denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,023 Commits 1 Branch 0 Tags
80f93f20a488dddd802b3f0871b989a0ed88348f
Commit Graph
368 Commits
Author SHA1 Message Date
Martin Willi 80f93f20a4 Migrated sa_payload to INIT/METHOD macros, removed unused methods 2010-10-28 13:06:19 +00:00
Andreas Steffen 9b9352c83b fixed 64 bit printf() issue 2010-10-24 20:30:19 +02:00
Tobias Brunner 4915ea8217 Updated Android.mk to latest Makefile.am. 2010-10-21 15:02:32 +02:00
Martin Willi 185c2669d5 Set ownership of all HA ClusterIP control files 2010-10-20 14:55:26 +02:00
Martin Willi 384b69d964 Set ownership/permissions of HA control socket 2010-10-20 14:54:51 +02:00
Martin Willi e3bde0ef82 Prefer the 'server identifier' attribute address to send DHCP requests to 2010-10-18 12:32:16 +02:00
Tobias Brunner 6c6492d7e8 Some Doxygen fixes. 2010-10-15 18:14:48 +02:00
Tobias Brunner 5ce1a63054 Missed one unneeded destructor. 2010-10-15 17:33:57 +02:00
Tobias Brunner fa20849431 Deferred instantiation of socket implmentations until registration. 
Instantiating the implementations on plugin load was problematic
in case multiple socket plugins were loaded. Now, the first one
registered is instantiated.
 2010-10-15 17:30:21 +02:00
Tobias Brunner d3622166dd Added some generated files to .gitignore. 2010-10-15 10:25:08 +02:00
Andreas Steffen 260d056170 suport certificate-based client authentication with EAP-TTLS 2010-10-14 21:00:41 +02:00
Tobias Brunner cf1bf2656e Moved sources of the NetworkManager plugin to src/frontends. 2010-10-14 17:47:02 +02:00
Tobias Brunner c2fad1916a Avoid recursive loop if no socket implementations are loaded. 2010-10-14 17:36:20 +02:00
Tobias Brunner 3a6c5493af Maemo: Load CA certificates from system directories. 2010-10-14 17:36:20 +02:00
Tobias Brunner ef247379ea Maemo: Track the status of the current SA and send changes to the frontend. 2010-10-14 17:36:19 +02:00
Tobias Brunner 6f59971371 Maemo: Properly unregister the RPC callbacks. 2010-10-14 17:36:19 +02:00
Tobias Brunner 9f01ba4044 Maemo: Plugin implements the listener_t interface. 2010-10-14 17:36:19 +02:00
Tobias Brunner 39e5b21310 Maemo: Extracted most plugin code to a separate class, so we can use that as listener. 2010-10-14 17:36:19 +02:00
Tobias Brunner 4fef86d1ed Maemo: Initiate consumes a child_sa reference, so get an additional one. 2010-10-14 17:36:19 +02:00
Tobias Brunner 28c51809a7 Maemo: Basic functionality added to notify the applet about status updates. 2010-10-14 17:36:19 +02:00
Tobias Brunner c213353393 Maemo: Clear the credentials before each connection attempt. 2010-10-14 17:36:19 +02:00
Tobias Brunner c0d9c1817b Maemo: Listen for a special "Start" D-BUS call. 
This call is made on the system D-BUS so that charon is started as root.
 2010-10-14 17:36:18 +02:00
Tobias Brunner 174b31bce6 Maemo: Added support for connection initiation and shutdown. 2010-10-14 17:36:18 +02:00
Tobias Brunner 8464e25a0f Maemo: Register with libosso and init Glib main loop. 2010-10-14 17:36:18 +02:00
Tobias Brunner 2bce814190 Maemo: Register charon as D-BUS system service. 
In order to be able to access this service via libosso, charon is
started with the run-standalone.sh script, which sets up the required
environment.
 2010-10-14 17:36:18 +02:00
Tobias Brunner f79161e866 Stub plugin for Maemo specific extensions added. 2010-10-14 17:36:17 +02:00
Tobias Brunner 1dbf0ed982 Do not add additional addresses to MOBIKE path probing messages. 2010-10-12 11:11:06 +02:00
Tobias Brunner 5774408898 Change behavior of responder during roaming. 
If the current source address is not available anymore, the responder
uses ike_mobike_t.roam, thus, uses multiple address combinations when
trying to notify the initiator.
 2010-10-12 11:11:05 +02:00
Tobias Brunner c5770f864f Allow responder to use ike_mobike_t.roam. 
After getting a response the responder updates the IPsec SAs.
 2010-10-12 11:11:05 +02:00
Tobias Brunner 261b2572d1 Send list of additional addresses even if current path is still valid. 2010-10-12 11:11:05 +02:00
Tobias Brunner bab56a4abb Extracted path checking in ike_sa_t.roam into separate functions. 2010-10-12 11:11:05 +02:00
Tobias Brunner 769c69facc Added support for responders to change their address via MOBIKE. 
If the original responder updates its list of additional addresses we
check if the remote endpoint changed and update the IPsec SAs if it did,
as we assume the original address became unavailable and the responder
already updated the SAs on its side.
 2010-10-12 11:11:05 +02:00
Tobias Brunner 13876431d6 Explicitly configure MOBIKE tasks to update the list of additional addresses. 2010-10-12 11:11:05 +02:00
Tobias Brunner 31e7dc4dfd Improved check for first IKE_AUTH message in ike_mobike task. 
If the original responder initiated a MOBIKE exchange, the previous
check was not always correct.
 2010-10-12 11:11:05 +02:00
Tobias Brunner c817e7bb90 Migrated ike_mobike task to INIT/METHOD macros. 2010-10-12 11:11:05 +02:00
Tobias Brunner be90134211 Simplified apply_port function in mobike task. 2010-10-12 11:11:04 +02:00
Tobias Brunner cd26eedc5c Do not update hosts based on retransmitted messages. 2010-10-12 11:11:04 +02:00
Tobias Brunner d5bd775126 Do not update remote host if we are behind a NAT. 2010-10-12 11:11:04 +02:00
Andreas Steffen ed08f7ce83 use DBG_TNC for TNC debugging output 2010-10-09 16:01:19 +02:00
Andreas Steffen 3cb3f85dfc TNCCS debug cosmetics 2010-10-09 00:58:12 +02:00
Andreas Steffen e9ba435fe3 revert to standard TNCC/TNCS Initialization function 2010-10-09 00:35:45 +02:00
Andreas Steffen bfba1fdc92 implemented TNC isolation via group memberships 2010-10-09 00:34:53 +02:00
Andreas Steffen db2f66c2df implemented a makeshift non-scalable send buffer 2010-10-08 22:24:30 +02:00
Andreas Steffen 55960a170f imc/imv cosmetics 2010-10-08 06:40:03 +02:00
Andreas Steffen 8dcc56dcc0 created tnc-imc and tnc-imv plugins 2010-10-07 23:31:23 +02:00
Andreas Steffen 04d000210b deactivate start_phase2_tnc flag after start 2010-10-07 15:42:00 +02:00
Andreas Steffen 888455587b added server side support for EAP-TNC 2010-10-07 15:02:51 +02:00
Martin Willi 962300b920 Show result of RADIUS authentication along with EAP identity 2010-10-07 11:14:09 +02:00
Andreas Steffen bb43f25ad3 configure tnc_config path and preferred_language via strongswan.conf 2010-10-05 22:09:07 +02:00
Andreas Steffen 6d0e9cf046 created hull for TNCCS 2.0 plugin 2010-10-05 21:15:24 +02:00