2010-03-19 13:34:53 +01:00
Tobias Brunner 78060ba063 Do not link libcharon to libstrongswan. 
Linking to libstrongswan breaks the integrity-tests because libtool
relinks libcharon to libstrongswan on install, thus changing the
checksum.
 2010-03-19 13:34:53 +01:00
Tobias Brunner ef87a61efd Explicitly link charon to libstrongswan. 
Also fixed the reference to the pthread library.
 2010-03-19 13:34:53 +01:00