denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,891 Commits 1 Branch 0 Tags
7f9fab77f81ef2dd0dedcd3a6465407d1f83718e
Commit Graph
500 Commits
Author SHA1 Message Date
Martin Willi fcb06fdbfa use rwlock instead of a mutex in trap_manager, avoids possible deadlock 2009-06-16 17:27:25 +02:00
Martin Willi 04d6583e26 reset IKE_SA on bus after checkout/checkin of replacement SA 2009-06-16 17:27:24 +02:00
Martin Willi a13c013b6f include TSi/TSr of triggering packet in acquire 2009-05-20 11:44:43 +02:00
Martin Willi cd37e13133 properly terminate EAP authentication if EAP method fails 2009-05-20 09:24:18 +02:00
Martin Willi 64e8ca281f simplified SPI allocation after refactorings 2009-05-14 10:28:18 +02:00
Martin Willi 0a3ca29021 fixed cleanup of traffic selector lists 2009-05-12 17:13:09 +02:00
Martin Willi 8f0ab613e5 do not destroy packet twice if message generation failed 2009-05-12 14:38:48 +02:00
Martin Willi e1fa02bc62 properly end CERT_PRE task after detecting the final authentication round 2009-05-12 11:26:50 +02:00
Martin Willi 37974979bc do not report a CHILD_SA rekey time if rekeying disabled 2009-05-12 10:56:48 +02:00
Martin Willi 30fc989c9c fixed configuration payload type as responder 2009-05-11 13:23:15 +02:00
Martin Willi a3d692ca87 never send a CERT payload in EAP 2009-05-11 11:37:58 +02:00
Martin Willi 25f2d52f30 Fixed EAP authentication regression 
Use correct nonce/init message again for EAP AUTH payload
sent from responder to initiator.
 2009-05-11 10:42:52 +02:00
Martin Willi b81917ea00 fixed memleak 2009-05-11 10:42:52 +02:00
Martin Willi 9d737ecfc5 drop acquires we already have a pending connection attempt 2009-05-08 10:04:01 +02:00
Martin Willi c3626c2ce6 initiate trapped CHILD_SAs with same reqid 2009-05-08 10:04:00 +02:00
Martin Willi fda97f2140 removed $Id$ from new template generated files 2009-05-08 10:04:00 +02:00
Martin Willi 17339b9a86 removed obsolete route/unroute code from ike_sa/controller 2009-05-08 10:03:59 +02:00
Martin Willi 8c99451ae1 make use of the new trap-manager 2009-05-08 10:03:58 +02:00
Martin Willi eb8ed130af added a trap-manager to handle routed policies outside of IKE_SAs 2009-05-08 10:03:58 +02:00
Martin Willi 0ce19b27a6 instanciate new tasks only if none queued 2009-05-07 15:57:34 +02:00
Martin Willi a627e31f46 properly delete IKE_SA if IKE_SA_INIT processing failed 2009-05-07 15:53:45 +02:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk 
important change for developers: %Y replaces %D to print identities!
 2009-04-30 11:37:54 +00:00
Martin Willi 18eef5d6b6 added support for AES counter mode in ESP 
proposal keywords: aes128ctr aes192ctr aes256ctr
 2009-04-27 12:16:52 +00:00
Martin Willi 7f56b49461 attribute_manager supports attribute_handler's to handle configuration attributes via plugins 
moved resolv.conf editing to a separate plugin (resolv_conf)
extended attribute_provider interface to hand out arbitrary attributes
  moved strongswan.conf based dns/nbns configuration to a plugin (attr)
 2009-04-24 14:13:52 +00:00
Martin Willi 6554b5e412 schedule_job uses seconds to support time values larger than 49 days 
added schedule_job_ms for ms resolution events
 2009-04-21 15:16:56 +00:00
Martin Willi 405e30a4a7 dump CHILD_SA keys in loglevel 4 2009-04-21 09:29:23 +00:00
Martin Willi 09f706ec3e fixed IKE_SA rekeying collisions 2009-04-20 11:29:27 +00:00
Martin Willi 8a36c7e20d do not adopt already initiated tasks after rekeying 2009-04-20 11:28:23 +00:00
Tobias Brunner c889ce80ab fixing IKE_SA rekeying if charon.ikesa_table_size > 1 2009-04-17 16:58:11 +00:00
Tobias Brunner 3a80181b61 missed strcaseeq added 2009-04-17 10:52:41 +00:00
Andreas Steffen 63176bbcb0 moved strcaseeq() macro from constants.h to utils.h 2009-04-17 09:52:49 +00:00
Martin Willi a44bb9345f merged multi-auth branch back into trunk 2009-04-14 10:34:24 +00:00
Andreas Steffen fda8404abc cosmetics 2009-03-26 13:58:17 +00:00
Andreas Steffen f32a321a57 output peer ID in duplicate deletion log entry 2009-03-26 13:18:19 +00:00
Martin Willi d3fbc75e85 set port for NATD hash calculation in the "include-all" case 2009-03-26 11:49:07 +00:00
Martin Willi 1490ff4d9b updated Doxyfile 
properly close all doxygen groups
fixed remaining doxygen warnings
 2009-03-24 17:43:01 +00:00
Martin Willi 4a6b84a934 reintegrated eap-radius branch into trunk 2009-03-24 10:24:58 +00:00
Martin Willi 9717826f10 fallback to family specific %any(6) if kernel lookup fails 2009-03-16 14:23:36 +00:00
Tobias Brunner d25ce3701e printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms). 2009-03-12 18:07:32 +00:00
Tobias Brunner f98cdf7a47 adding plugin for EAP-MS-CHAPv2 2009-02-18 19:57:15 +00:00
Andreas Steffen 2b1f5f3461 configuration of NBNS server assignment via strongswan.conf 2009-02-13 11:57:50 +00:00
Andreas Steffen 48f9a22b57 configuration of DNS server assignment via strongswan.conf 2009-02-12 09:02:15 +00:00
Martin Willi b81d8cd3cc changed [4856] to dynamically choose traffic selector family 2009-02-11 13:09:52 +00:00
Martin Willi 95f1735f87 send proper AUTHENTICATION_FAILED if EAP method is successful, but AUTH mismatches 2009-02-10 17:21:44 +00:00
Martin Willi 04a7a1c309 free unneeded retransmission packet when exchange completes 2009-02-09 10:45:51 +00:00
Andreas Steffen b59f154b09 proper initialization and disposal of keying material 2009-01-15 01:52:44 +00:00
Andreas Steffen 6f17bf83d5 fixed ESP NULL encryption 2009-01-15 00:34:42 +00:00
Martin Willi 12d4186f5c fixed a potential memory leak when reusing mobike task 2008-12-19 14:34:40 +00:00
Martin Willi 9bcc9bb60e updated documentation 
some minor cleanups
calloc does not need an additional memset(0)
 2008-12-17 09:00:22 +00:00