denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,196 Commits 1 Branch 0 Tags
a622c992408bfc939f6f68a8b766e12624fbab0e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi a622c99240 fixed crash when CA for certrequest not found 2007-01-08 13:40:36 +00:00
Martin Willi e3f83e738d fixed build when !using smartcard 2007-01-08 13:39:29 +00:00
Martin Willi 6a4be80d37 removed unused debugging code 2007-01-08 08:03:40 +00:00
Martin Willi 5903179b0f updated NEWS for 4.0.6 2007-01-08 07:36:53 +00:00
Martin Willi cf86671048 readded tranport mode test using new status output 2007-01-08 07:36:20 +00:00
Martin Willi 032c31c4ae removed dublicated host2host-transport test 2007-01-08 07:35:26 +00:00
Martin Willi 2dc9d7551b fixed reauthentication when using %any hosts 2007-01-08 07:32:39 +00:00
Martin Willi 21f42524e0 support for transport in create_child_sa 
include TRANSPORT/TUNNEL information in statusall
 2007-01-08 06:55:50 +00:00
Martin Willi af87afed47 added config option for BEET mode 2007-01-03 13:16:21 +00:00
Martin Willi f73d4c9eb0 fixed reuathentication when connections other host is %any 2007-01-03 09:26:44 +00:00
Martin Willi 60d79e496b fixed host conversion length check 2007-01-03 09:25:57 +00:00
Martin Willi 7652be891c added support for transport mode and (experimental!) BEET mode 
support for the type=transport/tunnel parameter in charon
 2006-12-21 14:35:17 +00:00
Martin Willi 38ab8048f5 fixed charset & cleanups 2006-12-20 07:55:57 +00:00
Martin Willi cd6b61f549 renamed to appear in doxygen build 2006-12-19 10:57:49 +00:00
Martin Willi 2b4405a3e7 added a roadmap of the strongSwan project (TODO) 
added some NEWS
 2006-12-19 10:46:58 +00:00
Martin Willi 532f2347dc first try to update ipsec.conf manual 2006-12-19 08:32:25 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Martin Willi 4986554f1a fixed more uClibc issues 
should compile against a uClibc > 0.9.28 (untested)
 2006-12-15 14:22:56 +00:00
Martin Willi 4dfb3cb0f5 fixed stddef.h include 2006-12-14 15:58:32 +00:00
Martin Willi 38fb426e9b fixed encoding rules string 
updated todo
 2006-12-14 13:16:19 +00:00
Martin Willi 313d21c251 fixed some byte-order issues 2006-12-12 08:41:04 +00:00
Martin Willi 5347a84f81 fixed HAVE_BACKTRACE checks 
starter Makefile now uses proper $(COMPILE) to build pluto objects
 2006-12-11 09:29:34 +00:00
Martin Willi e696757c47 made backtrace() calls optional to support uClibc 2006-12-06 13:59:13 +00:00
Martin Willi df85984570 added simple script to port trunk changes into branches 2006-11-03 14:03:51 +00:00
Martin Willi a26e06c75a start kdevelop with project file from actual branch 2006-11-03 11:01:08 +00:00
Martin Willi d4f9110232 updated changelog 2006-11-03 07:14:34 +00:00
Martin Willi 8b4f44522b fixed typos 2006-11-03 06:50:05 +00:00
Martin Willi 03bf883d95 fixed NEWS (runtime debug level options) 2006-11-02 14:38:01 +00:00
Martin Willi fa0fef93b2 fixed credits 2006-11-02 14:28:05 +00:00
Martin Willi 3b449ce854 fixed very old bug in linked_list's remove_first and remove_last 2006-11-02 14:25:58 +00:00
Martin Willi 116b53b6bd proper "ipsec up" signal handling when initiating to %any 2006-11-02 10:28:10 +00:00
Martin Willi 4622f01d87 removed iterator hook for replace 2006-11-02 10:27:05 +00:00
Martin Willi e691a5c493 some fixes for doxygen 2006-10-31 15:24:08 +00:00
Martin Willi db7ef62494 better split up of library files "types.h" & "definitions.h" 
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
 2006-10-31 12:27:59 +00:00
Martin Willi de8b8a8c44 added nodebug configure script without any debug messages and without -g 2006-10-31 12:23:03 +00:00
Martin Willi 382b481795 moved typedefs to beginning of files to solve some include problems 
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
 2006-10-30 14:07:05 +00:00
Martin Willi 5923be21b4 fixed SIGSEGV when setup of an additional CHILD_SA fails 2006-10-30 09:53:54 +00:00
Martin Willi 7b898a0d8a added IKEv2 clarifications RFC 2006-10-30 09:47:37 +00:00
Martin Willi ebdddb74d4 some improvements in signaling code 2006-10-27 10:46:56 +00:00
Martin Willi ec92107923 include only source NATD payloads really needed 2006-10-27 10:46:35 +00:00
Martin Willi ea752560c8 updated for NAT team 2006-10-26 11:37:37 +00:00
Martin Willi b83806d83d improved signal handling and emitting 2006-10-26 09:46:56 +00:00
Martin Willi 191a26a6a7 removed deprecated iterator methods (has_next & current) 
added iterator hook to manipulate iterator the clean way
 2006-10-24 14:20:45 +00:00
Martin Willi 55bbff11ec linked list cleanups 
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
 2006-10-24 08:46:17 +00:00
Martin Willi 5c4cc9a4e3 added verbosity level to stroke 2006-10-24 08:44:47 +00:00
Martin Willi e706c7f10b code cleanups in printf handlers 2006-10-20 05:57:25 +00:00
Martin Willi 490d324d81 added eap authentication draft for ikev2 2006-10-18 11:49:37 +00:00
Martin Willi 0ae1deb887 updated stroke to allow run-time manipulation of debug levels 2006-10-18 11:47:26 +00:00
Martin Willi 107936f55a added charondebug config parameter to set debug level at startup 2006-10-18 11:46:57 +00:00
Martin Willi 60356f3375 introduced new logging subsystem using bus: 
passive listeners can register on the bus
  active listeners wait for signals actively
  multiplexing allows multiple listeners to receive debug signals
  a lot more...
 2006-10-18 11:46:13 +00:00
Martin Willi 8cdce67afa include CREDITS file in distribution 2006-10-18 11:41:19 +00:00
Martin Willi 5ec0c594fb moved various scripts in scripts/ dir 
add configure script wrappers
 2006-10-18 11:40:53 +00:00
Martin Willi 85929956ae removed txt files from doxygen 2006-10-18 11:39:12 +00:00
Martin Willi 9aac18cba8 removed module tests, outdated. We need something more system-test like 2006-10-18 11:38:43 +00:00
Martin Willi c701e73dc1 fixed auxillary message data parsing for IPV6 socket 
using SOL_* constants for socket level
 2006-10-09 12:28:43 +00:00
Martin Willi a3a1b565da fixed IPV6_PKTINFO setsockopt() to work with most kernel headers 
replaced strerror(errno) with %m printf specifier
 2006-10-09 12:14:56 +00:00
Martin Willi 9e22095ef3 fixed DPD to survive IKE_SA rekeying 2006-09-28 06:57:46 +00:00
Martin Willi 151168f6ea 2006-09-27 14:15:49 +00:00
Martin Willi 47f5027807 introduced printf() specifiers for: 
host_t (%H)
  identification_t (%D)
  chunk pointers (%B)
  memory pointer/length (%b)
added a signaling bus:
  receives event and debug messages, sends them to its listeners
  stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
 2006-09-27 14:14:44 +00:00
Martin Willi f91513e333 added often used RFCs and drafts 2006-09-27 14:10:32 +00:00
Martin Willi 48dc3934cc updated NEWS and ChangeLog for 4.0.4 release 2006-09-25 07:26:16 +00:00
Martin Willi 1ce2ad09c3 fixed retransmission policy for responder 2006-09-25 07:24:08 +00:00
Martin Willi 397f344879 fixed dpd for responder 2006-09-25 06:38:58 +00:00
Martin Willi 2fcc4168f8 fixed some compiler warnings 2006-09-21 09:17:13 +00:00
Martin Willi 73760ca5ff extended statusall output 
added job/event-queue statistics
  added allocation statistics when using LEAK_DETECTIVE
 2006-09-21 07:03:21 +00:00
Martin Willi f983ec4dc5 fixed include typo 2006-09-21 05:55:07 +00:00
Martin Willi 995d8116e1 public declaration of all HASH_SIZEs in hasher.h 2006-09-20 06:45:19 +00:00
Martin Willi b5cac6684d added copyright notice to sha2_hasher 
included SHA2 in build process
 2006-09-19 14:54:01 +00:00
Martin Willi e698dc4559 implemented sha2_hasher which supports SHA-256, SHA-384 and SHA-512 2006-09-19 14:49:47 +00:00
Martin Willi 462129d332 added support for 3DES encryption algorithm in IKE 2006-09-19 11:18:35 +00:00
Martin Willi f534e18a98 updated TODOs 2006-09-18 11:41:04 +00:00
Martin Willi e63c4d8b8b fixed memleak 
fixed proper handling of id parsing errors
proper return value when no PSK found
 2006-09-18 11:39:53 +00:00
Martin Willi 6e9bbf18b8 added HOST_ACCESS for firewall script as default 2006-09-18 11:38:37 +00:00
Martin Willi 5fded5139e more debugging output for PSK authentication 2006-09-18 11:38:11 +00:00
Martin Willi a2cf2812c4 some cleanups here and there 2006-09-18 11:37:40 +00:00
Martin Willi a7371600b0 proper error handling for socket creation 2006-09-18 06:44:38 +00:00
Martin Willi b9024ee058 handle certificate parsing error more generous 2006-09-14 13:14:58 +00:00
Martin Willi 8a95c322c5 fixed certificate verification bug! 2006-09-14 12:22:08 +00:00
Martin Willi 567e2a7822 fixed memleak when receiving invalid certificate 2006-09-14 12:15:41 +00:00
Martin Willi d7934d0cfc implemented updown script to handle firewalling 2006-09-12 13:50:14 +00:00
Martin Willi a095243f60 add priority management for kernel policy 
let ROUTED policies installed, until manuall removed
introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs
ike_sa_manager cleanups
 2006-09-08 13:10:52 +00:00
Martin Willi 1239c6f40b implemented handling of dpdaction and dpddelay ipsec.conf parameters 2006-09-08 06:12:02 +00:00
Martin Willi a655f5c09c reuse reqid when a ROUTED child_sa gets INSTALLED 
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
 2006-09-05 14:07:25 +00:00
Martin Willi da8ab11e91 fixed a at-least-one-year-old bug which caused crashed in the scheduler 2006-08-31 06:48:10 +00:00
Martin Willi c705698293 added raw socket filter for IPv6 2006-08-31 06:18:15 +00:00
Martin Willi 053842f4e7 implemented NAT detection for IPv6 2006-08-31 06:17:41 +00:00
Martin Willi 1f7fd2ced8 removed unneeded constructor 2006-08-31 06:16:52 +00:00
Martin Willi 48d9883a3e initial support for IPv6 (more testing needed) 
socket works (without v6 filter)
  traffic selector handle IPv4/v4 cleanly
    improvements in traffic selector code
  kernel interface accepts v6 traffic selectors and hosts
  host_t class has full IPv6 support
 2006-08-30 17:12:56 +00:00
Martin Willi 51d4876814 added stddef.h include for compilers which do not support the offsetof() directive 2006-08-28 09:02:51 +00:00
Martin Willi 4c23a8c9ec moved interface enumeration code to socket, where it belongs 
query interfaces every time we need it to respect changes in network config
added address listing on startup and "ipsec statusall"
 2006-08-28 08:45:22 +00:00
Martin Willi fa8d578d94 fixed crash bug when doing "ipsec down" with an unknown connection 2006-08-25 09:19:42 +00:00
Martin Willi 9be547c0ed added name property in CHILD_SA, allows proper status output 2006-08-25 09:07:37 +00:00
Martin Willi 7106403bd8 2006-08-25 07:42:48 +00:00
Martin Willi c3e7aeb102 fixed bug which prevented port float when nat is detected 2006-08-25 07:37:22 +00:00
Martin Willi a1310b6b92 updated Changelog and other docs 2006-08-23 11:48:33 +00:00
Martin Willi d03ab568a6 fixed rekeying behavior when proposing an inacceptable DH group (INVALID_KE_PAYLOAD) 2006-08-23 09:25:41 +00:00
Martin Willi 3183006de2 implement proper handling of most simultaneous IKE_SA rekeying cases 2006-08-23 07:30:43 +00:00
Martin Willi f698448ea3 implemented proper refcounting using atomic operations 2006-07-28 09:45:18 +00:00
Martin Willi fe04e93a8b implemented IKE_SA rekeying 
uses ikelifetime, rekeymargin and rekeyfuzz config settings
	no handling of simultaneus exchanges yet!
 2006-07-27 12:18:40 +00:00
Martin Willi 45f76a7ddd added possibility to route CHILD_SAs, without to set them up 
support for auto=route parameter
	support for ipsec route and ipsec unroute
	initiating of CHILD and/or IKE_SAs based on kernel acquires
 2006-07-21 13:31:53 +00:00