denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,778 Commits 1 Branch 0 Tags
8997db6a99821504139782bdd0ac20bc68ab265d
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi ab89517218 fixed medsrv database uri key 2008-07-01 13:57:47 +00:00
Martin Willi 131064995a added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by remote virtual ip 2008-07-01 12:48:56 +00:00
Martin Willi d01783dba4 logging peer addresses in peer_cfg lookup 2008-07-01 11:10:37 +00:00
Martin Willi 9eeaa25f5d added host match prio to debugging output 2008-07-01 11:01:27 +00:00
Martin Willi 62bd123952 peer_cfg lookup takes peer addresses into account 2008-07-01 09:05:20 +00:00
Martin Willi 866ba8e0b6 strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if CHILD_SA setup in IKE_AUTH fails 2008-07-01 07:54:09 +00:00
Martin Willi fe5d7c43be whitelisting leaks of ENGINE_load_builtin_engines 2008-07-01 07:53:03 +00:00
Martin Willi d510eaea47 sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none found 2008-07-01 06:36:52 +00:00
Martin Willi b119f89a4e fixed chunk_increment, fixes reuse of already assigned addresses 2008-06-30 12:33:38 +00:00
Martin Willi 7da767f773 sqlite plugin requires libsqlite3 => 3.3.1 to share connections 
use recursive locking if libsqlite3 < 3.5.0
 2008-06-30 11:06:18 +00:00
Martin Willi aafe8ced39 added strongswan.conf option charon.reuse_iksa=no to create each CHILD_SA in a new IKE_SA 2008-06-30 08:45:11 +00:00
Martin Willi c66a1b757f ike/kernel protocol identifier conversion functions 2008-06-26 08:59:39 +00:00
Martin Willi 854a2e1760 fixed ifndef typo for MYSQL_DATA_TRUNCATED check 2008-06-26 07:31:52 +00:00
Martin Willi 236083cb56 fixed plugin loader destruction 2008-06-25 14:53:49 +00:00
Martin Willi 7e8af02626 flushing task_manager on shutdown while IKE_SA is usable 2008-06-25 11:40:50 +00:00
Martin Willi fae6e24dad reintroducing MYSQL_DATA_TRUNCATED if supported on that mysql version 2008-06-24 14:30:14 +00:00
Martin Willi a02bc1dbea updated location of auth_class_t 2008-06-24 13:36:10 +00:00
Martin Willi eec675bf8c enumerating loaded plugins in "ipsec statusall" 2008-06-24 12:49:04 +00:00
Martin Willi 857ba3574b fixed "double-close" of stroke fd resulting in "bad fd" errors if multiple threads are active 2008-06-23 08:53:37 +00:00
Martin Willi 417421048c fixed medsrv mysql scheme 2008-06-23 08:30:57 +00:00
Martin Willi e9ab669bc2 resolving hosts before route 2008-06-23 08:30:35 +00:00
Martin Willi 51f69943fc added missing medsrv script.js to dist 2008-06-20 08:47:06 +00:00
Martin Willi a47e16a508 including sys/queue.h to support TAILQ_LAST() macro 2008-06-20 08:17:03 +00:00
Martin Willi 9bbb794afc shipping own linux/types.h for introduced __be32 in linux/xfrm.h 2008-06-20 08:15:38 +00:00
Martin Willi 29727a4447 compatibility fix for other shells than bash >= 3.1 2008-06-20 07:56:01 +00:00
Martin Willi 1345ebad0f removed unused MYSQL_DATA_TRUNCATED check for compatibility with older mysql versions 2008-06-20 07:37:55 +00:00
Martin Willi bb1383183c support in smp for terminate-by-name 2008-06-20 07:14:35 +00:00
Martin Willi 364fca2cee fixed identation 2008-06-19 11:50:13 +00:00
Martin Willi 252015f017 medcli initiates "active" connections on startup 2008-06-19 11:09:48 +00:00
Martin Willi a5b8e6976b medcli plugin writes connection status to database 2008-06-19 08:46:34 +00:00
Martin Willi cc7d8dca38 fixed UCI default proposals 2008-06-18 13:32:23 +00:00
Martin Willi fdacb2f181 support for more config options in UCI plugin 2008-06-18 08:50:32 +00:00
Martin Willi 61c4638646 first simple prototype of a UCI configuration plugin for OpenWRT 2008-06-17 14:17:51 +00:00
Martin Willi 285152b33d do not use self-installed route for IKE if routing table is 0 2008-06-17 08:04:12 +00:00
Martin Willi 9e9d3ddc12 scepclient requires libcrypto to build 2008-06-16 07:10:48 +00:00
Martin Willi eab63e8476 fixed matches() check for RFC822/FQDN without wildcards 2008-06-13 15:10:01 +00:00
Martin Willi 1726ca1027 implemented identification_t.match() case insensitive for RFC822/FQDN 2008-06-12 14:17:37 +00:00
Martin Willi 035930fc4a added %P printf handler for poposal_t 
added some proposal selection debugging code
 2008-06-12 11:42:19 +00:00
Martin Willi 9529fb6836 added mediation server web frontend 
updated charons medsrv plugin to updated database scheme
 2008-06-11 14:13:24 +00:00
Martin Willi 697678979e passing controller arguments to filter, not controller itself 2008-06-11 14:11:01 +00:00
Martin Willi 66860d3b8f loading PEM encoded public keys 2008-06-11 14:10:02 +00:00
Martin Willi d1ebd5de22 reduced default debug hook verbosity 2008-06-11 14:09:46 +00:00
Martin Willi 63608c9fc6 fixed compile error of medsrv plugin 2008-06-11 07:45:25 +00:00
Martin Willi e484f7f3dd fixed resolving numerical IPv6 addresses in host_create_from_dns() 2008-06-11 07:44:23 +00:00
Martin Willi d35effa89b fixed resolving numerical addresses in host_create_from_dns() 2008-06-11 07:31:24 +00:00
Martin Willi ddedf511bb fixed compile error in smp plugin 2008-06-10 11:29:46 +00:00
Martin Willi a8ed846be7 added strongswan.conf option "routing_table" and "routing_table_prio" 2008-06-10 07:51:21 +00:00
Martin Willi 208b3baf10 fixed "enabled" value key word 
more debugging for settings parser
 2008-06-10 07:14:34 +00:00
Martin Willi 5dcda9e25b added strongswan.conf option to disable route installation 2008-06-10 06:58:39 +00:00
Martin Willi 5a22a02156 DNS resolving of ike_cfg hosts dynamically on demand 2008-06-06 15:05:54 +00:00
Martin Willi 1e9c46f13d configure option for updown firewall scripts 2008-06-06 08:24:39 +00:00
Martin Willi 915e04b2dd extended leak detective white list for OpenSSL 2008-06-06 08:13:11 +00:00
Martin Willi e581a31d6a link against openssl crypto library only 2008-06-06 08:04:42 +00:00
Martin Willi 6649a3ca80 fixed --utc parsing position 
support for DN filtering usign id="CN=asdf, O=asdf",addr=1.1.1.1
changed order of --leases columns
 2008-06-05 13:56:10 +00:00
Martin Willi 4fa74562ae fixed UTC identitation 
implement filtering in --leases
 2008-06-05 08:52:27 +00:00
Martin Willi 0f7aecf402 fixed NULL string mysql parameter 2008-06-05 08:24:55 +00:00
Martin Willi 011b1cca94 do not roam IKE_SA in created or deleting state 2008-06-04 14:31:06 +00:00
Martin Willi 2ba1f9e761 added pool statistics (size, online, lease count, with usage ratio) 2008-06-04 14:01:44 +00:00
Martin Willi f3e11fc478 some input validation checks for --add and --resize 
--purge keeps an entry for each address to allow their reallaction
 2008-06-04 13:18:55 +00:00
Martin Willi f13e23754f tolerating chown failures on installation, required to build some packages 2008-06-04 12:09:24 +00:00
Martin Willi 9fa66e8bbf removed unused variable 2008-06-03 12:14:02 +00:00
Martin Willi 7624dbf068 process payload length more strictly 2008-05-23 18:23:17 +00:00
Martin Willi 5e17e35c8d fixed some compiler warnings 2008-05-23 15:49:43 +00:00
Martin Willi de3d65a132 filtering out non matching path probing pairs explicitly 2008-05-23 15:43:42 +00:00
Martin Willi e1d2435dbf fixed parsing of UNKNOWN_PAYLOADs 2008-05-21 21:53:38 +00:00
Martin Willi 85a119bc0b replying to COOKIE2 mobike notify properly 
including COOKIE2 ourself after path probing
 2008-05-21 17:56:21 +00:00
Martin Willi ce62751b60 writing guest pid to file (simplifies debugging) 2008-05-21 16:02:16 +00:00
Martin Willi cb9edc54eb using fixed size keys in key derivation for AES-XCBC PRF 2008-05-21 14:58:03 +00:00
Martin Willi 4f23ec78d1 added more verbosity if signature hash OID is unknown 2008-05-21 13:01:58 +00:00
Martin Willi da1bc5e860 fixed loading of smp plugin 2008-05-19 14:20:07 +00:00
Martin Willi 0b0fba9e0d fixed warning if plugin list has trailing whitespaces 2008-05-16 13:48:58 +00:00
Martin Willi 99968bf0a0 fixed plugin names of EAP modules 2008-05-16 12:14:48 +00:00
Martin Willi 987a42c05e moved manager to its own subdirectory in ipsecdir 2008-05-16 09:13:23 +00:00
Martin Willi 1ba62b5562 loading default modules depending on configure options 2008-05-16 08:52:32 +00:00
Martin Willi 7f491111e6 some NEWS for 4.2.2 2008-05-15 14:15:27 +00:00
Martin Willi a3d92a3745 plugin load configuration in strongswan.conf 
some components accept a "component.load" option with a space separated list of plugins to load
  libcharon- plugins are now handled the same way as libstrongswan- plugins
 2008-05-15 14:01:26 +00:00
Martin Willi 89658f6d6c static leases use 0, not NULL timeout 
fixed static leases
 2008-05-15 09:26:47 +00:00
Martin Willi bb94e1ed60 properly removing bootup poll interface eth0 2008-05-15 08:41:00 +00:00
Martin Willi fa44a2981c implemented classical UML network scenario in dumm (ipsec testing) 2008-05-14 13:11:13 +00:00
Martin Willi c48022a282 poll UML guests after startup using eth9=mcast, as networking is loaded after console 2008-05-14 11:48:00 +00:00
Martin Willi 782db7edd1 prototype of mediation client database plugin 2008-05-14 07:26:19 +00:00
Martin Willi 0fd4caea66 handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication 2008-05-14 06:49:31 +00:00
Martin Willi c0d1ebde71 fixed printing of %#H hosts 2008-05-14 06:34:54 +00:00
Martin Willi f3884f6da6 reverted [3945], proper fix for zero value ASN1 integer 2008-05-13 14:15:12 +00:00
Martin Willi cb1c54c93e updated Makefile 2008-05-13 13:58:04 +00:00
Martin Willi 6e8840981d tool to calculate KEYIDs from keys 2008-05-13 13:57:42 +00:00
Martin Willi 7af8995cde fixed unsave calculation of mpz_export length 2008-05-13 13:52:45 +00:00
Martin Willi 02ffd89642 decreased plugin load verbosity 2008-05-13 09:14:36 +00:00
Martin Willi 4d4fc2eaa1 fixed "pool --purge" on mysql 2008-05-13 07:39:24 +00:00
Martin Willi 808ca43f92 fixed compiler warning (missing include) 2008-05-13 07:37:08 +00:00
Martin Willi 5373f2a642 fixed lookup for expired leases 
initializing database if in inconsistent state
 2008-05-13 07:24:53 +00:00
Martin Willi 6cf1215e3c ported IP pool to mysql 2008-05-09 15:01:22 +00:00
Martin Willi 7051ef4091 usable prototype of "ipsec pool" tool 2008-05-09 12:55:41 +00:00
Martin Willi 5dc317192a support for left bounded padding in %H and %D 2008-05-09 12:25:39 +00:00
Martin Willi e69f33f6e2 whitelisted gmtime_r 2008-05-09 12:24:11 +00:00
Martin Willi f3bcd7f041 correctly reassigning valid leases 2008-05-09 12:22:20 +00:00
Martin Willi 9f9903a3b3 supporting width modifier in identification_t printf hook (e.g. %30D) 
cleanups in host_t %H printf hook
 2008-05-09 11:34:58 +00:00
Martin Willi ff2d02ed4c fixed interface disconnection 2008-05-09 10:38:18 +00:00
Martin Willi 0f074a4344 implemented append mode for xcbc, testcase 2008-05-08 14:51:37 +00:00
Martin Willi affd7a90ba moved RAW public key support to a separate plugin (pubkey) 2008-05-08 13:16:42 +00:00