denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
8,206 Commits 1 Branch 0 Tags
70fd2d1af7f02a1a5fedd0d07a6d4607d2ce3ac0
Commit Graph
1090 Commits
Author SHA1 Message Date
Martin Willi 61e13630f8 Show error code of Microsoft specific error notify 2011-08-03 12:01:15 +02:00
Martin Willi 06912a5eb4 Added Microsoft specific error notify 2011-08-03 12:00:50 +02:00
Tobias Brunner 846f846a39 Added tnc Doxygen group to libcharon. 2011-08-03 11:01:08 +02:00
Martin Willi caa451557f ha plugin does not need Linux headers anymore 2011-08-02 17:08:41 +02:00
Martin Willi 6e5118e9e3 Check for kernel version and use appropriate jhash version in HA plugin 2011-08-02 17:00:59 +02:00
Tobias Brunner 5baaaa5ed5 Properly initialize ike_sa_t. 2011-08-01 13:08:15 +02:00
Tobias Brunner acf380bc05 Properly initialize the UCI plugin. 2011-08-01 13:06:09 +02:00
Tobias Brunner aeb6590bda Build libtncif on Android. 2011-07-29 17:41:14 +02:00
Tobias Brunner 088d73b7b0 File lists in Android.mk files updated. 2011-07-29 17:40:29 +02:00
Tobias Brunner 241cf8e791 Update fallback drop policies if required. 2011-07-29 12:34:51 +02:00
Tobias Brunner f1c1965d64 Install fallback drop policies for all three directions. 2011-07-28 16:56:15 +02:00
Tobias Brunner d7a59f1976 Install fallback drop policies to avoid transmitting unencrypted packets. 
During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy
is first uninstalled and then the new one is installed.  In the short
time in between, where no policy is available in the kernel, unencrypted
packets could have been transmitted.
 2011-07-27 13:44:33 +02:00
Tobias Brunner fbedc6a45b Remove policies in kernel interfaces based on their priority. 
This allows to unroute a connection while the same connection is
currently established.  In this case both CHILD_SAs share the same
reqid but the installed policies have different priorities.
 2011-07-27 13:41:35 +02:00
Martin Willi 5d6b981572 Inherit authentication information during IKE_SA rekeying 2011-07-25 14:19:17 +02:00
Tobias Brunner 446ff101c2 Added a log message when roam jobs get created. 2011-07-21 19:44:42 +02:00
Andreas Steffen d33f6f7dba fixed esn type 2011-07-20 23:11:19 +02:00
Andreas Steffen 9c67f5ff54 fixed some more misspellings 2011-07-20 22:19:01 +02:00
Tobias Brunner f3bb1bd039 Fixed common misspellings. 
Mostly found by 'codespell'.
 2011-07-20 16:14:10 +02:00
Tobias Brunner d604e79185 Count running load-tester threads properly. 2011-07-18 18:46:50 +02:00
Tobias Brunner ebbdc3250b Fix load-tester.shutdown_when_complete option. 
It didn't work when used together with delete_after_established=yes.
 2011-07-18 18:46:50 +02:00
Tobias Brunner 369c2e1dee Fix listener registration in load-tester plugin. 
This fixes the load-tester.shutdown_when_complete option.
 2011-07-18 18:46:50 +02:00
Andreas Steffen 6101ee9b06 added log and status output for ESN 2011-07-16 11:09:38 +02:00
Andreas Steffen 152d7b373d added IKEv2 exchange type IKE_SESSION_RESUME from RFC 5723 2011-07-15 07:48:36 +02:00
Martin Willi b93d77ce67 Fix parentheses in write() to CLUSTERIP control files 2011-07-14 15:56:10 +02:00
Andreas Steffen 4742d6501a shunt manager installs policies with %any hosts 2011-07-14 13:51:36 +02:00
Andreas Steffen 895ac29719 fixed typo 2011-07-14 10:53:37 +02:00
Andreas Steffen 9f181e7fd5 updated IANA IKEv2 Notify Message Types 2011-07-14 10:51:24 +02:00
Andreas Steffen a96d9abf3e add relative PB-TNC message offset 2011-07-13 18:59:35 +02:00
Andreas Steffen 0ccdf898bb return offset value 2011-07-13 18:58:58 +02:00
Tobias Brunner 0c2ce1905a Adapted shunt manager to changed kernel interface (reqid in del_policy). 2011-07-06 12:48:26 +02:00
Tobias Brunner a07568cf6a Use has_more in decrypt_payloads instead of calling enumerate twice. 2011-07-06 09:43:46 +02:00
Tobias Brunner 47daa0e6fe Replaced more complex iterator usages. 2011-07-06 09:43:45 +02:00
Tobias Brunner 572abc6cbd Replaced ike_sa_t.create_additional_address_iterator with enumerator. 2011-07-06 09:43:45 +02:00
Tobias Brunner 4bbce1ef37 Replaced ike_sa_t.create_child_sa_iterator with enumerator. 
This required two new methods on ike_sa_t. One returns the number of
CHILD_SAs and one allows to remove a CHILD_SA.
 2011-07-06 09:43:45 +02:00
Tobias Brunner e26304348c Replaced simple iterator usages. 2011-07-06 09:43:45 +02:00
Tobias Brunner 328f22e1d3 Add the reqid to kernel_ipsec_t.del_policy. 2011-07-06 09:43:45 +02:00
Tobias Brunner 60d62b9e5c Don't install the libraries directly in lib/. 
Instead use a subdirectory (prefix/lib/ipsec by default). Also moved the
plugins from libexec to a subdirectory of that dir.
 2011-07-05 14:42:14 +02:00
Andreas Steffen f87991704e implemented PASS and DROP shunt policies 2011-06-28 19:42:54 +02:00
Martin Willi 6a5c8ee7a5 Initialize trap_manager listener with INIT macro, too 2011-06-28 17:19:20 +02:00
Andreas Steffen 06356a2981 Migrated trap_manager_t to INIT/METHOD macros 2011-06-28 14:42:29 +02:00
Andreas Steffen 9d997f31f1 oops, should have been a bitwise and 2011-06-25 14:57:49 +02:00
Andreas Steffen cb14d7379f fixed copy-and-paste error 2011-06-25 14:21:20 +02:00
Andreas Steffen b324976aa1 output all known PA-TNC subtype names 2011-06-24 17:31:47 +02:00
Andreas Steffen 43af575002 notify IMVs about handshake retries 2011-06-23 15:22:41 +02:00
Andreas Steffen 4d1a31632a some cosmetics 2011-06-16 11:34:52 +02:00
Andreas Steffen ec1eab0319 fixed XML parsing of TNCCS 1.1 ReasonString message 2011-06-16 11:30:38 +02:00
Andreas Steffen 26691de27f clear reason strings after delivering them 2011-06-15 13:53:53 +02:00
Andreas Steffen ea66b2f3c6 added missing single quotes 2011-06-14 17:26:54 +02:00
Andreas Steffen 892a1e4a04 fixed the IF-TNCCS 1.1 ReasonString XML encoding 2011-06-14 15:58:03 +02:00
Andreas Steffen 7d769bc6c5 added missing single quotes 2011-06-13 15:29:43 +02:00