denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,081 Commits 1 Branch 0 Tags
b8520ad50d53b8f81f9c358d75717b6e59a06cd2
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen b8520ad50d adapted evaltest of ikev1/ip-pool-db-push scenario to resolve plugin 2010-05-14 17:26:59 +02:00
Andreas Steffen 9e229e284f adapted evaltest of ikev1/ip-pool-db scenario to resolve plugin 2010-05-14 17:20:28 +02:00
Andreas Steffen 03b5e4d8d7 refactoring of Mode Config functionality allows transport and handling of any attribute 2010-05-14 17:07:03 +02:00
Andreas Steffen a273546854 adapted evaltest of ikev1/mode-config-push scenario to resolve plugin 2010-05-14 15:12:03 +02:00
Andreas Steffen 3cbf6db653 adapted evaltest to resolve plugin 2010-05-14 11:07:26 +02:00
Andreas Steffen fb7de3a8bf implemented support of resolve plugin 2010-05-08 16:09:02 +02:00
Andreas Steffen c2651ff13d include demux.h only once 2010-05-06 21:55:19 +02:00
Andreas Steffen c158df0f23 already defined in attributes/attributes.h 2010-05-06 21:44:15 +02:00
Andreas Steffen 4eee16354b include state.h only once 2010-05-06 21:35:00 +02:00
Andreas Steffen 3baf4922e2 removed stray file 2010-05-06 10:35:25 +02:00
Andreas Steffen 9a0333fa62 moved resolve plugin from libcharon to libhydra 2010-05-04 23:53:08 +02:00
Andreas Steffen 0465d2c0b7 fixed typo 2010-05-04 16:17:32 +02:00
Andreas Steffen 93be4ac44d delete release files 2010-05-03 09:31:22 +02:00
Andreas Steffen a784c540e5 version bump to 4.4.1 2010-05-03 09:09:43 +02:00
Andreas Steffen 0ffedbfb46 added getprotobyname to whitelist 2010-05-02 21:13:10 +02:00
Andreas Steffen fc753c1d3e remove subnet from sourceip 2010-05-02 17:58:36 +02:00
Andreas Steffen 61e48488d9 final fix for cloning and deleting sourceip strings 2010-05-02 15:55:46 +02:00
Andreas Steffen a48484322e fixed end->sourceip memory leak in ipsec starter 2010-05-02 14:56:35 +02:00
Andreas Steffen 4c9b5e742a updated options in testing.conf 2010-05-02 11:47:24 +02:00
Andreas Steffen 34f92dcfba fixed flex parser memory leaks in ipsec starter 2010-05-02 11:40:46 +02:00
Andreas Steffen 2724ae521e free config before exiting since library_deinit() calls leak detective 2010-05-02 11:00:21 +02:00
Andreas Steffen dd8cb2b089 added AES-GMAC support to NEWS 2010-04-29 07:41:30 +02:00
Andreas Steffen 916fd45709 do not destroy whack_attr if it hasn't been initialized 2010-04-29 07:28:51 +02:00
Andreas Steffen e20a494013 added debug output argument 2010-04-28 12:28:25 +02:00
Andreas Steffen cb9c497a86 added ikev1/alg-esp-aes-gmac scenario 2010-04-27 13:48:37 +02:00
Andreas Steffen af3be116cb added AES_GMAC output string 2010-04-27 13:47:11 +02:00
Andreas Steffen 6f7dac0d72 added ikev2/alg-esp-aes-gmac scenario 2010-04-27 13:13:10 +02:00
Andreas Steffen 6207b63d76 added ikev1/alg-modp-subgroup scenario 2010-04-23 15:23:54 +02:00
Andreas Steffen 9239fc4a15 added ikev2/alg-modp-subgroup scenario 2010-04-23 15:03:16 +02:00
Andreas Steffen 12821bd674 include dhcp-client-identifier in the DHCP request 2010-04-23 12:57:43 +02:00
Andreas Steffen 2dbff1bf53 added ikev2/dhcp-static-client-id scenario 2010-04-23 12:56:59 +02:00
Andreas Steffen 55fe05d489 fixed optional dnsmasq.conf in the ikev2/dhcp-static-mac scenario 2010-04-23 12:38:30 +02:00
Andreas Steffen 837e9fda57 added ikev2/dhcp-static-mac scenario 2010-04-23 12:33:11 +02:00
Andreas Steffen bcd20cc987 added ikev2/dhcp-dynamic scenario 2010-04-23 11:52:37 +02:00
Andreas Steffen 19d49af539 make DHCP debug messages consistent 2010-04-23 07:37:16 +02:00
Andreas Steffen 500a6d38ee fixed typo 2010-04-23 00:02:13 +02:00
Andreas Steffen 054fd74658 fixed silly bug 2010-04-12 11:25:46 +02:00
Andreas Steffen 9391b485f7 updated DER versions of research and sales CAs 2010-04-11 22:00:01 +02:00
Andreas Steffen d3d2b7390f implemented inheritance of virtual IP assigned by Mode Config on the responder side 2010-04-11 19:19:20 +02:00
Andreas Steffen 6e939d2f94 added ikev1/ip-two-pools-mixed scenario 2010-04-11 17:05:42 +02:00
Andreas Steffen 9235edc276 added support of RAM-based pools to NEWS 2010-04-11 16:29:39 +02:00
Andreas Steffen 2544e08ec7 IKEv1 uses Mode Config payload 2010-04-11 16:09:09 +02:00
Andreas Steffen b87edeaade added ikev1/ip-two-pools scenario 2010-04-11 16:05:54 +02:00
Andreas Steffen a4b2332fd2 remove virtual interfaces after scenario 2010-04-11 16:05:04 +02:00
Andreas Steffen b516382cc9 added ikev1/ip-pool scenario 2010-04-11 14:40:04 +02:00
Andreas Steffen ec96692c38 show in-memory pools in ipsec statusall 2010-04-11 11:46:47 +02:00
Andreas Steffen b1701d097c added missing curly brackets 2010-04-11 00:49:04 +02:00
Andreas Steffen b3127b42f9 support in-memory pools in swapped connection definitions 2010-04-11 00:27:04 +02:00
Andreas Steffen b74cd9573d pluto now requires attr plugin for dns and nbns server loading from strongswan.conf 2010-04-09 21:03:44 +02:00
Andreas Steffen 6c1dc87551 recovered private keys of no CDP certificates 2010-04-07 19:38:10 +02:00
Andreas Steffen 589d175a05 recovered lost Duck CA certificates 2010-04-07 19:38:10 +02:00
Andreas Steffen e6e8eb09dd fixed ikev1/protoport-route timing 2010-04-07 13:24:58 +02:00
Andreas Steffen c3379af391 removed whitespace 2010-04-07 13:07:11 +02:00
Andreas Steffen ef4aa67bf7 generated new research and sales CA certs for carol and dave, respectively 2010-04-07 13:05:17 +02:00
Andreas Steffen 586c137016 prolonged Research and Sales CA certs 2010-04-06 12:05:39 +02:00
Andreas Steffen 7d00ebfb54 wait one second before running evaluations 2010-04-06 10:55:59 +02:00
Andreas Steffen efd16e405a increase UML root file system to 700 MB 2010-04-05 20:23:20 +02:00
Andreas Steffen d6457833ec added support of PEM output by ipsec pki --gen|pub commands to NEWS 2010-04-05 14:08:06 +02:00
Andreas Steffen 5ee07585aa added ikev2/nat-virtual-ip scenario 2010-04-05 14:03:38 +02:00
Andreas Steffen a287bdd46c farp scenario requires logging of arp packets 2010-04-05 14:01:29 +02:00
Andreas Steffen eb11d1c58c added ikev2/farp scenario 2010-04-05 12:50:32 +02:00
Andreas Steffen b49cbd68a6 added dave2 and carol2 entries to /etc/hosts 2010-04-05 12:50:07 +02:00
Andreas Steffen 29cf15a919 PEM encoding for OpenSSL RSA and EC public and private keys 2010-04-04 23:59:24 +02:00
Andreas Steffen cea2857263 PEM encoding for GMP RSA public and private keys 2010-04-04 19:11:18 +02:00
Andreas Steffen e3943f5559 fixed short option name 2010-04-04 10:30:08 +02:00
Andreas Steffen b2be771ad8 fixed typo 2010-04-04 10:29:36 +02:00
Andreas Steffen efcd3c7a63 fixed doxygen group 2010-04-03 21:55:30 +02:00
Andreas Steffen 0dee20d958 change #define to PEM_BUILDER_H_ 2010-04-03 21:43:27 +02:00
Andreas Steffen 061c95b449 fixed pluto crash caused by expired leftcert and rightca=%same 2010-03-29 17:44:37 +02:00
Andreas Steffen 3ad78f0239 compile dhcp and farp plugins in UMLs 2010-03-28 22:40:20 +02:00
Andreas Steffen 5d91d4c6d7 moved attr-sql plugin to libhydra in pool scenarios 2010-03-28 22:33:30 +02:00
Andreas Steffen a3316c2b9f setting the two most significant bits assures an RSA modulus of maximum bit size 2010-03-15 15:13:26 +01:00
Andreas Steffen c0df187cb4 we don't accept a serial number with leading zeroes 2010-03-14 19:41:40 +01:00
Andreas Steffen 4cedab5ad7 deleted old strongSwan VIDs 2010-03-12 03:29:18 +01:00
Andreas Steffen 0ef84e5e4d enable build of socket-default plugin 2010-03-11 21:53:18 +01:00
Andreas Steffen 44f1024705 mixed IKEv1/IKEv2 scenarios require socket-raw 2010-03-11 21:32:36 +01:00
Andreas Steffen d12ad4748a fix 64bit issue with time_t from database 2010-03-10 10:46:49 +01:00
Andreas Steffen 31bd75ec64 removed unwanted commits 2010-03-07 21:11:57 +01:00
Andreas Steffen ceeb9bac8b critical keyUsage extension must be parsed 2010-03-07 20:51:34 +01:00
Andreas Steffen 469d448333 recognize strongSwan VID 2010-03-07 17:52:04 +01:00
Andreas Steffen 1ec8f22de2 set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true 2010-03-07 17:27:53 +01:00
Andreas Steffen 3cfbc91a98 renewed Authorization Authority certificate 2010-02-27 22:16:36 +01:00
Andreas Steffen b65d7f8a15 version bump to 4.4.0 2010-02-15 20:58:41 +01:00
Andreas Steffen 2d07095e01 hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6 2010-02-06 12:34:41 +01:00
Andreas Steffen dd0b1b9a16 generated hash-and-url files for rfc3779 certs 2010-02-06 11:41:44 +01:00
Andreas Steffen 76fe5500c4 hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6 2010-02-06 11:39:33 +01:00
Andreas Steffen 5094bfd85f hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6 2010-02-05 20:39:13 +01:00
Andreas Steffen 61d7ff0c19 IPv6 fragment and http access are not needed in PSK scenario 2010-02-05 20:27:03 +01:00
Andreas Steffen 699c47a9be hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6 2010-02-05 20:16:26 +01:00
Andreas Steffen 1f2da75069 IPv6 frag netfilter rule not needed anymore 2010-02-05 20:04:01 +01:00
Andreas Steffen 563a177830 hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6 2010-02-05 19:58:42 +01:00
Andreas Steffen b917f49684 initialize variables to avoid compiler warning 2010-02-05 12:34:37 +01:00
Andreas Steffen 6c9c0baee9 init_fetch() changed to fetch_initialize() 2010-02-05 06:17:02 +01:00
Andreas Steffen 52719d719c use static IPsec policy netfilter rules in MOBIKE scenarios 2010-02-04 10:05:44 +01:00
Andreas Steffen 8501181925 remove any charon.pid files remaining at the end of each scenario 2010-02-04 08:53:52 +01:00
Andreas Steffen 00eb9267ad IPSEC_ROUTING_TABLE is now called routing_table 2010-02-03 19:32:50 +01:00
Andreas Steffen ec37b04732 differentiate between executed and displayed iptables commands 2010-02-03 19:21:55 +01:00
Andreas Steffen 0d8bdf24ff added ikev2/inactivity-timeout scenario 2010-02-03 10:28:30 +01:00
Andreas Steffen 889ff9389b renamed init_fetch() to fetch_initialize() 2010-02-02 19:44:34 +01:00
Andreas Steffen b7fd2ea76c corrected captions 2010-02-01 12:44:44 +01:00