denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,444 Commits 1 Branch 0 Tags
a6e3ec13897a926c795794534f07c4fa2726b18f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner c889ce80ab fixing IKE_SA rekeying if charon.ikesa_table_size > 1 2009-04-17 16:58:11 +00:00
Tobias Brunner 3a80181b61 missed strcaseeq added 2009-04-17 10:52:41 +00:00
Tobias Brunner 6e7c0b1e44 fixing DES ECB decryption 2009-03-12 18:38:13 +00:00
Tobias Brunner d25ce3701e printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms). 2009-03-12 18:07:32 +00:00
Tobias Brunner 9086102dfd memleak fixed when reading smartcard secrets 2009-03-12 15:12:11 +00:00
Tobias Brunner 3078b18778 fixed some memleaks in mschapv2 plugin 2009-02-19 14:32:13 +00:00
Tobias Brunner 7b76702587 ECB mode added to the DES plugin 2009-02-19 14:29:25 +00:00
Tobias Brunner 5fa7aed491 des ecb enum value changed, ignores set for md4 plugin 2009-02-19 13:46:08 +00:00
Tobias Brunner f98cdf7a47 adding plugin for EAP-MS-CHAPv2 2009-02-18 19:57:15 +00:00
Tobias Brunner 73883705bd force unique connections for mediation connections 2009-02-18 19:48:11 +00:00
Tobias Brunner b250665f58 adding enum elements for MD4 and DES (ECB) 2009-02-18 19:45:46 +00:00
Tobias Brunner b8fa437fb7 adding MD4 and DES (ECB) to openssl plugin 2009-02-18 19:41:33 +00:00
Tobias Brunner abe1dafaa4 typo 2009-02-17 17:14:15 +00:00
Tobias Brunner bb835afa90 fixing cross-compilation 2009-01-13 10:38:16 +00:00
Tobias Brunner f30150d3da correct use of calloc in hashtable_t 2008-12-17 09:56:05 +00:00
Tobias Brunner 58464dd737 improved IKE_SA uniqueness check 2008-12-16 17:21:28 +00:00
Tobias Brunner f55a7a76dd address extensions refactored 2008-12-11 13:39:30 +00:00
Tobias Brunner a46173dfb4 nat_traversal in manpage corrected 2008-12-10 17:45:44 +00:00
Tobias Brunner 2475560c82 fixing checkout of IKE SAs with only the initiator SPI 2008-12-10 15:58:39 +00:00
Tobias Brunner 97016769fd increasing the performance of checkout_duplicate by using a hash table. 2008-12-10 13:51:21 +00:00
Tobias Brunner 0dbd9788e5 initial size of 1 is nonsense 2008-12-10 13:45:05 +00:00
Tobias Brunner d6dc0a21fb incremental version of chunk_hash 2008-12-10 13:43:51 +00:00
Tobias Brunner 3fb404d8da implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead of a linked list. 2008-12-04 16:46:08 +00:00
Tobias Brunner ffa6450695 fixed off by one error 2008-12-04 16:33:39 +00:00
Tobias Brunner 83c42156a2 add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg. 2008-12-03 10:12:20 +00:00
Tobias Brunner c3bdc3cd7f enable quoted tokens in the token enumerator 2008-12-03 10:03:59 +00:00
Tobias Brunner f4bcf49bcb fixed compiler warning 2008-12-03 10:03:02 +00:00
Tobias Brunner 81736d7d24 added memstr and extract_token_str helper functions 2008-12-03 09:45:58 +00:00
Tobias Brunner 0948edbbff adding general purpose hash table 2008-12-03 09:32:16 +00:00
Tobias Brunner 69e9698b17 allow to globally disable DOS protection by setting charon.dos_protection to no. 2008-11-26 09:22:19 +00:00
Tobias Brunner 999072ea02 optimized the scheduler for performance by replacing the linked list with a heap. 2008-11-25 19:56:05 +00:00
Tobias Brunner 6df2731e78 replacing the pthread_mutex in scheduler_t with the wrapped implementation. 
added a method to condvar_t which allows to wait for an absolute timeout.
 2008-11-25 19:30:02 +00:00
Tobias Brunner ed6146ffbe performance optimization for the DOS protection. 
* half-open SAs per peer are tracked in a hash table
 * charon.dos_protection setting replaced with charon.cookie_threshold and charon.block_threshold
 * chunk_hash function added
 2008-11-25 13:16:05 +00:00
Tobias Brunner cdee592e38 fixing Makefile of the nm plugin (avoids including a .svn directory in the distribution) 2008-11-20 14:46:03 +00:00
Tobias Brunner ba2ecf6831 optimized ike_sa_manager for concurrent access (default behavior is still as before, needs configuration in strongswan.conf). 2008-11-20 13:30:23 +00:00
Tobias Brunner 9dd1229407 fixing compilation on systems lacking linux/xfrm.h 2008-11-18 14:28:05 +00:00
Tobias Brunner 7bdc931e6c announcing the kernel plugins 2008-11-11 13:35:51 +00:00
Tobias Brunner f967db312d fixing mediation extension 2008-11-11 13:12:05 +00:00
Tobias Brunner 476c61fdcd some typos 2008-11-11 13:11:44 +00:00
Tobias Brunner e7c27b4f3f fixing a memory leak 2008-11-11 09:56:47 +00:00
Tobias Brunner ea625fabf9 merging kernel_klips plugin back into trunk 2008-11-11 09:22:00 +00:00
Tobias Brunner 35379b2130 typedef fixed 2008-10-15 11:34:29 +00:00
Tobias Brunner c25c8dce60 typos 2008-10-14 12:18:53 +00:00
Tobias Brunner 35ae2d7fe7 directory 'build' renamed as 'packages' 2008-10-14 11:53:23 +00:00
Tobias Brunner 1adaa02bb2 merging kernel_pfkey plugin back from kernel-interface branch 2008-10-14 08:46:31 +00:00
Tobias Brunner a341a68fac merging renaming of mode_t to ipsec_mode_t back to trunk 2008-09-25 13:56:23 +00:00
Tobias Brunner 507f26f685 merging modularized kernel interface back to trunk 2008-09-25 07:56:58 +00:00
Tobias Brunner 80fc5bd95c missing '_' added 2008-09-19 13:20:09 +00:00
Tobias Brunner 6283b1f1f8 typos 2008-09-03 07:44:46 +00:00
Tobias Brunner 8bbc7ca710 * allow to load templates from arbitrary places 
* changed implementation of guest?/iface?
 2008-08-28 08:05:07 +00:00
Tobias Brunner 6c20579a43 mkdir_p: utility function to create a directory and all required parent directories 2008-08-28 07:47:55 +00:00
Tobias Brunner ca4f63383c * guest#running? 
* guest?, iface? (also Guest.include? resp. guest.include?)
 * easy accessors for guests and ifaces (Guest.sun instead of Guest["sun"] and guest.eth0 instead of guest["eth0"])
 * if a block is given for iface#add or iface#del then the change is only temporary while executing the block and gets reverted afterwards
 2008-08-27 07:35:20 +00:00
Tobias Brunner e5d6f165fc * ruby extension extracted from irdumm 
* guests do not shutdown anymore on SIGINT in irb
 2008-08-07 14:56:54 +00:00
Tobias Brunner f753e03ab8 added missing cleanup on failure 2008-08-06 07:31:26 +00:00
Tobias Brunner 5e9346ed92 exec on a guest now returns the return value of the executed process 2008-07-31 12:59:59 +00:00
Tobias Brunner eadd460f7c the list of addresses on the interface of a guest is not cached anymore, but queried directly from the interface 2008-07-30 13:15:18 +00:00
Tobias Brunner 9901cdb4cd * Guest#exec uses the new exec_str function 
* tab completion in irdumm enabled
 2008-07-30 13:01:04 +00:00
Tobias Brunner 2e73cd6e87 added an extended exec function to guests that allows to get the output of the command as string or by line. 2008-07-30 12:58:45 +00:00
Tobias Brunner 1b7d2e31a6 enabling support for hardware accelerators in OpenSSL 2008-06-25 12:39:32 +00:00
Tobias Brunner be33d1a51b merging the ESP sequence numbers of an SA in update_sa (fixing #52) 2008-06-24 15:35:09 +00:00
Tobias Brunner ad4d3f81c1 changed ipsec.secrets keyword EC to ECDSA 2008-06-24 06:57:47 +00:00
Tobias Brunner a57e0580f6 refactoring 2008-06-10 09:19:18 +00:00
Tobias Brunner ea0823dffd ECDSA with OpenSSL 2008-06-10 09:08:27 +00:00
Tobias Brunner 2904403e96 parsing of subjectPublicKeyInfo of x509 certificates extracted 2008-06-10 09:00:42 +00:00
Tobias Brunner 80205e2fbc oids for elliptic curves 2008-06-10 07:37:32 +00:00
Tobias Brunner 468d45e68b making the parsing of parameters of a subjectAlgorithmIdentifier optional 2008-06-10 07:36:44 +00:00
Tobias Brunner 17188f20dd Id and typo 2008-05-22 12:13:10 +00:00
Tobias Brunner 346e9c5712 added the ECP groups from RFC 5114 2008-05-22 11:55:05 +00:00
Tobias Brunner fc1a31d54b added ECDH with OpenSSL (see RFC 4753) 2008-05-22 11:39:17 +00:00
Tobias Brunner 31430acc1b correctly initialize the mediation and connection manager 2008-05-22 11:33:35 +00:00
Tobias Brunner 081a14cd33 added an error message when strongswan.conf cannot be read 2008-05-19 13:20:33 +00:00
Tobias Brunner 6f2ba57a4e added a fixup for addresses from shared libraries in segmentation fault handler 2008-05-19 12:49:35 +00:00
Tobias Brunner 550690d23b fixed the cleanup code when the credential factory fails to create a builder 2008-05-19 12:43:01 +00:00
Tobias Brunner 68ac3b44d1 fixed a bug introduced in [3973] 2008-05-19 08:48:44 +00:00
Tobias Brunner 3f730ec1cd Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) in charon. 2008-05-16 13:27:21 +00:00
Tobias Brunner 5a9f62a754 updated xfrm.h to the version from the 2.6.25.4 kernel sources 2008-05-16 13:24:18 +00:00
Tobias Brunner 84770ded1e RSA with OpenSSL 2008-05-15 12:41:06 +00:00
Tobias Brunner 144274ab20 corrected deinitialisation of public key factory 2008-05-15 12:39:35 +00:00
Tobias Brunner c1571b34fd generic public key factory moved 2008-05-15 12:33:00 +00:00
Tobias Brunner 1d56d328fd typo 2008-05-14 11:10:37 +00:00
Tobias Brunner d4aad55434 IPComp for IKEv2 2008-05-08 16:19:11 +00:00
Tobias Brunner d691080cfc simplified the OpenSSL crypter a bit 2008-04-30 09:24:22 +00:00
Tobias Brunner 87aa386df1 simplified the OpenSSL hasher a bit 2008-04-30 09:23:13 +00:00
Tobias Brunner bc75840fb1 OpenSSL hasher does not need an internal buffer anymore 2008-04-30 08:54:36 +00:00
Tobias Brunner ae7e837c30 adding diffie hellman with OpenSSL 2008-04-29 15:42:34 +00:00
Tobias Brunner 4eda3aa223 use SHA-1 as preferred hasher in the OpenSSL plugin 2008-04-29 09:13:14 +00:00
Tobias Brunner 63cdbca211 added wrapper for OpenSSL hashers 2008-04-28 15:56:44 +00:00
Tobias Brunner a733b30276 algo lookup corrected 2008-04-28 15:26:38 +00:00
Tobias Brunner 3b34019f58 made algo struct static 2008-04-28 14:52:58 +00:00
Tobias Brunner b61aa33599 typos 2008-04-28 14:32:18 +00:00
Tobias Brunner 17353034f3 added a wrapper plugin for OpenSSL crypters (AES, 3DES, Blowfish etc.) 2008-04-28 14:25:19 +00:00
Tobias Brunner 1da06b295f made some stuff static 2008-04-28 14:19:25 +00:00
Tobias Brunner ebb036feec functions invoked on all linked list items now support up to five additional arguments 2008-04-18 11:48:53 +00:00
Tobias Brunner b1f8fc0cdb news (hash and url) 2008-04-18 11:43:20 +00:00
Tobias Brunner 6439267a8c support for hash and URL encoded certificate payloads in charon 2008-04-18 11:24:45 +00:00
Tobias Brunner eed87e1d76 typo 2008-04-18 10:58:36 +00:00
Tobias Brunner ab7ed97c93 type corrected 2008-04-18 10:11:41 +00:00
Tobias Brunner 4a6474c2c3 enabling acquire for mediated connections 2008-04-10 12:51:04 +00:00
Tobias Brunner 78abba428f enabling reauthentication on mediation connections 2008-04-10 08:42:27 +00:00
Tobias Brunner 4a03518112 fixing a problem if the mediation server initiates the rekeying 2008-04-10 07:24:30 +00:00