 Andreas Steffen
|
217d95c82e
|
upgrade to linux-2.6.28 headers with support for kmaddress struct
|
2008-10-29 05:32:38 +00:00 |
|
|
Andreas Steffen
|
f5ab7f5f57
|
refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key
|
2008-10-28 01:59:01 +00:00 |
|
|
Andreas Steffen
|
aeaa6a9b45
|
remove unused local DH_EXPONENT_ENTROPY definition
|
2008-10-27 00:02:22 +00:00 |
|
|
Andreas Steffen
|
21a45f2f2d
|
use 512 bits of entropy for secret DH exponents
|
2008-10-26 23:53:52 +00:00 |
|
|
Andreas Steffen
|
2d1000d14e
|
include updown plugin in sql scenarios
|
2008-10-21 22:28:29 +00:00 |
|
|
Andreas Steffen
|
8ceb5fd566
|
use old algorithm nameagain in pfkey/alg-aes-xcbc scenario
|
2008-10-21 03:42:32 +00:00 |
|
|
Andreas Steffen
|
7790ab0f37
|
re-established all previous AUD level messages
|
2008-10-17 03:44:06 +00:00 |
|
|
Andreas Steffen
|
ff93a76cf1
|
activate compilation of the kernel_pfkey plugin
|
2008-10-15 00:22:51 +00:00 |
|
|
Andreas Steffen
|
deb079204e
|
added PFKEYv2 UML scenarios
|
2008-10-15 00:11:00 +00:00 |
|
|
Andreas Steffen
|
c126cdc270
|
name of ESP algorithm changed to AES_XCBC_96-128
|
2008-10-14 23:55:19 +00:00 |
|
|
Andreas Steffen
|
9257c3a287
|
version bump to 4.2.9
|
2008-10-14 01:53:37 +00:00 |
|
|
Andreas Steffen
|
f2780731b0
|
corrected typo
|
2008-10-13 22:54:09 +00:00 |
|
|
Andreas Steffen
|
5dadb16ef8
|
added bug fix for addr_in_subnet() to NEWS
|
2008-10-13 00:15:16 +00:00 |
|
|
Andreas Steffen
|
35c365c2e3
|
add support of --enable-eap-sim-file and --enable-kernel-pfkey configuration options
|
2008-10-13 00:09:44 +00:00 |
|
|
Andreas Steffen
|
b165cfa945
|
remove intermediate CA certs after UML test
|
2008-10-09 22:20:56 +00:00 |
|
|
Andreas Steffen
|
03d5f41137
|
faster implementation of addr_in_subnet()
|
2008-10-09 05:44:00 +00:00 |
|
|
Andreas Steffen
|
e39b271b17
|
raw public key support for charon
|
2008-10-08 07:03:39 +00:00 |
|
|
Andreas Steffen
|
d1cbe55127
|
implemented ipsec listalgs as a stroke command
|
2008-10-08 07:00:13 +00:00 |
|
|
Andreas Steffen
|
51358f9f72
|
correct fix that replaces Changeset 4378
|
2008-10-08 06:57:52 +00:00 |
|
|
Andreas Steffen
|
c85862931f
|
removing fix applied by Changeset 4378
|
2008-10-08 06:15:41 +00:00 |
|
|
Andreas Steffen
|
ec6a88f617
|
added the sql/rw-rsa and sql/rw-rsa-keyid scenarios using raw RSA public keys
|
2008-10-08 03:37:40 +00:00 |
|
|
Andreas Steffen
|
af09048e35
|
get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 hash consistent with the IKEv2 keyid philosophy
|
2008-10-08 03:35:52 +00:00 |
|
|
Andreas Steffen
|
95fd1dedb3
|
Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype
|
2008-10-08 01:19:26 +00:00 |
|
|
Andreas Steffen
|
7a07cd1c75
|
fixed loop termination criterion in addr_in_subnet(). Thanks go to Wolfgang Steudel, TU Ilmenau
|
2008-10-07 21:41:45 +00:00 |
|
|
Andreas Steffen
|
41b1cd6b87
|
wait 5 seconds before deactivating eth1 interface on alice
|
2008-10-07 04:56:50 +00:00 |
|
|
Andreas Steffen
|
e8c58d8e64
|
explicitly load kernel-netlink plugin in UML scenarios
|
2008-10-07 04:51:20 +00:00 |
|
|
Andreas Steffen
|
09d7ef2614
|
added --disable-kernel-netlink configure option
|
2008-10-03 03:27:42 +00:00 |
|
|
Andreas Steffen
|
414caff027
|
version bump to 4.2.8
|
2008-09-18 00:42:22 +00:00 |
|
|
Andreas Steffen
|
b37cda8211
|
completed NEWS for 4.2.7 release
|
2008-09-18 00:34:31 +00:00 |
|
|
Andreas Steffen
|
b33c11b6c7
|
stroke parses and lists AC groups
|
2008-09-17 02:17:01 +00:00 |
|
|
Andreas Steffen
|
07d7f9a402
|
time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s)
|
2008-09-04 16:19:46 +00:00 |
|
|
Andreas Steffen
|
60055b7e1c
|
charon.keep_alive = 0 disables the sending of NAT keep alives
|
2008-09-03 19:00:08 +00:00 |
|
|
Andreas Steffen
|
3dfecde4c0
|
configure NAT keep alive interval using the charon.keep_alive key
|
2008-09-03 18:49:06 +00:00 |
|
|
Andreas Steffen
|
4da0116d78
|
OIDs used by strongSwan
|
2008-09-01 11:38:03 +00:00 |
|
|
Andreas Steffen
|
1a4d27c854
|
added thread_analysis tool
|
2008-09-01 11:19:07 +00:00 |
|
|
Andreas Steffen
|
8fa6f2dc66
|
streamlined ipsec listalgs output
|
2008-08-29 05:35:09 +00:00 |
|
|
Andreas Steffen
|
a9bb69c8a8
|
version bump to 4.2.7
|
2008-08-27 12:01:57 +00:00 |
|
|
Andreas Steffen
|
9f9d6ece39
|
my changes for the 4.2.6 release
|
2008-08-27 07:19:40 +00:00 |
|
|
Andreas Steffen
|
2c6dced953
|
added ikev2/rw-eap-aka-identity scenario
|
2008-08-26 20:02:58 +00:00 |
|
|
Andreas Steffen
|
a44d02627f
|
cosmetics
|
2008-08-26 19:54:47 +00:00 |
|
|
Andreas Steffen
|
41dc6b56b0
|
ipsec statusall lists eap_type and eap_identity
|
2008-08-26 19:45:44 +00:00 |
|
|
Andreas Steffen
|
a625146517
|
enable-eap-identity in UML scenarios
|
2008-08-26 19:17:14 +00:00 |
|
|
Andreas Steffen
|
d9fc51387d
|
added ikev2/multi-level-ca-cr-init and ikev2/multi-level-ca-cr-resp scenarios
|
2008-08-26 05:34:33 +00:00 |
|
|
Andreas Steffen
|
919019b3cd
|
completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes
|
2008-08-26 05:15:34 +00:00 |
|
|
Andreas Steffen
|
bafb220857
|
adapted sql/rw-eap-aka-rsa scenario to new EAP identity type
|
2008-08-25 13:52:26 +00:00 |
|
|
Andreas Steffen
|
3c87e92695
|
list CA restrictions in ipsec statusall
|
2008-08-25 12:35:18 +00:00 |
|
|
Andreas Steffen
|
dc6a2edd0d
|
corrected caption
|
2008-08-21 11:58:58 +00:00 |
|
|
Andreas Steffen
|
5cd07d18a3
|
charon.process_route = no does not process RTM_NEWROUTE and RTM_DELROUTE events. Useful for taking down hundreds of virtual IPs on the same host
|
2008-08-21 11:55:16 +00:00 |
|
|
Andreas Steffen
|
59bb33e1e0
|
set version back to 4.2.6
|
2008-08-19 18:53:15 +00:00 |
|
|
Andreas Steffen
|
af165431d2
|
fixed libstrongswan integrity test
|
2008-08-19 18:51:30 +00:00 |
|
|
Andreas Steffen
|
7cdf728586
|
do not fire a roam job when virtual IP is deleted
|
2008-08-15 19:15:52 +00:00 |
|
|
Andreas Steffen
|
26fd3f0057
|
temporary workaround to prevent roam jobs due to virtual IP installations
|
2008-08-11 19:04:48 +00:00 |
|
|
Andreas Steffen
|
9f1ec81290
|
corrected typo
|
2008-08-11 18:40:22 +00:00 |
|
|
Andreas Steffen
|
990ebd4a75
|
added ipv6/net2net-ip6-in-ip6-ikev2 scenario
|
2008-08-06 20:40:14 +00:00 |
|
|
Andreas Steffen
|
249a90af98
|
add additional scenario diagrams
|
2008-08-06 20:35:42 +00:00 |
|
|
Andreas Steffen
|
342c84ddec
|
initiator sends contents of rightca= if present as a certificate request without searching for further CA certificates
|
2008-08-05 09:05:57 +00:00 |
|
|
Andreas Steffen
|
ea36a1f159
|
fixed improper TAILQ fix which caused pluto to segfault
|
2008-08-03 18:01:21 +00:00 |
|
|
Andreas Steffen
|
619998b3ac
|
corrected caption
|
2008-08-01 12:59:08 +00:00 |
|
|
Andreas Steffen
|
7ebac6728b
|
Redhat/Fedora requires var/lock/subsys/ipsec for runlevel changes
|
2008-08-01 12:04:35 +00:00 |
|
|
Andreas Steffen
|
573fd9ce03
|
ipsec starter gives the charon daemon 8s to terminate gracefully before killing the process brutally
|
2008-08-01 10:35:59 +00:00 |
|
|
Andreas Steffen
|
181abd3fdd
|
fixed the close_peerlog() bug causing ipsec pluto --help to segfault
|
2008-08-01 10:12:33 +00:00 |
|
|
Andreas Steffen
|
f5a0d968fc
|
added keyid2sql helper script
|
2008-07-29 19:46:39 +00:00 |
|
|
Andreas Steffen
|
ce91f67f60
|
starter now waits for a maximum of 10s instead of 1s for charon before restarting the daemon
|
2008-07-29 19:44:54 +00:00 |
|
|
Andreas Steffen
|
98ba96f185
|
demoted IKE state change output to debug level 2
|
2008-07-28 14:01:45 +00:00 |
|
|
Andreas Steffen
|
3fd9c75717
|
ignore AUTH_LIFETIME value if reauthentication has already been scheduled earlier
|
2008-07-28 13:53:04 +00:00 |
|
|
Andreas Steffen
|
5c96dab653
|
version bump to 4.2.6
|
2008-07-28 09:14:07 +00:00 |
|
|
Andreas Steffen
|
2863509616
|
updated UML INSTALL information
|
2008-07-25 10:30:53 +00:00 |
|
|
Andreas Steffen
|
77a06476dc
|
adapted UML scenarios to improved virtual IP address pool
|
2008-07-25 10:18:23 +00:00 |
|
|
Andreas Steffen
|
cae0c12d53
|
SQLite database template with improved address pool management
|
2008-07-25 08:02:53 +00:00 |
|
|
Andreas Steffen
|
8124e49148
|
added changes for the 4.2.5 release
|
2008-07-25 08:00:04 +00:00 |
|
|
Andreas Steffen
|
f6facbe75c
|
completed IKE_SA logging at the AUDIT level
|
2008-07-23 18:46:34 +00:00 |
|
|
Andreas Steffen
|
6410231335
|
IKE_SA rekeying inherits other_host from old IKE_SA
|
2008-07-23 07:44:26 +00:00 |
|
|
Andreas Steffen
|
0eede4a31f
|
cosmetics
|
2008-07-23 06:38:24 +00:00 |
|
|
Andreas Steffen
|
295826b9f0
|
start default strongSwan UML topology
|
2008-07-22 17:21:01 +00:00 |
|
|
Andreas Steffen
|
51c8f8261f
|
some more changes to IKE_SA and CHILD_SA logging
|
2008-07-22 17:10:10 +00:00 |
|
|
Andreas Steffen
|
32f5ee159e
|
cosmetics
|
2008-07-22 12:13:48 +00:00 |
|
|
Andreas Steffen
|
66da78b4bb
|
ipsec status lists IPCOMP CPIs
|
2008-07-22 12:03:58 +00:00 |
|
|
Andreas Steffen
|
c3967e779e
|
own CPI was not deleted due to copy-and-paste error
|
2008-07-22 10:53:56 +00:00 |
|
|
Andreas Steffen
|
eba7470b76
|
consistent logging of SPIs and CPIs
|
2008-07-22 10:16:45 +00:00 |
|
|
Andreas Steffen
|
7db7d06e28
|
missing FETCH_END caused SEGFAULT in ikev2/rw-hash-and-url scenario
|
2008-07-22 06:24:00 +00:00 |
|
|
Andreas Steffen
|
af18c84ffb
|
display protoport in dynamic/32 traffic selectors
|
2008-07-21 19:08:03 +00:00 |
|
|
Andreas Steffen
|
fb34475b5c
|
consistent logging of IKE and CHILD SAs
|
2008-07-21 12:47:59 +00:00 |
|
|
Andreas Steffen
|
bb7b613b83
|
eliminated bashisms in _updown scripts
|
2008-07-18 10:04:40 +00:00 |
|
|
Andreas Steffen
|
08ab369b8c
|
included Thomas in copyright statement
|
2008-07-16 12:28:29 +00:00 |
|
|
Andreas Steffen
|
519e87b078
|
updated copyright statement
|
2008-07-16 10:17:04 +00:00 |
|
|
Andreas Steffen
|
872aa6ea51
|
fixed bashism in ipsec.in
|
2008-07-16 06:59:08 +00:00 |
|
|
Andreas Steffen
|
326bfd0450
|
set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel mode
|
2008-07-15 21:35:55 +00:00 |
|
|
Andreas Steffen
|
de5f70e74d
|
typo
|
2008-07-15 15:31:34 +00:00 |
|
|
Andreas Steffen
|
eb0cc33886
|
The XFRM_STATE_AF_UNSPEC flag added to xfrm.h allows IPv4-over-IPv6 and IPv6-over-IPv6 tunnels with the 2.6.26 and later Linux kernels
|
2008-07-15 15:28:00 +00:00 |
|
|
Andreas Steffen
|
6d58c2be9a
|
cosmetics
|
2008-07-15 13:09:09 +00:00 |
|
|
Andreas Steffen
|
0ef961b878
|
added pfsgroup to ipsec.conf.5 man page
|
2008-07-15 13:07:27 +00:00 |
|
|
Andreas Steffen
|
4336a1c611
|
edited description
|
2008-07-11 17:09:48 +00:00 |
|
|
Andreas Steffen
|
a771dc33d0
|
added the ikev2/any-interface scenario
|
2008-07-11 17:08:25 +00:00 |
|
|
Andreas Steffen
|
174960bedc
|
expanded ikev2/ip-two-pools-db to a spoke-to-hub network using virtual IP addresses
|
2008-07-11 15:24:02 +00:00 |
|
|
Andreas Steffen
|
858a9fd584
|
update_peerid() does not accept %any as a certificate's subjectAltName
|
2008-07-09 22:13:39 +00:00 |
|
|
Andreas Steffen
|
60721cee73
|
reset version to 4.2.5
|
2008-07-03 16:43:18 +00:00 |
|
|
Andreas Steffen
|
174216c79d
|
update NEWS with ip pool add-ons and fixes
|
2008-07-03 16:42:45 +00:00 |
|
|
Andreas Steffen
|
2c258d7373
|
ipsec statusall displays dpd options
|
2008-07-02 10:48:57 +00:00 |
|
|
Andreas Steffen
|
1dec30625e
|
check if parsing of ipsec update was successful
|
2008-07-02 05:51:49 +00:00 |
|
|
Andreas Steffen
|
4ddd73351c
|
added simple ikev2/ip-two-pools scenario
|
2008-07-01 20:38:30 +00:00 |
|