Andreas Steffen
a584a231b1
fixed a 64-bit issue with time_t printf hooks
2009-02-11 16:37:16 +00:00
Andreas Steffen
67701cfdce
fixed broken listing of connections in ipsec statusall
2009-01-14 08:10:16 +00:00
Martin Willi
6b83549d1a
list assigned leases using "ipsec leases"
2008-12-10 13:00:02 +00:00
Martin Willi
ed2bcd0315
added IKE_SA established timer to "ipsec statusall"
2008-12-10 09:59:35 +00:00
Martin Willi
2e03196551
list pools and usage in ipsec statusall
2008-12-09 13:24:12 +00:00
Andreas Steffen
ad60c249b6
show TRANSPORT_PROXY mode in ipsec status
2008-11-16 21:19:17 +00:00
Martin Willi
e13389a7f7
got rid of deprecated create_iterator_locked()
2008-11-05 08:32:38 +00:00
Martin Willi
5dffdea1d7
added hooks for IKE and CHILD keymat
2008-10-30 12:58:54 +00:00
Martin Willi
80853d8498
moved CHILD_SA key derivation to keymat_t
...
passing key chunks to CHILD_SA, not the PRF
2008-10-29 16:06:16 +00:00
Martin Willi
6a4ff35cc4
moved key derivation and management into keymat object
...
allows secured implementation of key management (e.g. in kernel or HW)
only IKE keys for now
2008-10-28 16:07:06 +00:00
Martin Willi
3c8234d408
store IKE proposal implicitly during derive_keys
2008-10-28 10:12:21 +00:00
Martin Willi
20fb671904
fixed reauthentication time in statusall
2008-10-28 09:41:33 +00:00
Martin Willi
85ac2fa547
use more generic stats getter, introducing new stats
2008-10-27 14:51:00 +00:00
Martin Willi
82d20c0588
additional getters for ipcomp and UDP encap
2008-10-24 09:51:48 +00:00
Martin Willi
6e10aeadab
more CHILD_SA refactorings
2008-10-24 08:02:35 +00:00
Martin Willi
1df106bf39
cache keys for in and outbound ESP SAs
...
removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t)
creating TS pairs dynamically using create_policy_enumerator()
2008-10-15 12:24:44 +00:00
Martin Willi
9f4e5f8c47
store ESP keys in CHILD_SA
2008-10-15 08:37:56 +00:00
Andreas Steffen
d1cbe55127
implemented ipsec listalgs as a stroke command
2008-10-08 07:00:13 +00:00
Tobias Brunner
a341a68fac
merging renaming of mode_t to ipsec_mode_t back to trunk
2008-09-25 13:56:23 +00:00
Tobias Brunner
507f26f685
merging modularized kernel interface back to trunk
2008-09-25 07:56:58 +00:00
Andreas Steffen
b33c11b6c7
stroke parses and lists AC groups
2008-09-17 02:17:01 +00:00
Andreas Steffen
8fa6f2dc66
streamlined ipsec listalgs output
2008-08-29 05:35:09 +00:00
Martin Willi
9482208633
crypto_factory algorithm enumeration API
...
implementation of "ipsec listalgs"
2008-08-28 09:24:42 +00:00
Andreas Steffen
41dc6b56b0
ipsec statusall lists eap_type and eap_identity
2008-08-26 19:45:44 +00:00
Andreas Steffen
919019b3cd
completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes
2008-08-26 05:15:34 +00:00
Andreas Steffen
3c87e92695
list CA restrictions in ipsec statusall
2008-08-25 12:35:18 +00:00
Martin Willi
822901061b
ported parts of two-sim branch
...
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
2008-08-22 10:44:51 +00:00
Andreas Steffen
32f5ee159e
cosmetics
2008-07-22 12:13:48 +00:00
Andreas Steffen
66da78b4bb
ipsec status lists IPCOMP CPIs
2008-07-22 12:03:58 +00:00
Andreas Steffen
eba7470b76
consistent logging of SPIs and CPIs
2008-07-22 10:16:45 +00:00
Andreas Steffen
2c258d7373
ipsec statusall displays dpd options
2008-07-02 10:48:57 +00:00
Andreas Steffen
5397a7f91d
show authentication method in ipsec statusall
2008-06-30 17:08:47 +00:00
Martin Willi
eec675bf8c
enumerating loaded plugins in "ipsec statusall"
2008-06-24 12:49:04 +00:00
Andreas Steffen
bc997f6583
display selected IKE proposal in ipsec statusall
2008-06-22 11:24:33 +00:00
Martin Willi
5a22a02156
DNS resolving of ike_cfg hosts dynamically on demand
2008-06-06 15:05:54 +00:00
Andreas Steffen
0672aa7b0e
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
2008-05-23 14:24:24 +00:00
Andreas Steffen
7199d22e77
implement basic listing of attribute certificates
2008-05-22 21:58:22 +00:00
Andreas Steffen
a327ee9589
suppress listing of integrity algorithm if it is undefined
2008-05-17 21:52:58 +00:00
Martin Willi
a593db5d35
ike_sa_manager enumerable, not iterable
2008-04-14 11:37:46 +00:00
Martin Willi
1749642b15
use cert->equals() to filter out equal certificates in seperate instances
2008-04-07 08:48:08 +00:00
Martin Willi
e29ebcb1af
fixed compile warnings
2008-04-02 09:54:20 +00:00
Andreas Steffen
392f4e17c2
minimal stroke_list_ocsp() implementation
2008-04-01 12:11:09 +00:00
Andreas Steffen
946d1ecd59
stroke_list groups certificates by issuer
2008-04-01 10:26:27 +00:00
Andreas Steffen
eafc0654ca
ipsec list suppresses duplicates
2008-03-31 20:21:24 +00:00
Andreas Steffen
40f9006845
output uptime in status in local time
2008-03-29 08:55:09 +00:00
Martin Willi
685232670a
added uptime statistics to statusall
2008-03-26 16:13:14 +00:00
Martin Willi
0b14fdb92b
splitted stroke plugin to several files:
...
socket: reads messages from socket, dispatching
config: process add/del conn, serves configs through backend_t
control: controlling of the daemon (up/down/route/...(
cred: credential loading, serves creds through credential_set_t
ca: ca sections from ipsec.conf, serves cdp's through credential_set_t
list: log status information to stroke console (status/statusall/list*)
shared_key: shared key implementation for keys read from ipsec.secrets
plugin: registers stroke plugin and starts socket w/ thread
2008-03-26 10:10:40 +00:00
Andreas Steffen