denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
883 Commits 1 Branch 0 Tags
971218c3ae71713e4bcff6113331c98d6a05f898
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 2f89902d07 applied new changes from NATT team 
DPD only done when no IPsec and IKE traffic processed
	minor changes here and there
 2006-06-23 14:02:30 +00:00
Martin Willi 2891590b05 some message code cleanups 2006-06-23 14:00:15 +00:00
Martin Willi eecb2da87d fixed identification_t clone to apply function pointers 2006-06-23 13:20:17 +00:00
Martin Willi 4b24dd2d7d cleaner error handling on UDP encapsultion sockopt failure 2006-06-22 13:05:15 +00:00
Martin Willi 6f51c9f184 added mysterious UDP encapsulation socket option to get encapsulation working 2006-06-22 12:57:49 +00:00
Martin Willi 1396815afb first merge of NATT code 2006-06-22 06:36:28 +00:00
Martin Willi 6bf1352032 fixed testing build 2006-06-21 12:58:02 +00:00
Martin Willi e986c40bc7 updated for 4.0.1 release 2006-06-21 12:14:40 +00:00
Martin Willi 7e81e97543 updated news for 4.0.1 release 2006-06-21 12:11:29 +00:00
Martin Willi b29bfa7c76 fixed whitelist detection 2006-06-20 11:03:47 +00:00
Martin Willi 986d23bd6e reworked function ignore mechanism to not-report whitelist 
rather than overriding functions
 2006-06-20 10:05:56 +00:00
Martin Willi 13b8fa0e8d fixed execv call args to work when using strictcrl and syslog 2006-06-20 10:04:35 +00:00
Martin Willi 5c6b5bf599 fixed bug: usage of already freed mem 2006-06-20 09:53:25 +00:00
Martin Willi aed58dcc93 readded local_credential_store 
added sendcert policy to connection
some other cleanups
 2006-06-20 08:43:57 +00:00
Martin Willi b965b8456b fixed SPI when acting as initiator of rekeying 2006-06-19 09:27:14 +00:00
Martin Willi c65a4fff3f fixed SPI when rekeying and deleting CHILD_SAs 2006-06-19 08:54:19 +00:00
Martin Willi 891dfaf983 change key derivation order to fullfill RFC 2006-06-19 08:11:42 +00:00
Martin Willi f7eb60dd5e 2006-06-16 14:10:49 +00:00
Martin Willi c859ec9592 fixed compilation error 2006-06-15 13:41:06 +00:00
Martin Willi c15c3d4be9 updated for release 2006-06-15 13:23:06 +00:00
Martin Willi 147fe5095d fixed aes code, we support now aes128, aes192, aes256 in IKE 2006-06-15 13:14:09 +00:00
Martin Willi c095388f7f added support for "ike" and "esp" keywords 
fixed bugs in proposal code
algorithm selection for charon works now with ipsec.conf
a lot of other fixes
 2006-06-15 11:09:11 +00:00
Martin Willi 3efbf98312 implemented clean spi allocation behavior when using multiple proposals 2006-06-15 11:06:22 +00:00
Martin Willi 525a5538db fixed logleve(l) keyword typo 2006-06-15 11:03:41 +00:00
Martin Willi 56f1a8f2d6 handling of "rekey=no" parameter added 2006-06-15 11:02:15 +00:00
Martin Willi ad038f770d changed default algorithms to: 
ike: aes128-sha-modp2048
  esp: aes128-sha1, 3des-md5
 2006-06-15 11:01:17 +00:00
Martin Willi b7e3329f17 fixed down keyword 2006-06-13 10:11:45 +00:00
Martin Willi fa32cd3c47 debug and logging improvements 2006-06-13 10:01:04 +00:00
Martin Willi 22ff6f578f 2006-06-13 10:00:19 +00:00
Martin Willi 50f98119dd using same reqid if a child sa rekeys an existing one 2006-06-12 08:36:41 +00:00
Martin Willi a2a3fb3e25 workaround for peers rekeying at the same time 
loading lifetime policies from ipsec.conf
 2006-06-12 07:33:20 +00:00
Martin Willi 695723d4e8 old child_sa gets deleted after rekeying 
rekeying almost complete, but:
	IKE_SA get in an invalid state when both initiate rekeying at the same time,
 2006-06-09 15:12:43 +00:00
Martin Willi b543bef50c improved kernel interface logging 2006-06-09 08:41:41 +00:00
Martin Willi 0bb32cb5f3 fixed clone/destroy behavior when not using CAs 2006-06-09 07:40:40 +00:00
Martin Willi 5c131a016b specifying keysize in bits, as it is required in IKEv2 
added generic kernel SA algorithm handling, which brings us:
        aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
 2006-06-09 07:31:30 +00:00
Martin Willi 180f924ba5 removed unused Makefile 2006-06-09 05:42:29 +00:00
Martin Willi 5238c9afef fixed compile warnings when using -Wall 
further CHILD_SA rekeying work done:
	creation of a new CHILD_SA on a expire from a kernel works
	delete of old CHILD_SA still missing
	some issues when both initiate rekeing
 2006-06-08 14:20:05 +00:00
Martin Willi c0d63ac9db updated INSTALL to conform with autotools 
added a short HACKING introduction
 2006-06-08 06:34:52 +00:00
Martin Willi 8d77eddec2 further work for rekeying: 
get liftimes from policy
  added new state
  initiation of rekeying done
proposal redone:
  removed support for AH+ESP proposals
 2006-06-07 13:26:23 +00:00
Martin Willi a401efd091 proper leak detective hook for realloc 
excluded pthread_setspecific from leak detective
 2006-06-07 13:22:38 +00:00
Martin Willi 6a030ba9ea fixed a memleak 2006-06-07 05:54:09 +00:00
Martin Willi 32b6500fbf job management: 
moved job code from thread_pool to job, jobs have an "execute" method now
  added two new jobs: delete_child_sa & rekey_child_sa
kernel interface:
  listens now for ACQUIRE & EXPIRE
  supports hard and soft lifetimes
  fires jobs for delete and rekey child sa
ike sa manager:
  can checkout IKE SAs by requid of owned CHILD SAs
we have now the infrastructure to do the rekeying... :-)
 2006-05-31 14:23:15 +00:00
Martin Willi 6f2aba1322 - fixed some memleaks/freebugs 
- leak detective works almost usable now (?!)
 2006-05-31 14:13:26 +00:00
Martin Willi 3b8af2ab60 - added host2host test for ikev2 2006-05-31 08:15:23 +00:00
Martin Willi bd72398729 - fixed host-host tunnel traffic selection, host-host works now 2006-05-31 06:52:27 +00:00
Martin Willi 2d6c3bce06 2006-05-30 14:56:12 +00:00
Martin Willi b93782903f - fixed event queue for events >36min 2006-05-30 13:22:46 +00:00
Martin Willi 8403b34bd9 2006-05-30 13:01:50 +00:00
Martin Willi 0773bdcf3f - included charons module tests to build & dist 2006-05-30 13:00:18 +00:00
Martin Willi 5e5f0bd4b2 - added testing files to dist 
- required the use of the "ustar" format to support 
    filenames longer than 99 chars
 2006-05-30 08:51:48 +00:00
Martin Willi db66c624bf - fixed daemon destruction order to prevent 
crashes on termination
 2006-05-30 06:14:23 +00:00
Martin Willi 139ce7871f - fixed memleak when deleting a connection 2006-05-29 11:29:23 +00:00
Martin Willi 60b9abf5c1 - updated todo list 2006-05-29 11:19:31 +00:00
Martin Willi 9fe14f4b8a - policies contain a connections name now 
- used for initiate and delete
- connections won't get initiated twice anymore
- deleting of connections is now possible, which allows us to use
  ipsec update and ipsec reload
 2006-05-29 11:09:45 +00:00
Martin Willi 4c59264d9b - changed iterator->remove behavior 2006-05-29 11:04:09 +00:00
Martin Willi 65996a534d - some logging improvements and cosmetics 2006-05-24 11:59:58 +00:00
Martin Willi 3a13a78084 - handle IKE_SA setup without a piggy-packed CHILD_SA 
more IKEv2 conform
 2006-05-24 09:05:21 +00:00
Martin Willi b82908b8b5 - initiate IKE_SA deletion befor manager destruction 2006-05-24 09:02:39 +00:00
Martin Willi 49e6a32353 2006-05-24 06:47:33 +00:00
Martin Willi 298b06c28c - build gets perl and gperf from configure now 
- moved built sources to maintainer-clean
 2006-05-24 06:36:46 +00:00
Martin Willi 8b5be79d83 - show connection templates in status & statusall 
- don't complain on termination of IKEv1 connections
 2006-05-23 13:25:57 +00:00
Martin Willi 3572b3b689 - updated ipsec.conf manual to reflect actual state of 
keyexchange-parameter
 2006-05-23 10:53:44 +00:00
Martin Willi 5ade114fd5 - using hubs instead of switches, which allows us 
to sniff the traffic from the host system.
 2006-05-23 10:08:12 +00:00
Martin Willi 7ba69503aa - changed config load strategy: 
starter loads both connections in charon & pluto,
  charon ignores anything with keyexchange!=ikev2.
  pluto needs the same behavior.
 2006-05-23 10:07:02 +00:00
Martin Willi de1584de40 - changed build order to fix build error after distclean 2006-05-23 09:41:18 +00:00
Martin Willi 4a5bba25e2 - reimplemented proper IKE SA deletion using a seperate state, 
should conform now to IKEv2
 2006-05-23 08:01:49 +00:00
Martin Willi 4acc8989ce - fixed build when using --enable-leak-detective 2006-05-23 08:00:29 +00:00
Martin Willi a2744feb63 - added removed files to svn:ignore 
- fixed bug in pluto/Makefile.am
 2006-05-19 14:25:08 +00:00
Martin Willi d6c32b83de - removed perl-generated oid.c/h from svn, 
added them to "dist" and "distclean"
 2006-05-19 14:16:58 +00:00
Martin Willi 7ca49e4037 - removed lex, yacc and gperf output from svn, 
added them to "dist" and "distclean"
 2006-05-19 14:05:26 +00:00
Martin Willi d7272314fc - storing release revision in svn property "release-revision", because I forget it all the times 2006-05-19 13:08:06 +00:00
Martin Willi a4c75933cc - added ingorelist for builded files 2006-05-19 12:20:26 +00:00
Martin Willi b1e69188ce - re-added doxygen apidoc, buildable with "make apidoc" 2006-05-19 12:10:06 +00:00
Martin Willi bea98d4dd7 - added missing ipsec.conf.5 to distribution :-/ 2006-05-19 11:16:48 +00:00
Martin Willi 1dec928446 - fixed another typo 2006-05-19 09:29:17 +00:00
Martin Willi fea5e716c4 - added missing ipsec.conf ipsec.conf.5 
- existing ipsec.conf won't get overwritten anymore
 2006-05-19 08:59:19 +00:00
Martin Willi 2403d26472 - fixed typo in Makefile which corrupted the build 2006-05-19 08:12:02 +00:00
Martin Willi 7881ac141e - applied patch from the NAT-T team fixing several typos 2006-05-19 06:46:22 +00:00
Martin Willi 86a7937b45 - applied patch from andreas, which allows certificate listing via stroke 2006-05-19 06:44:08 +00:00
Martin Willi 3e61d63a3a - added ipsec.conf template and man page back 
- removed old Makefiles
- added new strongswan KDevelop project & startup hack
 2006-05-18 14:21:58 +00:00
Martin Willi 17b296836a - fixed Revision in changelog fo 4.0.0 2006-05-18 08:41:12 +00:00
Martin Willi 8ba0404004 - started ChangeLog 
- simple script for ChangeLog update via "svn log"
 2006-05-18 07:11:46 +00:00
Martin Willi 7626bef673 - fixed compliation error using --enable-smartcard 2006-05-18 06:22:37 +00:00
Martin Willi 32d24cb513 - added test for ikev1-ikev2 mixed mode 
- added test ikev2 roadwarrior scenario
 2006-05-18 06:22:07 +00:00
Martin Willi b5e1560659 - applied andreas's patch 
- logger output improvements
  - testin gupdates
  - and a lot more
 2006-05-18 06:02:28 +00:00
Martin Willi 1e93135408 - updated testsuite to autotools 2006-05-17 14:24:18 +00:00
Martin Willi db26d00e73 - added random source ./configure options 
- fixed default-pkcs11 option
 2006-05-17 14:21:38 +00:00
Martin Willi f0cdc48e4e - fixed errors when --enable-pkcs11 
- added autogen script
 2006-05-17 07:16:23 +00:00
Martin Willi f2c2d395ff - introduced autotools 
- first working version
  - make dist should work
  - things to do:
    - UML testing!
    - more cleanups
 2006-05-16 14:24:03 +00:00
Martin Willi eedfdfbe6e 2006-05-10 13:21:01 +00:00
Martin Willi 32df5cc373 2006-05-10 13:20:47 +00:00
Martin Willi 9c316d8021 2006-05-10 13:19:45 +00:00
Martin Willi 9293ff427c 2006-05-10 13:18:28 +00:00
Martin Willi 9cf5f29027 2006-05-10 13:16:27 +00:00
Martin Willi 4e98759d32 2006-05-10 12:47:35 +00:00
Martin Willi 4d690f4bd4 2006-05-10 12:45:52 +00:00
Martin Willi b78479bf31 2006-05-10 12:45:31 +00:00
Martin Willi 1cc981b9af 2006-05-10 12:44:32 +00:00
Martin Willi 2af2b9fec5 - fixed build 2006-05-10 12:41:52 +00:00
Martin Willi 35857a7dec 2006-05-10 12:17:33 +00:00