 Tobias Brunner
|
6e6975395e
|
Using the correct type for ME_ENDPOINT payloads in connectivity checks.
|
2009-09-24 11:29:34 +02:00 |
|
|
Tobias Brunner
|
0755e98e5c
|
Cleaned up some code of the mediation extension.
|
2009-09-04 15:48:30 +02:00 |
|
|
Tobias Brunner
|
f4b975a65d
|
Moved set_state after the DBG0 statement, so that the message gets logged also for mediation connections without CHILD_SA.
|
2009-09-04 15:13:12 +02:00 |
|
|
Tobias Brunner
|
a20e98749a
|
Simplified the search for ME_CONNECTID notifies.
|
2009-09-02 17:30:47 +02:00 |
|
|
Tobias Brunner
|
484a06bce7
|
Fixed some typos; whitespace cleanup.
|
2009-09-02 17:30:46 +02:00 |
|
|
Tobias Brunner
|
5293b02945
|
Missing commas added.
|
2009-09-02 17:29:44 +02:00 |
|
|
Tobias Brunner
|
deddfde91b
|
Description of new lifetime limits added to manpage.
|
2009-09-01 12:54:33 +02:00 |
|
|
Tobias Brunner
|
686aba2589
|
Added lifetime/margintime keywords as alias for keylife/rekeymargin.
|
2009-09-01 12:54:33 +02:00 |
|
|
Tobias Brunner
|
e75f423753
|
Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static.
|
2009-09-01 12:54:33 +02:00 |
|
|
Tobias Brunner
|
abff49a7ff
|
Handling of new lifetime limits added to stroke.
|
2009-09-01 12:53:44 +02:00 |
|
|
Tobias Brunner
|
ca41aa0602
|
Added keywords for the new lifetime limits to starter.
|
2009-09-01 12:53:44 +02:00 |
|
|
Tobias Brunner
|
9c7faa8618
|
Added parser for unsigned long long ints to starter.
|
2009-09-01 12:53:44 +02:00 |
|
|
Tobias Brunner
|
f40c115531
|
If no inbound CHILD_SA is found, try to find an outbound SA.
Due to the new lifetime limits in- and outbound SAs may expire
individually.
|
2009-09-01 12:53:44 +02:00 |
|
|
Tobias Brunner
|
1087b9cebb
|
Set the packet and byte limits in the netlink and pfkey kernel interfaces.
|
2009-09-01 12:53:44 +02:00 |
|
|
Tobias Brunner
|
e3c7e72973
|
Terminology and return value of get_lifetime of child_sa_t corrected.
|
2009-09-01 12:53:44 +02:00 |
|
|
Tobias Brunner
|
cb123493d1
|
child_sa_t adapted to the new lifetime configuration.
|
2009-09-01 12:53:43 +02:00 |
|
|
Tobias Brunner
|
888af96343
|
Adapted the kernel interfaces to the new lifetime configuration.
|
2009-09-01 12:53:13 +02:00 |
|
|
Tobias Brunner
|
e0a8a8c3ec
|
Adapted the config backends to the new lifetime configuration.
|
2009-09-01 12:50:50 +02:00 |
|
|
Tobias Brunner
|
caf87c7dcb
|
child_cfg_t now takes a lifetime_cfg_t to configure the lifetime limits. Also adjusted the jitter calculation, so it works for values > RAND_MAX.
|
2009-09-01 12:50:50 +02:00 |
|
|
Tobias Brunner
|
86e4728550
|
lifetime_cfg_t added to configure lifetime limits of a CHILD_SA.
|
2009-09-01 12:50:50 +02:00 |
|
|
Tobias Brunner
|
e822fc576a
|
Added side effect free min and max macros.
|
2009-09-01 12:50:50 +02:00 |
|
|
Tobias Brunner
|
333b461aa6
|
Fixing address resolution via getaddrinfo in libfreeswan.
|
2009-08-18 12:30:11 +02:00 |
|
|
Tobias Brunner
|
f1777dff59
|
Replacing gethostbyname, gethostbyname2 and their _r variants with getaddrinfo to increase portability.
|
2009-08-14 16:14:32 +02:00 |
|
|
Tobias Brunner
|
26965b4ef3
|
OpenSolaris needs libsocket and libnsl for socket().
|
2009-08-14 14:50:53 +02:00 |
|
|
Tobias Brunner
|
932fdc38de
|
Enable CMSG headers and macros on OpenSolaris.
|
2009-08-14 14:50:52 +02:00 |
|
|
Tobias Brunner
|
8c3627c5ae
|
Added define to get sigwait with two parameters on OpenSolaris.
|
2009-08-14 14:50:51 +02:00 |
|
|
Tobias Brunner
|
e580e0a9a2
|
sockio.h is required on OpenSolaris for SIOCGIFADDR.
|
2009-08-14 14:50:50 +02:00 |
|
|
Tobias Brunner
|
647bd246e4
|
Replaced the strange definitions of IN6ADDR_ANY_INIT and IN6ADDR_LOOPBACK_INIT on OpenSolaris.
|
2009-08-14 14:50:49 +02:00 |
|
|
Tobias Brunner
|
cc396286e8
|
Defined some missing fixed-width int types on OpenSolaris.
|
2009-08-14 14:50:22 +02:00 |
|
|
Tobias Brunner
|
a3ccf95f3f
|
LOG_AUTHPRIV is not defined on OpenSolaris.
|
2009-08-14 13:37:07 +02:00 |
|
|
Tobias Brunner
|
3901937d14
|
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
|
2009-08-14 13:30:59 +02:00 |
|
|
Tobias Brunner
|
8b6a5ce5ba
|
We need to include alloca.h on OpenSolaris.
|
2009-08-14 13:25:22 +02:00 |
|
|
Tobias Brunner
|
3974b2fb07
|
FreeBSD's libc does not support backtrace(), but libexecinfo optionally replicates this function (and the other defined in execinfo.h).
|
2009-08-07 18:46:25 +02:00 |
|
|
Tobias Brunner
|
79ff614144
|
Use LONG_MAX instead of a hard-coded value.
|
2009-08-06 18:22:01 +02:00 |
|
|
Tobias Brunner
|
bfca7aa5ed
|
FreeBSD returns the current policy use time only after specifying a hard lifetime when installing the policy.
|
2009-08-06 18:14:44 +02:00 |
|
|
Tobias Brunner
|
c3a78360a8
|
Fixed a race condition when querying stats of a child_sa in different order.
|
2009-08-06 16:47:32 +02:00 |
|
|
Tobias Brunner
|
dd83c6d490
|
Don't query the policy usetime if there was no traffic on the SA.
This helps in cases where a policy is assigned to more than one SA. That
is, SAs now should have different usetimes even if they use the same policy.
|
2009-08-06 15:14:54 +02:00 |
|
|
Tobias Brunner
|
b3f8ea8346
|
Reverted the interface changes introduced in 3f720dc7.
|
2009-08-06 13:31:54 +02:00 |
|
|
Tobias Brunner
|
1e7b4b0028
|
Reversed the check for udp.h, fixes compilation on Linux.
|
2009-08-06 10:01:59 +02:00 |
|
|
Tobias Brunner
|
7da1f4a0ff
|
Enabling UDP encapsulation via setsockopt fails on Mac OS X (it is also not required as this is done using sysctl).
|
2009-08-05 12:31:10 +02:00 |
|
|
Tobias Brunner
|
524f9ac470
|
FreeBSD only reports a policy's usetime if a lifetime has been specified when the policy was added (we only specify a lifetime on the SA, not on the policy).
|
2009-08-04 11:08:58 +02:00 |
|
|
Tobias Brunner
|
56ee8fcc96
|
FreeBSD and Mac OS X both set the sequence number of an SADB_X_SPDGET response to zero, we accept that for now.
|
2009-08-04 11:08:58 +02:00 |
|
|
Tobias Brunner
|
e8c3cdb25b
|
Missing check for udp.h added.
|
2009-08-04 11:08:57 +02:00 |
|
|
Tobias Brunner
|
eab05274f4
|
Handling of unsupported policy directions (FWD) fixed.
|
2009-07-30 14:06:26 +02:00 |
|
|
Tobias Brunner
|
e20bd8b6ea
|
Enabling NAT-T on Mac OS X using the private SADB_X_EXT_NATT flag and sadb_sa_2 struct.
|
2009-07-30 14:06:26 +02:00 |
|
|
Tobias Brunner
|
789ba17024
|
Configure the NAT-T port via sysctl on Mac OS X to enable handling of incoming UDP encapsulated ESP packets in the kernel.
|
2009-07-30 14:06:26 +02:00 |
|
|
Tobias Brunner
|
b2117eee20
|
Make accept(2) and recvfrom(2) cancellation points on Mac OS X.
|
2009-07-30 14:06:26 +02:00 |
|
|
Tobias Brunner
|
6ff7ab850b
|
Fixed GID lookup in cases where the configured group is a prefix of another group.
|
2009-07-20 21:20:03 +02:00 |
|
|
Tobias Brunner
|
9af7715c3d
|
Fixed installation of config files in out-of-tree builds.
|
2009-07-20 21:13:45 +02:00 |
|
|
Tobias Brunner
|
7cdf712d3e
|
Use the numerical UID/GID to install the config files and create the ipsec.d directories.
|
2009-07-20 21:03:05 +02:00 |
|
|
Tobias Brunner
|
7d2b06da6a
|
Translate the configured user and group to a numerical UID and GID.
|
2009-07-20 21:01:13 +02:00 |
|
|
Tobias Brunner
|
375a91bb9b
|
Fixing distribution build (checksum.c is created on the user's system).
|
2009-07-16 16:53:43 +02:00 |
|
|
Tobias Brunner
|
69fc782000
|
Check for gperf version added to configure script.
|
2009-07-16 15:15:40 +02:00 |
|
|
Tobias Brunner
|
c7e0f07ced
|
Typo fixed.
|
2009-07-16 15:15:35 +02:00 |
|
|
Tobias Brunner
|
cf00cffef2
|
Added an option to the configure script to disable building the scripts.
|
2009-07-16 15:15:26 +02:00 |
|
|
Tobias Brunner
|
599d2bcea8
|
Revert "gperf under FreeBSD does not know the -m option."
This reverts commit 0ead254919.
|
2009-07-16 15:15:09 +02:00 |
|
|
Tobias Brunner
|
233a132634
|
Removed an unnecessary include of a header that is not available on Mac OS X.
|
2009-07-15 22:42:22 +02:00 |
|
|
Tobias Brunner
|
0ead254919
|
gperf under FreeBSD does not know the -m option.
We could use AC_PATH_PROGS_FEATURE_CHECK (added in Autoconf 2.62) to check for this option.
|
2009-07-14 12:09:22 +02:00 |
|
|
Tobias Brunner
|
fd0df7ec75
|
Corrected check for valid ASN1 types in rdn_enumerate.
Because of the range of u_char the comparison was always TRUE before.
|
2009-07-14 12:09:22 +02:00 |
|
|
Tobias Brunner
|
0b5f2a81da
|
Added --with-lib-prefix option to the configure script.
This option enables users to add additional search paths for include
files and libraries.
|
2009-07-14 12:09:22 +02:00 |
|
|
Tobias Brunner
|
272c81134c
|
Typo in configure script fixed.
|
2009-06-12 10:42:07 +02:00 |
|
|
Tobias Brunner
|
a6ae2a1490
|
Fixing IPSEC_* checks on older Linux distros.
|
2009-05-21 10:03:27 +02:00 |
|
|
Tobias Brunner
|
617e59b7bc
|
Portably check for IPSEC_* constants (defined in ipsec.h).
The problem is that FreeBSD defines them as #defines whereas Linux defines them as enums.
|
2009-05-20 20:15:06 +02:00 |
|
|
Tobias Brunner
|
ad36ab252e
|
Automatically build (and install) the DUMM Ruby extension.
|
2009-05-20 19:38:01 +02:00 |
|
|
Tobias Brunner
|
2d9ce480fa
|
Enable building the DUMM Ruby extension in a VPATH build.
|
2009-05-20 19:38:01 +02:00 |
|
|
Tobias Brunner
|
d2e9cbc9a2
|
The configure script now tries to figure out where ruby.h is located.
This is required because the location depends on the architecture.
|
2009-05-20 19:38:01 +02:00 |
|
|
Tobias Brunner
|
68173e1fea
|
typo
|
2009-05-18 13:04:18 +02:00 |
|
|
Tobias Brunner
|
28154e35be
|
documented the idea behind the current implementation of the scheduler
|
2009-05-15 14:43:15 +02:00 |
|
|
Tobias Brunner
|
5020a456c0
|
more intuitive leap year check
|
2009-05-15 09:36:55 +02:00 |
|
|
Tobias Brunner
|
7cdb1ddf08
|
Mac OS X doesn't have SADB_X_AALG_AES_XCBC_MAC
|
2009-05-14 17:38:36 +02:00 |
|
|
Tobias Brunner
|
9f090745cf
|
added another possible location for the ipsec.h header file
|
2009-05-14 17:38:32 +02:00 |
|
|
Tobias Brunner
|
c1532e840d
|
fixed compiler warning
|
2009-05-14 17:38:27 +02:00 |
|
|
Tobias Brunner
|
9015c073de
|
make socket_t compatible with RFC 2292 (that got obsoleted by RFC 3542)
|
2009-05-14 17:16:21 +02:00 |
|
|
Tobias Brunner
|
75a354bb6b
|
fixing compilation of socket_t on systems that have neither IP_PKTINFO (Linux) nor IP_SENDSRCADDR (FreeBSD)
|
2009-05-12 17:40:43 +02:00 |
|
|
Tobias Brunner
|
bf45d6dd3b
|
added a configure option to enable the Vstr string library even if register_printf_function is available
|
2009-04-24 05:32:17 +02:00 |
|
|
Tobias Brunner
|
bcbf110938
|
fixing compilation when using the Vstr string library
|
2009-04-24 05:30:50 +02:00 |
|
|
Tobias Brunner
|
65ea37abcd
|
fixed timezone compensation when parsing ASN.1 dates
|
2009-05-08 15:23:50 +02:00 |
|
|
Tobias Brunner
|
d504f1cbac
|
fixed compiler warnings
|
2009-05-07 17:53:05 +02:00 |
|
|
Tobias Brunner
|
ca39743f06
|
Merge branch 'master' of git.strongswan.org:~/strongswan into HEAD
|
2009-05-07 17:47:48 +02:00 |
|
|
Tobias Brunner
|
5533a88936
|
properly convert boolean flags when parsing ipsec.conf
|
2009-05-07 17:43:16 +02:00 |
|
|
Tobias Brunner
|
723534283c
|
use bool instead of int
|
2009-05-07 17:42:25 +02:00 |
|
|
Tobias Brunner
|
433c0968e4
|
properly initialize buffer when printing loaded plugins.
|
2009-05-07 17:40:19 +02:00 |
|
|
Tobias Brunner
|
e382d96f62
|
compiler warning fixed
|
2009-05-06 09:11:19 -04:00 |
|
|
Tobias Brunner
|
a9f56adb59
|
more portable handling of the bool data type (Mac OS X has stdbool.h)
|
2009-05-06 09:11:13 -04:00 |
|
|
Tobias Brunner
|
938b230fa7
|
renamed some conflicting function names
|
2009-05-06 09:11:07 -04:00 |
|
|
Tobias Brunner
|
f52e9c1aa8
|
gethostbyname_r is not supported on Mac OS X (but gethostbyname uses thread-local buffers)
|
2009-05-06 09:11:03 -04:00 |
|
|
Tobias Brunner
|
af05cc564c
|
libtoolize is called glibtoolize on Mac OS X
|
2009-05-06 09:10:58 -04:00 |
|
|
Tobias Brunner
|
8af25c56af
|
some typos
|
2009-04-30 17:15:28 +00:00 |
|
|
Tobias Brunner
|
ea7e89c72c
|
somehow missed these changes during the portability branch back-merge
|
2009-04-30 17:13:45 +00:00 |
|
|
Tobias Brunner
|
8c5d72cd0b
|
removing svn keyword $Id$ from all files
|
2009-04-30 13:19:35 +00:00 |
|
|
Tobias Brunner
|
d24a74c5b4
|
merging changes from portability branch back to trunk
important change for developers: %Y replaces %D to print identities!
|
2009-04-30 11:37:54 +00:00 |
|
|
Tobias Brunner
|
c889ce80ab
|
fixing IKE_SA rekeying if charon.ikesa_table_size > 1
|
2009-04-17 16:58:11 +00:00 |
|
|
Tobias Brunner
|
3a80181b61
|
missed strcaseeq added
|
2009-04-17 10:52:41 +00:00 |
|
|
Tobias Brunner
|
6e7c0b1e44
|
fixing DES ECB decryption
|
2009-03-12 18:38:13 +00:00 |
|
|
Tobias Brunner
|
d25ce3701e
|
printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms).
|
2009-03-12 18:07:32 +00:00 |
|
|
Tobias Brunner
|
9086102dfd
|
memleak fixed when reading smartcard secrets
|
2009-03-12 15:12:11 +00:00 |
|
|
Tobias Brunner
|
3078b18778
|
fixed some memleaks in mschapv2 plugin
|
2009-02-19 14:32:13 +00:00 |
|
|
Tobias Brunner
|
7b76702587
|
ECB mode added to the DES plugin
|
2009-02-19 14:29:25 +00:00 |
|
|
Tobias Brunner
|
5fa7aed491
|
des ecb enum value changed, ignores set for md4 plugin
|
2009-02-19 13:46:08 +00:00 |
|
|
Tobias Brunner
|
f98cdf7a47
|
adding plugin for EAP-MS-CHAPv2
|
2009-02-18 19:57:15 +00:00 |
|