denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,631 Commits 1 Branch 0 Tags
7b72af2eba657d2f25f4d03d00027a7b9632a9bc
Commit Graph
369 Commits
Author SHA1 Message Date
Andreas Steffen 7b72af2eba another lease identity to be single-quoted 2009-05-16 11:05:15 +02:00
Martin Willi 0ed6b7a7d7 If the NM gateway certificate has the CA constraint set, we use the gateway address as its identity. 
To allow the same certificate deployment for Windows 7 and NetworkManager clients,
the NM plugin now accepts CA certificates. To prevent any certificate holder
to act as a gateway, we bind the identity to the entered gateway address. The
gateways certificate therefore must contain the IP/DNS of the gateway
as subjectAltName.
 2009-05-15 16:35:14 +02:00
Martin Willi d4b403e2f3 updated glade dialog, using tooltip instead of tooltip_text 2009-05-15 16:04:07 +02:00
Martin Willi 6b967fb762 implemented save_secrets hook to avoid crash 2009-05-15 16:04:07 +02:00
Martin Willi a61395676f added .gitignore files to NM applet 2009-05-15 15:33:19 +02:00
Martin Willi 832427064c added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA 2009-05-15 11:02:56 +02:00
Martin Willi 5cb3210acf stroke accepts "down conn1{*}/[*]" to delete all CHILD/IKE_SAs using a given config 2009-05-15 10:18:43 +02:00
Tobias Brunner 7cdb1ddf08 Mac OS X doesn't have SADB_X_AALG_AES_XCBC_MAC 2009-05-14 17:38:36 +02:00
Tobias Brunner 9f090745cf added another possible location for the ipsec.h header file 2009-05-14 17:38:32 +02:00
Martin Willi c296e51c40 added eap_start option to radius plugin 
EAP-Start sends an empty EAP message to initiate EAP conversation
before doing EAP-Identity.
 2009-05-14 14:14:29 +02:00
Martin Willi 9dd2b42728 do not report increasing rekey times if rekeying currently active 2009-05-12 10:56:49 +02:00
Andreas Steffen 20da0b5ca5 quote identities 2009-05-11 22:07:49 +02:00
Martin Willi 496064ba45 hand out a IPv4 virtual address if %any6 is requested 2009-05-11 13:33:55 +02:00
Martin Willi 5775283f8b updated MSK calculation in MSCHAPv2, compatible with Win7/2008 RC. 2009-05-11 10:42:53 +02:00
Martin Willi c3626c2ce6 initiate trapped CHILD_SAs with same reqid 2009-05-08 10:04:00 +02:00
Martin Willi 56d461a1f1 listing routed connection in statusall 2009-05-08 10:04:00 +02:00
Martin Willi 8c99451ae1 make use of the new trap-manager 2009-05-08 10:03:58 +02:00
Martin Willi be85459323 announce EAP method initiation once only 2009-05-07 11:11:56 +02:00
Martin Willi 84f1164c77 some additional .gitignore's 2009-05-07 10:33:30 +02:00
Martin Willi a8d938ca18 fixed removal of child configs 
purge empty peer configs
 2009-05-06 12:56:21 +02:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk 
important change for developers: %Y replaces %D to print identities!
 2009-04-30 11:37:54 +00:00
Andreas Steffen f67eebccc8 changed RNG_REAL to RNG_TRUE 2009-04-29 09:13:20 +00:00
Martin Willi 18eef5d6b6 added support for AES counter mode in ESP 
proposal keywords: aes128ctr aes192ctr aes256ctr
 2009-04-27 12:16:52 +00:00
Martin Willi be0a03be64 set default CFLAGS globally, including -Wno-format 2009-04-27 11:34:07 +00:00
Martin Willi 12c8c3c4be fixed nbns handling, missing break 2009-04-27 10:48:49 +00:00
Martin Willi 3ab0e8a04b nm plugin handles DNS/NBNS configuration attributes 2009-04-27 09:38:31 +00:00
Martin Willi 7f56b49461 attribute_manager supports attribute_handler's to handle configuration attributes via plugins 
moved resolv.conf editing to a separate plugin (resolv_conf)
extended attribute_provider interface to hand out arbitrary attributes
  moved strongswan.conf based dns/nbns configuration to a plugin (attr)
 2009-04-24 14:13:52 +00:00
Andreas Steffen 226308ebc4 l format modifier outputs garbage on 64 bit platforms 2009-04-22 10:43:39 +00:00
Martin Willi 6554b5e412 schedule_job uses seconds to support time values larger than 49 days 
added schedule_job_ms for ms resolution events
 2009-04-21 15:16:56 +00:00
Andreas Steffen 08b2d288a1 scepclient and pluto use asn1 from libstrongswan 2009-04-20 20:53:38 +00:00
Andreas Steffen 3eb5042e9c migrated write_chunk() to chunk_write() 2009-04-20 06:58:00 +00:00
Martin Willi c04e75487f added ike_rekey/child_rekey options to load-tester 2009-04-17 12:30:56 +00:00
Andreas Steffen 63176bbcb0 moved strcaseeq() macro from constants.h to utils.h 2009-04-17 09:52:49 +00:00
Andreas Steffen 247e665a44 support of the ESP CAMELLIA-CBC cipher by charon 2009-04-17 09:15:15 +00:00
Martin Willi 5cac9e4c34 fixed some newline encodings 2009-04-16 14:00:14 +00:00
Martin Willi 0bd7ad6cff added create_part_enumerator() to indentity, allows to enumerate RDNs etc. 2009-04-14 14:32:22 +00:00
Martin Willi a44bb9345f merged multi-auth branch back into trunk 2009-04-14 10:34:24 +00:00
Martin Willi 9d1bd18243 require Message-Authenticator attribute only if we have a EAP-Message 2009-03-27 13:25:34 +00:00
Martin Willi 510be1a32a reserve a socket only during request(), avoids thread pool starvation 
reduced thread pool default to 1
 2009-03-27 10:52:22 +00:00
Martin Willi 5a5654ed1e added a NEWS file 
release NetworkManager-strongswan-1.1.0
 2009-03-25 07:49:11 +00:00
Martin Willi 1490ff4d9b updated Doxyfile 
properly close all doxygen groups
fixed remaining doxygen warnings
 2009-03-24 17:43:01 +00:00
Martin Willi 4a6b84a934 reintegrated eap-radius branch into trunk 2009-03-24 10:24:58 +00:00
Martin Willi d7625f0990 ported nm plugin and gnome applet to NetworkManager 7.1 2009-03-18 19:48:06 +00:00
Tobias Brunner d25ce3701e printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms). 2009-03-12 18:07:32 +00:00
Tobias Brunner 9086102dfd memleak fixed when reading smartcard secrets 2009-03-12 15:12:11 +00:00
Martin Willi d9ad73d867 fixed format string argument error, resulting in crash 
fixed memleak if pool not found
 2009-03-03 14:56:17 +00:00
Martin Willi 7b2a032d28 stop searching other pools if lease successfully released 2009-03-03 14:43:53 +00:00
Andreas Steffen 77e7eede36 ipsec statusall <conn> also filters address pools 2009-03-03 10:30:59 +00:00
Martin Willi b654daf561 fixed MSCHAPv2 password lookup when used with NetworkManager 2009-02-24 13:39:50 +00:00