denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,676 Commits 1 Branch 0 Tags
b0191365960ac7fa0e1b5accee65630a77d4caa5
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner 64d24679df Corrected some URLs. 2010-08-31 14:46:53 +02:00
Tobias Brunner 9b698a771c Enable the generation of unencrypted messages (e.g. ME connectivity checks). 2010-08-30 17:25:12 +02:00
Tobias Brunner 2402dee177 Port floating patch partially reversed. 
If MOBIKE is enabled, we do have to switch to port 4500 with the
IKE_AUTH request, that is, before we know whether the other peer
actually supports MOBIKE or not.
 2010-08-30 14:54:31 +02:00
Tobias Brunner 277f02ce9e Slightly refactored port floating. 
In case of MOBIKE, only float to port 4500 if the other peer actually supports MOBIKE.
 2010-08-30 13:42:58 +02:00
Tobias Brunner 0433b4172b Typo in doxygen comment fixed. 2010-08-30 10:49:32 +02:00
Tobias Brunner fde2d34d0f Fixed ME after introduction of AEAD wrapper. 2010-08-30 10:48:09 +02:00
Tobias Brunner cb7a0cef48 Fixed documentation of XAUTH in ipsec.secrets. 2010-08-26 10:25:08 +02:00
Tobias Brunner 6432669fa2 Added support for early and late calls to Vstr wrappers. 
That is, prevent a SIGSEGV if Vstr wrappers are called before printf_hook_t
is initialized and after it is destroyed.
 2010-08-10 13:00:20 +02:00
Tobias Brunner fa9f101345 Properly initialize libstrongswan in _copyright. 
This is required if libvstr is used.
 2010-08-06 19:56:42 +02:00
Tobias Brunner 7c3dd613d7 Added missing Vstr wrappers for asprintf. 2010-08-06 19:56:42 +02:00
Tobias Brunner edb82ab8ae Some Doxygen fixes. 2010-08-05 11:53:53 +02:00
Tobias Brunner 744b83c7c9 Fixed loading of secrets with IDs. 
Since the ID string is manually terminated by a null character, write
permission is required for the mmapped ipsec.secrets.
 2010-08-04 16:03:46 +02:00
Tobias Brunner dca2d89209 Fixed loading of private keys without password. 
The chunk storing the password was not correctly initialized, resulting
in a segmentation fault when no password was specified in ipsec.secrets.
 2010-08-04 14:22:48 +02:00
Tobias Brunner 83628fd600 Accept EAP_ONLY_AUTHENTICATION notifies from any client, now that IANA allocated an ID. 2010-08-04 12:58:53 +02:00
Tobias Brunner 12549bedea IKEv2 notification types updated. 2010-08-04 10:06:00 +02:00
Tobias Brunner f8029ca3f9 test_cert adapted to extended signature of get_encoding(). 2010-08-03 19:00:56 +02:00
Tobias Brunner 56bceda7b5 Fixed compiler warnings. 2010-08-03 19:00:46 +02:00
Tobias Brunner dcb4651d8c apidoc is actually a directory not a file. 2010-07-12 15:28:55 +02:00
Tobias Brunner af7b34b13b Added missing pool parameter in DHCP attribute provider. 2010-07-12 12:27:49 +02:00
Tobias Brunner f395f28e44 Added missing markt_t in load tester, also migrated to INIT/METHOD macros. 2010-07-06 09:29:18 +02:00
Tobias Brunner 83b23011de Some Doxygen fixes. 2010-07-05 15:04:30 +02:00
Tobias Brunner 8f7e8e075a Fixed typo. 2010-07-05 14:53:56 +02:00
Tobias Brunner 43ab542b66 Disable EAP-GTC on Android. 
The EAP-GTC plugin does not compile due to its dependency on PAM.
 2010-07-05 09:40:26 +02:00
Tobias Brunner c177076b50 Enabling some EAP plugins on Android. 2010-06-30 10:02:15 +02:00
Tobias Brunner 5430d6ab3c The x509 plugin is not needed anymore on Android, using OpenSSL. 2010-06-30 10:01:16 +02:00
Tobias Brunner 0f21ebc81d The signature of keystore_get changed again. 
With Android 2.2 (Froyo) the interface of keystore_get was changed once
again. The change was made to allow the keys to contain \0 characters.
 2010-06-28 17:18:53 +02:00
Tobias Brunner 6f52d3b077 Compiler warning fixed. 2010-06-28 08:50:30 +02:00
Tobias Brunner c0914c457b Increased the loglevel for the arguments received via Android control socket. 2010-06-24 14:46:25 +02:00
Tobias Brunner e9e2a4fecf Terminate charon from the Android plugin if the tunnel goes down after it was initiated successfully. 2010-06-24 14:30:06 +02:00
Tobias Brunner 7913a74c36 Initiate the tunnel in the Android plugin asynchronously. 
Also track its initiation using the registered listener.
 2010-06-24 14:30:05 +02:00
Tobias Brunner 8b775e99ea Implement the listener_t interface in the Android plugin to track the status of an SA. 2010-06-24 14:30:05 +02:00
Tobias Brunner 94ec9adc10 Helper function added to notify the Android frontend about status changes. 2010-06-24 14:30:05 +02:00
Tobias Brunner 024dd37fa0 Initiate consumes a child_sa reference, so get an additional one. 2010-06-24 14:30:05 +02:00
Tobias Brunner 5eb9eeb130 Use the same error code constants as in the Java frontend. 2010-06-24 14:30:05 +02:00
Tobias Brunner 359063caf7 Flush and destroy the send queue before unloading the socket plugins. 2010-06-24 14:30:05 +02:00
Tobias Brunner 9eb7f46b3d Do not install routes in the PF_KEY kernel interface if interface lookup failed. 2010-06-23 11:43:31 +02:00
Tobias Brunner a427e98da1 The signature of keystore_get was changed with Android 2.x. 2010-06-22 16:19:55 +02:00
Tobias Brunner f283520faf Avoid a segmentation fault if opening the Android control socket failed. 2010-06-22 16:18:22 +02:00
Tobias Brunner 61c950d9aa OpenSSL in Android 2.1+ lacks Elliptic Curve and ENGINE support. 
Unfortunately, opensslconf.h was not changed accordingly.
 2010-06-22 16:15:10 +02:00
Tobias Brunner c03ed4835c Allow to enable the kernel-pfkey plugin via Android.mk. 2010-06-22 16:14:14 +02:00
Tobias Brunner b7900d3258 Fixing the PF_KEY kernel interface on Android. 
In Android's in.h IPPROTO_COMP is not #defined but just an enum member.
 2010-06-22 16:12:07 +02:00
Tobias Brunner 1e3d66f8d3 Fixing compilation of the OpenSSL plugin if ENGINE support is disabled. 
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_ENGINE.
 2010-06-22 11:55:34 +02:00
Tobias Brunner 5a367e99c3 Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled. 
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_EC.
 2010-06-22 11:55:33 +02:00
Tobias Brunner 9b6db5cd2e Fixed plugin checks in Android.mk files. 2010-06-22 10:40:34 +02:00
Tobias Brunner 4f9b82bc1d Fixed compiler warning. 2010-06-15 19:58:59 +02:00
Tobias Brunner 499af811c0 Use vpn.dns* to store DNS servers (Android manages net.dns* using these). 2010-06-15 19:58:58 +02:00
Tobias Brunner be00d219cc Adding an interface that interacts with the Android Settings frontend. 2010-06-15 19:58:58 +02:00
Tobias Brunner c373f14947 Adding an Android specific credential set. 2010-06-15 19:58:58 +02:00
Tobias Brunner 51a00fb275 Adding an Android specific logger. 2010-06-15 19:58:58 +02:00
Tobias Brunner 946be4d357 Adding support for the native Linux capabilities interface. 
Note that this interface is deprecated and mainly added to support
Android. Use libcap, if possible.
 2010-06-15 19:58:30 +02:00
Tobias Brunner b77e493bea Explicitly refer to LIBCAP in Makefiles. 2010-06-15 19:57:31 +02:00
Tobias Brunner 404960e522 Run as vpn user on Android. 2010-06-15 19:57:31 +02:00
Tobias Brunner b02a03a5dd Truncate the PID file so that even if we fail to unlink it, the daemon can be restarted properly. 2010-06-15 19:57:14 +02:00
Tobias Brunner 4e9d313ff8 Explicitly include stdint.h for UINT64_MAX. 
This is required on FreeBSD 8.
 2010-06-15 15:31:46 +02:00
Tobias Brunner ed76b21652 Check for SADB_X_NAT_T_NEW_MAPPING in PF_KEY kernel interface. 
FreeBSD 8 does not support SADB_X_NAT_T_NEW_MAPPING whereas Linux and
the previous FreeBSD NAT-T patch both do.
 2010-06-15 15:31:10 +02:00
Tobias Brunner 668e84d904 Set the ports of all hosts installed via the PF_KEY kernel interface to zero. 2010-06-15 10:11:57 +02:00
Tobias Brunner 2e8a5e12ef Adding a basic unit test for hashtable_t. 2010-06-07 16:40:32 +02:00
Tobias Brunner b2ddaf0775 Adding a remove_at method to the hash table. 
This allows to remove key-value pairs while enumerating them.
 2010-06-07 16:36:26 +02:00
Tobias Brunner 88b6f14143 Migrated hashtable_t to INIT/METHOD macros. 2010-06-07 15:53:36 +02:00
Tobias Brunner 3d829c4c0a IPSEC_CONFDIR in ipsec script fixed. 2010-05-30 13:07:32 +02:00
Tobias Brunner 8f76653a4c Adding the version number to the most relevant manual pages. 2010-05-30 13:03:04 +02:00
Tobias Brunner 1d3a48b559 Updated and corrected the ipsec.secrets(5) manual page. 2010-05-30 12:29:32 +02:00
Tobias Brunner f115838bee Updated and corrected the ipsec.conf(5) manual page. 2010-05-30 12:29:26 +02:00
Tobias Brunner 28550caaa8 Updated and corrected the ipsec(8) manual page. 2010-05-30 12:29:18 +02:00
Tobias Brunner d070e0a6d1 Do not install trap policy if remote host is %any. 2010-05-28 15:43:12 +02:00
Tobias Brunner e3dd6b1475 Only include C files that start with the plugin name when building for Android. 2010-05-20 12:01:12 +02:00
Tobias Brunner 9ffb475e5d Typo fixed. 2010-05-18 13:59:23 +02:00
Tobias Brunner 9d843ee6fa Do a proper cleanup when printing usage info. 2010-05-04 18:34:27 +02:00
Tobias Brunner 6d7f4e0653 Moved syslog.h include. 2010-05-04 18:34:20 +02:00
Tobias Brunner 6b57f5edff Compiler warning fixed. 2010-05-04 18:28:28 +02:00
Tobias Brunner 726c0ae9d3 We have to rename thread_create on Mac OS X because it conflicts with a syscall. 2010-04-29 14:52:20 +02:00
Tobias Brunner 1c31d34ed5 Initialize libstrongswan in stroke (fixes Vstr logging). 2010-04-29 14:51:44 +02:00
Tobias Brunner 26a3d7e78e Initialize libstrongswan in starter (fixes Vstr logging). 2010-04-29 14:33:29 +02:00
Tobias Brunner 361f416d2c The mutex of a thread has to be locked when destroying it. 2010-04-29 13:30:51 +02:00
Tobias Brunner 257e27df07 Fixing out-of-tree build after adding dependency to config.status. 2010-04-29 13:29:53 +02:00
Tobias Brunner 6edbe1652b Integrating libhydra into the Android build system. 2010-04-12 16:47:47 +02:00
Tobias Brunner b73b3a033f Use openssl in Android by default. 2010-04-12 15:54:48 +02:00
Tobias Brunner 355c3a66b1 When logging to the database, the IDs of an IKE SA are initially NULL. 2010-04-12 13:51:10 +02:00
Tobias Brunner 9f4b02e31d Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan. 2010-04-10 12:10:04 +02:00
Tobias Brunner 0a4dc78755 Some whitespace fixes. 2010-04-06 12:56:06 +02:00
Tobias Brunner e41932320c Explicitly unload plugins before deinitializing libhydra and libstrongswan in pluto. 2010-04-06 12:47:41 +02:00
Tobias Brunner 894936ce9e Replaced some DBG_LIB with more specific groups. 2010-04-06 12:47:40 +02:00
Tobias Brunner 8b0e09103b Adding DBG_LIB to all calls of libstrongswan's version of DBG*. 2010-04-06 12:47:40 +02:00
Tobias Brunner 9ed6341d3f Adding support for debug groups in libstrongswan's logger. 2010-04-06 12:47:40 +02:00
Tobias Brunner 3fdee23f18 Move debug groups from charon's bus.h to libstrongswan's debug.h. 2010-04-06 12:47:40 +02:00
Tobias Brunner 9f3df622e4 Manually loading the pluto.(n)dns* settings is not needed anymore. 2010-04-06 12:47:40 +02:00
Tobias Brunner 7ac6060e8d Use daemon-specific config for the attr plugin. 2010-04-06 12:47:40 +02:00
Tobias Brunner a5ec302547 Moved attr plugin from libcharon to libhydra. 2010-04-06 12:47:40 +02:00
Tobias Brunner facf887253 Store the name of the daemon that initialized libhydra to load daemon-specific settings. 2010-04-06 12:47:40 +02:00
Tobias Brunner e82b5755be Added pluto/whack output to 'ipsec leases'. 2010-04-06 12:47:40 +02:00
Tobias Brunner 6bfa8e907c Added options to whack to query in-memory leases. 2010-04-06 12:47:39 +02:00
Tobias Brunner 4db0af9080 Added function to list the leases of the in-memory pools. 2010-04-06 12:47:39 +02:00
Tobias Brunner 4e06abe0fa Delete the in-memory IP address pools if a connection gets deleted. 
This fixes ipsec reload.
 2010-04-06 12:47:39 +02:00
Tobias Brunner bd22823358 Use whack_attribute in pluto to provide in-memory IP address pools. 
The pools are configured by setting rightsourceip in ipsec.conf to a
network in CIDR notation.
 2010-04-06 12:47:39 +02:00
Tobias Brunner 89715bd790 Adding a whack_attribute class which manages in-memory pools in pluto and is very similar to stroke_attribute. 2010-04-06 12:47:39 +02:00
Tobias Brunner c9235353f8 Use a read-write lock in stroke_attribute to increase concurrency. 2010-04-06 12:47:39 +02:00
Tobias Brunner fb111e5507 Make in-memory pool thread-safe. 2010-04-06 12:47:39 +02:00
Tobias Brunner 8c9f5bad8b Migrated stroke_attribute_t to METHOD/INIT macros. 2010-04-06 12:47:38 +02:00
Tobias Brunner ac5fb545c5 Extracted in-memory IP address pool from stroke plugin to libhydra. 2010-04-06 12:47:38 +02:00
Tobias Brunner 18c68f22c7 Revert "Use the same formatting as in the Makefiles of the other plugins. Makes refactorings easier." 
This reverts commit e91b116a62. Missed to
notice commit 89bf11d204.
 2010-03-26 10:47:09 +01:00