denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,260 Commits 1 Branch 0 Tags
a40708e5119818cfaf6e2156f64828b7f04bad37
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi a40708e511 fixed compiler warning 2008-03-18 14:06:11 +00:00
Martin Willi bed94c8aeb added generic payload order rules for notifies 2008-03-18 12:45:23 +00:00
Martin Willi 7162be5772 fixed ike_cfg lookup in stroke 2008-03-18 12:40:41 +00:00
Martin Willi 4bfa63ed25 added false positive signature check 2008-03-18 12:25:39 +00:00
Martin Willi 18be601fcd added missing test case file ([3607]) 2008-03-18 12:16:36 +00:00
Martin Willi d7c529f5a6 creating public key from RSA private key 
RSA key generation and signature test
 2008-03-18 12:13:51 +00:00
Martin Willi 50045c3b14 better normalized tables for SQL plugin (IDs) 2008-03-18 09:07:04 +00:00
Martin Willi 34e281ed32 enforcing x509_flags on certificate construction 2008-03-17 08:06:49 +00:00
Martin Willi d4ba109c9c fixed CRL revoked certs enumeration 2008-03-17 07:25:32 +00:00
Martin Willi 933f80c391 logging to SQL database 2008-03-15 14:17:09 +00:00
Martin Willi 72d68379dc correctly unregister IKE_SA at the bus 2008-03-15 14:08:43 +00:00
Martin Willi 8d04f78d07 removed X509_PEER flag; flags are meant to read cert, not to store additional state in cert 
removed x509_t.set_flags for the reason above
implemented a simple, generic shared_key_t
 2008-03-14 15:11:29 +00:00
Martin Willi 39ea88f694 credential lookup in mysql/sqlite database 2008-03-14 15:06:42 +00:00
Martin Willi 9c410a8806 refactored buggy trustchain building, fixed refcount bug 2008-03-14 15:04:16 +00:00
Martin Willi dbcf4e7451 reduced mysql pool verbosity 2008-03-14 15:03:19 +00:00
Martin Willi 8f1596d606 SQL schema for MySQL and SQLite, test data 2008-03-14 07:39:01 +00:00
Martin Willi e42db695e2 fixed apidoc grouping 2008-03-13 14:53:57 +00:00
Martin Willi 419ee1072e added NetworkManager prototype DBUS policy, applet config 2008-03-13 14:41:27 +00:00
Martin Willi 2d94fdfab7 added old and unmaintained prototype of NetworkManager applet and authenticator 2008-03-13 14:37:11 +00:00
Martin Willi b820f8aa8e reverted accidentally commited testing config 2008-03-13 14:20:20 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Martin Willi e633b1998f creating sysconfdir if it does not exist 
moved all directory creations into starters Makefile
 2008-02-22 14:50:38 +00:00
Martin Willi 5bbac9ffff split connections with different virtual IPs in different peer_cfgs 
respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA
 2008-02-05 12:39:30 +00:00
Martin Willi 3b1692c058 use identifiers in EAP_SUCCESS/EAP_FAILURE payloads 2008-02-04 11:43:10 +00:00
Martin Willi 3a36ce1164 added missing hasher include 2008-01-03 10:42:21 +00:00
Martin Willi b8461a37db fixed EAP-MD5 to accept Name attribute in challenge 2007-12-18 10:44:44 +00:00
Martin Willi fdc7c943f9 updated NEWS 2007-12-13 17:52:49 +00:00
Martin Willi 0f806802ae implemented Expanded EAP types to support vendor specific methods 2007-12-13 17:31:21 +00:00
Martin Willi 3243ac6d5e fixed actual ID length when AT_IDENTITY gets padded 2007-12-13 14:39:38 +00:00
Martin Willi 26e2467692 ported EAP-AKA branch into trunk 2007-12-13 10:54:29 +00:00
Martin Willi 4b403e7672 merged EAP-MD5 into trunk 2007-12-12 14:29:10 +00:00
Martin Willi f9d80d53c3 accept unknown attributes in config payloads 2007-12-09 19:43:41 +00:00
Martin Willi 98d0002644 fixed build when using --disable-pluto 2007-12-07 10:25:01 +00:00
Martin Willi 3895125275 removed c++ style comments 
fixed compiler warnings
 2007-12-04 10:48:27 +00:00
Martin Willi b8249ff5ed fixed mobike/auth_lifetime in conjunction with p2p-natt 2007-12-04 10:05:36 +00:00
Martin Willi 8b678ad461 updated NEWS 2007-12-03 14:48:04 +00:00
Martin Willi cbfb2aff50 added more ./configure build options for 
EAP-Identity module
  ipsec tools (openac, scepclient)
  optional charon/pluto build
  charon stroke interface
 2007-12-03 14:47:15 +00:00
Martin Willi 7805ad302d moved AUTH_LIFETIME handling in its own task (cleaner separation, proper payload order) 2007-12-03 10:52:18 +00:00
Martin Willi 8e78e43220 added a "libcharon-" prefix to plugins to avoid conflicts 2007-12-03 09:03:22 +00:00
Martin Willi 733f336ad3 socket_t implementation withouth raw sockets 
--disable-raw-socket configure option
  prevents charon/pluto to run in parallel
 2007-11-26 11:20:00 +00:00
Martin Willi 8499042452 updated TODO 2007-11-20 12:26:37 +00:00
Martin Willi 6f274c2ae1 updated NEWS 2007-11-20 12:23:39 +00:00
Martin Willi ee61471113 implemented RFC4478 (repeated authentication) 
changed %V printf handler to take a time delta, %#V now takes two arguments
 2007-11-20 12:06:40 +00:00
Martin Willi 7b36b734a4 fixed callback_job cancellation for threads waiting in the bus 2007-11-19 12:32:28 +00:00
Martin Willi e533b928f0 fixed memrchr compiler warning 2007-11-19 12:27:08 +00:00
Martin Willi 729a6ec965 fixed two leaks in stroke_interface 2007-11-19 11:28:11 +00:00
Martin Willi e101f162ab refactored bus and interface to resolve threading issues (WIP) 2007-11-15 18:35:54 +00:00
Martin Willi 1871cffdc4 be less agressive, but more verbose in killing charon 2007-11-15 18:34:05 +00:00
Martin Willi 73294df547 added IKE IP addresses to config list for manager 2007-11-15 10:09:48 +00:00
Martin Willi 5d4aea685f filtering out IKEv1 configurations for manager 2007-11-15 10:09:14 +00:00
Martin Willi 93fc29c6cf fixed daemon kill before threads are spawned 2007-11-14 10:12:34 +00:00
Martin Willi 91b16af0fa fixed NO_PROPOSAL_CHOSEN response on IKE_SA_INIT 2007-11-14 09:41:08 +00:00
Martin Willi a8cd906576 changed session timeout to 15 minutes 2007-11-13 12:00:02 +00:00
Martin Willi e8287a405e implemented IKE_SA initiation in manager 2007-11-13 11:58:28 +00:00
Martin Willi 30a68d715b implemented configuration query and IKE_SA initiation in XML interface 2007-11-13 11:56:52 +00:00
Martin Willi e36f5f3fd3 configuration query for manager (WIP) 2007-11-12 18:34:50 +00:00
Martin Willi 55b02db74e implemented IKE/CHILD_SA close through manager 2007-11-12 15:09:11 +00:00
Martin Willi 275cec2eac implemented IKE/CHILD_SA termination through XML interface 2007-11-12 15:06:04 +00:00
Martin Willi 00fb758755 adding new virtual ip before deleting old one to keep IP on reauthentication 2007-10-25 07:50:23 +00:00
Martin Willi bd99d1852a added vsignal todo 2007-10-25 07:49:32 +00:00
Martin Willi 0e0e7d5b71 request_t.redirect takes variable argument list 
request_t.serve to serve non-template data
fixed dispatcher thread locking code
 2007-10-19 19:40:53 +00:00
Martin Willi 04685885f5 added addr2strongline script which helps to resolve leaking symbols in libstrongswan 2007-10-11 13:40:52 +00:00
Martin Willi 39a8e5a580 fixed some typos 2007-10-05 09:52:23 +00:00
Martin Willi 1169ab4ec7 removed recursive mutex and __USE_UNIX98, should fix uClibc build 2007-10-05 09:47:55 +00:00
Martin Willi 6705052c2d fixed bad cast which resulted in a crash on "ipsec update" 2007-10-05 09:13:03 +00:00
Martin Willi 493f377b41 fixed memory leak 2007-10-04 15:20:00 +00:00
Martin Willi c96aefe268 implemented an optional DH public value test 
some other cleanups, using RFC2631 variable names
 2007-10-04 15:19:24 +00:00
Martin Willi 40f10fd88e cleanups, fixes and simplification of diffie hellman code 2007-10-04 12:08:11 +00:00
Martin Willi a7e65d5262 implemented enumerator for linked_list 2007-10-04 08:40:20 +00:00
Martin Willi d62a4526fd moved enumerator from libappserv to libstrongswan 2007-10-04 08:21:53 +00:00
Martin Willi b9bc74979e fixed sqlite_backend compilation to respect changes from [3238] 2007-10-04 08:18:42 +00:00
Martin Willi 99670c3714 proper cleanup on error 2007-10-03 15:07:46 +00:00
Martin Willi 6a8e7381d0 more libstrongswan-like error handling in optionsfrom 2007-10-03 15:02:29 +00:00
Martin Willi 2970674faf reverted changeset [3215], as we need NULL callback to do asynchronous calls 
added interface_manager_cb_empty function, which calls synchronous but doesn't do anything
 2007-10-03 08:10:03 +00:00
Martin Willi a6f31da40a added missing enumerator implementation 2007-10-03 05:29:49 +00:00
Martin Willi 06d00e4f7b fixed "ipsec statusall" SPI formatting 2007-10-02 13:11:23 +00:00
Martin Willi e4c9b92171 fixed sqlite database path 2007-10-02 11:55:19 +00:00
Martin Willi 6e19327473 updated NEWS for 4.1.7 2007-10-02 11:36:54 +00:00
Martin Willi 754f90165f added thread initialization/deinitialization hooks 
moved empty_enumerator to a public implementation
 2007-10-02 11:23:14 +00:00
Martin Willi 06011f6882 remove control sockets on startup, as we don't have privileges on shutdown 2007-10-02 11:20:07 +00:00
Martin Willi a3f100fa09 improved debugging code for traffic selector processing 2007-10-02 07:39:56 +00:00
Martin Willi f9b8417a7c renamed force_encap to forceencaps (as it is named in openswan) 2007-10-02 06:57:58 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 011fb1b97e removed accidentally checked in debugging code 2007-10-01 12:25:26 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi 92232dab33 fixed stuid()/setgid() and error handling 2007-10-01 09:07:10 +00:00
Martin Willi 9f3c55cdc4 fixed updown script privilige inheritance for pluto, too 2007-09-28 09:42:55 +00:00
Martin Willi f215e91999 implemented more aggressive MOBIKE path probing 
do not queue more than one MOBIKE task
 2007-09-28 08:22:37 +00:00
Martin Willi 052d58feaf fixed CHILD_SA SPI byte order in XML interface 2007-09-28 07:05:15 +00:00
Martin Willi 055d016b49 changed inheritable capability set to the permitted one to execute firewall script with CAP_NET_ADMIN 2007-09-28 07:04:09 +00:00
Martin Willi 780050cbc3 implemented proper argument parsing code 2007-09-28 06:43:59 +00:00
Martin Willi a57ab4d690 removed colons from session cookie 2007-09-27 13:10:10 +00:00
Martin Willi 85c6fc0283 reduced debbugging level 2007-09-27 13:09:50 +00:00
Martin Willi 983d7cd292 made add_ip()/del_ip() calls synchron (waiting until kernel event received) 
this should fix MOBIKE route migration with virtual IPs
 2007-09-27 12:48:00 +00:00
Martin Willi 93720075df implemented SHA1 encrypted passwords for manager 2007-09-27 07:15:47 +00:00
Martin Willi 324abae2ef added vsyslog to leak detectives white list 
removed debugging hook on openac cleanup
 2007-09-27 06:40:50 +00:00
Martin Willi 87d0427def updated TODO 2007-09-26 15:08:34 +00:00
Martin Willi 8207e3ea4d fixed argument processing bug 2007-09-26 15:07:34 +00:00
Martin Willi c295d0eb4b refactored strongswan manager 
removed buggy request parsing code, use ClearSilvers CGI kit instead
fixed CHILD_SA listing in manager (needs better design)
using secure XML communication through unix sockets
removed images with questionable (non-GPL) license
 2007-09-26 14:02:21 +00:00
Martin Willi d9d69536b0 improved MOBIKE roaming between interfaces 2007-09-24 12:15:25 +00:00