Martin Willi
93fc29c6cf
fixed daemon kill before threads are spawned
2007-11-14 10:12:34 +00:00
Martin Willi
91b16af0fa
fixed NO_PROPOSAL_CHOSEN response on IKE_SA_INIT
2007-11-14 09:41:08 +00:00
Martin Willi
30a68d715b
implemented configuration query and IKE_SA initiation in XML interface
2007-11-13 11:56:52 +00:00
Martin Willi
275cec2eac
implemented IKE/CHILD_SA termination through XML interface
2007-11-12 15:06:04 +00:00
Andreas Steffen
d5da42a9e4
fixed _updown target for ipv6
2007-11-06 13:45:54 +00:00
Martin Willi
00fb758755
adding new virtual ip before deleting old one to keep IP on reauthentication
2007-10-25 07:50:23 +00:00
Martin Willi
bd99d1852a
added vsignal todo
2007-10-25 07:49:32 +00:00
Martin Willi
39a8e5a580
fixed some typos
2007-10-05 09:52:23 +00:00
Martin Willi
1169ab4ec7
removed recursive mutex and __USE_UNIX98, should fix uClibc build
2007-10-05 09:47:55 +00:00
Martin Willi
6705052c2d
fixed bad cast which resulted in a crash on "ipsec update"
2007-10-05 09:13:03 +00:00
Martin Willi
b9bc74979e
fixed sqlite_backend compilation to respect changes from [3238]
2007-10-04 08:18:42 +00:00
Tobias Brunner
d5cc175833
experimental P2P-NAT-T for IKEv2 merged back from branch
2007-10-03 15:10:41 +00:00
Martin Willi
2970674faf
reverted changeset [3215], as we need NULL callback to do asynchronous calls
...
added interface_manager_cb_empty function, which calls synchronous but doesn't do anything
2007-10-03 08:10:03 +00:00
Tobias Brunner
183ddc20a9
typo
2007-10-02 13:56:58 +00:00
Tobias Brunner
9b997daab9
do not attempt to encrypt payloads without crypter or signer (allows to override message rules)
2007-10-02 13:31:12 +00:00
Martin Willi
06d00e4f7b
fixed "ipsec statusall" SPI formatting
2007-10-02 13:11:23 +00:00
Martin Willi
e4c9b92171
fixed sqlite database path
2007-10-02 11:55:19 +00:00
Tobias Brunner
56db479192
ID payload with explicit payload type
2007-10-02 11:55:10 +00:00
Tobias Brunner
1fbcbe32d0
get_first_payload_type for message_t
2007-10-02 11:42:27 +00:00
Tobias Brunner
17e78a0981
dummy callback added to interface manager
2007-10-02 11:33:16 +00:00
Martin Willi
06011f6882
remove control sockets on startup, as we don't have privileges on shutdown
2007-10-02 11:20:07 +00:00
Martin Willi
a3f100fa09
improved debugging code for traffic selector processing
2007-10-02 07:39:56 +00:00
Martin Willi
f53b74c96f
moved force_encap to ike_config, enables responder to enforce udp encapsulation
...
fixed bugs in force_encap code
2007-10-01 16:41:34 +00:00
Martin Willi
011fb1b97e
removed accidentally checked in debugging code
2007-10-01 12:25:26 +00:00
Martin Willi
9dae1bed00
implemented IKEv2 force_encap connection parameter
...
enforces UDP encapsulation by faking NAT detection payloads
to hurdle restrictive firewalls
2007-10-01 12:19:39 +00:00
Martin Willi
92232dab33
fixed stuid()/setgid() and error handling
2007-10-01 09:07:10 +00:00
Martin Willi
f215e91999
implemented more aggressive MOBIKE path probing
...
do not queue more than one MOBIKE task
2007-09-28 08:22:37 +00:00
Martin Willi
052d58feaf
fixed CHILD_SA SPI byte order in XML interface
2007-09-28 07:05:15 +00:00
Martin Willi
055d016b49
changed inheritable capability set to the permitted one to execute firewall script with CAP_NET_ADMIN
2007-09-28 07:04:09 +00:00
Martin Willi
85c6fc0283
reduced debbugging level
2007-09-27 13:09:50 +00:00
Martin Willi
983d7cd292
made add_ip()/del_ip() calls synchron (waiting until kernel event received)
...
this should fix MOBIKE route migration with virtual IPs
2007-09-27 12:48:00 +00:00
Tobias Brunner
278396b6da
typos
2007-09-27 10:36:03 +00:00
Martin Willi
c295d0eb4b
refactored strongswan manager
...
removed buggy request parsing code, use ClearSilvers CGI kit instead
fixed CHILD_SA listing in manager (needs better design)
using secure XML communication through unix sockets
removed images with questionable (non-GPL) license
2007-09-26 14:02:21 +00:00
Martin Willi
d9d69536b0
improved MOBIKE roaming between interfaces
2007-09-24 12:15:25 +00:00
Andreas Steffen
b4979ff724
removed some empty lines
2007-09-18 11:23:52 +00:00
Andreas Steffen
cb23c49143
return argument has type size_t
2007-09-18 11:21:55 +00:00
Martin Willi
8f561d4409
prototype implemementation of an sqlite configuration backend
2007-09-18 07:12:21 +00:00
Andreas Steffen
703b4b0332
connection name to IKE_SA initiating
2007-09-15 20:30:04 +00:00
Andreas Steffen
a2ab401c56
put IKE_SA and CHILD_SA names in single quotes
2007-09-15 16:06:58 +00:00
Andreas Steffen
be682af3e8
log name of IKE_SA in state changes
2007-09-15 15:54:51 +00:00
Andreas Steffen
3f4076b7c8
log name of established IKE_SA
2007-09-15 15:54:30 +00:00
Andreas Steffen
21b3099ac4
log name of established CHILD_SA
2007-09-15 15:53:10 +00:00
Andreas Steffen
cf9cec125a
adapted format of IKE SPIs to strongSwan Manager's style
2007-09-15 15:35:02 +00:00
Martin Willi
c01f7bf989
added subnets of CHILD_SAs to xml interface
...
a first design of Managers IKE_SA list page
2007-09-14 14:07:30 +00:00
Andreas Steffen
15a9d460c0
peer_cfg now knows about group memberships
2007-09-13 15:33:17 +00:00
Tobias Brunner
eff806eb5a
added missing 'break' in checkout_by_peer
2007-09-13 13:00:23 +00:00
Martin Willi
6baca3b2f1
fixed 64bit issue with file descriptor
2007-09-13 08:19:15 +00:00
Martin Willi
b8c7453a82
manager can query and list IKE_SA status (no layout yet)
2007-09-13 07:45:04 +00:00
Martin Willi
dd52993068
only switch to port 4500 if we are on 500: fixed reauthentication in NAT
...
scenarios
2007-09-12 11:11:10 +00:00
Andreas Steffen
794d2526b4
removed unused chunk variable
2007-09-12 07:54:56 +00:00
Martin Willi