Andreas Steffen
c73694e7fb
Migrated ike_init to INIT/METHOD macros
2011-10-03 22:28:32 +02:00
Andreas Steffen
bb6bbe6ddd
Migrated ike_me to INIT/METHOD macros
2011-10-03 22:19:46 +02:00
Andreas Steffen
6ade8d6163
Migrated ike_natd to INIT/METHOD macros
2011-10-03 22:06:56 +02:00
Andreas Steffen
7db8fd0d9a
Migrated ike_reauth to INIT/METHOD macros
2011-10-03 21:38:04 +02:00
Tobias Brunner
b0eb026c05
Migrated mediation_manager_t to INIT/METHOD macros.
2011-10-03 18:42:29 +02:00
Tobias Brunner
02846e5e7f
Migrated connect_manager_t to INIT/METHOD macros.
2011-10-03 18:32:12 +02:00
Tobias Brunner
6401b18f12
Migrated ike_sa_id_t to INIT/METHOD macros.
2011-10-03 18:01:05 +02:00
Martin Willi
f8437dd8d2
Clear traps during shutdown before unloading kernel plugins
2011-09-12 13:02:51 +02:00
Andreas Steffen
a8bbdb1f26
log entry for outbound hash-and-url
2011-08-24 06:05:44 +02:00
Martin Willi
61cf9f512c
Try to detect Windows Clients by looking for INTERNAL_IP4/6_SERVER attribute
2011-08-19 09:16:16 +02:00
Andreas Steffen
f69f067958
fix double delete of old IKE_SA during reauthentication
2011-08-16 23:25:45 +02:00
Andreas Steffen
65d5f6bc2b
some more typos
2011-08-15 21:43:26 +02:00
Tobias Brunner
7ebf021d37
typos: initator->initiator, authenticaion->authentication.
2011-08-15 16:31:04 +02:00
Tobias Brunner
9af9c6772b
If we close a duplicate SA, it is also no authentication failure.
2011-08-12 10:11:39 +02:00
Tobias Brunner
d9eaecd373
If local authentication fails, it is not really a peer auth failure.
2011-08-12 10:04:02 +02:00
Tobias Brunner
ccbe380377
Throw an alert if authentication of the peer fails (not only for initiator).
2011-08-12 10:04:02 +02:00
Tobias Brunner
7ab19d571d
Throw an alert when the peer address cannot be resolved during initiation.
2011-08-12 09:59:27 +02:00
Tobias Brunner
ff4b25f9b7
Throw an alert via bus_t when remote authentication fails.
2011-08-12 09:59:27 +02:00
Martin Willi
efee3ed80f
Migrated all SIM/AKA code to libsimaka, use SIM and AKA backend managers registered by name
2011-08-08 13:36:56 +02:00
Tobias Brunner
5baaaa5ed5
Properly initialize ike_sa_t.
2011-08-01 13:08:15 +02:00
Tobias Brunner
241cf8e791
Update fallback drop policies if required.
2011-07-29 12:34:51 +02:00
Tobias Brunner
f1c1965d64
Install fallback drop policies for all three directions.
2011-07-28 16:56:15 +02:00
Tobias Brunner
d7a59f1976
Install fallback drop policies to avoid transmitting unencrypted packets.
...
During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy
is first uninstalled and then the new one is installed. In the short
time in between, where no policy is available in the kernel, unencrypted
packets could have been transmitted.
2011-07-27 13:44:33 +02:00
Tobias Brunner
fbedc6a45b
Remove policies in kernel interfaces based on their priority.
...
This allows to unroute a connection while the same connection is
currently established. In this case both CHILD_SAs share the same
reqid but the installed policies have different priorities.
2011-07-27 13:41:35 +02:00
Martin Willi
5d6b981572
Inherit authentication information during IKE_SA rekeying
2011-07-25 14:19:17 +02:00
Andreas Steffen
9c67f5ff54
fixed some more misspellings
2011-07-20 22:19:01 +02:00
Tobias Brunner
f3bb1bd039
Fixed common misspellings.
...
Mostly found by 'codespell'.
2011-07-20 16:14:10 +02:00
Andreas Steffen
4742d6501a
shunt manager installs policies with %any hosts
2011-07-14 13:51:36 +02:00
Tobias Brunner
0c2ce1905a
Adapted shunt manager to changed kernel interface (reqid in del_policy).
2011-07-06 12:48:26 +02:00
Tobias Brunner
47daa0e6fe
Replaced more complex iterator usages.
2011-07-06 09:43:45 +02:00
Tobias Brunner
572abc6cbd
Replaced ike_sa_t.create_additional_address_iterator with enumerator.
2011-07-06 09:43:45 +02:00
Tobias Brunner
4bbce1ef37
Replaced ike_sa_t.create_child_sa_iterator with enumerator.
...
This required two new methods on ike_sa_t. One returns the number of
CHILD_SAs and one allows to remove a CHILD_SA.
2011-07-06 09:43:45 +02:00
Tobias Brunner
e26304348c
Replaced simple iterator usages.
2011-07-06 09:43:45 +02:00
Tobias Brunner
328f22e1d3
Add the reqid to kernel_ipsec_t.del_policy.
2011-07-06 09:43:45 +02:00
Andreas Steffen
f87991704e
implemented PASS and DROP shunt policies
2011-06-28 19:42:54 +02:00
Martin Willi
6a5c8ee7a5
Initialize trap_manager listener with INIT macro, too
2011-06-28 17:19:20 +02:00
Andreas Steffen
06356a2981
Migrated trap_manager_t to INIT/METHOD macros
2011-06-28 14:42:29 +02:00
Martin Willi
bc20bc1927
Check if colliding task has actually a CHILD, i.e. after a migrate
2011-06-03 10:49:54 +02:00
Andreas Steffen
c76b8a21fe
logging initial EAP Identifier in EAP Identity Request
2011-05-29 10:30:02 +02:00
Martin Willi
a4c040d536
Added strongswan.conf option to override half open IKE_SA timeout
2011-05-16 15:24:15 +02:00
Martin Willi
9a96ba4b6e
Added a get_count() method to IKE_SA manager
2011-05-16 15:24:15 +02:00
Martin Willi
a836cf8085
Fixed identiation in private_ike_sa_manager
2011-05-16 15:24:15 +02:00
Martin Willi
69c3eca0e9
Added a non-blocking, skipping variant of IKE_SA enumerator
2011-05-16 15:24:13 +02:00
Tobias Brunner
68447302d6
Typo fixed.
2011-04-28 12:50:30 +02:00
Martin Willi
f9a552f011
Resolve and connect to RADIUS servers not before required
2011-04-21 14:01:25 +02:00
Martin Willi
52846ec820
Remove superfluous test for peer_cfg on established IKE_SAs
2011-04-20 12:31:29 +02:00
Martin Willi
bd01b9d8b2
Install ESN SAs if such a proposal has been negotiated
2011-04-20 12:26:58 +02:00
Martin Willi
4876d4f3b3
Added an esn parameter to the kernel interface add_sa functions
2011-04-20 12:26:57 +02:00
Tobias Brunner
1c004bebd8
Clearly mark switch cases that fall through.
2011-04-19 13:48:50 +02:00
Tobias Brunner
3c0c321776
Neither rekey nor del can be NULL.
2011-04-14 18:10:27 +02:00
Andreas Steffen