Martin Willi
952fb7b5a1
Increase whitelist message identity buffer to 128 bytes
2011-03-23 14:18:15 +01:00
Tobias Brunner
566173366d
File lists in Android.mk files updated to those in the Makefiles.
2011-03-22 17:41:29 +01:00
Tobias Brunner
3eede76288
Fall back to _LINUX_CAPABILITY_VERSION if no explicit version is defined.
...
This is the case on Android.
2011-03-22 17:39:05 +01:00
Andreas Steffen
16ee58e036
TNC server did not issue a TNC_CONNECTION_STATE_HANDSHAKE NotifyConnection message
2011-03-19 16:43:22 +01:00
Martin Willi
f8d2f903bf
Added a strongswan.conf "enabled" option for duplicheck plugin
2011-03-17 17:34:11 +01:00
Martin Willi
c236b214f2
Added strongswan.conf and runtime option to enable/disable whitelist plugin
2011-03-17 17:15:16 +01:00
Martin Willi
3ced6b51e4
Move establish/inherit of rekeyed IKE_SAs to delete messages
...
Having the inherit() function delayed to the IKE_SA establish procedure
was problematic. The task destroy function was never a good place and
results in locking/cleanup problems. After establishing the SA, it
should be really checked in ASAP to avoid any triggered DPD checks
to get lost.
2011-03-15 15:20:09 +01:00
Martin Willi
f42156a8c8
Wrap IKE delete after rekey into rekey task for responder, too
2011-03-15 11:51:53 +01:00
Martin Willi
41080cbbd9
Migrated ike_rekey task to INIT/METHOD macros
2011-03-15 11:30:02 +01:00
Martin Willi
5f47296f22
Migrated sim_manager to INIT/METHOD macros
2011-03-08 16:42:27 +01:00
Martin Willi
7b3bfe4b6c
Protect sim card/provider/hook (un-)registration with a rwlock
2011-03-08 16:42:27 +01:00
Martin Willi
f58db72482
Splitted sim_manager.h header to sim_{card,provider,hooks}.h
2011-03-08 16:42:27 +01:00
Andreas Steffen
25ed5672a6
initiate or route all child configs if they have different names from their parent peer config
2011-03-04 07:02:31 +01:00
Andreas Steffen
ea1c20d14b
initiate or route child configs which don't have a peer config of the same name
2011-03-01 22:24:19 +01:00
Andreas Steffen
a2ebc1bd69
put DN in double quotes
2011-03-01 22:19:59 +01:00
Martin Willi
007c47088c
Implemented permanent certificate coupling plugin
2011-02-28 16:39:40 +01:00
Martin Willi
0d6d992589
Update duplicheck entry during IKE rekeying
2011-02-28 15:37:18 +00:00
Martin Willi
b85be69079
Remove entry from active duplicate list only if it was not in checking
2011-02-28 15:37:18 +00:00
Martin Willi
ee0f53e189
Added an example application listening to duplicheck notifications
2011-02-28 15:37:18 +00:00
Martin Willi
3883150779
Notify duplicate detections over a UNIX sockets to listening applications
2011-02-28 15:37:18 +00:00
Martin Willi
3e74ebbecc
Added an advanced duplicate checking plugin with liveness check of old SA
2011-02-28 15:37:18 +00:00
Martin Willi
8ce567e69e
Invert check to delete unestablished IKE_SAs to not delete them once established
2011-02-28 15:37:17 +00:00
Martin Willi
c893bf7e5c
Added a whitelist command line utility to control whitelist plugin
2011-02-28 15:00:46 +01:00
Martin Willi
53f2a7c712
Added a UNIX socket based control backend to whitelist plugin
2011-02-28 15:00:46 +01:00
Martin Willi
5e603aba4e
Implemented a in-memory peer identity whitelist plugin
2011-02-28 15:00:46 +01:00
Tobias Brunner
dcab9d39a2
Fixed a possible segfault after termination of IKE and child SAs.
...
Because the thread that is actually terminating the SA and thus checking
it in again is not be the same thread that previously checked it out and
queued the termination job, the thread local SA on the bus has to be reset
manually, similar to how it is set in the job which is executing the job.
2011-02-28 13:29:09 +01:00
Martin Willi
e44ebdcfc8
Slightly change IKE_SA destruction order to inherit properly during ike_rekey task destruction
2011-02-28 10:31:36 +00:00
Tobias Brunner
35fe7f8cbd
Compiler warning fixed.
2011-02-10 16:49:42 +01:00
Andreas Steffen
d390b3b901
[hopefully] fixed pathlen problem on ARM platforms
2011-02-10 15:51:18 +01:00
Andreas Steffen
3cd805a115
Migrated update_sa_job_t to INIT/METHOD macros
2011-02-10 08:31:46 +01:00
Andreas Steffen
51d6a0d44a
Migrated send_keepalive_job_t to INIT/METHOD macros
2011-02-10 08:28:19 +01:00
Andreas Steffen
bcf071d9d5
Migrated send_dpd_job_t to INIT/METHOD macros
2011-02-10 08:25:41 +01:00
Andreas Steffen
e76d12bb9e
Migrated roam_job_t to INIT/METHOD macros
2011-02-10 08:22:57 +01:00
Andreas Steffen
ac226a1a60
Migrated retransmit_job_t to INIT/METHOD macros
2011-02-10 08:19:47 +01:00
Andreas Steffen
84e8fa47dc
Migrated rekey_ike_sa_job_t to INIT/METHOD macros
2011-02-10 08:16:23 +01:00
Andreas Steffen
44836c50ff
Migrated rekey_child_sa_job_t to INIT/METHOD macros
2011-02-10 08:13:01 +01:00
Andreas Steffen
76331a6493
Migrated process_message_job_t to INIT/METHOD macros
2011-02-10 08:09:36 +01:00
Andreas Steffen
8125dcca59
Migrated migrate_job_t to INIT/METHOD macros
2011-02-10 08:06:06 +01:00
Andreas Steffen
43c4a21bd9
_ prefix not required
2011-02-10 07:59:43 +01:00
Andreas Steffen
fc83263403
Migrated delete_ike_sa_job_t to INIT/METHOD macros
2011-02-10 07:56:53 +01:00
Andreas Steffen
1328423985
Migrated delete_child_sa_job_t to INIT/METHOD macros
2011-02-10 07:53:34 +01:00
Andreas Steffen
be02b8a094
Migrated acquire_job_t to INIT/METHOD macros
2011-02-10 07:49:05 +01:00
Andreas Steffen
f04d1c2dfe
replaced ipsec up %startall command by start_action job
2011-02-09 22:27:04 +01:00
Tobias Brunner
feb8ada613
maemo: Create DBUS service file with correct path to charon.
2011-02-08 15:17:36 +01:00
Martin Willi
caf20266e0
Fixed tnc-imc/imv library names when building monolithic
2011-02-08 11:22:02 +01:00
Martin Willi
234955d1ea
Check for libxml when building tnccs_11, use autoconf libxml CFLAGS/LIBS
2011-02-08 11:11:01 +01:00
Martin Willi
91f8ce562d
tnccs_11 does not link against libtls, just uses its headers
2011-02-08 11:09:27 +01:00
Martin Willi
6ccb23e80b
Whitespace cleanups in tnc code
2011-02-08 11:03:10 +01:00
Martin Willi
c6c7c7001c
Add a prefix to the global visible tnc names to avoid name clashes, move to tncifimv
2011-02-08 11:03:10 +01:00
Martin Willi
3683c0424f
Fixed compiler warning
2011-02-08 11:03:10 +01:00
Martin Willi