denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,852 Commits 1 Branch 0 Tags
78060ba0632e26bafccfa9a2fefa70a9e5ac98fc
Commit Graph
3333 Commits
Author SHA1 Message Date
Tobias Brunner 78060ba063 Do not link libcharon to libstrongswan. 
Linking to libstrongswan breaks the integrity-tests because libtool
relinks libcharon to libstrongswan on install, thus changing the
checksum.
 2010-03-19 13:34:53 +01:00
Tobias Brunner ef87a61efd Explicitly link charon to libstrongswan. 
Also fixed the reference to the pthread library.
 2010-03-19 13:34:53 +01:00
Gerd von Egidy 454faa47de Don't indirectly link dependent libraries. 
The default behaviour for ld allows users to 'indirectly' link to required
objects/libraries through intermediate objects/libraries. While this is
convenient, it can also be dangerous because it makes your program's
dependencies tied to the dependencies of other objects.

Beginning with Fedora 13 this will be changed and you need to explicitly
link all dependent libraries.

More details can be found here:
http://fedoraproject.org/wiki/UnderstandingDSOLinkChange

This patch fixes all such cases in strongSwan.
 2010-03-19 13:34:53 +01:00
Tobias Brunner 02222dfa65 Make integrity tests compatible with libcharon. 
This does currently not work because libtool relinks libcharon on
install, thus changing the checksum.
 2010-03-19 13:34:53 +01:00
Tobias Brunner 349fa52852 Replacing the original charon with a small wrapper around libcharon. 2010-03-19 13:34:52 +01:00
Tobias Brunner bd3f8ea30b Convert charon into libcharon. 2010-03-19 13:34:52 +01:00
Tobias Brunner 08c5572602 Moving charon to libcharon. 2010-03-19 13:34:52 +01:00
Martin Willi 7c11d10eb8 Removed strayed code fragment 2010-03-19 10:25:12 +01:00
Heiko Hund 437690f897 ipsec pool --batch command 
Introduce the --batch command which reads several ipsec pool commands
and their arguments from a file or STDIN. Useful if you need to run
serveral commands atomically from a configuration daemon or likewise.

Signed-off-by: Heiko Hund <[email protected]>
 2010-03-19 10:23:40 +01:00
Heiko Hund a90ed06f8a ipsec pool error return status 
Fix the error return status of the ipsec pool command. Also make --del for
attributes succeed if no --server option was given.

Signed-off-by: Heiko Hund <[email protected]>
 2010-03-19 10:23:35 +01:00
Heiko Hund ef9f69a2b9 ipsec pool --replace command 
Introduce the pool --replace command as an alternative to --add. Also change
the current behavior of allowing duplicate pool names so that, --add with
an existing name fails and --replace removes the existing pool before
adding the new one.

Signed-off-by: Heiko Hund <[email protected]>
 2010-03-19 10:23:29 +01:00
Heiko Hund 49a452e3a2 --addresses option for ipsec pool --add command 
Introduce the --addresses option for --add that can be used to add a pool
containing non-contiguous addresses. Additionally it allows to preclaim
certain addresses for certain roadwarrior IDs. See the second chunk of
the patch for a more detailed description.

Signed-off-by: Heiko Hund <[email protected]>
 2010-03-19 10:23:26 +01:00
Martin Willi f0da32c58d Introduced ipsec.conf NTLM keyword for NT hashes 2010-03-17 18:51:00 +01:00
Martin Willi a7fb418edd EAP-MSCHAPv2 can use stored NT hashes in addition to plaintext passwords 2010-03-17 18:50:53 +01:00
Thomas Egerer d266e8953e lookup exclusion for several arbitrary routing tables 2010-03-17 10:08:02 +01:00
Tobias Brunner 7b1fc2f7cf Fixing a compiler warning when building with -Wextra. 2010-03-16 12:42:58 +01:00
Andreas Steffen a3316c2b9f setting the two most significant bits assures an RSA modulus of maximum bit size 2010-03-15 15:13:26 +01:00
Andreas Steffen c0df187cb4 we don't accept a serial number with leading zeroes 2010-03-14 19:41:40 +01:00
Tobias Brunner d5f1b9b3c1 Reordered the name and sname construction. 2010-03-12 17:34:32 +01:00
Tobias Brunner 01b87c2bc1 Fixed a bug in pluto's x509 handling. 
This bug would have lead to a segmentation fault, if no public key could
have been extracted from a certificate.
 2010-03-12 17:28:20 +01:00
Andreas Steffen 4cedab5ad7 deleted old strongSwan VIDs 2010-03-12 03:29:18 +01:00
Martin Willi 520f6b846a Added a very minimalistic SMTP client to send mails via a local Exim 2010-03-11 10:51:16 +01:00
Martin Willi a3920abb76 Add a getter for the HTTP referer 2010-03-10 15:09:12 +01:00
Andreas Steffen d12ad4748a fix 64bit issue with time_t from database 2010-03-10 10:46:49 +01:00
Tobias Brunner 908d571796 Provide the Diffie Hellman parameters from a central location, so that we do not have to replicate them in every plugin that implements the DH interface. 
The main reason for this change is that Android's libcrypto does not
include the get_rfcX_prime_Y functions by default.  Therefore we would
have had to replicate the primes a third time.
 2010-03-09 17:15:16 +01:00
Tobias Brunner 38031382dc Adding the OpenSSL plugin to the Android build. 2010-03-08 17:21:46 +01:00
Tobias Brunner 16c8442a3e Fixing integrity tests after renaming the plugin constructors. 2010-03-08 15:34:38 +01:00
Tobias Brunner d543d9cadf Adding a helper function that translates single characters in a string. 2010-03-08 15:34:38 +01:00
Tobias Brunner d14203b009 Replaced the deprecated RSA_generate_key with RSA_generate_key_ex. 2010-03-08 15:34:38 +01:00
Martin Willi 40f130dab3 Implemented the PRF_KEYED_SHA1 algorithm in the openssl plugin 2010-03-08 13:16:12 +01:00
Andreas Steffen ceeb9bac8b critical keyUsage extension must be parsed 2010-03-07 20:51:34 +01:00
Andreas Steffen 469d448333 recognize strongSwan VID 2010-03-07 17:52:04 +01:00
Andreas Steffen 1ec8f22de2 set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true 2010-03-07 17:27:53 +01:00
Tobias Brunner d6731a0f26 parser.l includes y.tab.h, so it must be built first 2010-03-05 14:59:22 +01:00
Tobias Brunner 73f5940b1c Ignore the generated y.output. 2010-03-05 14:47:08 +01:00
Tobias Brunner 551b02029e Do not hardcode the path to the strongSwan sources. 2010-03-05 14:47:08 +01:00
Tobias Brunner 0ace35282c Build libstrongswan before building any plugins during the non-monolithic build (as it was before). 2010-03-05 11:05:32 +01:00
Martin Willi 23763c2cae scepclient still depends on libfreeswan 2010-03-05 08:52:09 +01:00
Martin Willi 3eb633e1e6 Remove the invalid cast in time() parameter, as reported by Marius Tomaschewski. 2010-03-04 08:44:23 +01:00
Tobias Brunner ea2f2c4b90 Fixing a bug on platforms where size_t is unsigned. 2010-03-03 17:35:19 +01:00
Tobias Brunner 465ccdc8cf The parsed timeval is unsigned. 2010-03-03 17:34:49 +01:00
Tobias Brunner fc1afcc89e The return value of snprintf is int not size_t. 2010-03-03 17:34:06 +01:00
Martin Willi d02308502f Add braces around empty body in if statement 2010-03-03 16:53:42 +01:00
Martin Willi a5a4b6c9d1 Added charon.send/receive_delay options to simulate different RTTs 2010-03-03 15:59:29 +01:00
Martin Willi 24f058ac74 Migrated receiver_t to METHOD/INIT macros 2010-03-03 15:52:20 +01:00
Martin Willi eb1aa4c537 Migrated sender_t to METHOD/INIT macros 2010-03-03 15:46:53 +01:00
Martin Willi aa59a7f241 Check if we are not using a vendor EAP method in EAP_IDENTITY comparison. 
Bug reported by Ingo Kubbilun with a patch from Reinhard Pfau, secunet AG.
 2010-03-03 12:28:38 +01:00
Martin Willi 1abab9ec4f Use "static const", some GCCs don't like "const static" 2010-03-03 10:44:49 +01:00
Tobias Brunner 1be3298807 Adding Android.mk files to build charon and libstrongswan with the Android build system. 2010-03-03 10:18:46 +01:00
Tobias Brunner afb364fff9 Reverting eba28948a5 which was only necessary when cross-compiling the plugins for Android 2.0. 
With the coming monolithic build using Android.mk files this won't be
necessary anymore.
 2010-03-02 12:03:44 +01:00