denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,026 Commits 1 Branch 0 Tags
ad3af574a4b71f7d83e5b871d9dd998ec4068580
Commit Graph
391 Commits
Author SHA1 Message Date
Martin Willi ad3af574a4 moved updown script invocation to an optional plugin 2008-10-16 11:48:18 +00:00
Martin Willi 1df106bf39 cache keys for in and outbound ESP SAs 
removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t)
creating TS pairs dynamically using create_policy_enumerator()
 2008-10-15 12:24:44 +00:00
Martin Willi 9f4e5f8c47 store ESP keys in CHILD_SA 2008-10-15 08:37:56 +00:00
Martin Willi e517b4b174 passing chunks, not prf+, to kernel interface 
gives us better control of keymat in CHILD_SA
 2008-10-14 15:17:44 +00:00
Tobias Brunner c25c8dce60 typos 2008-10-14 12:18:53 +00:00
Martin Willi a985db3ff3 reintegrated bus-refactoring branch 2008-10-14 08:52:13 +00:00
Martin Willi 79a878466c reintegrated two-sim branch providing SIM card plugin API 2008-10-10 08:36:01 +00:00
Martin Willi f0974eb2c2 fixed MOBIKE roaming if clients address changes 2008-10-09 08:25:11 +00:00
Martin Willi ce5b17082d mobike: try to keep existing source address before switching to another 2008-10-08 08:23:46 +00:00
Martin Willi aa9a300677 userland support to process notifies for new NAT mappings detected in UDP encapsulation 2008-10-07 07:55:28 +00:00
Martin Willi 9d9a772ee1 use MOBIKE enabled DPD if we are NATed 
update SAs if we detect changes in NAT mappings
 2008-10-06 13:37:04 +00:00
Martin Willi aa1b90a5b2 do not run CHILD_SA delete action if rekeying 2008-10-03 16:01:14 +00:00
Martin Willi 7827997346 also respect the mobike=no setting as responder 2008-09-30 12:36:58 +00:00
Tobias Brunner a341a68fac merging renaming of mode_t to ipsec_mode_t back to trunk 2008-09-25 13:56:23 +00:00
Tobias Brunner 507f26f685 merging modularized kernel interface back to trunk 2008-09-25 07:56:58 +00:00
Andreas Steffen 07d7f9a402 time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s) 2008-09-04 16:19:46 +00:00
Andreas Steffen 60055b7e1c charon.keep_alive = 0 disables the sending of NAT keep alives 2008-09-03 19:00:08 +00:00
Andreas Steffen 3dfecde4c0 configure NAT keep alive interval using the charon.keep_alive key 2008-09-03 18:49:06 +00:00
Martin Willi 703791715b handle INFORMATIONAL exchanges with NATD payloads in mobike task 2008-09-02 14:02:40 +00:00
Andreas Steffen a44d02627f cosmetics 2008-08-26 19:54:47 +00:00
Andreas Steffen 919019b3cd completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes 2008-08-26 05:15:34 +00:00
Martin Willi 822901061b ported parts of two-sim branch 
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
 2008-08-22 10:44:51 +00:00
Martin Willi 1caa265c61 a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM 2008-08-21 12:10:07 +00:00
Andreas Steffen 9f1ec81290 corrected typo 2008-08-11 18:40:22 +00:00
Andreas Steffen 342c84ddec initiator sends contents of rightca= if present as a certificate request without searching for further CA certificates 2008-08-05 09:05:57 +00:00
Martin Willi f0a8fa25ba using a entry cache for duplicate checks, avoids deadlocks 2008-07-30 14:15:08 +00:00
Andreas Steffen 98ba96f185 demoted IKE state change output to debug level 2 2008-07-28 14:01:45 +00:00
Andreas Steffen 3fd9c75717 ignore AUTH_LIFETIME value if reauthentication has already been scheduled earlier 2008-07-28 13:53:04 +00:00
Andreas Steffen f6facbe75c completed IKE_SA logging at the AUDIT level 2008-07-23 18:46:34 +00:00
Andreas Steffen 6410231335 IKE_SA rekeying inherits other_host from old IKE_SA 2008-07-23 07:44:26 +00:00
Andreas Steffen 0eede4a31f cosmetics 2008-07-23 06:38:24 +00:00
Andreas Steffen 51c8f8261f some more changes to IKE_SA and CHILD_SA logging 2008-07-22 17:10:10 +00:00
Andreas Steffen 32f5ee159e cosmetics 2008-07-22 12:13:48 +00:00
Andreas Steffen 66da78b4bb ipsec status lists IPCOMP CPIs 2008-07-22 12:03:58 +00:00
Andreas Steffen c3967e779e own CPI was not deleted due to copy-and-paste error 2008-07-22 10:53:56 +00:00
Andreas Steffen eba7470b76 consistent logging of SPIs and CPIs 2008-07-22 10:16:45 +00:00
Andreas Steffen fb34475b5c consistent logging of IKE and CHILD SAs 2008-07-21 12:47:59 +00:00
Martin Willi a4a3e0c7dc introduced an additional bus->signal parameter for signal specific data 
added SIG_IKE/SIG_CHD macros for signal emitting
 2008-07-18 15:51:40 +00:00
Martin Willi 5353f22ed7 fixed potential segfault in resolve_hosts 2008-07-17 11:06:31 +00:00
Martin Willi 7beea2e99f fixed acquire-delay bug by: 
installing policies before states
  updating policies if protocol has changed
 2008-07-16 11:51:37 +00:00
Martin Willi ef3f717bfe reverted [4125],[4166], reimplemented the proper way 2008-07-11 08:54:56 +00:00
Martin Willi 6b5d95919c setting ike_sa on bus in checkout_new 2008-07-11 08:47:18 +00:00
Martin Willi e7991a2eef do a route lookup to allow routing of left=%any connections 2008-07-09 14:16:19 +00:00
Martin Willi 62bd123952 peer_cfg lookup takes peer addresses into account 2008-07-01 09:05:20 +00:00
Martin Willi 866ba8e0b6 strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if CHILD_SA setup in IKE_AUTH fails 2008-07-01 07:54:09 +00:00
Martin Willi d510eaea47 sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none found 2008-07-01 06:36:52 +00:00
Andreas Steffen 125aaf1ab1 log received vendor id as a hex value 2008-06-27 17:11:54 +00:00
Martin Willi 7e8af02626 flushing task_manager on shutdown while IKE_SA is usable 2008-06-25 11:40:50 +00:00
Martin Willi e9ab669bc2 resolving hosts before route 2008-06-23 08:30:35 +00:00
Andreas Steffen bc997f6583 display selected IKE proposal in ipsec statusall 2008-06-22 11:24:33 +00:00