denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,130 Commits 1 Branch 0 Tags
730e2c0542c0e18ddba895e46ff9ee76d6c458d4
Commit Graph
108 Commits
Author SHA1 Message Date
Martin Willi 92ee45a0ee cleanups in kernel interface code 
added proper traffic selector to string conversion
some cleanups here & there
 2006-07-18 12:53:54 +00:00
Martin Willi b34be51cef fixed bug which erroneously detected KE payload when rekeying 2006-07-14 08:18:48 +00:00
Martin Willi 325e497798 improved logging on verify errors for some payloads 
enforcing IKE_SA shutdown, even when transactions are outstanding
proper reject of CREATE_CHILD_SA message with KE payload
 2006-07-13 12:49:35 +00:00
Martin Willi 4c04f30a51 fixed CREATE_CHILD_SA transaction dispatching 2006-07-13 08:51:24 +00:00
Martin Willi bcb95ced3d added CHILD_SA states, which allows us to detect further simultaneous transactions 
reimplemented the buggy message id handling
 2006-07-13 08:26:54 +00:00
Martin Willi cb5c41cde9 updated some inline docs 2006-07-12 14:08:52 +00:00
Martin Willi 0d379627de fixed crypter/signer in/out to conform with standard 2006-07-12 14:08:13 +00:00
Martin Willi b68afb7bd8 fixed payload order 2006-07-12 14:07:30 +00:00
Martin Willi aeeb4f4f97 added policy cache to kernel interface 
allows refcounting of multiple installed policies
	finally brings us stable simultaneous rekeying
 2006-07-12 11:42:36 +00:00
Martin Willi 269f7f448b leak detective blanks memory on free & alloc, allows further membug detection 2006-07-12 11:15:31 +00:00
Andreas Steffen c361cc8c51 identification_t.matches() supports multiple wildcard counts 2006-07-11 06:12:45 +00:00
Martin Willi abba7ecb9d further work done for simultaneous rekeying/delete 
still some cases which cause trouble
 2006-07-10 14:24:04 +00:00
Martin Willi c71d53ba4e updated copyright information 2006-07-07 08:49:06 +00:00
Martin Willi 698d774918 reimplemented CHILD_SA rekeying & delete 
no simultanous transaction with CHILD_SAs yet!
 2006-07-07 07:04:07 +00:00
Martin Willi 5f0eb96fc4 improved CHILD_SA output for "ipsec statusall" 2006-07-05 13:11:55 +00:00
Martin Willi 3dd3c5f39e redesigned IKE_SA using a transaction mechanism: 
removed old state machine
  reimplemented IKE_SA setup and delete
  implemented dead peer detection
  implemented keep-alives
  a lot of fixes
  no rekeying yet
 2006-07-05 10:53:20 +00:00
Martin Willi f141214e64 applied latest NATT patch with some fixes and cleanups 2006-07-04 13:25:00 +00:00
Andreas Steffen a642cbe3ae log entries start with lowcercase character 2006-07-04 06:11:35 +00:00
Andreas Steffen 427088f004 fixed natd_hash memory leak 2006-07-03 08:34:34 +00:00
Andreas Steffen 971218c3ae support of cert payloads 2006-07-03 06:27:45 +00:00
Andreas Steffen 1d390631d7 lowercase log entries 2006-07-03 06:26:06 +00:00
Martin Willi 2f89902d07 applied new changes from NATT team 
DPD only done when no IPsec and IKE traffic processed
	minor changes here and there
 2006-06-23 14:02:30 +00:00
Martin Willi 1396815afb first merge of NATT code 2006-06-22 06:36:28 +00:00
Martin Willi 5c6b5bf599 fixed bug: usage of already freed mem 2006-06-20 09:53:25 +00:00
Martin Willi b965b8456b fixed SPI when acting as initiator of rekeying 2006-06-19 09:27:14 +00:00
Martin Willi c65a4fff3f fixed SPI when rekeying and deleting CHILD_SAs 2006-06-19 08:54:19 +00:00
Martin Willi 891dfaf983 change key derivation order to fullfill RFC 2006-06-19 08:11:42 +00:00
Martin Willi f7eb60dd5e 2006-06-16 14:10:49 +00:00
Martin Willi 147fe5095d fixed aes code, we support now aes128, aes192, aes256 in IKE 2006-06-15 13:14:09 +00:00
Martin Willi c095388f7f added support for "ike" and "esp" keywords 
fixed bugs in proposal code
algorithm selection for charon works now with ipsec.conf
a lot of other fixes
 2006-06-15 11:09:11 +00:00
Martin Willi 3efbf98312 implemented clean spi allocation behavior when using multiple proposals 2006-06-15 11:06:22 +00:00
Martin Willi fa32cd3c47 debug and logging improvements 2006-06-13 10:01:04 +00:00
Martin Willi 50f98119dd using same reqid if a child sa rekeys an existing one 2006-06-12 08:36:41 +00:00
Andreas Steffen c4a7413e72 cosmetics 2006-06-12 07:55:37 +00:00
Martin Willi a2a3fb3e25 workaround for peers rekeying at the same time 
loading lifetime policies from ipsec.conf
 2006-06-12 07:33:20 +00:00
Martin Willi 695723d4e8 old child_sa gets deleted after rekeying 
rekeying almost complete, but:
	IKE_SA get in an invalid state when both initiate rekeying at the same time,
 2006-06-09 15:12:43 +00:00
Martin Willi b543bef50c improved kernel interface logging 2006-06-09 08:41:41 +00:00
Martin Willi 5c131a016b specifying keysize in bits, as it is required in IKEv2 
added generic kernel SA algorithm handling, which brings us:
        aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
 2006-06-09 07:31:30 +00:00
Martin Willi 5238c9afef fixed compile warnings when using -Wall 
further CHILD_SA rekeying work done:
	creation of a new CHILD_SA on a expire from a kernel works
	delete of old CHILD_SA still missing
	some issues when both initiate rekeing
 2006-06-08 14:20:05 +00:00
Martin Willi 8d77eddec2 further work for rekeying: 
get liftimes from policy
  added new state
  initiation of rekeying done
proposal redone:
  removed support for AH+ESP proposals
 2006-06-07 13:26:23 +00:00
Martin Willi 6a030ba9ea fixed a memleak 2006-06-07 05:54:09 +00:00
Martin Willi 32b6500fbf job management: 
moved job code from thread_pool to job, jobs have an "execute" method now
  added two new jobs: delete_child_sa & rekey_child_sa
kernel interface:
  listens now for ACQUIRE & EXPIRE
  supports hard and soft lifetimes
  fires jobs for delete and rekey child sa
ike sa manager:
  can checkout IKE SAs by requid of owned CHILD SAs
we have now the infrastructure to do the rekeying... :-)
 2006-05-31 14:23:15 +00:00
Martin Willi 6f2aba1322 - fixed some memleaks/freebugs 
- leak detective works almost usable now (?!)
 2006-05-31 14:13:26 +00:00
Martin Willi bd72398729 - fixed host-host tunnel traffic selection, host-host works now 2006-05-31 06:52:27 +00:00
Andreas Steffen 9db4f61476 cosmetics in log_status output 2006-05-30 11:07:14 +00:00
Andreas Steffen c11c43d2c3 use of streq 2006-05-30 11:03:55 +00:00
Andreas Steffen 510d54eb59 lookup of private key based on keyid of public key 2006-05-30 07:53:13 +00:00
Martin Willi 9fe14f4b8a - policies contain a connections name now 
- used for initiate and delete
- connections won't get initiated twice anymore
- deleting of connections is now possible, which allows us to use
  ipsec update and ipsec reload
 2006-05-29 11:09:45 +00:00
Andreas Steffen f8be15f53b changed to standard connection log output 2006-05-29 07:11:50 +00:00
Martin Willi 65996a534d - some logging improvements and cosmetics 2006-05-24 11:59:58 +00:00