denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,637 Commits 1 Branch 0 Tags
85a119bc0bce1c4875427d1315c27594c472065f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 85a119bc0b replying to COOKIE2 mobike notify properly 
including COOKIE2 ourself after path probing
 2008-05-21 17:56:21 +00:00
Martin Willi ce62751b60 writing guest pid to file (simplifies debugging) 2008-05-21 16:02:16 +00:00
Martin Willi cb9edc54eb using fixed size keys in key derivation for AES-XCBC PRF 2008-05-21 14:58:03 +00:00
Martin Willi 4f23ec78d1 added more verbosity if signature hash OID is unknown 2008-05-21 13:01:58 +00:00
Martin Willi da1bc5e860 fixed loading of smp plugin 2008-05-19 14:20:07 +00:00
Martin Willi 0b0fba9e0d fixed warning if plugin list has trailing whitespaces 2008-05-16 13:48:58 +00:00
Martin Willi 99968bf0a0 fixed plugin names of EAP modules 2008-05-16 12:14:48 +00:00
Martin Willi 987a42c05e moved manager to its own subdirectory in ipsecdir 2008-05-16 09:13:23 +00:00
Martin Willi 1ba62b5562 loading default modules depending on configure options 2008-05-16 08:52:32 +00:00
Martin Willi 7f491111e6 some NEWS for 4.2.2 2008-05-15 14:15:27 +00:00
Martin Willi a3d92a3745 plugin load configuration in strongswan.conf 
some components accept a "component.load" option with a space separated list of plugins to load
  libcharon- plugins are now handled the same way as libstrongswan- plugins
 2008-05-15 14:01:26 +00:00
Martin Willi 89658f6d6c static leases use 0, not NULL timeout 
fixed static leases
 2008-05-15 09:26:47 +00:00
Martin Willi bb94e1ed60 properly removing bootup poll interface eth0 2008-05-15 08:41:00 +00:00
Martin Willi fa44a2981c implemented classical UML network scenario in dumm (ipsec testing) 2008-05-14 13:11:13 +00:00
Martin Willi c48022a282 poll UML guests after startup using eth9=mcast, as networking is loaded after console 2008-05-14 11:48:00 +00:00
Martin Willi 782db7edd1 prototype of mediation client database plugin 2008-05-14 07:26:19 +00:00
Martin Willi 0fd4caea66 handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication 2008-05-14 06:49:31 +00:00
Martin Willi c0d1ebde71 fixed printing of %#H hosts 2008-05-14 06:34:54 +00:00
Martin Willi f3884f6da6 reverted [3945], proper fix for zero value ASN1 integer 2008-05-13 14:15:12 +00:00
Martin Willi cb1c54c93e updated Makefile 2008-05-13 13:58:04 +00:00
Martin Willi 6e8840981d tool to calculate KEYIDs from keys 2008-05-13 13:57:42 +00:00
Martin Willi 7af8995cde fixed unsave calculation of mpz_export length 2008-05-13 13:52:45 +00:00
Martin Willi 02ffd89642 decreased plugin load verbosity 2008-05-13 09:14:36 +00:00
Martin Willi 4d4fc2eaa1 fixed "pool --purge" on mysql 2008-05-13 07:39:24 +00:00
Martin Willi 808ca43f92 fixed compiler warning (missing include) 2008-05-13 07:37:08 +00:00
Martin Willi 5373f2a642 fixed lookup for expired leases 
initializing database if in inconsistent state
 2008-05-13 07:24:53 +00:00
Martin Willi 6cf1215e3c ported IP pool to mysql 2008-05-09 15:01:22 +00:00
Martin Willi 7051ef4091 usable prototype of "ipsec pool" tool 2008-05-09 12:55:41 +00:00
Martin Willi 5dc317192a support for left bounded padding in %H and %D 2008-05-09 12:25:39 +00:00
Martin Willi e69f33f6e2 whitelisted gmtime_r 2008-05-09 12:24:11 +00:00
Martin Willi f3bcd7f041 correctly reassigning valid leases 2008-05-09 12:22:20 +00:00
Martin Willi 9f9903a3b3 supporting width modifier in identification_t printf hook (e.g. %30D) 
cleanups in host_t %H printf hook
 2008-05-09 11:34:58 +00:00
Martin Willi ff2d02ed4c fixed interface disconnection 2008-05-09 10:38:18 +00:00
Martin Willi 0f074a4344 implemented append mode for xcbc, testcase 2008-05-08 14:51:37 +00:00
Martin Willi affd7a90ba moved RAW public key support to a separate plugin (pubkey) 2008-05-08 13:16:42 +00:00
Martin Willi 0395eb7c08 fixed compiler warning 2008-05-08 13:12:43 +00:00
Martin Willi 240e727fde renamed PRF_AES128_CBC to PRF_AES128_XCBC 2008-05-08 12:43:27 +00:00
Martin Willi 5b7ec6d4e0 renamed med_db plugin to medsrv, as we will introduce an additional medcli client plugin 2008-05-08 12:11:30 +00:00
Martin Willi 25b12c696b replaced --with-gid/uid by --with-group/user 
using named users, groups
fixed capability dropping in pluto
 2008-05-08 10:58:04 +00:00
Martin Willi f8277a8370 added configure check and support for sqlite3 libraries without sqlite3_prepare_v2 2008-05-07 14:41:13 +00:00
Martin Willi 4ce78f9356 fixed 3DES encryption 2008-05-07 11:54:30 +00:00
Martin Willi 5302703407 prototype of sql pool administration utility 2008-05-07 09:37:08 +00:00
Martin Willi 5d892343fa using capset version 1 if a newer is available 2008-05-07 08:46:37 +00:00
Martin Willi 86ab5636c2 support for @#hex ID_KEY_ID identification_t 2008-05-06 13:45:14 +00:00
Martin Willi bc1f02a860 providing medation configuration through med_db plugin 2008-05-06 13:44:14 +00:00
Martin Willi c963c4bc15 fixed parsing of openssl format public keys 2008-05-06 12:56:36 +00:00
Martin Willi ff6836716c returning reference pointer on get_ref() 2008-05-06 10:55:42 +00:00
Martin Willi cc0cb93553 printf "width" support for hosts (e.g. %15H) 2008-05-05 08:31:43 +00:00
Martin Willi 6c90949f18 resetting old scheduling policy correctly in free() hook 2008-05-05 07:40:21 +00:00
Martin Willi 27d04e055d implemented XCBC algorithms (signer, prf) for IKE on top of a crypter 
supporting ike=...-aesxcbc-... in ipsec.conf 
added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal
AES XCBC testcase
 2008-04-30 14:26:24 +00:00
Martin Willi f5475fa440 crypter_t api supports in-place encryption using NULL as output parameter 2008-04-30 14:02:25 +00:00
Martin Willi a47486b5e4 prototype of dumm GUI 2008-04-28 16:43:30 +00:00
Martin Willi ca37f81657 fixed javascript include using <script> tag 2008-04-28 08:52:17 +00:00
Martin Willi 3444390241 supporting multiple comma seperated subnets in left/rightsubnet definition 
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
 2008-04-25 12:41:37 +00:00
Martin Willi 1aedf08183 added simple Makefile to build scripts 2008-04-25 11:18:09 +00:00
Martin Willi 5e6bbf4f77 added _GNU_SOURCE and limits.h to build against glibc-2.8 2008-04-24 13:49:20 +00:00
Martin Willi c624081a7f added missing base64 chunk test 2008-04-24 13:28:18 +00:00
Martin Willi 9213ad27c2 replaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions 2008-04-24 13:26:22 +00:00
Martin Willi 71983b5cc9 some c-libs require _GNU_SOURCE for pthread_rwlock 2008-04-23 09:45:02 +00:00
Martin Willi 8570c648f1 fixed AES-128 test 2008-04-22 09:00:27 +00:00
Martin Willi 36d62fac65 experimental Padlock plugin supportin SHA1 and AES-128 for VIA C7 Esther 2008-04-22 08:44:56 +00:00
Martin Willi 65456bfe33 added AES-128 unit test 2008-04-22 08:33:55 +00:00
Martin Willi 4d18175997 removed status result from crypter interface to be consistent with other crypto interfaces 2008-04-22 07:14:24 +00:00
Martin Willi b638a1009f proper library initialization for dumm 2008-04-21 13:21:21 +00:00
Martin Willi 66bb16b033 shipping a default strongswan.conf 2008-04-18 12:52:47 +00:00
Martin Willi fa3fe3c1cf sql pool prototype 2008-04-18 11:51:58 +00:00
Martin Willi 4075225466 fixed peer config equality check 2008-04-18 10:30:52 +00:00
Martin Willi 58caabf7b4 more NEWS 2008-04-18 08:09:32 +00:00
Martin Willi c4ec8c9d18 fixed compiler warning 2008-04-17 15:08:48 +00:00
Martin Willi b360e3933d respecting ipsec.conf cachecrls= option 2008-04-17 15:01:57 +00:00
Martin Willi 58126dd295 added missing bits for credential caching 2008-04-17 15:00:51 +00:00
Martin Willi d33fa48bc7 caching of CRLs to /etc/ipsec.d/crls 2008-04-17 14:08:38 +00:00
Martin Willi 72c882d8c0 cosmetics to chunk_write() 2008-04-17 14:06:37 +00:00
Martin Willi 2270b396b3 added missing credential_set method to stroke_ca 2008-04-17 13:00:05 +00:00
Martin Willi 233b853dfa extended credential_set_t interface by a cache_cert() method 
allows persistent or in-memory caching of fetched certificates
 2008-04-17 11:22:37 +00:00
Martin Willi 46a5604a04 splitted IKE_SA manager destroy to allow plugin interaction 2008-04-17 10:46:25 +00:00
Martin Willi e5617e40d1 adding rightsourceip=%poolname properly to peer config 2008-04-17 08:55:32 +00:00
Martin Willi 4904d26120 slightly optimized IKE_SA checkin 2008-04-16 08:43:32 +00:00
Martin Willi 054c9e6031 parallelized trust chain verification 
temporary imported certificates are thread-local only
	read-write locking on credential manager
	credential sets must be thread-save now
 2008-04-16 08:38:15 +00:00
Martin Willi 2c463cdfb1 optimized half-open IKE_SA lookup (no checkout) 2008-04-16 08:34:52 +00:00
Martin Willi 140ed97c0c disable DPD if dpddelay is set but dpdaction=none 2008-04-16 05:50:56 +00:00
Martin Willi 20e32cf86c updated sql testcases to new table schema 2008-04-15 15:14:32 +00:00
Martin Willi 02e4180e48 updated sql plugin to respect config changes 2008-04-15 15:13:53 +00:00
Martin Willi 1822ca740b disabled SQL logging by default, as tests scenarios do not have a logging table 2008-04-15 15:13:08 +00:00
Martin Willi f722fa31db added error logging to sqlite plugin 2008-04-15 15:12:01 +00:00
Martin Willi 0dab0f1d5d fixed build of smp plugin 2008-04-15 11:51:46 +00:00
Martin Willi 82d8368bd7 build plugins after daemon/libstrongswan 2008-04-15 07:57:01 +00:00
Martin Willi 6a365f0740 added API for random number generators, served through credential factory 
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
 2008-04-15 05:56:35 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi a593db5d35 ike_sa_manager enumerable, not iterable 2008-04-14 11:37:46 +00:00
Martin Willi b010310517 updated rightsourceip parameter in man page 2008-04-14 08:27:05 +00:00
Martin Willi 348af092ac added close_action as a seperate config option to dpd_action 2008-04-14 08:17:18 +00:00
Martin Willi cadb5d16e5 fixed jumping IKE_SA unique ids 2008-04-14 07:55:23 +00:00
Martin Willi 45819d7d49 fixed rightsourceip=%config scenarios 2008-04-14 07:18:16 +00:00
Martin Willi 96926b006d using dpd actions to enforce connection state 
dpd actions a per child-, not peer ike-sa
 2008-04-11 08:14:48 +00:00
Martin Willi ad81e51afc implemented a simple attribute provider for stroke 2008-04-09 12:56:20 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Martin Willi 5df92bba51 changed force_encap to forceencaps 2008-04-08 12:53:36 +00:00
Martin Willi f6e7c0f785 removed stale ocsp header 2008-04-08 06:27:04 +00:00
Martin Willi 852abcd3a3 fixed doxygen groups to avoid recursion 2008-04-07 10:37:14 +00:00