denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
875 Commits 1 Branch 0 Tags
6f74bfd6ac6e37c6c3796fc55d02635b2851e72b
Commit Graph
32 Commits
Author SHA1 Message Date
Andreas Steffen 6f74bfd6ac added X.509 trust chain verification 2006-06-27 08:48:28 +00:00
Martin Willi 2f89902d07 applied new changes from NATT team 
DPD only done when no IPsec and IKE traffic processed
	minor changes here and there
 2006-06-23 14:02:30 +00:00
Martin Willi 1396815afb first merge of NATT code 2006-06-22 06:36:28 +00:00
Martin Willi aed58dcc93 readded local_credential_store 
added sendcert policy to connection
some other cleanups
 2006-06-20 08:43:57 +00:00
Andreas Steffen 21b433c641 implemented rereadcrls rereadcacerts 2006-06-20 06:05:01 +00:00
Andreas Steffen db959e6ea3 removed local_credential_store 2006-06-20 05:57:52 +00:00
Andreas Steffen 21e7a724d0 added crl support 2006-06-16 05:55:30 +00:00
Martin Willi 147fe5095d fixed aes code, we support now aes128, aes192, aes256 in IKE 2006-06-15 13:14:09 +00:00
Martin Willi c095388f7f added support for "ike" and "esp" keywords 
fixed bugs in proposal code
algorithm selection for charon works now with ipsec.conf
a lot of other fixes
 2006-06-15 11:09:11 +00:00
Martin Willi fa32cd3c47 debug and logging improvements 2006-06-13 10:01:04 +00:00
Andreas Steffen bc35460db7 add_certificate() now returns pointer to added cert 2006-06-12 07:57:14 +00:00
Martin Willi a2a3fb3e25 workaround for peers rekeying at the same time 
loading lifetime policies from ipsec.conf
 2006-06-12 07:33:20 +00:00
Martin Willi 695723d4e8 old child_sa gets deleted after rekeying 
rekeying almost complete, but:
	IKE_SA get in an invalid state when both initiate rekeying at the same time,
 2006-06-09 15:12:43 +00:00
Martin Willi b543bef50c improved kernel interface logging 2006-06-09 08:41:41 +00:00
Martin Willi 0bb32cb5f3 fixed clone/destroy behavior when not using CAs 2006-06-09 07:40:40 +00:00
Martin Willi 5c131a016b specifying keysize in bits, as it is required in IKEv2 
added generic kernel SA algorithm handling, which brings us:
        aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
 2006-06-09 07:31:30 +00:00
Andreas Steffen b7f9ca5837 added support for leftsendcert= and left|rightca= parameters 2006-06-09 05:50:41 +00:00
Andreas Steffen ac427e3677 discard cert if CA basic constraints flag is not set and warn if cert is not valide 2006-06-09 05:48:49 +00:00
Martin Willi 5238c9afef fixed compile warnings when using -Wall 
further CHILD_SA rekeying work done:
	creation of a new CHILD_SA on a expire from a kernel works
	delete of old CHILD_SA still missing
	some issues when both initiate rekeing
 2006-06-08 14:20:05 +00:00
Martin Willi 8d77eddec2 further work for rekeying: 
get liftimes from policy
  added new state
  initiation of rekeying done
proposal redone:
  removed support for AH+ESP proposals
 2006-06-07 13:26:23 +00:00
Martin Willi 6f2aba1322 - fixed some memleaks/freebugs 
- leak detective works almost usable now (?!)
 2006-05-31 14:13:26 +00:00
Martin Willi bd72398729 - fixed host-host tunnel traffic selection, host-host works now 2006-05-31 06:52:27 +00:00
Andreas Steffen 6d5e617f7d full support of ikev1 and ikev2 connection flags 2006-05-30 11:10:42 +00:00
Andreas Steffen fa896e9a21 new functions to add certificates and retrieve private and public keys 2006-05-30 07:52:25 +00:00
Andreas Steffen d793980f56 changed log level 2006-05-30 07:50:15 +00:00
Martin Willi 9fe14f4b8a - policies contain a connections name now 
- used for initiate and delete
- connections won't get initiated twice anymore
- deleting of connections is now possible, which allows us to use
  ipsec update and ipsec reload
 2006-05-29 11:09:45 +00:00
Martin Willi 8b5be79d83 - show connection templates in status & statusall 
- don't complain on termination of IKEv1 connections
 2006-05-23 13:25:57 +00:00
Martin Willi 7ba69503aa - changed config load strategy: 
starter loads both connections in charon & pluto,
  charon ignores anything with keyexchange!=ikev2.
  pluto needs the same behavior.
 2006-05-23 10:07:02 +00:00
Martin Willi 86a7937b45 - applied patch from andreas, which allows certificate listing via stroke 2006-05-19 06:44:08 +00:00
Martin Willi b5e1560659 - applied andreas's patch 
- logger output improvements
  - testin gupdates
  - and a lot more
 2006-05-18 06:02:28 +00:00
Martin Willi f2c2d395ff - introduced autotools 
- first working version
  - make dist should work
  - things to do:
    - UML testing!
    - more cleanups
 2006-05-16 14:24:03 +00:00
Martin Willi b8577029d1 2006-05-10 08:02:49 +00:00