denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,065 Commits 1 Branch 0 Tags
a066f7e6c260bc46eb9b54ca5333121766d8c438
Commit Graph
152 Commits
Author SHA1 Message Date
Martin Willi 7068410b6f source address lookup in kernel interface 
use it for NAT detection if no source address known from config
  support for %any...%any connections
 2007-06-18 07:25:58 +00:00
Martin Willi 02b3ec0a10 implemented address change notification (for MOBIKE) 
implemented up to date address list cache to list interfaces
 2007-06-14 15:16:15 +00:00
Martin Willi 04f4e82d53 added missing files to the last commit 2007-06-14 08:17:23 +00:00
Martin Willi 26424f03c3 proper reauthentication: 
IKE_SA is closed completely before the new is initiated, 
  resolves some issues when a dynamic IP is requested from a pool
 2007-06-14 08:13:05 +00:00
Martin Willi 9fe1a1ca76 introduced callback_job: 
simple asynchronous method invocation
  use daemons thread pool for all threads
  proper cancellation and cleanups
  cancellation mechanism to dynamically unload multithreaded code
unified event_queue and scheduler => scheduler
unified job_queue and thread_pool => processor
removed job_type_t, not really needed
fixes here, there and everywhere
 2007-06-11 10:57:19 +00:00
Martin Willi b1450b48a0 removed misleading warning when rekeying 2007-05-23 06:32:41 +00:00
Martin Willi 16878f6823 support for virtual IP definition on client side: 
if leftsourceip is defined, it is requested.
  server may define rightsourceip=%config to accept any,
  or it may overwrite it using rightsourceip.
  if server does not return an IP, client enforces its configured leftsourceip.
 2007-05-22 13:49:31 +00:00
Martin Willi a06c068191 fixed memleak 2007-05-22 09:38:42 +00:00
Andreas Steffen 6e04f25313 support of CA-based ipsec policies 2007-05-18 12:25:37 +00:00
Andreas Steffen 16c72c0c4f cosmetics 2007-05-15 19:04:15 +00:00
Andreas Steffen df9fbd2c64 adapted authentication failure text to those in the authenticators 2007-05-15 14:52:44 +00:00
Andreas Steffen b17e0db372 cosmetics 2007-05-15 12:45:19 +00:00
Martin Willi 3cd3f48428 properly implemented interface_managers initiate, terminte_[ike|child] 
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
 2007-05-09 12:33:08 +00:00
Martin Willi a84fb01b96 restructuring of configuration backends 
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
  configuration backends
  control interfaces
using pluggable modules as in EAP
 2007-04-27 14:25:08 +00:00
Martin Willi f47e450be9 properly checking received IDr as initiator 2007-04-25 06:06:13 +00:00
Martin Willi 1fd5383e61 added PDF support for CHILD_SAs 
support for INVALID_KE_PAYLOAD negotiation for rekeying
 2007-04-19 08:02:19 +00:00
Martin Willi 3b138b8422 cleaned up apidoc 
added some comments
removed configuration.[ch], as it does not make sense like it is
 2007-04-11 07:20:39 +00:00
Andreas Steffen a07aad39dc edited comment and debug output 2007-04-10 22:38:06 +00:00
Martin Willi 00ccb87671 requesting the same virtual IP on reauthentication 2007-04-10 15:02:57 +00:00
Martin Willi e0fe765152 restructured file layout 
new configuration structure:
  peer_cfg: configuration related to a peer (authenitcation, ...=
  ike_cfg: config to use for IKE setup (proposals)
  child_Cfg: config for CHILD_SA (proposals, traffic selectors)
  a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
 2007-04-10 06:01:03 +00:00
Martin Willi b9e363f86f added IKE_SA_INIT retransmission detection 
fixed thread exhaustion when IKE_SA is blocked for a longer time
 2007-03-29 14:20:10 +00:00
Martin Willi a6bdc731b1 added retry limit for IKE_SA_INIT (give up after 5 cookie failures) 2007-03-29 11:07:49 +00:00
Martin Willi c00840478e fixed state and logging of IKE_SA when using EAP authentication 2007-03-27 16:11:29 +00:00
Martin Willi e23a59f635 fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progress 2007-03-27 13:32:12 +00:00
Martin Willi 92275b0981 added CHILD_SA compare check for rekeying collisions 2007-03-22 07:34:42 +00:00
Martin Willi 4315f5c88b fixed some rekey collision issues 
added retry with jitter when rekeying fails
 2007-03-21 16:11:14 +00:00
Martin Willi eef0859043 fixed child rekey collision 
implemented ike rekey collision
 2007-03-21 14:42:49 +00:00
Martin Willi 195ada0b4b handling of CHILD_SA rekeying collisions 2007-03-21 09:25:36 +00:00
Martin Willi 403f8fd300 fixed inproper delete of CHILD_SA 2007-03-21 07:01:14 +00:00
Martin Willi 0f33e8264a fixed some exchange collisions (except IKE/CHILD rekeying) 2007-03-20 16:13:21 +00:00
Martin Willi 37c6ebb78b fixed nat detection bug 2007-03-20 12:25:08 +00:00
Martin Willi 755bdcc274 adjusted loglevels 2007-03-20 08:13:54 +00:00
Martin Willi e05a0b765a fixed CHILD_SA rekeying/delete bug on 64bit machines 
removed obsolete methods in delete_payload
 2007-03-19 08:04:37 +00:00
Martin Willi b857118bd7 removed cfg-payload dns test code 2007-03-14 11:04:31 +00:00
Martin Willi d2940fd78c not detaching from bus when IKE_SA_INIT is retried 2007-03-13 14:55:53 +00:00
Martin Willi f5fbad4a62 fixed memleaks when using EAP authentication 
fixed configuration payloads when using EAP
 2007-03-08 22:56:14 +00:00
Martin Willi 1216db7e8b including peers certificate when his certreq is empty 2007-03-08 20:19:24 +00:00
Martin Willi e5a7f1cd08 implemented cookies as initiator 
proper logging of notifies in IKE_SA setup
 2007-03-08 20:18:39 +00:00
Martin Willi 8b8dd69dee some cleanups 
not installing %any DNS servers
 2007-03-08 16:58:59 +00:00
Martin Willi f007a70055 allocation fixes, not complete 2007-03-08 14:41:30 +00:00
Martin Willi 2c7fe7f530 handling "No policy found" properly 2007-03-08 14:41:09 +00:00
Martin Willi 9b8b3e5f5c fixed CHILD_SA creation within existing IKE_SA 2007-03-08 12:28:10 +00:00
Martin Willi 49e8ac052d ported changes from EAP branch, renabling EAP framework 2007-03-08 00:27:43 +00:00
Andreas Steffen 4eacb268a0 added parsing level to x509_create_from_chunk() 2007-03-07 22:58:25 +00:00
Martin Willi c676f2e2a6 fixed notify handling in IKE_AUTH 
moved nonce payload before TS in CHILD_SA setup
 2007-03-06 20:58:39 +00:00
Martin Willi f2d4ec5639 moved REKEY_SA notify to the beginning of the message 2007-03-06 20:56:58 +00:00
Martin Willi 6e1be42744 some cleanups 
not assigning %any virtual IPs to peer anymore
 2007-03-05 22:07:36 +00:00
Martin Willi 02b3101b67 fixed double free bug 2007-03-05 22:02:14 +00:00
Martin Willi 5bf1be3c9f fixed ID selection bug when peer doesn't include IDr payload 
allowing vendor ID in any messag
 2007-03-05 15:22:50 +00:00
Martin Willi 373b8a607f fixed netlink socket receiver code 
implemented interface enumeration code with netlink: no getifaddrs reqired anymore
 2007-03-03 14:56:24 +00:00