denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,472 Commits 1 Branch 0 Tags
b360e3933d84c5869d839ccd274fa191dc2daef0
Commit Graph
2472 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi b360e3933d respecting ipsec.conf cachecrls= option 2008-04-17 15:01:57 +00:00
Martin Willi 58126dd295 added missing bits for credential caching 2008-04-17 15:00:51 +00:00
Martin Willi d33fa48bc7 caching of CRLs to /etc/ipsec.d/crls 2008-04-17 14:08:38 +00:00
Martin Willi 72c882d8c0 cosmetics to chunk_write() 2008-04-17 14:06:37 +00:00
Martin Willi 2270b396b3 added missing credential_set method to stroke_ca 2008-04-17 13:00:05 +00:00
Martin Willi 233b853dfa extended credential_set_t interface by a cache_cert() method 
allows persistent or in-memory caching of fetched certificates
 2008-04-17 11:22:37 +00:00
Martin Willi 46a5604a04 splitted IKE_SA manager destroy to allow plugin interaction 2008-04-17 10:46:25 +00:00
Martin Willi e5617e40d1 adding rightsourceip=%poolname properly to peer config 2008-04-17 08:55:32 +00:00
Martin Willi 4904d26120 slightly optimized IKE_SA checkin 2008-04-16 08:43:32 +00:00
Martin Willi 054c9e6031 parallelized trust chain verification 
temporary imported certificates are thread-local only
	read-write locking on credential manager
	credential sets must be thread-save now
 2008-04-16 08:38:15 +00:00
Martin Willi 2c463cdfb1 optimized half-open IKE_SA lookup (no checkout) 2008-04-16 08:34:52 +00:00
Martin Willi 140ed97c0c disable DPD if dpddelay is set but dpdaction=none 2008-04-16 05:50:56 +00:00
Martin Willi 20e32cf86c updated sql testcases to new table schema 2008-04-15 15:14:32 +00:00
Martin Willi 02e4180e48 updated sql plugin to respect config changes 2008-04-15 15:13:53 +00:00
Martin Willi 1822ca740b disabled SQL logging by default, as tests scenarios do not have a logging table 2008-04-15 15:13:08 +00:00
Martin Willi f722fa31db added error logging to sqlite plugin 2008-04-15 15:12:01 +00:00
Martin Willi 0dab0f1d5d fixed build of smp plugin 2008-04-15 11:51:46 +00:00
Andreas Steffen f45411c045 set long-forgotten DPD defaults 2008-04-15 11:27:45 +00:00
Martin Willi 82d8368bd7 build plugins after daemon/libstrongswan 2008-04-15 07:57:01 +00:00
Martin Willi 6a365f0740 added API for random number generators, served through credential factory 
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
 2008-04-15 05:56:35 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi a593db5d35 ike_sa_manager enumerable, not iterable 2008-04-14 11:37:46 +00:00
Martin Willi b010310517 updated rightsourceip parameter in man page 2008-04-14 08:27:05 +00:00
Martin Willi 348af092ac added close_action as a seperate config option to dpd_action 2008-04-14 08:17:18 +00:00
Martin Willi cadb5d16e5 fixed jumping IKE_SA unique ids 2008-04-14 07:55:23 +00:00
Martin Willi 45819d7d49 fixed rightsourceip=%config scenarios 2008-04-14 07:18:16 +00:00
Andreas Steffen fa89d4457a use ip6tables in sql/rw-psk-ipv6 scenario 2008-04-14 06:10:10 +00:00
Andreas Steffen acda610cbb fixed suppression of cert requests in eap-sim and eap-aka scenarios 2008-04-14 04:33:17 +00:00
Andreas Steffen ff41ca0dc4 host_srcip was not properly initialized in starterwhack.c 2008-04-13 21:42:44 +00:00
Andreas Steffen 743d9c7b20 added sql/rw-psk-ipv6 scenario 2008-04-13 19:50:15 +00:00
Andreas Steffen 09a01b5e51 added sql/rw-psk-rsa-split scenario 2008-04-13 19:49:20 +00:00
Andreas Steffen b1bdfa4890 fixed disabling the sending of cert requests 2008-04-13 17:31:07 +00:00
Martin Willi 96926b006d using dpd actions to enforce connection state 
dpd actions a per child-, not peer ike-sa
 2008-04-11 08:14:48 +00:00
Tobias Brunner 4a6474c2c3 enabling acquire for mediated connections 2008-04-10 12:51:04 +00:00
Tobias Brunner 78abba428f enabling reauthentication on mediation connections 2008-04-10 08:42:27 +00:00
Tobias Brunner 4a03518112 fixing a problem if the mediation server initiates the rekeying 2008-04-10 07:24:30 +00:00
Tobias Brunner 22452f70fc mediation connections should now properly rekey 2008-04-09 18:12:22 +00:00
Martin Willi ad81e51afc implemented a simple attribute provider for stroke 2008-04-09 12:56:20 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Tobias Brunner 4a96521965 signature in connectivity checks is now built with the message id in network byte order 2008-04-08 13:45:30 +00:00
Martin Willi 5df92bba51 changed force_encap to forceencaps 2008-04-08 12:53:36 +00:00
Tobias Brunner 1d295d1ffa printing the checklist, two bugfixes 2008-04-08 12:31:27 +00:00
Tobias Brunner 6f186d7e2e connect manager: restart the sender if it is not running anymore 2008-04-08 09:21:27 +00:00
Tobias Brunner 03e5336340 better logging for chunks in connect manager 2008-04-08 08:41:23 +00:00
Tobias Brunner 028a345c63 refactored callback data in connect manager 2008-04-08 08:33:15 +00:00
Martin Willi f6e7c0f785 removed stale ocsp header 2008-04-08 06:27:04 +00:00
Tobias Brunner 6970925422 fast finishing connectivity checks on the initiators side 2008-04-07 15:45:37 +00:00
Tobias Brunner dd563e60df corrected the logging for retransmissions of connectivity checks 2008-04-07 14:45:39 +00:00
Tobias Brunner b03c1d415c changed how retransmissions of connectivity checks are sent 2008-04-07 11:26:15 +00:00
Martin Willi 852abcd3a3 fixed doxygen groups to avoid recursion 2008-04-07 10:37:14 +00:00