denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
17,366 Commits 1 Branch 0 Tags
7c6bb331514ec3b76a054aef9a5f3eed5e5c89cf
Commit Graph
1797 Commits
Author SHA1 Message Date
Martin Willi 0ed6b7a7d7 If the NM gateway certificate has the CA constraint set, we use the gateway address as its identity. 
To allow the same certificate deployment for Windows 7 and NetworkManager clients,
the NM plugin now accepts CA certificates. To prevent any certificate holder
to act as a gateway, we bind the identity to the entered gateway address. The
gateways certificate therefore must contain the IP/DNS of the gateway
as subjectAltName.
 2009-05-15 16:35:14 +02:00
Martin Willi d4b403e2f3 updated glade dialog, using tooltip instead of tooltip_text 2009-05-15 16:04:07 +02:00
Martin Willi 6b967fb762 implemented save_secrets hook to avoid crash 2009-05-15 16:04:07 +02:00
Martin Willi a61395676f added .gitignore files to NM applet 2009-05-15 15:33:19 +02:00
Tobias Brunner 28154e35be documented the idea behind the current implementation of the scheduler 2009-05-15 14:43:15 +02:00
Martin Willi 832427064c added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA 2009-05-15 11:02:56 +02:00
Martin Willi 5cb3210acf stroke accepts "down conn1{*}/[*]" to delete all CHILD/IKE_SAs using a given config 2009-05-15 10:18:43 +02:00
Tobias Brunner 7cdb1ddf08 Mac OS X doesn't have SADB_X_AALG_AES_XCBC_MAC 2009-05-14 17:38:36 +02:00
Tobias Brunner 9f090745cf added another possible location for the ipsec.h header file 2009-05-14 17:38:32 +02:00
Tobias Brunner c1532e840d fixed compiler warning 2009-05-14 17:38:27 +02:00
Tobias Brunner 9015c073de make socket_t compatible with RFC 2292 (that got obsoleted by RFC 3542) 2009-05-14 17:16:21 +02:00
Martin Willi c296e51c40 added eap_start option to radius plugin 
EAP-Start sends an empty EAP message to initiate EAP conversation
before doing EAP-Identity.
 2009-05-14 14:14:29 +02:00
Martin Willi 64e8ca281f simplified SPI allocation after refactorings 2009-05-14 10:28:18 +02:00
Martin Willi d50746febe identation cleanups 2009-05-13 15:57:31 +02:00
Martin Willi ad65a713e4 fixed identation 2009-05-13 14:55:35 +02:00
Tobias Brunner 75a354bb6b fixing compilation of socket_t on systems that have neither IP_PKTINFO (Linux) nor IP_SENDSRCADDR (FreeBSD) 2009-05-12 17:40:43 +02:00
Martin Willi 0a3ca29021 fixed cleanup of traffic selector lists 2009-05-12 17:13:09 +02:00
Martin Willi 8f0ab613e5 do not destroy packet twice if message generation failed 2009-05-12 14:38:48 +02:00
Martin Willi e1fa02bc62 properly end CERT_PRE task after detecting the final authentication round 2009-05-12 11:26:50 +02:00
Martin Willi 9dd2b42728 do not report increasing rekey times if rekeying currently active 2009-05-12 10:56:49 +02:00
Martin Willi 37974979bc do not report a CHILD_SA rekey time if rekeying disabled 2009-05-12 10:56:48 +02:00
Andreas Steffen 20da0b5ca5 quote identities 2009-05-11 22:07:49 +02:00
Martin Willi 496064ba45 hand out a IPv4 virtual address if %any6 is requested 2009-05-11 13:33:55 +02:00
Martin Willi 30fc989c9c fixed configuration payload type as responder 2009-05-11 13:23:15 +02:00
Martin Willi a3d692ca87 never send a CERT payload in EAP 2009-05-11 11:37:58 +02:00
Martin Willi 5775283f8b updated MSK calculation in MSCHAPv2, compatible with Win7/2008 RC. 2009-05-11 10:42:53 +02:00
Martin Willi 25f2d52f30 Fixed EAP authentication regression 
Use correct nonce/init message again for EAP AUTH payload
sent from responder to initiator.
 2009-05-11 10:42:52 +02:00
Martin Willi b81917ea00 fixed memleak 2009-05-11 10:42:52 +02:00
Martin Willi 9d737ecfc5 drop acquires we already have a pending connection attempt 2009-05-08 10:04:01 +02:00
Martin Willi c3626c2ce6 initiate trapped CHILD_SAs with same reqid 2009-05-08 10:04:00 +02:00
Martin Willi fda97f2140 removed $Id$ from new template generated files 2009-05-08 10:04:00 +02:00
Martin Willi 56d461a1f1 listing routed connection in statusall 2009-05-08 10:04:00 +02:00
Martin Willi 17339b9a86 removed obsolete route/unroute code from ike_sa/controller 2009-05-08 10:03:59 +02:00
Martin Willi 8c99451ae1 make use of the new trap-manager 2009-05-08 10:03:58 +02:00
Martin Willi eb8ed130af added a trap-manager to handle routed policies outside of IKE_SAs 2009-05-08 10:03:58 +02:00
Tobias Brunner ca39743f06 Merge branch 'master' of git.strongswan.org:~/strongswan into HEAD 2009-05-07 17:47:48 +02:00
Tobias Brunner 433c0968e4 properly initialize buffer when printing loaded plugins. 2009-05-07 17:40:19 +02:00
Martin Willi 0ce19b27a6 instanciate new tasks only if none queued 2009-05-07 15:57:34 +02:00
Martin Willi a627e31f46 properly delete IKE_SA if IKE_SA_INIT processing failed 2009-05-07 15:53:45 +02:00
Martin Willi be85459323 announce EAP method initiation once only 2009-05-07 11:11:56 +02:00
Martin Willi 84f1164c77 some additional .gitignore's 2009-05-07 10:33:30 +02:00
Martin Willi a8d938ca18 fixed removal of child configs 
purge empty peer configs
 2009-05-06 12:56:21 +02:00
Martin Willi 5bbfd264ec fixed remove_child_cfg(), use correct enumerator for remove_at 2009-05-06 11:09:57 +02:00
Martin Willi e868a564d9 set IKE_SA on bus to catch unroute event properly 2009-05-05 09:51:28 +02:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk 
important change for developers: %Y replaces %D to print identities!
 2009-04-30 11:37:54 +00:00
Martin Willi 466f11bfaf added .gitignore files, ready for the switch 2009-04-30 07:42:30 +00:00
Andreas Steffen f67eebccc8 changed RNG_REAL to RNG_TRUE 2009-04-29 09:13:20 +00:00
Martin Willi 18eef5d6b6 added support for AES counter mode in ESP 
proposal keywords: aes128ctr aes192ctr aes256ctr
 2009-04-27 12:16:52 +00:00
Martin Willi be0a03be64 set default CFLAGS globally, including -Wno-format 2009-04-27 11:34:07 +00:00