denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,981 Commits 1 Branch 0 Tags
9d9a772ee1f5b356224a26508139720399e21818
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 9d9a772ee1 use MOBIKE enabled DPD if we are NATed 
update SAs if we detect changes in NAT mappings
 2008-10-06 13:37:04 +00:00
Martin Willi 0592212f23 fixed builder_cancel macro to return NULL on failed build 2008-10-06 13:08:49 +00:00
Martin Willi aa1b90a5b2 do not run CHILD_SA delete action if rekeying 2008-10-03 16:01:14 +00:00
Martin Willi 9c0aa46b64 use dpd_action also for remotely closed tunnels 2008-10-02 13:47:19 +00:00
Martin Willi 7827997346 also respect the mobike=no setting as responder 2008-09-30 12:36:58 +00:00
Martin Willi ceff3064fe using signed return value for read() 2008-09-30 06:27:50 +00:00
Martin Willi cdaf57ec34 fixed DH value range testing 2008-09-17 09:02:30 +00:00
Martin Willi 73f6886a50 checking mpz_export return value properly 
fixes a potential DoS attack if a DH value of zero gets processed
 2008-09-17 08:10:48 +00:00
Martin Willi bb34d2611f updated ubuntu packages for release compatible with NM svn20080908 2008-09-12 13:48:11 +00:00
Martin Willi f061d83358 ported NM plugin to upstream NetworkManager changes 
splitted secrets (4031)
	using uuid in auth-dialog (4053)
 2008-09-12 13:28:31 +00:00
Martin Willi 346bb576a2 allow multiple DELETE payloads in an informational message 2008-09-11 11:14:09 +00:00
Martin Willi b1f4785428 updated NEWS 2008-09-05 15:10:56 +00:00
Martin Willi 07447ea597 fixed ubuntu distribution/typos 2008-09-05 14:44:21 +00:00
Martin Willi f494dbd494 new ubuntu package release 2008-09-05 14:01:47 +00:00
Martin Willi 1d03954aad NM plugin supports (encrypted) private key files 2008-09-05 13:26:58 +00:00
Martin Willi e376d75f96 some NEWS 2008-09-04 14:52:33 +00:00
Martin Willi 0c6a489046 fixed some translations/encoding 2008-09-04 13:51:35 +00:00
Martin Willi f0e8a8f7f3 an initial German translation for NM plugin 2008-09-04 13:39:37 +00:00
Martin Willi 3876c44175 updated debian build to extended nm plugin 2008-09-04 11:55:31 +00:00
Martin Willi 82840e6c92 reduced nm verbosity 2008-09-04 10:35:20 +00:00
Martin Willi aff26a62c3 implemented NetworkManager certificate/private key authentication using ssh-agent 2008-09-04 08:40:37 +00:00
Martin Willi 994ed35312 added a configure option to select charon binary 2008-09-04 08:37:31 +00:00
Martin Willi 6af6f88a79 agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific private key from the agent 2008-09-04 08:35:11 +00:00
Martin Willi 703791715b handle INFORMATIONAL exchanges with NATD payloads in mobike task 2008-09-02 14:02:40 +00:00
Martin Willi 21c9546321 libstrongswan agent plugin to use ssh-agent for RSA signatures 2008-09-02 11:04:26 +00:00
Martin Willi 46eb41644d ported openac to credential factory changes 2008-09-02 11:01:05 +00:00
Martin Willi f7c17aa15c refactored credential builder 
allow enumeration of matching builders
	try a second builder if the first one fails
	builder clones resources internally on demand
	caller frees added resources on failure and success
	stricter handling of non-supported build parts
 2008-09-02 11:00:13 +00:00
Martin Willi eb3e27059b use libcap for capability dropping 
optional, must be enabled --with-capabilities=libcap
	will be extended to support --with-capabilities=libcap2
 2008-08-29 09:24:14 +00:00
Martin Willi e609b1cda2 capability API to allow plugin-controlled capability set 2008-08-28 16:27:48 +00:00
Martin Willi dc98e50153 cosmetics 2008-08-28 11:15:01 +00:00
Martin Willi e577ad3985 creating default IKE proposals dynamically using algorithm enumeration API 2008-08-28 11:07:57 +00:00
Martin Willi f1b014b9a3 separated sha1_prf implementation from sha1_hasher 2008-08-28 10:57:24 +00:00
Martin Willi 9482208633 crypto_factory algorithm enumeration API 
implementation of "ipsec listalgs"
 2008-08-28 09:24:42 +00:00
Martin Willi 018ae7c1aa build scripts for ubuntu NetworkManager packages 2008-08-27 13:51:05 +00:00
Martin Willi ee210ca353 check user account validity after PAM authentication 2008-08-27 13:48:54 +00:00
Martin Willi 609166f49f additional NEWS for 4.2.6 2008-08-27 08:39:09 +00:00
Martin Willi 281dd55891 using strongSwan, not NetworkManager version number 2008-08-26 14:27:53 +00:00
Martin Willi be49236373 fixing charon path for now for ubuntu package 2008-08-26 14:27:12 +00:00
Martin Willi f6ecd44fc6 added NM gnome plugin to distribution 2008-08-25 08:21:51 +00:00
Martin Willi c1ee908e4c removed generated Makefile.in.in from svn 2008-08-25 08:15:57 +00:00
Martin Willi a88aae3df6 enforce DN of configured gateway certificate 2008-08-25 07:50:21 +00:00
Martin Willi 7945c90adb new EAP-Identity handling uses ID_EAP in plugins 2008-08-25 07:49:48 +00:00
Martin Willi 1a109c9fc6 disabled PSK option until we have a way to enforce strong secrets 2008-08-25 07:48:11 +00:00
Martin Willi 1995f79f10 use username part of RFC822 IDs for PAM authentication 2008-08-25 07:47:16 +00:00
Martin Willi 822901061b ported parts of two-sim branch 
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
 2008-08-22 10:44:51 +00:00
Martin Willi 7c112a12c0 run guests with some niceness 2008-08-22 08:37:15 +00:00
Martin Willi 5ba7efb083 pool names are unique 2008-08-22 07:38:59 +00:00
Martin Willi 3e45b3a1ad do not return IPv6 src addresses for IPv4 destinations 2008-08-21 15:17:45 +00:00
Martin Willi b848f0377c fixed EAP-GTC secret lookup 
improved error logging
PAM authentication needs CAP_AUDIT_WRITE capability
 2008-08-21 14:40:03 +00:00
Martin Willi 1caa265c61 a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM 2008-08-21 12:10:07 +00:00
Martin Willi 2d6559b107 added sqlite busy handler: retries on locking conflicts 2008-08-21 09:25:06 +00:00
Martin Willi 02e907fe66 avoid too many alloca()s in netlink send, problematic on MIPS 2008-08-21 07:55:16 +00:00
Martin Willi bdbf3c49fc some string fixes 2008-08-20 13:59:37 +00:00
Martin Willi 6368a58ffc added missing tooltip 2008-08-20 12:02:53 +00:00
Martin Willi 1b9f6c2410 handle DBUS permission problems gracefully 2008-08-20 11:44:47 +00:00
Martin Willi 142eaea43c fixed shared key lookup by ID 
proper auth method selection
 2008-08-20 08:51:18 +00:00
Martin Willi 592dc30108 fixed auth-dialog password flush 2008-08-20 08:49:47 +00:00
Martin Willi ec24987164 certificate based gateway authentication 
prototype PSK user authentication with auth-dialog
 2008-08-19 15:19:45 +00:00
Martin Willi 62556b2b45 updated nm plugin to NetworkManager API changes 2008-08-18 11:59:19 +00:00
Martin Willi 475814ce5f roam jobs for routing table changes not fired for virtual IP routes 2008-08-18 11:07:26 +00:00
Martin Willi 39c0ae3780 configuration plugin for NetworkManager 2008-07-31 15:07:52 +00:00
Martin Willi 092a9b88ad added options for virtual IP, UDP encapsulation, IPComp 
proper handling of libstrongswan/glib TRUE/FALSE conflict
 2008-07-31 14:32:11 +00:00
Martin Willi 6dbce9c803 reimplemented dbus plugin for NetworkManager 0.7, renamed to nm 2008-07-31 11:16:14 +00:00
Martin Willi 2d87903db9 recreating FIFO if it exists 2008-07-31 09:04:54 +00:00
Martin Willi eb04645c10 fixed usage typo 2008-07-31 09:01:56 +00:00
Martin Willi 19ad10b5d3 increased stroke socket backlog to 10 2008-07-30 14:17:05 +00:00
Martin Willi f0a8fa25ba using a entry cache for duplicate checks, avoids deadlocks 2008-07-30 14:15:08 +00:00
Martin Willi 7a4ad866b0 use condvar broadcasts to signal threads waiting for an IP, there might be more than one 2008-07-30 13:19:12 +00:00
Martin Willi 38a8e39739 using shared read locks in credential set enumerators to avoid deadlocks 2008-07-30 11:38:44 +00:00
Martin Willi 21632b76e0 added strongswan.conf option "charon.dos_protection" to disable cookies/aggressiveness check 2008-07-30 08:27:08 +00:00
Martin Willi 7fb2693724 switched xterm console title 2008-07-28 13:10:34 +00:00
Martin Willi bc8f868c99 using gnome-terminal in irdumm 2008-07-28 12:37:01 +00:00
Martin Willi 7c04589335 use XFRM_MSG_UPDPOLICY for existing policies only 2008-07-28 08:29:04 +00:00
Martin Willi 6ef70d2109 added tests.h to distribution 2008-07-24 12:48:36 +00:00
Martin Willi b6bf863459 fixed UCI thread cancellation on ARM 2008-07-24 08:52:12 +00:00
Martin Willi 3bc5a137cb added option charon.plugins.sql.lease_history to disable lease history logging 2008-07-24 08:28:45 +00:00
Martin Willi 875a8326b3 fixed statistic calcuation for static leases 2008-07-24 08:21:55 +00:00
Martin Willi a01ad99341 fixed pool statistics 2008-07-23 13:56:07 +00:00
Martin Willi f7198e7e8c experimental and untested reimplementation of sql based IP pool 
uses address preallocation and separate address/lease tables for linear lookup time
 2008-07-22 14:56:15 +00:00
Martin Willi ee93541783 fixed bus args copy on non i386 archs 2008-07-21 14:23:43 +00:00
Martin Willi 0a625fde3e pool performance testing 2008-07-21 11:17:20 +00:00
Martin Willi 6b64fe2684 loading unit-tester plugin as the last one 2008-07-21 11:16:07 +00:00
Martin Willi c7314e68ab reverted bus to non-recursive mutex due instability 2008-07-21 11:15:16 +00:00
Martin Willi fc861b0b7e added a driver type getter for database implementations 2008-07-21 11:13:06 +00:00
Martin Willi a4a3e0c7dc introduced an additional bus->signal parameter for signal specific data 
added SIG_IKE/SIG_CHD macros for signal emitting
 2008-07-18 15:51:40 +00:00
Martin Willi 2f725443e5 removed testing app, this is scriptable with irdumm now 2008-07-18 12:14:43 +00:00
Martin Willi a98793adfe allow but filter recursive listener invocation 2008-07-18 11:05:01 +00:00
Martin Willi 1082b06121 fixed compiler warning 2008-07-18 10:54:49 +00:00
Martin Willi 12b1c1a1bc extended UCI plugin by a simple control interface using a fifo 2008-07-18 10:34:44 +00:00
Martin Willi bd07b59079 avoid heap allocation in bus->signal for performance reasons 2008-07-17 11:45:58 +00:00
Martin Willi 5353f22ed7 fixed potential segfault in resolve_hosts 2008-07-17 11:06:31 +00:00
Martin Willi d61d1913e1 ignore IPCOMP acquires, fixes additional CHILD_SA setup with acquired SAs using compression 2008-07-17 08:25:34 +00:00
Martin Willi 7ca49551c8 do not distinguish different policy protocols in userland cache 2008-07-16 12:33:19 +00:00
Martin Willi 7b9e1ff0fd do not complain about existing routes 2008-07-16 12:30:47 +00:00
Martin Willi 8384cfa338 build dumm with leak ./configure 2008-07-16 11:54:44 +00:00
Martin Willi 7beea2e99f fixed acquire-delay bug by: 
installing policies before states
  updating policies if protocol has changed
 2008-07-16 11:51:37 +00:00
Martin Willi 66d4745f8e ported patch to final 2.6.26 release, including UML Makefile fixes 2008-07-15 14:41:12 +00:00
Martin Willi ef3f717bfe reverted [4125],[4166], reimplemented the proper way 2008-07-11 08:54:56 +00:00
Martin Willi 6b5d95919c setting ike_sa on bus in checkout_new 2008-07-11 08:47:18 +00:00
Martin Willi e7991a2eef do a route lookup to allow routing of left=%any connections 2008-07-09 14:16:19 +00:00