denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,655 Commits 1 Branch 0 Tags
7624dbf0688b684f6405b62e833743b30c1e5060
Commit Graph
781 Commits
Author SHA1 Message Date
Martin Willi 7624dbf068 process payload length more strictly 2008-05-23 18:23:17 +00:00
Martin Willi 5e17e35c8d fixed some compiler warnings 2008-05-23 15:49:43 +00:00
Andreas Steffen c7d81ad12c added --utc option to ipsec pool 2008-05-23 15:46:25 +00:00
Martin Willi de3d65a132 filtering out non matching path probing pairs explicitly 2008-05-23 15:43:42 +00:00
Andreas Steffen 0672aa7b0e added display of holderIssuer, holderSerial, and authorityKeyIdentifier 2008-05-23 14:24:24 +00:00
Andreas Steffen eaa1399812 fixed the strongswan.conf path 2008-05-22 21:59:30 +00:00
Andreas Steffen 7199d22e77 implement basic listing of attribute certificates 2008-05-22 21:58:22 +00:00
Andreas Steffen be1585c587 log received DH groups and PRFs if no common proposal is found 2008-05-22 14:18:44 +00:00
Tobias Brunner 346e9c5712 added the ECP groups from RFC 5114 2008-05-22 11:55:05 +00:00
Tobias Brunner fc1a31d54b added ECDH with OpenSSL (see RFC 4753) 2008-05-22 11:39:17 +00:00
Tobias Brunner 31430acc1b correctly initialize the mediation and connection manager 2008-05-22 11:33:35 +00:00
Martin Willi e1d2435dbf fixed parsing of UNKNOWN_PAYLOADs 2008-05-21 21:53:38 +00:00
Andreas Steffen 0005cee527 fixed typo 2008-05-21 21:52:59 +00:00
Martin Willi 85a119bc0b replying to COOKIE2 mobike notify properly 
including COOKIE2 ourself after path probing
 2008-05-21 17:56:21 +00:00
Martin Willi cb9edc54eb using fixed size keys in key derivation for AES-XCBC PRF 2008-05-21 14:58:03 +00:00
Andreas Steffen 8bbb212f3a list proposed ESP ENCRYPTION and INTEGRITY algorithms if no proposal is chosen 2008-05-20 21:54:33 +00:00
Martin Willi da1bc5e860 fixed loading of smp plugin 2008-05-19 14:20:07 +00:00
Tobias Brunner 6f2ba57a4e added a fixup for addresses from shared libraries in segmentation fault handler 2008-05-19 12:49:35 +00:00
Tobias Brunner 68ac3b44d1 fixed a bug introduced in [3973] 2008-05-19 08:48:44 +00:00
Andreas Steffen a327ee9589 suppress listing of integrity algorithm if it is undefined 2008-05-17 21:52:58 +00:00
Andreas Steffen 15c508c708 ccm and gcm icv_sizes are accepted both in bits and octets 2008-05-17 21:51:47 +00:00
Tobias Brunner 3f730ec1cd Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) in charon. 2008-05-16 13:27:21 +00:00
Martin Willi 99968bf0a0 fixed plugin names of EAP modules 2008-05-16 12:14:48 +00:00
Martin Willi 1ba62b5562 loading default modules depending on configure options 2008-05-16 08:52:32 +00:00
Martin Willi a3d92a3745 plugin load configuration in strongswan.conf 
some components accept a "component.load" option with a space separated list of plugins to load
  libcharon- plugins are now handled the same way as libstrongswan- plugins
 2008-05-15 14:01:26 +00:00
Martin Willi 89658f6d6c static leases use 0, not NULL timeout 
fixed static leases
 2008-05-15 09:26:47 +00:00
Martin Willi 782db7edd1 prototype of mediation client database plugin 2008-05-14 07:26:19 +00:00
Martin Willi 0fd4caea66 handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication 2008-05-14 06:49:31 +00:00
Martin Willi 4d4fc2eaa1 fixed "pool --purge" on mysql 2008-05-13 07:39:24 +00:00
Martin Willi 5373f2a642 fixed lookup for expired leases 
initializing database if in inconsistent state
 2008-05-13 07:24:53 +00:00
Andreas Steffen f85d02a419 fixed typos 2008-05-11 20:36:14 +00:00
Andreas Steffen 95c297b580 added missing ipcomp DB type definition 2008-05-11 16:41:51 +00:00
Martin Willi 6cf1215e3c ported IP pool to mysql 2008-05-09 15:01:22 +00:00
Martin Willi 7051ef4091 usable prototype of "ipsec pool" tool 2008-05-09 12:55:41 +00:00
Martin Willi f3bcd7f041 correctly reassigning valid leases 2008-05-09 12:22:20 +00:00
Tobias Brunner d4aad55434 IPComp for IKEv2 2008-05-08 16:19:11 +00:00
Martin Willi 0f074a4344 implemented append mode for xcbc, testcase 2008-05-08 14:51:37 +00:00
Martin Willi affd7a90ba moved RAW public key support to a separate plugin (pubkey) 2008-05-08 13:16:42 +00:00
Martin Willi 240e727fde renamed PRF_AES128_CBC to PRF_AES128_XCBC 2008-05-08 12:43:27 +00:00
Martin Willi 5b7ec6d4e0 renamed med_db plugin to medsrv, as we will introduce an additional medcli client plugin 2008-05-08 12:11:30 +00:00
Martin Willi 25b12c696b replaced --with-gid/uid by --with-group/user 
using named users, groups
fixed capability dropping in pluto
 2008-05-08 10:58:04 +00:00
Martin Willi 5302703407 prototype of sql pool administration utility 2008-05-07 09:37:08 +00:00
Martin Willi 5d892343fa using capset version 1 if a newer is available 2008-05-07 08:46:37 +00:00
Martin Willi bc1f02a860 providing medation configuration through med_db plugin 2008-05-06 13:44:14 +00:00
Martin Willi ff6836716c returning reference pointer on get_ref() 2008-05-06 10:55:42 +00:00
Martin Willi 27d04e055d implemented XCBC algorithms (signer, prf) for IKE on top of a crypter 
supporting ike=...-aesxcbc-... in ipsec.conf 
added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal
AES XCBC testcase
 2008-04-30 14:26:24 +00:00
Tobias Brunner 1da06b295f made some stuff static 2008-04-28 14:19:25 +00:00
Martin Willi 3444390241 supporting multiple comma seperated subnets in left/rightsubnet definition 
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
 2008-04-25 12:41:37 +00:00
Martin Willi 5e6bbf4f77 added _GNU_SOURCE and limits.h to build against glibc-2.8 2008-04-24 13:49:20 +00:00
Martin Willi c624081a7f added missing base64 chunk test 2008-04-24 13:28:18 +00:00