denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,544 Commits 1 Branch 0 Tags
87aa386df1f45d7336a00e6f4610b991de926c06
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi a47486b5e4 prototype of dumm GUI 2008-04-28 16:43:30 +00:00
Martin Willi ca37f81657 fixed javascript include using <script> tag 2008-04-28 08:52:17 +00:00
Martin Willi 3444390241 supporting multiple comma seperated subnets in left/rightsubnet definition 
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
 2008-04-25 12:41:37 +00:00
Martin Willi 1aedf08183 added simple Makefile to build scripts 2008-04-25 11:18:09 +00:00
Martin Willi 5e6bbf4f77 added _GNU_SOURCE and limits.h to build against glibc-2.8 2008-04-24 13:49:20 +00:00
Martin Willi c624081a7f added missing base64 chunk test 2008-04-24 13:28:18 +00:00
Martin Willi 9213ad27c2 replaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions 2008-04-24 13:26:22 +00:00
Martin Willi 71983b5cc9 some c-libs require _GNU_SOURCE for pthread_rwlock 2008-04-23 09:45:02 +00:00
Martin Willi 8570c648f1 fixed AES-128 test 2008-04-22 09:00:27 +00:00
Martin Willi 36d62fac65 experimental Padlock plugin supportin SHA1 and AES-128 for VIA C7 Esther 2008-04-22 08:44:56 +00:00
Martin Willi 65456bfe33 added AES-128 unit test 2008-04-22 08:33:55 +00:00
Martin Willi 4d18175997 removed status result from crypter interface to be consistent with other crypto interfaces 2008-04-22 07:14:24 +00:00
Martin Willi b638a1009f proper library initialization for dumm 2008-04-21 13:21:21 +00:00
Martin Willi 66bb16b033 shipping a default strongswan.conf 2008-04-18 12:52:47 +00:00
Martin Willi fa3fe3c1cf sql pool prototype 2008-04-18 11:51:58 +00:00
Martin Willi 4075225466 fixed peer config equality check 2008-04-18 10:30:52 +00:00
Martin Willi 58caabf7b4 more NEWS 2008-04-18 08:09:32 +00:00
Martin Willi c4ec8c9d18 fixed compiler warning 2008-04-17 15:08:48 +00:00
Martin Willi b360e3933d respecting ipsec.conf cachecrls= option 2008-04-17 15:01:57 +00:00
Martin Willi 58126dd295 added missing bits for credential caching 2008-04-17 15:00:51 +00:00
Martin Willi d33fa48bc7 caching of CRLs to /etc/ipsec.d/crls 2008-04-17 14:08:38 +00:00
Martin Willi 72c882d8c0 cosmetics to chunk_write() 2008-04-17 14:06:37 +00:00
Martin Willi 2270b396b3 added missing credential_set method to stroke_ca 2008-04-17 13:00:05 +00:00
Martin Willi 233b853dfa extended credential_set_t interface by a cache_cert() method 
allows persistent or in-memory caching of fetched certificates
 2008-04-17 11:22:37 +00:00
Martin Willi 46a5604a04 splitted IKE_SA manager destroy to allow plugin interaction 2008-04-17 10:46:25 +00:00
Martin Willi e5617e40d1 adding rightsourceip=%poolname properly to peer config 2008-04-17 08:55:32 +00:00
Martin Willi 4904d26120 slightly optimized IKE_SA checkin 2008-04-16 08:43:32 +00:00
Martin Willi 054c9e6031 parallelized trust chain verification 
temporary imported certificates are thread-local only
	read-write locking on credential manager
	credential sets must be thread-save now
 2008-04-16 08:38:15 +00:00
Martin Willi 2c463cdfb1 optimized half-open IKE_SA lookup (no checkout) 2008-04-16 08:34:52 +00:00
Martin Willi 140ed97c0c disable DPD if dpddelay is set but dpdaction=none 2008-04-16 05:50:56 +00:00
Martin Willi 20e32cf86c updated sql testcases to new table schema 2008-04-15 15:14:32 +00:00
Martin Willi 02e4180e48 updated sql plugin to respect config changes 2008-04-15 15:13:53 +00:00
Martin Willi 1822ca740b disabled SQL logging by default, as tests scenarios do not have a logging table 2008-04-15 15:13:08 +00:00
Martin Willi f722fa31db added error logging to sqlite plugin 2008-04-15 15:12:01 +00:00
Martin Willi 0dab0f1d5d fixed build of smp plugin 2008-04-15 11:51:46 +00:00
Martin Willi 82d8368bd7 build plugins after daemon/libstrongswan 2008-04-15 07:57:01 +00:00
Martin Willi 6a365f0740 added API for random number generators, served through credential factory 
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
 2008-04-15 05:56:35 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi a593db5d35 ike_sa_manager enumerable, not iterable 2008-04-14 11:37:46 +00:00
Martin Willi b010310517 updated rightsourceip parameter in man page 2008-04-14 08:27:05 +00:00
Martin Willi 348af092ac added close_action as a seperate config option to dpd_action 2008-04-14 08:17:18 +00:00
Martin Willi cadb5d16e5 fixed jumping IKE_SA unique ids 2008-04-14 07:55:23 +00:00
Martin Willi 45819d7d49 fixed rightsourceip=%config scenarios 2008-04-14 07:18:16 +00:00
Martin Willi 96926b006d using dpd actions to enforce connection state 
dpd actions a per child-, not peer ike-sa
 2008-04-11 08:14:48 +00:00
Martin Willi ad81e51afc implemented a simple attribute provider for stroke 2008-04-09 12:56:20 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Martin Willi 5df92bba51 changed force_encap to forceencaps 2008-04-08 12:53:36 +00:00
Martin Willi f6e7c0f785 removed stale ocsp header 2008-04-08 06:27:04 +00:00
Martin Willi 852abcd3a3 fixed doxygen groups to avoid recursion 2008-04-07 10:37:14 +00:00
Martin Willi 1749642b15 use cert->equals() to filter out equal certificates in seperate instances 2008-04-07 08:48:08 +00:00
Martin Willi da5e7bdb4c try to cache the same instance of equal certificates 2008-04-07 08:44:43 +00:00
Martin Willi b5dbcc6270 compare certificates against full encoding to allow equality check of untrusted certs 2008-04-07 08:28:35 +00:00
Martin Willi 9caadea8c8 fixed bad cleanup which results in segfault if no issuer cert found, fixes #43 2008-04-07 08:06:02 +00:00
Martin Willi ff867d062e added ./configure option --with-strongswan-conf= 
defaults to /etc/strongswan.conf
 2008-04-07 06:56:33 +00:00
Martin Willi 4071ad1e5b fixed segfault when opening a SQLite database fails 2008-04-07 06:49:13 +00:00
Martin Willi 8ec032fc62 added helper scripts to create SQL scripts 2008-04-07 06:06:42 +00:00
Martin Willi a9184df36b do not build leak_detective.o if not enabled 2008-04-04 11:38:16 +00:00
Martin Willi 2429fb4958 defining hook functions ourself as definition in uClibc and glibc differ, fixes #36 2008-04-04 11:37:19 +00:00
Martin Willi 67d147e888 removed unused gmp.h to build libstrongswan without libgmp 2008-04-04 11:13:14 +00:00
Martin Willi cce97b647a redirecting all leak_report information to stderr 2008-04-03 11:25:08 +00:00
Martin Willi 6c45e62242 some code cleanups 2008-04-03 10:22:17 +00:00
Martin Willi 6af29ccf33 configure option in strongswan.conf for thread count 2008-04-03 08:37:24 +00:00
Martin Willi 6e4e27f8de updated test data to use correct encoding data 2008-04-03 06:45:17 +00:00
Martin Willi 473eff33aa updated TODO 2008-04-02 13:21:02 +00:00
Martin Willi 16f5dacd4b added some NEWS for the 4.2 release 2008-04-02 13:20:46 +00:00
Martin Willi d6bd078a65 updated RFCs/drafts 2008-04-02 13:20:14 +00:00
Martin Willi 513f20156a fixed med_db test 2008-04-02 12:27:39 +00:00
Martin Willi 489e3da0ea updated mediation database to public key authentication 
added mysql table definition, test data
testcase
 2008-04-02 12:25:14 +00:00
Martin Willi e29ebcb1af fixed compile warnings 2008-04-02 09:54:20 +00:00
Martin Willi 372b7ac7e2 added missing files for commit [3721] 2008-04-01 15:03:02 +00:00
Martin Willi 9d1c384b4b loading of subjectPublicKeyInfo wrapped keys using KEY_ANY (openssl format) 
testcase
 2008-04-01 14:51:31 +00:00
Martin Willi d5a9e6ff3a and a fix for it 2008-04-01 14:26:31 +00:00
Martin Willi 68356ab12c simple converter from binary data to a c array 2008-04-01 14:19:22 +00:00
Martin Willi 0ea70ca66e removed unneded publicKeyInfo ASN1 structure 2008-04-01 13:39:12 +00:00
Martin Willi 45d66f5af6 some simplifications to trusted_enumerator_t 2008-04-01 10:56:08 +00:00
Martin Willi 1bb85edffe checking pretrusted but bad certificates only once 2008-04-01 10:43:44 +00:00
Martin Willi dd2efc2c03 replaced the example manager database by a sql script 2008-04-01 07:16:48 +00:00
Martin Willi e411f94d44 changed enumerator implementation to handle reentrant code 2008-04-01 06:51:55 +00:00
Martin Willi 9e72d3bcaf defining ME globally, as we need it in plugins 2008-03-31 15:01:43 +00:00
Martin Willi 0f7ef3d2a0 received certificates have least priority 
fixed manager unlocking
 2008-03-31 08:43:18 +00:00
Martin Willi d69b267d58 fixed refcounting in certificate trustchain validation 2008-03-31 07:16:12 +00:00
Martin Willi b7ef3f625d leak detective detects heap over- and underflow 2008-03-28 14:51:26 +00:00
Martin Willi 7939864dec updated leak_detective whitelist: libxml and clearsilver functions 2008-03-28 13:16:36 +00:00
Martin Willi 6b9290ff12 renamed xml plugin to smp to avoid confusion 
added some dependency checks to configure
configure checks ClearSilver and fastcgi
cleanups in the build system here and there
 2008-03-28 12:44:01 +00:00
Martin Willi 892fb43b12 fixed manager plugin loading 
manager uses strongswan.conf to read its configuration
 2008-03-28 12:41:05 +00:00
Martin Willi 35b6e2301f fixed crash if crl fetching fails 2008-03-28 12:00:51 +00:00
Martin Willi dca40a9483 fixed all pluto compiler warnings 2008-03-28 11:48:14 +00:00
Martin Willi 7539b1d1aa fixed compiler warning in openace 
fixed pem loading bug
 2008-03-28 11:47:11 +00:00
Martin Willi acf7956c68 fixed compiler warning in libfreeswan 2008-03-28 11:46:30 +00:00
Martin Willi a43eb5aa3f fixed compiler warning in scepclient 2008-03-28 11:45:56 +00:00
Martin Willi 0d2670e7e6 removed unused yynuput to fix compiler warning 2008-03-28 11:45:01 +00:00
Martin Willi 15e21c5cba fixed compiler warning 2008-03-28 10:21:04 +00:00
Martin Willi d55fa9aff7 reentrant save cert_cache 2008-03-28 08:38:51 +00:00
Martin Willi ac1fefc2de caching of CRLs 2008-03-28 08:14:47 +00:00
Martin Willi d20e5c6ab5 replaced get_public() by create_public_enumerator() to try multiple public keys for signature verification 2008-03-27 19:07:23 +00:00
Martin Willi 0d30ba3343 use trusted self-signed root CA certificates as trust anchor only 2008-03-27 13:38:02 +00:00
Martin Willi 52a61742e7 reusing generic shared_key_t implementation in med_db 2008-03-27 11:45:49 +00:00
Martin Willi cf4caefab1 whitelisted FCGX_Init 
reporting count of leaks suppressed by whitelist
 2008-03-27 11:42:35 +00:00
Martin Willi 4204db116b fixed memory leak in dispatcher 2008-03-27 10:24:37 +00:00
Martin Willi f957f7dfb3 implemented cert cache flushing, ipsec purgeocsp 2008-03-27 06:37:29 +00:00