Mirko Parthey
f3da58aaa9
Fix DNS error handling for keyexchange=ike.
...
starter fails to load a connection when a peer's DNS name is temporarily
unresolvable and keyexchange=ike was specified, which defaults to IKEv2.
The connection loads just fine in case of keyexchange=ikev2.
2011-10-25 09:44:17 +02:00
Andreas Steffen
f0a8bf47f7
refactored TNC framework
2011-10-25 01:10:16 +02:00
Andreas Steffen
c008d2cc46
moved imv_manager to libtnccs
2011-10-25 01:10:16 +02:00
Andreas Steffen
f0fa002fd1
moved imc_manager to libtnccs
2011-10-25 01:10:16 +02:00
Tobias Brunner
5d549cd4e1
Log if charon failed to establish a CHILD_SA but keeps the IKE_SA up.
2011-10-21 18:09:02 +02:00
Tobias Brunner
bb3357e886
starter: Android.mk updated to use kernel-netlink via libhydra.
2011-10-21 14:24:34 +02:00
Tobias Brunner
adab84533e
starter: Use kernel interfaces to flush SAD and SPD.
...
This now supports platforms where neither 'ip xfrm' nor 'setkey' are
available (like Android).
2011-10-21 14:24:34 +02:00
Tobias Brunner
f3a682c1ff
starter: Load plugins specific to starter.
2011-10-21 14:24:34 +02:00
Tobias Brunner
d19eaf7457
starter: INFO_FILE is not used anymore.
2011-10-21 14:24:34 +02:00
Tobias Brunner
677955e9d4
The load-tester plugin does not support SAD/SPD flushing.
2011-10-21 14:24:33 +02:00
Tobias Brunner
0e6aafb5b6
The kernel-klips plugin does currently not support SAD/SPD flushing.
2011-10-21 14:24:33 +02:00
Tobias Brunner
773572f9e0
Implemented flushing of SAD and SPD entries via PF_KEY.
2011-10-21 14:24:33 +02:00
Tobias Brunner
99d23ddf45
Implemented flushing of states and policies via XFRM.
2011-10-21 14:18:53 +02:00
Tobias Brunner
0b0f466bbc
Defined functions in the kernel interface to flush SAD and SPD entries.
2011-10-21 14:18:23 +02:00
Tobias Brunner
bf3c2dde68
Fixed indention in load-tester kernel interface.
2011-10-21 14:18:14 +02:00
Andreas Steffen
e50c853597
Add features support to tnccs plugins
2011-10-20 14:06:12 +02:00
Tobias Brunner
039a976745
Log messages with a loglevel > 1 to ANDROID_LOG_DEBUG.
2011-10-18 15:05:51 +02:00
Tobias Brunner
21cb6cffb1
pluto: Log to logcat on Android.
2011-10-18 15:03:19 +02:00
Tobias Brunner
a8256f0bda
pluto: CAP_NET_RAW seems to be required on Android even to open regular sockets.
2011-10-18 11:52:43 +02:00
Tobias Brunner
bdbbab35b1
pluto: Switch to user 'vpn' on Android.
2011-10-18 11:36:52 +02:00
Tobias Brunner
b9307badfe
pluto: Removed last usage of KERNEL26_SUPPORT (and some KLIPS stuff).
...
Because linux is not defined on Android this caused trouble.
2011-10-18 10:30:26 +02:00
Andreas Steffen
3c9dd593bb
fixed copy-and-paste error
2011-10-17 14:08:50 +02:00
Tobias Brunner
778ef77d61
Avoid heaps of compiler warnings due to plugin features registration.
2011-10-17 13:51:48 +02:00
Tobias Brunner
7bc24c598f
Add features support to gcrypt plugin.
2011-10-17 13:51:48 +02:00
Andreas Steffen
cc576edf22
Add features support to md4 plugin
2011-10-17 06:05:08 +02:00
Andreas Steffen
0ebcbc017c
Add features support to eap-radius plugin
2011-10-15 07:34:07 +02:00
Andreas Steffen
88f3fc97fe
Add features support to eap-peap plugin
2011-10-14 22:33:06 +02:00
Andreas Steffen
f21398fa84
Add features support to eap-tnc plugin
2011-10-14 21:14:49 +02:00
Tobias Brunner
89294d8731
pluto: Missing flushline call added when reading ipsec.secrets.
2011-10-14 18:38:18 +02:00
Peter Warasin
03bf57e3bb
whack: Search pluto.ctl file in defined IPSEC_PIDDIR directory
2011-10-14 18:30:05 +02:00
Andreas Steffen
9e65c13e63
Add features support to eap-gtc plugin
2011-10-14 17:41:08 +02:00
Tobias Brunner
1c10577648
starter: Only try to start pluto on Android if it is actually enabled.
2011-10-14 17:36:21 +02:00
Tobias Brunner
e45fb76b60
pluto: Fixed usage of prctl.
2011-10-14 17:36:20 +02:00
Tobias Brunner
926ed7d647
pluto: Fixed include for control socket.
2011-10-14 17:36:20 +02:00
Tobias Brunner
345e5330b5
pluto: Added fallback to ipsec.secrets parser if glob(3) is not available.
2011-10-14 17:36:20 +02:00
Tobias Brunner
5108d9507d
pluto: Include fixed.
2011-10-14 17:36:20 +02:00
Tobias Brunner
d52c37790e
pluto: Option added to disable adns.
...
This basically disables opportunistic encryption.
2011-10-14 17:36:20 +02:00
Tobias Brunner
2b9c3642e4
pluto: lwdnsq is not supported.
2011-10-14 17:36:20 +02:00
Tobias Brunner
cfa15a71d9
Source files in Android.mk updated.
2011-10-14 17:36:20 +02:00
Andreas Steffen
6022b1558a
Add features support to eap-md5 plugin
2011-10-14 17:31:16 +02:00
Andreas Steffen
e0f4f26ded
Add features support to eap-ttls plugin
2011-10-14 17:20:33 +02:00
Andreas Steffen
aa1ecd7b83
Add features support to eap-identity plugin
2011-10-14 17:20:10 +02:00
Andreas Steffen
3732fe9e38
Add features support to eap-tls plugin
2011-10-14 16:37:21 +02:00
Martin Willi
58fcdc4f06
Don't enforce features with soft dependencies before all plugins are loaded
2011-10-14 10:05:49 +02:00
Martin Willi
67c1d36554
Add features support tp eap-simaka-reauth plugin
2011-10-14 10:05:49 +02:00
Martin Willi
e9655e7417
Add features support to eap-simaka-pseudonym plugin
2011-10-14 10:05:49 +02:00
Martin Willi
f91cba1874
Add features support to eap-simaka-sql plugin
2011-10-14 10:05:49 +02:00
Martin Willi
a07f2a4b9b
Don't try to load a feature again after failure
2011-10-14 10:05:49 +02:00
Martin Willi
9894b91ca9
Don't load eap-sim-file plugin if no valid triplet file found
2011-10-14 10:05:49 +02:00
Martin Willi
59c4e88b16
Reset registration function for each plugin during feature loading
2011-10-14 10:05:49 +02:00