denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,638 Commits 1 Branch 0 Tags
b17e0db3726f4389ac3185f48e91ca6641f3ae18
Commit Graph
41 Commits
Author SHA1 Message Date
Andreas Steffen b17e0db372 cosmetics 2007-05-15 12:45:19 +00:00
Martin Willi 3cd3f48428 properly implemented interface_managers initiate, terminte_[ike|child] 
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
 2007-05-09 12:33:08 +00:00
Martin Willi a84fb01b96 restructuring of configuration backends 
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
  configuration backends
  control interfaces
using pluggable modules as in EAP
 2007-04-27 14:25:08 +00:00
Martin Willi f47e450be9 properly checking received IDr as initiator 2007-04-25 06:06:13 +00:00
Martin Willi 1fd5383e61 added PDF support for CHILD_SAs 
support for INVALID_KE_PAYLOAD negotiation for rekeying
 2007-04-19 08:02:19 +00:00
Martin Willi 3b138b8422 cleaned up apidoc 
added some comments
removed configuration.[ch], as it does not make sense like it is
 2007-04-11 07:20:39 +00:00
Andreas Steffen a07aad39dc edited comment and debug output 2007-04-10 22:38:06 +00:00
Martin Willi 00ccb87671 requesting the same virtual IP on reauthentication 2007-04-10 15:02:57 +00:00
Martin Willi e0fe765152 restructured file layout 
new configuration structure:
  peer_cfg: configuration related to a peer (authenitcation, ...=
  ike_cfg: config to use for IKE setup (proposals)
  child_Cfg: config for CHILD_SA (proposals, traffic selectors)
  a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
 2007-04-10 06:01:03 +00:00
Martin Willi b9e363f86f added IKE_SA_INIT retransmission detection 
fixed thread exhaustion when IKE_SA is blocked for a longer time
 2007-03-29 14:20:10 +00:00
Martin Willi a6bdc731b1 added retry limit for IKE_SA_INIT (give up after 5 cookie failures) 2007-03-29 11:07:49 +00:00
Martin Willi c00840478e fixed state and logging of IKE_SA when using EAP authentication 2007-03-27 16:11:29 +00:00
Martin Willi e23a59f635 fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progress 2007-03-27 13:32:12 +00:00
Martin Willi 92275b0981 added CHILD_SA compare check for rekeying collisions 2007-03-22 07:34:42 +00:00
Martin Willi 4315f5c88b fixed some rekey collision issues 
added retry with jitter when rekeying fails
 2007-03-21 16:11:14 +00:00
Martin Willi eef0859043 fixed child rekey collision 
implemented ike rekey collision
 2007-03-21 14:42:49 +00:00
Martin Willi 195ada0b4b handling of CHILD_SA rekeying collisions 2007-03-21 09:25:36 +00:00
Martin Willi 403f8fd300 fixed inproper delete of CHILD_SA 2007-03-21 07:01:14 +00:00
Martin Willi 0f33e8264a fixed some exchange collisions (except IKE/CHILD rekeying) 2007-03-20 16:13:21 +00:00
Martin Willi 37c6ebb78b fixed nat detection bug 2007-03-20 12:25:08 +00:00
Martin Willi 755bdcc274 adjusted loglevels 2007-03-20 08:13:54 +00:00
Martin Willi e05a0b765a fixed CHILD_SA rekeying/delete bug on 64bit machines 
removed obsolete methods in delete_payload
 2007-03-19 08:04:37 +00:00
Martin Willi b857118bd7 removed cfg-payload dns test code 2007-03-14 11:04:31 +00:00
Martin Willi d2940fd78c not detaching from bus when IKE_SA_INIT is retried 2007-03-13 14:55:53 +00:00
Martin Willi f5fbad4a62 fixed memleaks when using EAP authentication 
fixed configuration payloads when using EAP
 2007-03-08 22:56:14 +00:00
Martin Willi 1216db7e8b including peers certificate when his certreq is empty 2007-03-08 20:19:24 +00:00
Martin Willi e5a7f1cd08 implemented cookies as initiator 
proper logging of notifies in IKE_SA setup
 2007-03-08 20:18:39 +00:00
Martin Willi 8b8dd69dee some cleanups 
not installing %any DNS servers
 2007-03-08 16:58:59 +00:00
Martin Willi f007a70055 allocation fixes, not complete 2007-03-08 14:41:30 +00:00
Martin Willi 2c7fe7f530 handling "No policy found" properly 2007-03-08 14:41:09 +00:00
Martin Willi 9b8b3e5f5c fixed CHILD_SA creation within existing IKE_SA 2007-03-08 12:28:10 +00:00
Martin Willi 49e8ac052d ported changes from EAP branch, renabling EAP framework 2007-03-08 00:27:43 +00:00
Andreas Steffen 4eacb268a0 added parsing level to x509_create_from_chunk() 2007-03-07 22:58:25 +00:00
Martin Willi c676f2e2a6 fixed notify handling in IKE_AUTH 
moved nonce payload before TS in CHILD_SA setup
 2007-03-06 20:58:39 +00:00
Martin Willi f2d4ec5639 moved REKEY_SA notify to the beginning of the message 2007-03-06 20:56:58 +00:00
Martin Willi 6e1be42744 some cleanups 
not assigning %any virtual IPs to peer anymore
 2007-03-05 22:07:36 +00:00
Martin Willi 02b3101b67 fixed double free bug 2007-03-05 22:02:14 +00:00
Martin Willi 5bf1be3c9f fixed ID selection bug when peer doesn't include IDr payload 
allowing vendor ID in any messag
 2007-03-05 15:22:50 +00:00
Martin Willi 373b8a607f fixed netlink socket receiver code 
implemented interface enumeration code with netlink: no getifaddrs reqired anymore
 2007-03-03 14:56:24 +00:00
Martin Willi 8f03147376 added firewalling support when using virtual IPs 2007-03-01 12:31:58 +00:00
Martin Willi c60c7694d2 merged tasking branch into trunk 2007-02-28 14:04:36 +00:00