denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,637 Commits 1 Branch 0 Tags
85a119bc0bce1c4875427d1315c27594c472065f
Commit Graph
113 Commits
Author SHA1 Message Date
Martin Willi 85a119bc0b replying to COOKIE2 mobike notify properly 
including COOKIE2 ourself after path probing
 2008-05-21 17:56:21 +00:00
Tobias Brunner d4aad55434 IPComp for IKEv2 2008-05-08 16:19:11 +00:00
Andreas Steffen 1d5d6f9667 Hash and URL cosmetics 2008-04-18 21:27:08 +00:00
Tobias Brunner 6439267a8c support for hash and URL encoded certificate payloads in charon 2008-04-18 11:24:45 +00:00
Martin Willi 6a365f0740 added API for random number generators, served through credential factory 
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
 2008-04-15 05:56:35 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi 348af092ac added close_action as a seperate config option to dpd_action 2008-04-14 08:17:18 +00:00
Martin Willi 45819d7d49 fixed rightsourceip=%config scenarios 2008-04-14 07:18:16 +00:00
Andreas Steffen b1bdfa4890 fixed disabling the sending of cert requests 2008-04-13 17:31:07 +00:00
Martin Willi 96926b006d using dpd actions to enforce connection state 
dpd actions a per child-, not peer ike-sa
 2008-04-11 08:14:48 +00:00
Tobias Brunner 78abba428f enabling reauthentication on mediation connections 2008-04-10 08:42:27 +00:00
Tobias Brunner 4a03518112 fixing a problem if the mediation server initiates the rekeying 2008-04-10 07:24:30 +00:00
Tobias Brunner 22452f70fc mediation connections should now properly rekey 2008-04-09 18:12:22 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Andreas Steffen 196b28a470 demoted more notify debug messages to level 2 2008-04-02 19:15:05 +00:00
Tobias Brunner c3f803c4c6 fixing some memory leaks 2008-04-02 18:21:03 +00:00
Andreas Steffen 1ee637d8b1 generate debug output if ocsp response does not contain status information for a given certificate 2008-04-02 14:28:17 +00:00
Andreas Steffen 080555e76a demoted received notify debug message to level 2 2008-04-01 20:22:38 +00:00
Tobias Brunner 9c2a905d63 stopping connectivity checks on the responders side after receiving an IKE_SA_INIT request with the proper ME_CONNECTID 2008-04-01 11:38:18 +00:00
Tobias Brunner 9e183cd5b8 signal fixed 2008-03-31 14:27:16 +00:00
Andreas Steffen dcc777652e changed error message 2008-03-29 13:26:53 +00:00
Tobias Brunner 54150b3f13 checking the size of ME_* notify payloads 2008-03-27 10:17:29 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Martin Willi 3c7e72f5b0 added equals() method to peer_cfg, ike_cfg, proposals, auth_info 
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
 2008-03-26 10:06:45 +00:00
Martin Willi 36524c4844 added support for certificate requests for not yet known CAs 2008-03-20 10:09:56 +00:00
Andreas Steffen ae8715f956 attempt to achieve consistent debugging output 2008-03-19 12:06:38 +00:00
Tobias Brunner df3462ddbe two small fixes 2008-03-13 15:03:06 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Andreas Steffen b48bdac20b improved P2P_NAT debugging 2008-02-27 20:30:39 +00:00
Martin Willi 0f806802ae implemented Expanded EAP types to support vendor specific methods 2007-12-13 17:31:21 +00:00
Martin Willi 3895125275 removed c++ style comments 
fixed compiler warnings
 2007-12-04 10:48:27 +00:00
Martin Willi b8249ff5ed fixed mobike/auth_lifetime in conjunction with p2p-natt 2007-12-04 10:05:36 +00:00
Andreas Steffen addc4b3ce4 removed redundant server reflexive endpoint debug message 2007-12-04 00:45:00 +00:00
Andreas Steffen 3af513753a improved P2P_ENDPOINT debugging 2007-12-03 23:06:17 +00:00
Martin Willi 7805ad302d moved AUTH_LIFETIME handling in its own task (cleaner separation, proper payload order) 2007-12-03 10:52:18 +00:00
Martin Willi ee61471113 implemented RFC4478 (repeated authentication) 
changed %V printf handler to take a time delta, %#V now takes two arguments
 2007-11-20 12:06:40 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Tobias Brunner 56db479192 ID payload with explicit payload type 2007-10-02 11:55:10 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi f215e91999 implemented more aggressive MOBIKE path probing 
do not queue more than one MOBIKE task
 2007-09-28 08:22:37 +00:00
Martin Willi d9d69536b0 improved MOBIKE roaming between interfaces 2007-09-24 12:15:25 +00:00
Andreas Steffen 703b4b0332 connection name to IKE_SA initiating 2007-09-15 20:30:04 +00:00
Andreas Steffen a2ab401c56 put IKE_SA and CHILD_SA names in single quotes 2007-09-15 16:06:58 +00:00
Andreas Steffen 3f4076b7c8 log name of established IKE_SA 2007-09-15 15:54:30 +00:00
Andreas Steffen 21b3099ac4 log name of established CHILD_SA 2007-09-15 15:53:10 +00:00
Martin Willi dd52993068 only switch to port 4500 if we are on 500: fixed reauthentication in NAT 
scenarios
 2007-09-12 11:11:10 +00:00
Martin Willi a8827c9b63 moving virtual IP when interface changes due mobike 2007-09-12 07:36:45 +00:00
Martin Willi 12fa4387c6 fixed NAT detection with mobike 2007-09-12 07:14:05 +00:00
Martin Willi 5474dc6500 implemented routeability checks for mobike (experimental) 2007-09-03 12:37:25 +00:00