denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,130 Commits 1 Branch 0 Tags
aeb6590bda010ce84b667e4dfa6afe9ce69df221
Commit Graph
7130 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner aeb6590bda Build libtncif on Android. 2011-07-29 17:41:14 +02:00
Tobias Brunner 088d73b7b0 File lists in Android.mk files updated. 2011-07-29 17:40:29 +02:00
Tobias Brunner 241cf8e791 Update fallback drop policies if required. 2011-07-29 12:34:51 +02:00
Tobias Brunner 2e370a300d Allow routing table IDs > 255 when filtering them. 2011-07-29 12:16:18 +02:00
Tobias Brunner 50937e8b80 DUMM: Allow addresses to be configured with net prefix. 2011-07-29 12:14:02 +02:00
Tobias Brunner 0511c93d46 Fixed host_create_from_subnet when no prefix is given. 2011-07-29 12:11:20 +02:00
Tobias Brunner f1c1965d64 Install fallback drop policies for all three directions. 2011-07-28 16:56:15 +02:00
Tobias Brunner d7a59f1976 Install fallback drop policies to avoid transmitting unencrypted packets. 
During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy
is first uninstalled and then the new one is installed.  In the short
time in between, where no policy is available in the kernel, unencrypted
packets could have been transmitted.
 2011-07-27 13:44:33 +02:00
Tobias Brunner fbedc6a45b Remove policies in kernel interfaces based on their priority. 
This allows to unroute a connection while the same connection is
currently established.  In this case both CHILD_SAs share the same
reqid but the installed policies have different priorities.
 2011-07-27 13:41:35 +02:00
Tobias Brunner a2e377fcfd Added missing include in mysql plugin. 
This was previously pulled in via linked_list.h->iterator.h->library.h.
 2011-07-26 15:47:01 +02:00
Tobias Brunner 45945fa137 Added tnc, imc, imv debug message groups to man page. 2011-07-26 09:38:13 +02:00
Andreas Steffen 7ec35f561c show correct network topology in shunt-policies scenarios 2011-07-26 07:55:20 +02:00
Martin Willi 5d6b981572 Inherit authentication information during IKE_SA rekeying 2011-07-25 14:19:17 +02:00
Tobias Brunner 446ff101c2 Added a log message when roam jobs get created. 2011-07-21 19:44:42 +02:00
Tobias Brunner cbf5c2c61c Readded docs for some arguments to global functions. 
Those were overzealously removed in 28623fc538.
 2011-07-21 18:38:43 +02:00
Tobias Brunner 92032fd4d6 Fixed sleep command in two test cases. 2011-07-21 16:34:37 +02:00
Tobias Brunner 107ea60f5c Added NEWS about job priorities and IKE_SA_INIT dropping. 2011-07-21 16:26:30 +02:00
Tobias Brunner 4f3ca916c5 Documentation about job priorities added to man page. 
Also includes docs about IKE_SA_INIT dropping.
 2011-07-21 16:17:08 +02:00
Andreas Steffen d33f6f7dba fixed esn type 2011-07-20 23:11:19 +02:00
Andreas Steffen 9c67f5ff54 fixed some more misspellings 2011-07-20 22:19:01 +02:00
Tobias Brunner f3bb1bd039 Fixed common misspellings. 
Mostly found by 'codespell'.
 2011-07-20 16:14:10 +02:00
Tobias Brunner 20a44a5c66 Removed old ikev2bis draft. 2011-07-20 15:57:29 +02:00
Tobias Brunner 355728110a Added missing load-tester options to man page. 2011-07-18 19:01:18 +02:00
Tobias Brunner d604e79185 Count running load-tester threads properly. 2011-07-18 18:46:50 +02:00
Tobias Brunner ebbdc3250b Fix load-tester.shutdown_when_complete option. 
It didn't work when used together with delete_after_established=yes.
 2011-07-18 18:46:50 +02:00
Tobias Brunner 369c2e1dee Fix listener registration in load-tester plugin. 
This fixes the load-tester.shutdown_when_complete option.
 2011-07-18 18:46:50 +02:00
Andreas Steffen cad259e349 removed stray code 2011-07-18 10:22:29 +02:00
Andreas Steffen e65a50530e added libimcv.plugins.imv_scanner options to strongswan.conf 2011-07-18 09:34:49 +02:00
Andreas Steffen 456c668d92 added ikev2/net2net-esn scenario 2011-07-16 14:12:23 +02:00
Andreas Steffen 6101ee9b06 added log and status output for ESN 2011-07-16 11:09:38 +02:00
Andreas Steffen 152d7b373d added IKEv2 exchange type IKE_SESSION_RESUME from RFC 5723 2011-07-15 07:48:36 +02:00
Andreas Steffen 4b30589724 version bump to 4.5.3rc1 2011-07-14 23:27:07 +02:00
Andreas Steffen 0cb5d713ab alice is now master in the ha/both-active scenario 2011-07-14 17:31:47 +02:00
Andreas Steffen 9de0f9d487 short form changed 2011-07-14 16:49:41 +02:00
Martin Willi b93d77ce67 Fix parentheses in write() to CLUSTERIP control files 2011-07-14 15:56:10 +02:00
Andreas Steffen 4742d6501a shunt manager installs policies with %any hosts 2011-07-14 13:51:36 +02:00
Andreas Steffen 56bffdc03a added HOME_AGENT_ADDRESS CP attribute type 2011-07-14 11:05:13 +02:00
Andreas Steffen 895ac29719 fixed typo 2011-07-14 10:53:37 +02:00
Andreas Steffen 9f181e7fd5 updated IANA IKEv2 Notify Message Types 2011-07-14 10:51:24 +02:00
Andreas Steffen b18a697ae6 NEWS for the 4.5.3dr8 release 2011-07-14 09:25:36 +02:00
Andreas Steffen 0f182737b2 check if violating_ports have been assigned 2011-07-13 23:05:22 +02:00
Andreas Steffen 47f2da4ef9 support of error_offset in PA-TNC INVALID PARAMETER error messages 2011-07-13 22:18:32 +02:00
Andreas Steffen a96d9abf3e add relative PB-TNC message offset 2011-07-13 18:59:35 +02:00
Andreas Steffen 0ccdf898bb return offset value 2011-07-13 18:58:58 +02:00
Andreas Steffen ba53c2ef0d add PID/Program Name to netstat output 2011-07-07 09:22:27 +02:00
Andreas Steffen 52ba840d5c adapted tnc scenarios to new imcvs library path 2011-07-06 21:55:17 +02:00
Andreas Steffen 19db8e9eff install IMC and IMV dynamic libraries in imcvs directory 2011-07-06 21:53:40 +02:00
Tobias Brunner 93095183dd Added news about policy history. 2011-07-06 13:03:45 +02:00
Tobias Brunner 17927ca615 Record usage history of policies in PF_KEY kernel interface. 
The implementation is nearly the same as in the Netlink kernel interface.
 2011-07-06 12:56:34 +02:00
Tobias Brunner 4e9e4372f5 Simplified destruction of policy_sa_t objects in Netlink interface. 2011-07-06 12:49:54 +02:00