denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,805 Commits 1 Branch 0 Tags
94c0e8346a80b91b20264601d276b506e7665fa4
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner dd0696ec8e Use strncpy when reading smartcard keyids from ipsec.secrets. 2011-04-19 18:00:16 +02:00
Tobias Brunner 6e0c82141f pluto: Replaced some strcpy usages with strncpy. 2011-04-19 17:35:57 +02:00
Tobias Brunner 81b598ca5f openac: --out is a mandatory argument. 2011-04-19 17:35:57 +02:00
Tobias Brunner 2bf1d44f7b openac: Fixed potential overflow while reading passphrase. 2011-04-19 13:48:51 +02:00
Tobias Brunner 68e9275134 openac: Make sure path is null-terminated. 2011-04-19 13:48:51 +02:00
Tobias Brunner 2653c08513 pluto: Make sure connection name is null-terminated during DPD restart. 2011-04-19 13:48:51 +02:00
Tobias Brunner f36a6ebd30 starter: Make sure interface name is null-terminated. 2011-04-19 13:48:51 +02:00
Tobias Brunner e0d388f2e3 Use proper return value for ietf_attr_t.compare. 2011-04-19 13:48:50 +02:00
Tobias Brunner e78c915241 scepclient: Proper handling of multiple received certificates. 2011-04-19 13:48:50 +02:00
Tobias Brunner 00b9f755f8 pool: Proper cleanup in error cases when adding addresses from a file. 2011-04-19 13:48:50 +02:00
Tobias Brunner e5143952f0 pool: Proper handling of address family when adding addresses. 2011-04-19 13:48:50 +02:00
Tobias Brunner a5543f99e4 Added missing return in iterator_t.insert_before of linked_list_t. 2011-04-19 13:48:50 +02:00
Tobias Brunner 75cf0cc012 pluto: Clarified parsing of long durations. 2011-04-19 13:48:50 +02:00
Tobias Brunner 1c004bebd8 Clearly mark switch cases that fall through. 2011-04-19 13:48:50 +02:00
Tobias Brunner 119fc2d3d7 Added missing break statement. 2011-04-19 13:48:50 +02:00
Tobias Brunner 73ac1f2040 pluto: Avoid potential null-pointer dereference when checking CRLs. 2011-04-19 13:48:50 +02:00
Tobias Brunner a61b696380 pluto: Added missing PF_KEY debug messages. 
libfreeswan does not use the version of the PF_KEY header file provided
in src/include/linux so this list is not exactly up to date.
 2011-04-19 13:48:50 +02:00
Tobias Brunner f526b35c45 Properly copy interface name if unknown. 
We use a static string if the interface name is unknown, so using memcpy
with IFNAMSIZ is incorrect as that would overrun the static string.
 2011-04-19 13:48:50 +02:00
Tobias Brunner 82017bf417 pluto: from_state is strictly lower than STATE_IKE_ROOF. 2011-04-19 13:48:50 +02:00
Tobias Brunner c8bb9a2ec6 Fixed typo in unit-tester plugin. 2011-04-19 13:48:49 +02:00
Tobias Brunner 823d2f5035 pluto: Fixed check for NAT-T keepalives. 2011-04-14 18:11:47 +02:00
Tobias Brunner 3bec23d88c pluto: Properly initialize constants. 2011-04-14 18:11:46 +02:00
Tobias Brunner 7223229924 pluto: Avoid hiding outer parameter. 2011-04-14 18:11:46 +02:00
Tobias Brunner 33c9e8b28d pluto: Use %zu to print values of type size_t. 2011-04-14 18:11:46 +02:00
Tobias Brunner 8e4da8f2e8 Use %tx to print a value of type ptrdiff_t. 2011-04-14 18:11:46 +02:00
Tobias Brunner e5e5bcc92f Removed superfluous parameter to printf. 2011-04-14 18:11:46 +02:00
Tobias Brunner b0fd7d1482 Proper cleanup if IDs in ipsec.secrets cannot be parsed. 2011-04-14 18:11:45 +02:00
Tobias Brunner 3c3c832a10 Fixed potential memory leak in host_create_any. 2011-04-14 18:11:45 +02:00
Tobias Brunner 6045eaa54a pluto: Fixed potential memory leak in atoaddr. 2011-04-14 18:11:45 +02:00
Tobias Brunner 862ef49f85 Fixed potential memory leak when processing routes from the kernel. 2011-04-14 18:11:45 +02:00
Tobias Brunner 29388829fa Do proper cleanup in error case in pki req. 2011-04-14 18:11:45 +02:00
Tobias Brunner 3fe6c0b27e Do proper cleanup in some error cases in pki signcrl. 2011-04-14 18:11:44 +02:00
Tobias Brunner 809750d72b pluto: Fixed potential memory leak when processing requested virtual IPs. 2011-04-14 18:10:52 +02:00
Tobias Brunner 267d47d6f2 pluto: Properly free buffer in error cases in read_packet. 2011-04-14 18:10:27 +02:00
Tobias Brunner 3c0c321776 Neither rekey nor del can be NULL. 2011-04-14 18:10:27 +02:00
Tobias Brunner cc2429d9a2 In scanf the maxmium length of %s does not include the null-terminator. 2011-04-14 18:10:27 +02:00
Tobias Brunner bac28c73ed starter_conn_t.id is an unsigned long. 2011-04-14 18:10:27 +02:00
Tobias Brunner e51cae33a9 Fix compiler warnings at creation of CRL cache filenames. 
This was not really a problem because ptr is the first member of a chunk_t
and it contains a null-terminated string at that point.  But it's clearer
this way.
 2011-04-14 18:10:27 +02:00
Tobias Brunner 1f02bdc8d3 Fixed output in ietf_attributes_t.get_string. 2011-04-14 18:10:26 +02:00
Tobias Brunner 64f4237b1e Fix "set nexthop to him when instantiating rightallowyes template with leftnexthop == right" 
This fixes commit 280f6b1ab2.
 2011-04-14 18:10:26 +02:00
Tobias Brunner aee071ed8b Fixed check for member of stroke_msg_t in pop_string. 
Because of the cast to char** the length of the message was multiplied
by sizeof(char*), i.e. 4 or 8 bytes (depending on the architecture) instead
of by 1 (sizeof(char)).
 2011-04-13 18:18:03 +02:00
Tobias Brunner e54a2bd20e pluto: Properly initialize a.continuation. 2011-04-12 17:39:11 +02:00
Tobias Brunner 2cec32e8eb pluto: Properly initialize ta.encrypter. 2011-04-12 17:22:50 +02:00
Tobias Brunner 7f1fb6b69d pluto: Fixed off by one error when reading private keys. 2011-04-12 15:54:29 +02:00
Tobias Brunner 24e0595437 Removed unused variables. 2011-04-12 14:44:49 +02:00
Tobias Brunner a6390879d5 Make availability of glob(3) optional in settings_t. 
If glob(3) is not available just try to open the pattern as regular
file. The reason for this change is that glob(3) is not available on Android.
 2011-03-22 19:21:26 +01:00
Tobias Brunner 913591ecb8 Make sure that files included in settings_t are regular files. 2011-03-22 19:21:15 +01:00
Tobias Brunner f5958b6225 Define PLUGINDIR in Android.mk even though it is currently not used. 
The combined plugin loader requires PLUGINDIR to be defined.
 2011-03-22 17:41:37 +01:00
Tobias Brunner 566173366d File lists in Android.mk files updated to those in the Makefiles. 2011-03-22 17:41:29 +01:00
Tobias Brunner 3eede76288 Fall back to _LINUX_CAPABILITY_VERSION if no explicit version is defined. 
This is the case on Android.
 2011-03-22 17:39:05 +01:00
Tobias Brunner dcab9d39a2 Fixed a possible segfault after termination of IKE and child SAs. 
Because the thread that is actually terminating the SA and thus checking
it in again is not be the same thread that previously checked it out and
queued the termination job, the thread local SA on the bus has to be reset
manually, similar to how it is set in the job which is executing the job.
 2011-02-28 13:29:09 +01:00
Tobias Brunner be8d5c08fb maemo: New upstream release. 2011-02-15 10:43:19 +01:00
Tobias Brunner 068b9c0b76 maemo: Disabled some unneeded plugins. 2011-02-10 16:51:35 +01:00
Tobias Brunner 6302f49754 Merged the monolithic and non-monolithic plugin loaders into one. 
This allows to add additional plugins even when the original build was
monolithic. Also fixes the pluto/xauth bug with the monolithic build.
 2011-02-10 16:49:42 +01:00
Tobias Brunner c38877b395 pluto: Properly free secrets in error cases. 2011-02-10 16:49:42 +01:00
Tobias Brunner e185d78fc9 Kernel interface updated for KLIPS plugin (TFC padding). 2011-02-10 16:49:42 +01:00
Tobias Brunner 35fe7f8cbd Compiler warning fixed. 2011-02-10 16:49:42 +01:00
Tobias Brunner afddd6a7e8 maemo: Typos in description fixed. 2011-02-10 10:17:46 +01:00
Tobias Brunner bcf34c20d5 maemo: Homepage added to debian/control files. 2011-02-10 10:17:46 +01:00
Tobias Brunner 32c19f1fe2 maemo: Exclude static libraries from strongswan-applet package. 2011-02-08 16:18:50 +01:00
Tobias Brunner 8486783594 maemo: Use automatic optification. 2011-02-08 15:19:15 +01:00
Tobias Brunner bcc4eb6ac2 maemo: Explicitly list the installed files. 
This avoids packaging static libraries and .la files plus excludes man3
pages of libfreeswan.
 2011-02-08 15:17:37 +01:00
Tobias Brunner a417409096 maemo: Use /usr/lib instead of /usr/libexec. 2011-02-08 15:17:37 +01:00
Tobias Brunner feb8ada613 maemo: Create DBUS service file with correct path to charon. 2011-02-08 15:17:36 +01:00
Tobias Brunner f1e98699c6 maemo: Fixed remake of strongswan package. 2011-02-08 15:17:36 +01:00
Tobias Brunner 4aeb2f5ed9 maemo: New releases. 2011-02-07 17:21:22 +01:00
Tobias Brunner 5d81433cc0 maemo: Build dependencies fixed. 2011-02-07 17:19:31 +01:00
Tobias Brunner 0786f1ca5f maemo: Makefile target to build source-only packages. 2011-02-07 17:19:31 +01:00
Tobias Brunner e92e687584 Removed empty man page for starter. 2011-02-07 11:39:41 +01:00
Tobias Brunner 1873f67a5b Removed useless man page for _copyright. 2011-02-07 11:39:41 +01:00
Tobias Brunner 84545f6e7c Some typos fixed. 2011-02-07 11:39:41 +01:00
Tobias Brunner 2b2eecb6ec Fixed whatis entry of pluto manpage. 2011-02-07 11:39:41 +01:00
Tobias Brunner 189cb3a1de Escape - in manpages when used as minus sign. 2011-02-07 11:39:41 +01:00
Tobias Brunner 848b8e3545 maemo: Register with the GtkIconTheme "changed" signal not until the GUI is initialized. 2011-02-07 11:39:41 +01:00
Tobias Brunner 6f61b32e52 Properly initialize variable 'critical'. 2011-02-04 18:02:49 +01:00
Tobias Brunner 1a83924a49 maemo: Moved package sources. 2011-02-04 18:02:49 +01:00
Tobias Brunner ea4feb0248 maemo: Added Maemo specific patches for strongswan.conf. 2011-02-04 18:02:49 +01:00
Tobias Brunner 443cd2d95f maemo: Use newer Debian source package format. 2011-02-04 18:02:49 +01:00
Tobias Brunner c2370e3755 maemo: Adding Makefiles to build Debian packages. 2011-02-04 18:02:49 +01:00
Tobias Brunner a07c7ba2f6 maemo: Move debian/ directory for applet to packages/. 2011-02-04 18:02:49 +01:00
Tobias Brunner 0c34c424a7 maemo: Enable pluto and starter. 2011-02-04 18:02:49 +01:00
Tobias Brunner 420fcfe5fa maemo: Added Maemo specific fields (including icons) to packages. 2011-02-04 18:02:49 +01:00
Tobias Brunner 54e8114127 maemo: Don't include debian files in distribution. 2011-02-04 18:02:49 +01:00
Tobias Brunner 5be3ceba7e maemo: Package dependencies and descriptions changed. 2011-02-04 18:02:48 +01:00
Tobias Brunner a6b7437b1f maemo: Touch icon dir to trigger update event. 2011-02-04 18:02:48 +01:00
Tobias Brunner 56f57e5814 maemo: Listen for IKE_SA state changes insted of CHILD_SA state changes. 
If the IKE_SA_INIT request fails, there is not yet a CHILD_SA that could
trigger state changes.
 2011-02-04 18:02:48 +01:00
Tobias Brunner a90891e6e3 maemo: Reload icons on icon theme change. 
This is also needed during the installation because the applet might be
loaded before the icons are installed (or the icon cache is refreshed).
 2011-02-04 18:02:48 +01:00
Tobias Brunner 25d7f059e2 maemo: Adding some missing files (required by automake). 2011-02-04 18:02:48 +01:00
Tobias Brunner ae09bc62bc Added news about changes regarding strongswan.conf. 2010-12-17 17:32:14 +01:00
Tobias Brunner 5889e864a0 Moved "Reading values" section, typo fixed. 2010-12-17 17:31:42 +01:00
Tobias Brunner e6f42b0721 Include the destination net in the policy priority calculation. 
The resulting priorities are as follows:

    IPv6               IPv4
    routed   normal    routed   normal
max 4096(+3) 2048(+3)  4096(+3) 2048(+3)
min 3072     1024      3840     1792

Where min is for a policy between two single hosts and max is
for /0 on both ends (lower priorities are preferred by the kernel).
(+3) applies for cases where no protocol and no ports are defined.
 2010-12-07 12:14:50 +01:00
Tobias Brunner 503e1c558e CDP enumerator added to SQL plugin. 2010-12-03 18:07:17 +01:00
Tobias Brunner 37bc379951 Tables added for CAs and CDPs. 2010-12-03 18:07:17 +01:00
Tobias Brunner ece5d52e38 Migrated sql_cred_t to INIT/METHOD macros. 2010-12-03 18:07:17 +01:00
Tobias Brunner 75827463fa Insert certificates and secrets at the front of the lists. 
As the lookup is also from front to back, certificates added later are
now found first, which is useful in case of e.g. "reread cacerts".
 2010-12-03 18:00:00 +01:00
Tobias Brunner 5b2d9f24f5 Refactored stroke_cred_t to use mem_cred_t. 2010-12-03 18:00:00 +01:00
Tobias Brunner 5ad4fa295a Function add_crl added to mem_cred_t. 2010-12-03 18:00:00 +01:00
Tobias Brunner 982de5a5f5 Function added to clear secrets (but not certs) from mem_cred_t. 2010-12-03 18:00:00 +01:00
Tobias Brunner 68c7f18643 Alternative to mem_cred_t.add_cert added, which returns the certificate. 
If the certificate is already cached, the cached version is returned.
 2010-12-03 17:59:59 +01:00
Tobias Brunner 3023a75e67 Function added to mem_cred_t to add shared secret with a linked list of owners. 2010-12-03 17:59:59 +01:00