denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15,759 Commits 1 Branch 0 Tags
a080cfece0c19cd73ce731b124d68a601b34867e
Commit Graph
12392 Commits
Author SHA1 Message Date
Tobias Brunner 726c0ae9d3 We have to rename thread_create on Mac OS X because it conflicts with a syscall. 2010-04-29 14:52:20 +02:00
Tobias Brunner 1c31d34ed5 Initialize libstrongswan in stroke (fixes Vstr logging). 2010-04-29 14:51:44 +02:00
Tobias Brunner 26a3d7e78e Initialize libstrongswan in starter (fixes Vstr logging). 2010-04-29 14:33:29 +02:00
Tobias Brunner 361f416d2c The mutex of a thread has to be locked when destroying it. 2010-04-29 13:30:51 +02:00
Tobias Brunner 257e27df07 Fixing out-of-tree build after adding dependency to config.status. 2010-04-29 13:29:53 +02:00
Martin Willi b0e789035c Users of PLUGINS depend on config.status, rebuilding them if plugin configuration is updated 2010-04-29 11:28:27 +02:00
Martin Willi eadbc3da2f Fixed RSA key generation with gcrypt 2010-04-29 09:51:37 +02:00
Martin Willi dd04a68f22 PEM encoder supports encoding from RSA components directly, allowing gcrypt plugin to encode in PEM 2010-04-29 09:36:45 +02:00
Andreas Steffen 916fd45709 do not destroy whack_attr if it hasn't been initialized 2010-04-29 07:28:51 +02:00
Andreas Steffen e20a494013 added debug output argument 2010-04-28 12:28:25 +02:00
Martin Willi 40fb7165a9 Reintroduce to_referer(), redirect() does not work with get_referer() 2010-04-28 09:03:08 +02:00
Martin Willi 69e492f2e2 Use a 301 permanent redirect if no controller given 2010-04-28 08:30:21 +02:00
Andreas Steffen af3be116cb added AES_GMAC output string 2010-04-27 13:47:11 +02:00
Andreas Steffen 12821bd674 include dhcp-client-identifier in the DHCP request 2010-04-23 12:57:43 +02:00
Andreas Steffen 19d49af539 make DHCP debug messages consistent 2010-04-23 07:37:16 +02:00
Andreas Steffen 500a6d38ee fixed typo 2010-04-23 00:02:13 +02:00
Martin Willi 1f6a707d10 Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no DH group 2010-04-21 08:41:46 +02:00
Heiko Hund d0f1b3b96f fixed segfault in pluto with multiple ISAKMP SAs in delete payload 2010-04-20 21:23:05 +02:00
Martin Willi 4590260b2d Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten 2010-04-19 14:41:20 +02:00
Martin Willi f0212e8837 Accept DHCP replies on bootps port, as we act as a relay agent if server address configured 2010-04-19 11:18:58 +02:00
Tobias Brunner 6edbe1652b Integrating libhydra into the Android build system. 2010-04-12 16:47:47 +02:00
Tobias Brunner 355c3a66b1 When logging to the database, the IDs of an IKE SA are initially NULL. 2010-04-12 13:51:10 +02:00
Andreas Steffen 054fd74658 fixed silly bug 2010-04-12 11:25:46 +02:00
Andreas Steffen d3d2b7390f implemented inheritance of virtual IP assigned by Mode Config on the responder side 2010-04-11 19:19:20 +02:00
Andreas Steffen ec96692c38 show in-memory pools in ipsec statusall 2010-04-11 11:46:47 +02:00
Andreas Steffen b1701d097c added missing curly brackets 2010-04-11 00:49:04 +02:00
Andreas Steffen b3127b42f9 support in-memory pools in swapped connection definitions 2010-04-11 00:27:04 +02:00
Tobias Brunner 9f4b02e31d Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan. 2010-04-10 12:10:04 +02:00
Martin Willi b34b93dbf7 Store DH generator in a chunk, hide non-public data in a private struct 2010-04-08 15:08:35 +02:00
Martin Willi 613ceca96c Migrated scepclient/openac logging hooks to new signature 2010-04-07 15:51:55 +02:00
Martin Willi 54e354f2d6 Remove to_referer() method, as it fails if no referer was given 2010-04-07 15:36:22 +02:00
Martin Willi f7c32feec0 Renamed clone function to avoid name clash with uclibc 2010-04-07 14:54:22 +02:00
Martin Willi 140418453a Updated HA plugin to new APIs 2010-04-07 13:55:16 +02:00
Martin Willi 647008c8a7 Updated location of traffic selector header 2010-04-07 13:55:16 +02:00
Martin Willi 29a46aacad Moved ha plugin to libcharon 2010-04-07 13:55:16 +02:00
Martin Willi 3e8caf6af6 Make resync/monitoring functionality optional 2010-04-07 13:55:16 +02:00
Martin Willi f24ca1dd55 Listen to ike_updown/rekey hook instead of ike_state_change 2010-04-07 13:55:16 +02:00
Martin Willi c866a42737 Request a complete resync after daemon startup 2010-04-07 13:55:16 +02:00
Martin Willi 1466af8556 Do not automatically take over segments, as we need to resync first 2010-04-07 13:55:16 +02:00
Martin Willi ea249cc6f0 Drop overlapping segments only if we have no active SAs on it 2010-04-07 13:55:16 +02:00
Martin Willi a05e388540 Do not install iptables rules, they should stay active after shutdown 2010-04-07 13:55:16 +02:00
Martin Willi e262f4e543 Take over all segments if heartbeat becomes silent 2010-04-07 13:55:15 +02:00
Martin Willi d87489661c Renamed ha-sync plugin to ha 2010-04-07 13:55:15 +02:00
Martin Willi 3c82381296 Try to send HA sync messages synchronously 2010-04-07 13:55:15 +02:00
Martin Willi f4f394e67c Do not sync a delete for a child in a destroying IKE_SA 2010-04-07 13:55:15 +02:00
Martin Willi 5a0a359b88 Include ICMP traffic in sync tunnel 2010-04-07 13:55:15 +02:00
Martin Willi 874c0bd8b8 Refactored segment enabling/disabling 2010-04-07 13:55:15 +02:00
Martin Willi 5d67259042 Use a connected UDP socket 2010-04-07 13:55:15 +02:00
Martin Willi 06308d9ede Removed obsolete socket subclasses 2010-04-07 13:55:15 +02:00
Martin Willi 3912fdb1ec Automatically segment cluster using periodically sent status messages 2010-04-07 13:55:14 +02:00