denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15,759 Commits 1 Branch 0 Tags
a080cfece0c19cd73ce731b124d68a601b34867e
Commit Graph
12392 Commits
Author SHA1 Message Date
Tobias Brunner 32fbad4ec2 Make sure access to policy is thread-safe during installation of route. 2011-07-06 09:43:46 +02:00
Martin Willi 75fc9d3136 Linked list style cleanups 2011-07-06 09:43:46 +02:00
Tobias Brunner 629fd2f4f6 Finally removed deprecated iterator_t. 2011-07-06 09:43:46 +02:00
Tobias Brunner 203497d80e Removed unneeded and confusing insert_after method from linked_list_t. 2011-07-06 09:43:46 +02:00
Tobias Brunner 47daa0e6fe Replaced more complex iterator usages. 2011-07-06 09:43:45 +02:00
Tobias Brunner 67405ce808 Added a function to reset the enumerator of a linked list. 2011-07-06 09:43:45 +02:00
Tobias Brunner 572abc6cbd Replaced ike_sa_t.create_additional_address_iterator with enumerator. 2011-07-06 09:43:45 +02:00
Tobias Brunner 4bbce1ef37 Replaced ike_sa_t.create_child_sa_iterator with enumerator. 
This required two new methods on ike_sa_t. One returns the number of
CHILD_SAs and one allows to remove a CHILD_SA.
 2011-07-06 09:43:45 +02:00
Tobias Brunner 4f9c691adb Replaced pkcs7_t.create_certificate_iterator with enumerator. 
The method is currently not used.
 2011-07-06 09:43:45 +02:00
Tobias Brunner e26304348c Replaced simple iterator usages. 2011-07-06 09:43:45 +02:00
Tobias Brunner 28623fc538 "this" removed from comments. 2011-07-06 09:43:45 +02:00
Tobias Brunner f0ba8ae042 Record the history of a policy installed in the kernel. 
This allows to properly delete a policy e.g. if reauth=yes and
auto=route, because reqids are increased during reauthentication.

It also avoids overriding an installed policy with a trap policy.
 2011-07-06 09:43:45 +02:00
Tobias Brunner 328f22e1d3 Add the reqid to kernel_ipsec_t.del_policy. 2011-07-06 09:43:45 +02:00
Tobias Brunner 0b6ff2a9fe Added a replace function to linked_list_t. 2011-07-06 09:43:45 +02:00
Tobias Brunner fbf014b0c1 Added an insert_after and insert_before function to linked_list_t. 2011-07-06 09:43:45 +02:00
Tobias Brunner 178760012c Migrated linked_list_t to INIT/METHOD macros. 2011-07-06 09:43:45 +02:00
Tobias Brunner 3ee8fed445 Cache the most recent reqid in the PF_KEY kernel interface. 
This makes the PF_KEY kernel interface behave the same as the Netlink
kernel interface.
 2011-07-06 09:43:45 +02:00
Andreas Steffen 06b5b61838 install PASS and DROP shunt policies via PFKEYv2 interface 2011-07-05 21:57:45 +02:00
Tobias Brunner 60d62b9e5c Don't install the libraries directly in lib/. 
Instead use a subdirectory (prefix/lib/ipsec by default). Also moved the
plugins from libexec to a subdirectory of that dir.
 2011-07-05 14:42:14 +02:00
Andreas Steffen 9b2b434fe7 ignore ports of IPv4 and IPv6 loopback interfaces 2011-07-05 09:16:01 +02:00
Andreas Steffen 7fd120d5b6 fixed UTF-8 representation of polish reason string 2011-07-05 07:44:46 +02:00
Andreas Steffen e1976a7120 delete orphan file 2011-07-04 23:02:06 +02:00
Andreas Steffen e760e0ad23 fixed debug statement 2011-07-04 22:27:46 +02:00
Andreas Steffen d9cdab9249 added ITA Scanner IMC/IMV pair which detects open server ports on TNC clients 2011-07-04 21:40:25 +02:00
Andreas Steffen 956759533f added support if the IETF port filter attribute 2011-07-01 18:10:33 +02:00
Andreas Steffen 294c25fa60 again a bitwise or is required 2011-06-30 22:26:36 +02:00
Andreas Steffen f87991704e implemented PASS and DROP shunt policies 2011-06-28 19:42:54 +02:00
Martin Willi 6a5c8ee7a5 Initialize trap_manager listener with INIT macro, too 2011-06-28 17:19:20 +02:00
Andreas Steffen 06356a2981 Migrated trap_manager_t to INIT/METHOD macros 2011-06-28 14:42:29 +02:00
Andreas Steffen 9d997f31f1 oops, should have been a bitwise and 2011-06-25 14:57:49 +02:00
Andreas Steffen cb14d7379f fixed copy-and-paste error 2011-06-25 14:21:20 +02:00
Andreas Steffen b324976aa1 output all known PA-TNC subtype names 2011-06-24 17:31:47 +02:00
Andreas Steffen 7401269517 refactoring of change_state() 2011-06-23 19:52:30 +02:00
Andreas Steffen 315c554571 implemented server-initiated handshake retry in IMC/IMV Test pair 2011-06-23 15:23:53 +02:00
Andreas Steffen 43af575002 notify IMVs about handshake retries 2011-06-23 15:22:41 +02:00
Andreas Steffen 4d1a31632a some cosmetics 2011-06-16 11:34:52 +02:00
Andreas Steffen ec1eab0319 fixed XML parsing of TNCCS 1.1 ReasonString message 2011-06-16 11:30:38 +02:00
Andreas Steffen 26691de27f clear reason strings after delivering them 2011-06-15 13:53:53 +02:00
Andreas Steffen 96d0ff1237 implemented handshake retry on the client side 2011-06-15 13:09:41 +02:00
Martin Willi 6fe53bde24 We actually need to link against libz, as neo libraries are often static 
This reverts commit 3c0630a797.
 2011-06-15 12:23:21 +02:00
Martin Willi 38dc106cde Set cookies for the complete domain 2011-06-15 12:22:41 +02:00
Martin Willi 7804b7f420 Migrated libfast to INIT/METHOD macros 2011-06-15 11:25:53 +02:00
Andreas Steffen ea66b2f3c6 added missing single quotes 2011-06-14 17:26:54 +02:00
Andreas Steffen 892a1e4a04 fixed the IF-TNCCS 1.1 ReasonString XML encoding 2011-06-14 15:58:03 +02:00
Andreas Steffen 0dbfdece4f send a reason string only if action recommendation is not allow 2011-06-14 15:45:34 +02:00
Andreas Steffen 08dc42b025 cosmetics 2011-06-14 14:26:05 +02:00
Andreas Steffen 12ac59a914 eat trailing space in preferred language string 2011-06-13 23:01:28 +02:00
Andreas Steffen 4c191ca6bb support multiple language preferences 2011-06-13 15:58:27 +02:00
Andreas Steffen 44bd40a101 implemented sending of reason strings 2011-06-13 15:31:34 +02:00
Andreas Steffen 7d769bc6c5 added missing single quotes 2011-06-13 15:29:43 +02:00