denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,196 Commits 1 Branch 0 Tags
a622c992408bfc939f6f68a8b766e12624fbab0e
Commit Graph
58 Commits
Author SHA1 Message Date
Martin Willi a622c99240 fixed crash when CA for certrequest not found 2007-01-08 13:40:36 +00:00
Martin Willi 2dc9d7551b fixed reauthentication when using %any hosts 2007-01-08 07:32:39 +00:00
Martin Willi 21f42524e0 support for transport in create_child_sa 
include TRANSPORT/TUNNEL information in statusall
 2007-01-08 06:55:50 +00:00
Andreas Steffen 42687ff5d1 fixed typo 2007-01-04 14:29:50 +00:00
Martin Willi f73d4c9eb0 fixed reuathentication when connections other host is %any 2007-01-03 09:26:44 +00:00
Martin Willi 7652be891c added support for transport mode and (experimental!) BEET mode 
support for the type=transport/tunnel parameter in charon
 2006-12-21 14:35:17 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Martin Willi db7ef62494 better split up of library files "types.h" & "definitions.h" 
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
 2006-10-31 12:27:59 +00:00
Andreas Steffen 29137c0cef preparations to include certreqs in policy decisions 2006-10-31 07:04:15 +00:00
Martin Willi 382b481795 moved typedefs to beginning of files to solve some include problems 
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
 2006-10-30 14:07:05 +00:00
Martin Willi 5923be21b4 fixed SIGSEGV when setup of an additional CHILD_SA fails 2006-10-30 09:53:54 +00:00
Andreas Steffen bcba0f0367 changed debug level of certreq log output 2006-10-29 09:11:50 +00:00
Andreas Steffen a702b731cb support of certreq payload in IKE_AUTH messages 2006-10-28 20:02:26 +00:00
Andreas Steffen e44f4d7eef send a certreq as initiator if other_ca is set 2006-10-28 15:37:23 +00:00
Martin Willi ebdddb74d4 some improvements in signaling code 2006-10-27 10:46:56 +00:00
Martin Willi ec92107923 include only source NATD payloads really needed 2006-10-27 10:46:35 +00:00
Martin Willi b83806d83d improved signal handling and emitting 2006-10-26 09:46:56 +00:00
Martin Willi 191a26a6a7 removed deprecated iterator methods (has_next & current) 
added iterator hook to manipulate iterator the clean way
 2006-10-24 14:20:45 +00:00
Martin Willi 55bbff11ec linked list cleanups 
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
 2006-10-24 08:46:17 +00:00
Martin Willi 60356f3375 introduced new logging subsystem using bus: 
passive listeners can register on the bus
  active listeners wait for signals actively
  multiplexing allows multiple listeners to receive debug signals
  a lot more...
 2006-10-18 11:46:13 +00:00
Martin Willi 9e22095ef3 fixed DPD to survive IKE_SA rekeying 2006-09-28 06:57:46 +00:00
Martin Willi 47f5027807 introduced printf() specifiers for: 
host_t (%H)
  identification_t (%D)
  chunk pointers (%B)
  memory pointer/length (%b)
added a signaling bus:
  receives event and debug messages, sends them to its listeners
  stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
 2006-09-27 14:14:44 +00:00
Martin Willi 1ce2ad09c3 fixed retransmission policy for responder 2006-09-25 07:24:08 +00:00
Martin Willi 397f344879 fixed dpd for responder 2006-09-25 06:38:58 +00:00
Andreas Steffen 7bd23b7ed5 added hostaccess support 2006-09-25 06:11:36 +00:00
Andreas Steffen b826069dbb moved auth_method to policy 2006-09-25 06:11:09 +00:00
Andreas Steffen e2de376c74 added PSK support 2006-09-18 07:42:57 +00:00
Martin Willi b9024ee058 handle certificate parsing error more generous 2006-09-14 13:14:58 +00:00
Martin Willi 567e2a7822 fixed memleak when receiving invalid certificate 2006-09-14 12:15:41 +00:00
Martin Willi d7934d0cfc implemented updown script to handle firewalling 2006-09-12 13:50:14 +00:00
Martin Willi a095243f60 add priority management for kernel policy 
let ROUTED policies installed, until manuall removed
introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs
ike_sa_manager cleanups
 2006-09-08 13:10:52 +00:00
Martin Willi 1239c6f40b implemented handling of dpdaction and dpddelay ipsec.conf parameters 2006-09-08 06:12:02 +00:00
Martin Willi a655f5c09c reuse reqid when a ROUTED child_sa gets INSTALLED 
fixed a bug in retransmission code
added support for the "keyingtries" ipsec.conf parameter
added support for the "dpddelay" ipsec.conf parameter
done some work for "dpdaction" behavior
some other cleanups and fixes
 2006-09-05 14:07:25 +00:00
Martin Willi da8ab11e91 fixed a at-least-one-year-old bug which caused crashed in the scheduler 2006-08-31 06:48:10 +00:00
Martin Willi 053842f4e7 implemented NAT detection for IPv6 2006-08-31 06:17:41 +00:00
Martin Willi 48d9883a3e initial support for IPv6 (more testing needed) 
socket works (without v6 filter)
  traffic selector handle IPv4/v4 cleanly
    improvements in traffic selector code
  kernel interface accepts v6 traffic selectors and hosts
  host_t class has full IPv6 support
 2006-08-30 17:12:56 +00:00
Martin Willi 4c23a8c9ec moved interface enumeration code to socket, where it belongs 
query interfaces every time we need it to respect changes in network config
added address listing on startup and "ipsec statusall"
 2006-08-28 08:45:22 +00:00
Martin Willi 9be547c0ed added name property in CHILD_SA, allows proper status output 2006-08-25 09:07:37 +00:00
Martin Willi 7106403bd8 2006-08-25 07:42:48 +00:00
Martin Willi c3e7aeb102 fixed bug which prevented port float when nat is detected 2006-08-25 07:37:22 +00:00
Martin Willi d03ab568a6 fixed rekeying behavior when proposing an inacceptable DH group (INVALID_KE_PAYLOAD) 2006-08-23 09:25:41 +00:00
Martin Willi 3183006de2 implement proper handling of most simultaneous IKE_SA rekeying cases 2006-08-23 07:30:43 +00:00
Martin Willi fe04e93a8b implemented IKE_SA rekeying 
uses ikelifetime, rekeymargin and rekeyfuzz config settings
	no handling of simultaneus exchanges yet!
 2006-07-27 12:18:40 +00:00
Martin Willi c0593835f4 reuse an existing IKE_SA to set up additional CHILD_SAs 2006-07-20 14:57:49 +00:00
Martin Willi 8dfbe71b34 introduced refcounting on policy and connections 
aren't stored in the IKE_SA anymore, they are queried on the fly
	are immutable now, allows it to share them
policy selection based on traffic selectors, leads to valid lookup results
	rekeying queries the policy based on its traffic selectors
 2006-07-20 10:09:32 +00:00
Martin Willi 92ee45a0ee cleanups in kernel interface code 
added proper traffic selector to string conversion
some cleanups here & there
 2006-07-18 12:53:54 +00:00
Martin Willi b34be51cef fixed bug which erroneously detected KE payload when rekeying 2006-07-14 08:18:48 +00:00
Martin Willi 325e497798 improved logging on verify errors for some payloads 
enforcing IKE_SA shutdown, even when transactions are outstanding
proper reject of CREATE_CHILD_SA message with KE payload
 2006-07-13 12:49:35 +00:00
Martin Willi 4c04f30a51 fixed CREATE_CHILD_SA transaction dispatching 2006-07-13 08:51:24 +00:00
Martin Willi bcb95ced3d added CHILD_SA states, which allows us to detect further simultaneous transactions 
reimplemented the buggy message id handling
 2006-07-13 08:26:54 +00:00