denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,949 Commits 1 Branch 0 Tags
7999be5b0edebe8fc3b194f34be5ea43b8bb13b6
Commit Graph
627 Commits
Author SHA1 Message Date
Martin Willi 7999be5b0e pushing basic CHILD_SA sync data to backup node 2010-04-07 13:55:11 +02:00
Martin Willi 765935c8f6 basic syncing of IKE_SAs 
recreating SAs with keymat derivation
 2010-04-07 13:55:11 +02:00
Martin Willi 190edaf527 added a dispatcher class to receive HA sync messages 
simple attribute parser enumerator (probably needs a cleaner implementation)
 2010-04-07 13:55:11 +02:00
Martin Willi 12ec91ba3a generating basic IKE_SA sync messages 
pushing to statically configured failover node
 2010-04-07 13:55:11 +02:00
Martin Willi e5e91eec29 set up basic infrastructure ha_sync plugin 2010-04-07 13:55:11 +02:00
Martin Willi e16d76f9a4 added child_sa serialization to ha_sync plugin 2010-04-07 13:55:11 +02:00
Martin Willi e67f5136c0 HA sync plugin stub 2010-04-07 13:55:11 +02:00
Tobias Brunner 08c5572602 Moving charon to libcharon. 2010-03-19 13:34:52 +01:00
Martin Willi f0da32c58d Introduced ipsec.conf NTLM keyword for NT hashes 2010-03-17 18:51:00 +01:00
Martin Willi a7fb418edd EAP-MSCHAPv2 can use stored NT hashes in addition to plaintext passwords 2010-03-17 18:50:53 +01:00
Thomas Egerer d266e8953e lookup exclusion for several arbitrary routing tables 2010-03-17 10:08:02 +01:00
Tobias Brunner afb364fff9 Reverting eba28948a5 which was only necessary when cross-compiling the plugins for Android 2.0. 
With the coming monolithic build using Android.mk files this won't be
necessary anymore.
 2010-03-02 12:03:44 +01:00
Tobias Brunner 4e657051f7 Streamlined the source file list formatting in plugin makefiles. 2010-03-02 10:40:50 +01:00
Tobias Brunner 6ec60bb92b Link all enabled libstrongswan plugins into the library, link all enabled charon plugins into libcharon. 2010-03-02 10:38:52 +01:00
Tobias Brunner 9ce567f895 Changed plugin constructors from plugin_create to plugin_name_plugin_create. 2010-03-02 09:10:26 +01:00
Tobias Brunner 6cc13cd9c5 Removing the plugin constructor declarations from the header files. 2010-03-02 09:10:19 +01:00
Martin Willi 5acb97cebb Link libstrongswan to the new plugins, too 2010-02-26 11:49:04 +01:00
Martin Willi f16ca9e89c Add support for dynamic ports in load tester 2010-02-26 11:44:34 +01:00
Martin Willi b3b74e479b Set UDP encapsulation option on all sockets 2010-02-26 11:44:34 +01:00
Martin Willi 9cb2360e4f Added locking to dynamic socket list 2010-02-26 11:44:34 +01:00
Martin Willi 9ed1bb4842 Added an initiator-only socket implementation which binds ports on demand 2010-02-26 11:44:34 +01:00
Martin Willi d6a27ec64e Do not kill daemon, just not use pluggable kernel interface if initialization failed 2010-02-26 11:44:33 +01:00
Martin Willi 54f818590e Pass sockets to bypass to kernel interface, allowing us to register them dynamically 2010-02-26 11:44:33 +01:00
Martin Willi 3e631491a0 Migrated kernel_klips_ipsec to METHOD/INIT macros 2010-02-26 11:44:33 +01:00
Martin Willi 44791b75f5 Migrated kernel_pfkey_ipsec to METHOD/INIT macros 2010-02-26 11:44:33 +01:00
Martin Willi 98ed9c6cf2 Migrated kernel_netlink_ipsec to METHOD/INIT macros 2010-02-26 11:44:33 +01:00
Martin Willi 667b73721a Added left-/rightikeport ipsec.conf options to use custom IKE ports 2010-02-26 11:44:33 +01:00
Martin Willi 4e18490ea8 Store custom IKE src/dst ports on ike_cfg 2010-02-26 11:44:33 +01:00
Martin Willi dab0560497 Moved socket and socket-raw implementations to plugins 2010-02-26 11:44:32 +01:00
Tobias Brunner eba28948a5 Link all plugins to libstrongswan. 2010-02-25 13:51:05 +01:00
Martin Willi 7d3a830a71 Updated debian package for NetworkManager-strongswan-1.1.2 2010-02-18 09:51:45 +01:00
Martin Willi e159cd1d1a Version bump and NEWS for NetworkManager-strongswan-1.1.2 release 2010-02-18 09:51:44 +01:00
Martin Willi 0209179a30 Updated german translation 2010-02-18 09:51:40 +01:00
Martin Willi 7613a68f33 Tooltips are translatable 2010-02-18 09:20:13 +01:00
Martin Willi d178eee895 Newer glade requires explicit vertical vboxes 2010-02-18 09:03:17 +01:00
Martin Willi 71070c88b7 Fixed lost renaimings in android plugin 2010-02-18 08:31:10 +01:00
Martin Willi 55699f037f Added Android plugin, currently provides DNS handling on Android 2010-02-17 18:24:11 +01:00
Tobias Brunner 71baf5a8f0 Adding support for AES GMAC (RFC4543). 2010-02-12 10:57:39 +01:00
Martin Willi 7481f964ae Use child_updown hook in updown plugin, fixes doubled invocation of down script 2010-02-03 11:07:53 +01:00
Tobias Brunner 41faec0791 Some whitespace and code cleanups concerning the mediation extension. 2010-02-02 15:53:22 +01:00
Martin Willi 8015c91cb9 Added a ipsec.conf "inactivity" option to configure inactivity timeout for CHILD_SAs 2010-01-27 16:05:11 +01:00
Martin Willi 71da001753 Made inactivity_timeout a per CHILD_SA config option 2010-01-27 15:47:08 +01:00
Martin Willi 47498044c3 Support RADIUS messages up to 4096 bytes, RADIUS EAP-Message fragmentation 2010-01-19 16:47:21 +01:00
Martin Willi 7eab4a1be6 Support TLS client authentication Extended Key Usage in x509 generation 2010-01-14 12:00:43 +01:00
Martin Willi 34948b9971 EAP-MSCHAPv2 is indeed mutual, but is prone to MITM dictionary attacks 2010-01-07 15:56:11 +01:00
Andreas Steffen 7eaec999ca make error message about missing MD4 hasher more explicit 2009-12-30 23:32:03 +01:00
Tobias Brunner ff4d4aa99a Adapted the load_tester kernel-interface to the changes introduced in 6ec949e02. 2009-12-23 17:15:28 +01:00
Tobias Brunner 89ec5bef08 Whitespace cleanup. 2009-12-23 17:03:41 +01:00
Tobias Brunner 4a5a5dd290 Using the thread wrapper in charon, libstrongswan and their plugins. 2009-12-23 17:03:41 +01:00
Tobias Brunner eba64cef41 Separated the public interfaces of the threading primitives. 2009-12-23 17:01:53 +01:00