Commit Graph
4481 Commits
Author SHA1 Message Date
Andreas Steffen 91e35b7c9e added create_ipAddrBlock_enumerator() method to x509_t 2009-12-22 11:58:30 +01:00
Andreas Steffen 7686f981a4 cosmetics 2009-12-22 09:53:53 +01:00
Andreas Steffen 194c3cedc5 fixed IPv6 bug in calc_range() 2009-12-22 00:49:23 +01:00
Andreas Steffen 3f4d8815a4 fixed initialization of netbits 2009-12-21 23:03:14 +01:00
Andreas Steffen 252f38f6f8 fixed distribution list 2009-12-21 22:28:08 +01:00
Andreas Steffen 157125e4c9 traffic_selector supports RFC 3779 address range format 2009-12-21 21:29:01 +01:00
Martin Willi 2fcb2cc653 Migrated identification_t to INIT/METHOD macros 2009-12-21 15:24:08 +01:00
Andreas Steffen 678aab7850 this->type is set by traffic_selector_create() 2009-12-20 20:01:18 +01:00
Andreas Steffen 513eb95e60 parse RFC 3779 addressFamily 2009-12-20 19:26:28 +01:00
Andreas Steffen 7d379a786c plugin name is x509 2009-12-20 16:01:35 +01:00
Andreas Steffen 28c25485ba discard certificate with unknown critical extensions 2009-12-20 15:53:39 +01:00
Andreas Steffen f3e366a9a0 use traffic_selector_t object to represent ipAddrBlocks 2009-12-20 15:15:02 +01:00
Andreas Steffen 1125a0be81 moved traffic_selectors from charon to libstrongswan 2009-12-20 14:57:38 +01:00
Andreas Steffen ad858aee15 parse ipAddrBlocks 2009-12-17 17:32:55 +01:00
Andreas Steffen 9789d3a9b9 fixed updown plugin for mixed IPv4/IPv6 tunnels 2009-12-17 17:32:55 +01:00
Martin Willi 83b760cb42 Migrated curl_fetcher to INIT/METHOD macros 2009-12-17 13:53:25 +01:00
Martin Willi 1a1ff9d127 Added a METHOD() macro to define methods with both public and private signatures 2009-12-17 13:53:24 +01:00
Martin Willi 74eed73a40 Added a INIT() macro to initialize class instances 2009-12-17 13:53:24 +01:00
Martin Willi 6ec949e022 Fixed BEET mode by installing SAs with negotiated address in traffic selector 2009-12-17 10:52:07 +01:00
Andreas Steffen b6623e87b4 IKEv1 daemon supports DNS and NBNS server assignment from database 2009-12-16 21:49:51 +01:00
Andreas Steffen 645f3865b2 ipsec pool manages dns and nbns servers 2009-12-16 18:11:57 +01:00
Andreas Steffen 3747f0f2e7 cosmetics 2009-12-16 13:33:09 +01:00
Andreas Steffen a461e20dd8 provide attributes from SQL database 2009-12-16 12:31:41 +01:00
Andreas Steffen de962d6e7d add IKEv1 support for the Camellia cipher 2009-12-15 19:13:06 +01:00
Martin Willi 0be12e3546 Added htoun16/32 and untoh16/32 to read/write unaligned network order integers 2009-12-15 13:39:01 +01:00
Martin Willi fc85786921 Install v6 routes via outgoing interface for now 2009-12-14 14:44:24 +01:00
Andreas Steffen 353b829177 fixed IKEv1 support of HMAC_SHA2_256_96 2009-12-09 09:33:32 +01:00
Andreas Steffen ee2679ec25 if end id is missing assign IP address to raw public key 2009-12-09 07:24:43 +01:00
Andreas Steffen a07531250e IKEv1 support of ESP SHA2_HMAC with correct truncation 2009-12-09 00:24:42 +01:00
Andreas Steffen 4b615edab4 some code optimizations 2009-12-09 00:24:42 +01:00
Andreas Steffen e1573b3fe8 added ipAddrBlocks OID 2009-12-09 00:24:41 +01:00
Martin Willi a6225e4936 Improved libfast session management, using a hashtable 2009-12-08 19:31:02 +01:00
Martin Willi 4e90d9de9f Removed obsolete curl interface specific destructor 2009-12-08 16:21:58 +01:00
Martin Willi 89d236f0da Support "_" and "-" variants of NetworkManager pkg-config packages 2009-12-08 14:36:22 +01:00
Martin Willi f469754f7f Undef PACKAGE_BUG/URL of strongSwan before including ruby variants 2009-12-08 14:36:22 +01:00
Martin Willi 88dbccc842 Remove generated config.h.in from source tree 2009-12-08 14:36:21 +01:00
Tobias Brunner 268911a5cc The attribute manager was moved from daemon_t to libstrongswan. 2009-12-07 16:00:27 +01:00
Martin Willi cd51437e43 Do not execute the callback job if it has been cancelled since registration 2009-12-03 08:00:43 +01:00
Martin Willi c636bc7e17 Cleanup library if daemon initialization fails 2009-12-03 08:00:43 +01:00
Martin Willi 376a11db3c Do not install invalid 0.0.0.0 DNS servers 2009-12-01 15:46:56 +01:00
Martin Willi 5b4d0de7d4 Prefer EAP-Identity for provider attribute/address lookup 2009-12-01 14:24:07 +01:00
Martin Willi f6116e61fc Save EAP-Identity on auth config 2009-12-01 14:24:06 +01:00
Martin Willi 44ce749360 Store completed authentication rounds permanently on IKE_SA, with flush option 2009-12-01 11:35:30 +01:00
Martin Willi 5b2b4d190a Removed obsolete and unused [gs]et_eap_identity() methods 2009-11-30 16:59:23 +01:00
Martin Willi 5351e51951 Do not propose transport mode as initiator if connection is NATed 2009-11-30 11:32:26 +01:00
Martin Willi bff9f824ed Verify EAP-SIM/AKA AT_MAC before processing any attributes 2009-11-30 10:00:06 +01:00
Martin Willi b04e72c21c SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the response 2009-11-30 09:27:39 +01:00
Martin Willi 5a91fd4536 Invoke attribute/key hooks from libsimaka 2009-11-30 09:27:34 +01:00
Martin Willi 8434c88b5e Extended SIM manager by hooks, currently featuring attribute and key hooks 2009-11-30 09:27:26 +01:00
Martin Willi fb1ae8da52 Added a get_sa() method to the bus, allowing a thread to lookup its IKE_SA 2009-11-30 09:27:14 +01:00