denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,647 Commits 1 Branch 0 Tags
7199d22e77cf1a7cb9d361d409930277ff824e1e
Commit Graph
54 Commits
Author SHA1 Message Date
Andreas Steffen 7199d22e77 implement basic listing of attribute certificates 2008-05-22 21:58:22 +00:00
Andreas Steffen a327ee9589 suppress listing of integrity algorithm if it is undefined 2008-05-17 21:52:58 +00:00
Martin Willi a3d92a3745 plugin load configuration in strongswan.conf 
some components accept a "component.load" option with a space separated list of plugins to load
  libcharon- plugins are now handled the same way as libstrongswan- plugins
 2008-05-15 14:01:26 +00:00
Martin Willi 0fd4caea66 handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication 2008-05-14 06:49:31 +00:00
Andreas Steffen f85d02a419 fixed typos 2008-05-11 20:36:14 +00:00
Tobias Brunner d4aad55434 IPComp for IKEv2 2008-05-08 16:19:11 +00:00
Martin Willi 25b12c696b replaced --with-gid/uid by --with-group/user 
using named users, groups
fixed capability dropping in pluto
 2008-05-08 10:58:04 +00:00
Martin Willi 3444390241 supporting multiple comma seperated subnets in left/rightsubnet definition 
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
 2008-04-25 12:41:37 +00:00
Martin Willi 5e6bbf4f77 added _GNU_SOURCE and limits.h to build against glibc-2.8 2008-04-24 13:49:20 +00:00
Martin Willi 9213ad27c2 replaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions 2008-04-24 13:26:22 +00:00
Andreas Steffen 1d5d6f9667 Hash and URL cosmetics 2008-04-18 21:27:08 +00:00
Tobias Brunner 6439267a8c support for hash and URL encoded certificate payloads in charon 2008-04-18 11:24:45 +00:00
Andreas Steffen 8eeb796a51 changed logging of crl writing to old style 2008-04-17 20:23:31 +00:00
Martin Willi b360e3933d respecting ipsec.conf cachecrls= option 2008-04-17 15:01:57 +00:00
Martin Willi d33fa48bc7 caching of CRLs to /etc/ipsec.d/crls 2008-04-17 14:08:38 +00:00
Martin Willi 2270b396b3 added missing credential_set method to stroke_ca 2008-04-17 13:00:05 +00:00
Martin Willi 233b853dfa extended credential_set_t interface by a cache_cert() method 
allows persistent or in-memory caching of fetched certificates
 2008-04-17 11:22:37 +00:00
Martin Willi e5617e40d1 adding rightsourceip=%poolname properly to peer config 2008-04-17 08:55:32 +00:00
Martin Willi 140ed97c0c disable DPD if dpddelay is set but dpdaction=none 2008-04-16 05:50:56 +00:00
Martin Willi 6a365f0740 added API for random number generators, served through credential factory 
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
 2008-04-15 05:56:35 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi a593db5d35 ike_sa_manager enumerable, not iterable 2008-04-14 11:37:46 +00:00
Martin Willi 348af092ac added close_action as a seperate config option to dpd_action 2008-04-14 08:17:18 +00:00
Martin Willi 45819d7d49 fixed rightsourceip=%config scenarios 2008-04-14 07:18:16 +00:00
Martin Willi 96926b006d using dpd actions to enforce connection state 
dpd actions a per child-, not peer ike-sa
 2008-04-11 08:14:48 +00:00
Martin Willi ad81e51afc implemented a simple attribute provider for stroke 2008-04-09 12:56:20 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Martin Willi 1749642b15 use cert->equals() to filter out equal certificates in seperate instances 2008-04-07 08:48:08 +00:00
Andreas Steffen f8ab4a8f76 log shared secret with debug level 4 2008-04-06 17:51:29 +00:00
Martin Willi e29ebcb1af fixed compile warnings 2008-04-02 09:54:20 +00:00
Andreas Steffen 9372f44c67 workaround for parsing IPv6 PSKs requires extract_last_token() 2008-04-01 20:40:29 +00:00
Andreas Steffen 392f4e17c2 minimal stroke_list_ocsp() implementation 2008-04-01 12:11:09 +00:00
Andreas Steffen 946d1ecd59 stroke_list groups certificates by issuer 2008-04-01 10:26:27 +00:00
Andreas Steffen aaa7643b73 put DN in double quotes 2008-03-31 21:08:56 +00:00
Andreas Steffen eafc0654ca ipsec list suppresses duplicates 2008-03-31 20:21:24 +00:00
Andreas Steffen 40f9006845 output uptime in status in local time 2008-03-29 08:55:09 +00:00
Tobias Brunner e74bc8e51d changed external interface to the mediation extension. 2008-03-27 12:31:35 +00:00
Martin Willi f957f7dfb3 implemented cert cache flushing, ipsec purgeocsp 2008-03-27 06:37:29 +00:00
Andreas Steffen d61bd27a9a fixed plugin/stroke Makefile 2008-03-26 20:24:55 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Martin Willi 685232670a added uptime statistics to statusall 2008-03-26 16:13:14 +00:00
Martin Willi 391abda082 fixed compile error if --enable-p2p is set 2008-03-26 14:45:24 +00:00
Martin Willi 0b14fdb92b splitted stroke plugin to several files: 
socket: reads messages from socket, dispatching
  config: process add/del conn, serves configs through backend_t
  control: controlling of the daemon (up/down/route/...(
  cred: credential loading, serves creds through credential_set_t
  ca: ca sections from ipsec.conf, serves cdp's through credential_set_t
  list: log status information to stroke console (status/statusall/list*)
  shared_key: shared key implementation for keys read from ipsec.secrets
  plugin: registers stroke plugin and starts socket w/ thread
 2008-03-26 10:10:40 +00:00
Andreas Steffen 26930a8c3e certificate factory can load certs from file 2008-03-25 22:28:27 +00:00
Andreas Steffen 3e6ee16478 defined *_create_from_file() constructors in libstrongswan/credentials/certificates 2008-03-25 10:12:45 +00:00
Andreas Steffen 25c9637222 modified debug text 2008-03-20 15:22:26 +00:00
Martin Willi d3a6993777 fixed shared key lookup in stroke 2008-03-19 10:24:51 +00:00
Martin Willi 3c448f019b fixed peer_cfg lookup when omitting IDr 2008-03-19 10:08:59 +00:00
Martin Willi 081ae2eb61 fixed CRL check return value on revoked certificates 
fixed possible refcounting bugs
generic return_null() implementation
 2008-03-19 09:44:47 +00:00
Martin Willi 7162be5772 fixed ike_cfg lookup in stroke 2008-03-18 12:40:41 +00:00