Commit Graph
100 Commits
Author SHA1 Message Date
Andreas Steffen ce62951115 version bump to 4.2.13 2009-02-21 17:53:10 +00:00
Andreas Steffen bfde75ee76 changes in 4.2.12 2009-02-20 19:52:14 +00:00
Andreas Steffen 91480aa9fb added eap=mschapv2 to ipsec.conf.5 2009-02-19 22:12:04 +00:00
Andreas Steffen 423c72d017 added ikev2/rw-eap-mschapv2 scenario 2009-02-19 22:02:28 +00:00
Andreas Steffen e7c336c6ab added Id svn:keyword 2009-02-19 10:16:45 +00:00
Andreas Steffen 1e0d1ae213 support of MD4 hash 2009-02-19 10:06:58 +00:00
Andreas Steffen eca666d600 corrected typo 2009-02-19 09:54:31 +00:00
Andreas Steffen 2b1f5f3461 configuration of NBNS server assignment via strongswan.conf 2009-02-13 11:57:50 +00:00
Andreas Steffen 698b3f99e4 use internal host venus as dns2 2009-02-12 09:18:42 +00:00
Andreas Steffen 48f9a22b57 configuration of DNS server assignment via strongswan.conf 2009-02-12 09:02:15 +00:00
Andreas Steffen 6f1271855b [4859] caused crash when handling the %config case 2009-02-11 22:39:35 +00:00
Andreas Steffen 392f0e9446 corrected syntax 2009-02-11 16:45:14 +00:00
Andreas Steffen 16c6114ee7 this debug statement has only two arguments 2009-02-11 16:41:37 +00:00
Andreas Steffen a584a231b1 fixed a 64-bit issue with time_t printf hooks 2009-02-11 16:37:16 +00:00
Andreas Steffen c59825fbfc support of dynamic/128 and %any6 2009-02-05 22:13:48 +00:00
Andreas Steffen 49971c4ce5 disable MOBIKE in load-tester 2009-02-05 10:10:20 +00:00
Andreas Steffen eeb1e2259d output pool name string rather than pool pointer 2009-01-28 00:37:11 +00:00
Andreas Steffen 9599ee1597 version bump to 4.2.12 2009-01-21 03:14:52 +00:00
Andreas Steffen 7d13e08dc4 added two Microsoft proprietary configuration attribute types 2009-01-20 22:55:13 +00:00
Andreas Steffen ae1ae574dd changes in 4.2.11 2009-01-20 22:37:58 +00:00
Andreas Steffen c369a5999b added notify message types used by RFC 4739 2009-01-19 12:32:42 +00:00
Andreas Steffen b59f154b09 proper initialization and disposal of keying material 2009-01-15 01:52:44 +00:00
Andreas Steffen 182ebf85e6 added pfkey/esp-alg-null scenario 2009-01-15 00:47:21 +00:00
Andreas Steffen 02282010cb added ikev2/esp-alg-null scenario 2009-01-15 00:39:06 +00:00
Andreas Steffen 6f17bf83d5 fixed ESP NULL encryption 2009-01-15 00:34:42 +00:00
Andreas Steffen 67701cfdce fixed broken listing of connections in ipsec statusall 2009-01-14 08:10:16 +00:00
Andreas Steffen 356bbeca7d added eap=gtc option to ipsec.conf man page 2009-01-14 03:29:59 +00:00
Andreas Steffen 5a45a5d0bc disable DPD and sending of cert requests in load-tester 2009-01-14 00:13:21 +00:00
Andreas Steffen 3119fafd8d cosmetics 2009-01-13 06:50:55 +00:00
Andreas Steffen 04bcdc715d changed type definition of level from char* to int 2009-01-13 06:36:31 +00:00
Andreas Steffen 37fbc74121 hiding XFRM message names from netlink 2009-01-09 09:37:13 +00:00
Andreas Steffen 40d9388037 renamed chunk 2009-01-09 08:51:41 +00:00
Andreas Steffen 88db1fa3b4 refactored DBG3 output of sent XFRM messages 2009-01-09 08:46:31 +00:00
Andreas Steffen abc177e035 DBG3 output of sent XFRM messages 2009-01-09 08:27:17 +00:00
Andreas Steffen 05332cc4b3 added message for undefined ocsp status #4 2009-01-09 01:36:13 +00:00
Andreas Steffen 48032aed00 add a compatible memrchr() function if the platform does not support it (e.g. old glibc). Patch courtesy to Thomas Jarosch 2009-01-09 01:19:45 +00:00
Andreas Steffen a205d9581d the Linux 2.6.28 uml guest kernel does not need any patches 2009-01-09 00:28:47 +00:00
Andreas Steffen 4faaa05439 test of ipsec leases command in ikev2/ip-pool and ikev2/ip-two-pools scenarios 2009-01-09 00:24:54 +00:00
Andreas Steffen 0519ca9099 version bump to 2.4.11 2009-01-08 22:23:42 +00:00
Andreas Steffen 6c8c268009 adapted ikev2/ip-pool-wish scenario to the new stroke ip pool function 2009-01-08 21:41:07 +00:00
Andreas Steffen 01a8b40b99 fixed two bugs introduced by the stroke ip pool refactoring 2009-01-08 21:34:44 +00:00
Andreas Steffen b768170bf3 missing LOGFILE in debug statement 2008-12-23 06:35:16 +00:00
Andreas Steffen c333bb4678 extended changeset [4753] 2008-12-04 23:16:10 +00:00
Andreas Steffen c165d32d9e suppress output from leak-detective in openac 2008-12-04 04:51:05 +00:00
Andreas Steffen cf62817286 load openac plugins explicitly 2008-12-04 04:36:39 +00:00
Andreas Steffen 9c674e7214 fixed refactoring error in openac 2008-12-04 04:34:49 +00:00
Andreas Steffen 04409bbb74 suppress leak-detective stderr output in ipsec pool 2008-12-04 03:31:53 +00:00
Andreas Steffen 9b6f9d14ab fixed double free of host in sadb_address2ts 2008-12-04 01:08:19 +00:00
Andreas Steffen 17a1045906 enable leak-detective and integrity-test in UML tests by default 2008-12-04 00:34:59 +00:00
Andreas Steffen 9a96ccd485 re-established lost default auth sys_logger 2008-12-01 01:24:55 +00:00
Andreas Steffen 28dd27be64 fixed crash due to missing function call parameter 2008-11-25 08:11:57 +00:00
Andreas Steffen 895a1156d5 use static IPsec policy iptables rule for alice in mobike scenario 2008-11-25 08:11:14 +00:00
Andreas Steffen 50ae86017c version bump to 4.2.10 2008-11-18 00:02:59 +00:00
Andreas Steffen 08c6ed9f14 fixed virtual IP re-installation failure in MOBIKE scenarios introduced with changeset 4662 2008-11-17 00:01:34 +00:00
Andreas Steffen 9a095db5e8 set release number back to 4.2.9 2008-11-16 22:25:16 +00:00
Andreas Steffen 4dc0dce886 added migration to NEWS 2008-11-16 21:23:56 +00:00
Andreas Steffen 7a915d627d completed migration of MIPv6 connections 2008-11-16 21:19:58 +00:00
Andreas Steffen ad60c249b6 show TRANSPORT_PROXY mode in ipsec status 2008-11-16 21:19:17 +00:00
Andreas Steffen 1ad0bacf5b adapted evaltest.dat to changed debug output 2008-11-13 21:38:16 +00:00
Andreas Steffen 84bec926a3 added type=transport_proxy and installpolicy=yes|no to man page 2008-11-13 06:29:53 +00:00
Andreas Steffen 509e07c5bc added MIPv6 functionality to NEWS 2008-11-13 05:46:51 +00:00
Andreas Steffen cd49134837 corrected unwanted deletion in comment 2008-11-12 22:57:46 +00:00
Andreas Steffen 137484895a improved fix 2008-11-12 04:08:30 +00:00
Andreas Steffen dbc277d908 fixed AES-CCM/GCM authenticated encryption by eliminating generation of superfluous generation of integrity keying material 2008-11-12 04:02:10 +00:00
Andreas Steffen c117f24e61 renamed proxy to proxy_mode in stroke_msg.h 2008-11-11 07:28:52 +00:00
Andreas Steffen e0316183f8 deleted obsolete parameter descriptions 2008-11-11 07:11:30 +00:00
Andreas Steffen d487b4b727 preliminary support of Mobile IPv6 2008-11-11 06:37:37 +00:00
Andreas Steffen 91db979cdd added the MIPv6 options use_proxy_mode and install_policy 2008-11-11 06:29:25 +00:00
Andreas Steffen 8ac4651ac3 cosmetics in debug output 2008-11-11 06:19:37 +00:00
Andreas Steffen e2764b3937 use of host_create_any() for %any address 2008-11-07 05:15:19 +00:00
Andreas Steffen f11a54bc89 SADB_X_EXT_KMADDRESS is not present in old kernels 2008-11-07 03:38:56 +00:00
Andreas Steffen 2c81539395 added retrieval of remote kmaddress via PF_KEY 2008-11-07 03:23:59 +00:00
Andreas Steffen 746115a0be %any is IP family neutral 2008-11-05 05:32:43 +00:00
Andreas Steffen f41a4a4e15 corrected typo2 2008-11-05 05:27:42 +00:00
Andreas Steffen 61670ba284 support of %any address string 2008-11-05 04:53:45 +00:00
Andreas Steffen 7c4fd176db handle 0.0.0.0 string and af == AF_INET6 2008-11-05 00:41:46 +00:00
Andreas Steffen ec1bddc50c corrected a copy-and-paste error 2008-11-03 23:46:42 +00:00
Andreas Steffen c636285878 updated copyright of kernel interface code 2008-11-03 23:34:23 +00:00
Andreas Steffen bab075b166 added support for xfrm remote kmaddress 2008-11-03 23:29:34 +00:00
Andreas Steffen 9c33987471 migrate job creates a new IKE_SA 2008-11-03 07:08:59 +00:00
Andreas Steffen cdf69f103a replace tab by spaces 2008-11-03 06:56:22 +00:00
Andreas Steffen a54e3d51c1 removed unused variables 2008-11-03 03:56:03 +00:00
Andreas Steffen ef6d339c09 migrate_job() finds a matching child_cfg 2008-11-03 02:05:41 +00:00
Andreas Steffen bd354bee5f corrected parameter description 2008-11-03 00:24:38 +00:00
Andreas Steffen a066f7e6c2 corrected captions 2008-11-02 22:13:17 +00:00
Andreas Steffen 5145ae48be fully implemented the parsing of XFRM and PF_KEY MIGRATE messages 2008-11-02 21:34:52 +00:00
Andreas Steffen b74bc4384c identify attributes of XFRM ACQUIRE and MIGRATE messages 2008-10-31 06:18:48 +00:00
Andreas Steffen e7f4fc537f subscribing XFRM socket for MIGRATE messages 2008-10-31 02:50:01 +00:00
Andreas Steffen 08571955fb adapted evaltest.dat to extended acquire job message 2008-10-31 01:46:37 +00:00
Andreas Steffen e526d22818 parse xfrm and pf_key acquire messages and subscribe to migrate messages 2008-10-31 01:43:23 +00:00
Andreas Steffen fdaed5289a added Camellia CBC to list of encryption algorithms 2008-10-30 03:31:36 +00:00
Andreas Steffen 113a4afa55 corrected parameter description 2008-10-30 00:35:37 +00:00
Andreas Steffen 217d95c82e upgrade to linux-2.6.28 headers with support for kmaddress struct 2008-10-29 05:32:38 +00:00
Andreas Steffen f5ab7f5f57 refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key 2008-10-28 01:59:01 +00:00
Andreas Steffen aeaa6a9b45 remove unused local DH_EXPONENT_ENTROPY definition 2008-10-27 00:02:22 +00:00
Andreas Steffen 21a45f2f2d use 512 bits of entropy for secret DH exponents 2008-10-26 23:53:52 +00:00
Andreas Steffen 2d1000d14e include updown plugin in sql scenarios 2008-10-21 22:28:29 +00:00
Andreas Steffen 8ceb5fd566 use old algorithm nameagain in pfkey/alg-aes-xcbc scenario 2008-10-21 03:42:32 +00:00
Andreas Steffen 7790ab0f37 re-established all previous AUD level messages 2008-10-17 03:44:06 +00:00
Andreas Steffen ff93a76cf1 activate compilation of the kernel_pfkey plugin 2008-10-15 00:22:51 +00:00