denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,655 Commits 1 Branch 0 Tags
7624dbf0688b684f6405b62e833743b30c1e5060
Commit Graph
181 Commits
Author SHA1 Message Date
Andreas Steffen b3e4211fc3 full support of ca info records 2007-02-24 23:18:31 +00:00
Andreas Steffen 182d20e94e support of ca info records 2007-02-23 15:15:31 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk 
includes a lot of other modifications
 2007-02-12 15:56:47 +00:00
Andreas Steffen 6fda18d99d %T requires time_t ptr 2007-02-08 17:59:37 +00:00
Martin Willi 7995489a6d added support for NULL encryption in ESP 2007-02-08 13:54:42 +00:00
Martin Willi 9425da1816 include NO_EXT_SEQUENCE_NUMBER in default proposal 2007-02-08 13:31:31 +00:00
Martin Willi 21f42524e0 support for transport in create_child_sa 
include TRANSPORT/TUNNEL information in statusall
 2007-01-08 06:55:50 +00:00
Martin Willi 7652be891c added support for transport mode and (experimental!) BEET mode 
support for the type=transport/tunnel parameter in charon
 2006-12-21 14:35:17 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Andreas Steffen 3b62f53fa4 fixed output of proto/port selectors 2006-11-02 07:51:53 +00:00
Andreas Steffen 1f9160614a cosmetics 2006-11-01 17:28:01 +00:00
Martin Willi db7ef62494 better split up of library files "types.h" & "definitions.h" 
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
 2006-10-31 12:27:59 +00:00
Andreas Steffen 29137c0cef preparations to include certreqs in policy decisions 2006-10-31 07:04:15 +00:00
Martin Willi 382b481795 moved typedefs to beginning of files to solve some include problems 
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
 2006-10-30 14:07:05 +00:00
Andreas Steffen a702b731cb support of certreq payload in IKE_AUTH messages 2006-10-28 20:02:26 +00:00
Andreas Steffen 6ae7d265fb added method get_ca_certificate() 2006-10-28 15:32:30 +00:00
Andreas Steffen 5db5740075 added methods get_my_ca() and get_other_ca() 2006-10-28 15:31:42 +00:00
Andreas Steffen af6d6bb954 added methods get_my_ca() and get_other_ca() 2006-10-28 15:31:29 +00:00
Martin Willi b83806d83d improved signal handling and emitting 2006-10-26 09:46:56 +00:00
Martin Willi 191a26a6a7 removed deprecated iterator methods (has_next & current) 
added iterator hook to manipulate iterator the clean way
 2006-10-24 14:20:45 +00:00
Martin Willi 55bbff11ec linked list cleanups 
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
 2006-10-24 08:46:17 +00:00
Martin Willi e706c7f10b code cleanups in printf handlers 2006-10-20 05:57:25 +00:00
Martin Willi 60356f3375 introduced new logging subsystem using bus: 
passive listeners can register on the bus
  active listeners wait for signals actively
  multiplexing allows multiple listeners to receive debug signals
  a lot more...
 2006-10-18 11:46:13 +00:00
Martin Willi 47f5027807 introduced printf() specifiers for: 
host_t (%H)
  identification_t (%D)
  chunk pointers (%B)
  memory pointer/length (%b)
added a signaling bus:
  receives event and debug messages, sends them to its listeners
  stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
 2006-09-27 14:14:44 +00:00
Andreas Steffen 2e5935815d moved auth_method to policy 2006-09-25 05:52:13 +00:00
Andreas Steffen 54c6c4711f added hostaccess support; moved auth_method to policy 2006-09-25 05:51:16 +00:00
Andreas Steffen 833a7cbc50 support of encrypted private key files 2006-09-20 05:48:27 +00:00
Martin Willi b5cac6684d added copyright notice to sha2_hasher 
included SHA2 in build process
 2006-09-19 14:54:01 +00:00
Martin Willi 462129d332 added support for 3DES encryption algorithm in IKE 2006-09-19 11:18:35 +00:00
Andreas Steffen 43ead00a2f fixed the ids parsing bug 2006-09-19 06:16:48 +00:00
Martin Willi e63c4d8b8b fixed memleak 
fixed proper handling of id parsing errors
proper return value when no PSK found
 2006-09-18 11:39:53 +00:00
Andreas Steffen e2de376c74 added PSK support 2006-09-18 07:42:57 +00:00
Martin Willi d7934d0cfc implemented updown script to handle firewalling 2006-09-12 13:50:14 +00:00
Martin Willi a095243f60 add priority management for kernel policy 
let ROUTED policies installed, until manuall removed
introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs
ike_sa_manager cleanups
 2006-09-08 13:10:52 +00:00
Martin Willi 1239c6f40b implemented handling of dpdaction and dpddelay ipsec.conf parameters 2006-09-08 06:12:02 +00:00
Martin Willi a655f5c09c reuse reqid when a ROUTED child_sa gets INSTALLED 
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
 2006-09-05 14:07:25 +00:00
Martin Willi 48d9883a3e initial support for IPv6 (more testing needed) 
socket works (without v6 filter)
  traffic selector handle IPv4/v4 cleanly
    improvements in traffic selector code
  kernel interface accepts v6 traffic selectors and hosts
  host_t class has full IPv6 support
 2006-08-30 17:12:56 +00:00
Martin Willi fa8d578d94 fixed crash bug when doing "ipsec down" with an unknown connection 2006-08-25 09:19:42 +00:00
Martin Willi f698448ea3 implemented proper refcounting using atomic operations 2006-07-28 09:45:18 +00:00
Martin Willi fe04e93a8b implemented IKE_SA rekeying 
uses ikelifetime, rekeymargin and rekeyfuzz config settings
	no handling of simultaneus exchanges yet!
 2006-07-27 12:18:40 +00:00
Martin Willi 45f76a7ddd added possibility to route CHILD_SAs, without to set them up 
support for auto=route parameter
	support for ipsec route and ipsec unroute
	initiating of CHILD and/or IKE_SAs based on kernel acquires
 2006-07-21 13:31:53 +00:00
Martin Willi 8dfbe71b34 introduced refcounting on policy and connections 
aren't stored in the IKE_SA anymore, they are queried on the fly
	are immutable now, allows it to share them
policy selection based on traffic selectors, leads to valid lookup results
	rekeying queries the policy based on its traffic selectors
 2006-07-20 10:09:32 +00:00
Martin Willi 92ee45a0ee cleanups in kernel interface code 
added proper traffic selector to string conversion
some cleanups here & there
 2006-07-18 12:53:54 +00:00
Andreas Steffen c361cc8c51 identification_t.matches() supports multiple wildcard counts 2006-07-11 06:12:45 +00:00
Martin Willi c71d53ba4e updated copyright information 2006-07-07 08:49:06 +00:00
Martin Willi d109b48968 added support for leftprotoport and rightprotoport 2006-07-05 13:13:07 +00:00
Martin Willi 3dd3c5f39e redesigned IKE_SA using a transaction mechanism: 
removed old state machine
  reimplemented IKE_SA setup and delete
  implemented dead peer detection
  implemented keep-alives
  a lot of fixes
  no rekeying yet
 2006-07-05 10:53:20 +00:00
Andreas Steffen a642cbe3ae log entries start with lowcercase character 2006-07-04 06:11:35 +00:00
Andreas Steffen 971218c3ae support of cert payloads 2006-07-03 06:27:45 +00:00
Andreas Steffen 6f74bfd6ac added X.509 trust chain verification 2006-06-27 08:48:28 +00:00