denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,388 Commits 1 Branch 0 Tags
b857118bd710706413e03dd4f5c78ea60bca8f25
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi b857118bd7 removed cfg-payload dns test code 2007-03-14 11:04:31 +00:00
Martin Willi b0f24449dd added EAP-SIM authentication 
client side only
  uses an external SIM reader library specified with SIM_READER_LIB
  untested
 2007-03-13 15:01:02 +00:00
Martin Willi d2940fd78c not detaching from bus when IKE_SA_INIT is retried 2007-03-13 14:55:53 +00:00
Martin Willi 7cec30ad8d added AES-192/256 proposals to IKE 2007-03-13 14:55:03 +00:00
Martin Willi 3bc0b1a88d added generic EAP_IDENTITY client implementation using peers IKEv2 ID 2007-03-13 14:54:24 +00:00
Martin Willi 96567fc8a2 fixed compilation warnings and errors when not using curl 2007-03-13 14:52:18 +00:00
Martin Willi f5fbad4a62 fixed memleaks when using EAP authentication 
fixed configuration payloads when using EAP
 2007-03-08 22:56:14 +00:00
Martin Willi 5744d3e777 fixed payload order (again) 2007-03-08 20:21:17 +00:00
Martin Willi 1216db7e8b including peers certificate when his certreq is empty 2007-03-08 20:19:24 +00:00
Martin Willi e5a7f1cd08 implemented cookies as initiator 
proper logging of notifies in IKE_SA setup
 2007-03-08 20:18:39 +00:00
Martin Willi bb32e76c3a disabling routing for IPv6, does not work correctly 2007-03-08 20:17:34 +00:00
Martin Willi 8b8dd69dee some cleanups 
not installing %any DNS servers
 2007-03-08 16:58:59 +00:00
Martin Willi 3b7fdcf6c6 fixed payload order in IKE_AUTH 2007-03-08 15:59:21 +00:00
Martin Willi 069f01cfef removed SHA2 kernel proposals from default, the kernel doesn't support them yet 2007-03-08 15:18:51 +00:00
Martin Willi f007a70055 allocation fixes, not complete 2007-03-08 14:41:30 +00:00
Martin Willi 2c7fe7f530 handling "No policy found" properly 2007-03-08 14:41:09 +00:00
Martin Willi 0cde6c412b added more debugging output for policy lookup 
returning a (dummy) policy even when TS does not match, so we can properly send a TS_UNACCEPTABLE
 2007-03-08 14:40:15 +00:00
Martin Willi 9b8b3e5f5c fixed CHILD_SA creation within existing IKE_SA 2007-03-08 12:28:10 +00:00
Martin Willi 49e8ac052d ported changes from EAP branch, renabling EAP framework 2007-03-08 00:27:43 +00:00
Martin Willi 3c6337793f added (not yet supported) sha2 algorithms to kernel 
only adding a route if using tunnel mode
 2007-03-08 00:17:57 +00:00
Martin Willi 9aa20fdae8 added SHA2 MAC and PRF to default proposal 2007-03-08 00:16:33 +00:00
Martin Willi ea235d388e added more debug output 2007-03-08 00:15:15 +00:00
Martin Willi 3243e90188 experimental SHA2 HMAC and PRF implementations 2007-03-08 00:14:17 +00:00
Martin Willi 2540992a06 prevent from initiating multiple exchanges the same time 2007-03-06 22:17:53 +00:00
Martin Willi 915c065d61 updated apidoc documentation 2007-03-06 22:17:21 +00:00
Martin Willi c676f2e2a6 fixed notify handling in IKE_AUTH 
moved nonce payload before TS in CHILD_SA setup
 2007-03-06 20:58:39 +00:00
Martin Willi f2d4ec5639 moved REKEY_SA notify to the beginning of the message 2007-03-06 20:56:58 +00:00
Martin Willi 9de7540eee fixed traffic selector redundancy removal code (not completely tested) 2007-03-06 20:55:19 +00:00
Martin Willi ddae0f9673 sending an SPI of 0 as responder when IKE_SA_INIT fails 2007-03-06 13:06:47 +00:00
Martin Willi 6e1be42744 some cleanups 
not assigning %any virtual IPs to peer anymore
 2007-03-05 22:07:36 +00:00
Martin Willi 02b3101b67 fixed double free bug 2007-03-05 22:02:14 +00:00
Martin Willi 5bf1be3c9f fixed ID selection bug when peer doesn't include IDr payload 
allowing vendor ID in any messag
 2007-03-05 15:22:50 +00:00
Martin Willi 373b8a607f fixed netlink socket receiver code 
implemented interface enumeration code with netlink: no getifaddrs reqired anymore
 2007-03-03 14:56:24 +00:00
Martin Willi 285bbed595 refactored kernel interface, works reliable again 2007-03-03 13:04:07 +00:00
Martin Willi 1d51abb71b implemented get_iface() using RTM_GETADDR 
added support for multi-header netlink messages
really ugly now, need a lot of refactoring
 2007-03-02 17:08:38 +00:00
Martin Willi ebc59e3bb8 added debuggin for interface lookup 2007-03-01 12:53:20 +00:00
Martin Willi 3c940a2e4b fixed address lookup when !using getifaddrs() 2007-03-01 12:35:21 +00:00
Martin Willi 8f03147376 added firewalling support when using virtual IPs 2007-03-01 12:31:58 +00:00
Martin Willi 0c8aba6771 added support for 0.0.0.0/0 traffic selectors 
fixed routing to make correct 0.0.0.0/0 routes
 2007-03-01 11:42:08 +00:00
Martin Willi 9362e063b9 fixed reauthentication when connections other is %any 2007-02-28 14:17:31 +00:00
Martin Willi c60c7694d2 merged tasking branch into trunk 2007-02-28 14:04:36 +00:00
Martin Willi a7a5e834e3 fixed big endian bug in md5 hasher 2007-02-28 07:20:16 +00:00
Martin Willi a02ae4ccd5 using "left" as my host per default, swapping to "right" when needed 2007-02-15 12:13:18 +00:00
Martin Willi 2c6584c0d2 respecting source address when sending packets 2007-02-15 11:35:10 +00:00
Martin Willi cda642a152 removed eap aka module due nda 2007-02-13 15:19:30 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk 
includes a lot of other modifications
 2007-02-12 15:56:47 +00:00
Martin Willi 7006a51efc removed my time_t printf handler patch, applied the one of andreas (64bit save) 2007-02-08 15:22:21 +00:00
Martin Willi 61c0e0f220 fixed printf() hooks for time 2007-02-08 14:31:59 +00:00
Martin Willi 7995489a6d added support for NULL encryption in ESP 2007-02-08 13:54:42 +00:00
Martin Willi eb9a3fd6f0 be more liberal in accepting notifies with a protocol id 2007-02-08 13:53:41 +00:00
Martin Willi 9425da1816 include NO_EXT_SEQUENCE_NUMBER in default proposal 2007-02-08 13:31:31 +00:00
Martin Willi 61dd20f9e3 added address listing without getifaddrs for uclibc (only IPv4 yet) 2007-02-02 09:58:59 +00:00
Martin Willi 1908670f99 added threads to support multiple simultaneous stroke requests 2007-02-02 07:30:19 +00:00
Martin Willi d3032a9a82 renamed all static clone() functions to avoid naming conflicts with uclibc 2007-02-01 15:24:10 +00:00
Martin Willi 42dcd01ffe sending proper signal to the bus when detecting a dead peer 2007-02-01 15:23:31 +00:00
Martin Willi 1f0b770b0a updated changelog for 4.0.6 2007-01-08 15:42:17 +00:00
Martin Willi a622c99240 fixed crash when CA for certrequest not found 2007-01-08 13:40:36 +00:00
Martin Willi e3f83e738d fixed build when !using smartcard 2007-01-08 13:39:29 +00:00
Martin Willi 6a4be80d37 removed unused debugging code 2007-01-08 08:03:40 +00:00
Martin Willi 5903179b0f updated NEWS for 4.0.6 2007-01-08 07:36:53 +00:00
Martin Willi cf86671048 readded tranport mode test using new status output 2007-01-08 07:36:20 +00:00
Martin Willi 032c31c4ae removed dublicated host2host-transport test 2007-01-08 07:35:26 +00:00
Martin Willi 2dc9d7551b fixed reauthentication when using %any hosts 2007-01-08 07:32:39 +00:00
Martin Willi 21f42524e0 support for transport in create_child_sa 
include TRANSPORT/TUNNEL information in statusall
 2007-01-08 06:55:50 +00:00
Martin Willi af87afed47 added config option for BEET mode 2007-01-03 13:16:21 +00:00
Martin Willi f73d4c9eb0 fixed reuathentication when connections other host is %any 2007-01-03 09:26:44 +00:00
Martin Willi 60d79e496b fixed host conversion length check 2007-01-03 09:25:57 +00:00
Martin Willi 7652be891c added support for transport mode and (experimental!) BEET mode 
support for the type=transport/tunnel parameter in charon
 2006-12-21 14:35:17 +00:00
Martin Willi 38ab8048f5 fixed charset & cleanups 2006-12-20 07:55:57 +00:00
Martin Willi cd6b61f549 renamed to appear in doxygen build 2006-12-19 10:57:49 +00:00
Martin Willi 2b4405a3e7 added a roadmap of the strongSwan project (TODO) 
added some NEWS
 2006-12-19 10:46:58 +00:00
Martin Willi 532f2347dc first try to update ipsec.conf manual 2006-12-19 08:32:25 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Martin Willi 4986554f1a fixed more uClibc issues 
should compile against a uClibc > 0.9.28 (untested)
 2006-12-15 14:22:56 +00:00
Martin Willi 4dfb3cb0f5 fixed stddef.h include 2006-12-14 15:58:32 +00:00
Martin Willi 38fb426e9b fixed encoding rules string 
updated todo
 2006-12-14 13:16:19 +00:00
Martin Willi 313d21c251 fixed some byte-order issues 2006-12-12 08:41:04 +00:00
Martin Willi 5347a84f81 fixed HAVE_BACKTRACE checks 
starter Makefile now uses proper $(COMPILE) to build pluto objects
 2006-12-11 09:29:34 +00:00
Martin Willi e696757c47 made backtrace() calls optional to support uClibc 2006-12-06 13:59:13 +00:00
Martin Willi df85984570 added simple script to port trunk changes into branches 2006-11-03 14:03:51 +00:00
Martin Willi a26e06c75a start kdevelop with project file from actual branch 2006-11-03 11:01:08 +00:00
Martin Willi d4f9110232 updated changelog 2006-11-03 07:14:34 +00:00
Martin Willi 8b4f44522b fixed typos 2006-11-03 06:50:05 +00:00
Martin Willi 03bf883d95 fixed NEWS (runtime debug level options) 2006-11-02 14:38:01 +00:00
Martin Willi fa0fef93b2 fixed credits 2006-11-02 14:28:05 +00:00
Martin Willi 3b449ce854 fixed very old bug in linked_list's remove_first and remove_last 2006-11-02 14:25:58 +00:00
Martin Willi 116b53b6bd proper "ipsec up" signal handling when initiating to %any 2006-11-02 10:28:10 +00:00
Martin Willi 4622f01d87 removed iterator hook for replace 2006-11-02 10:27:05 +00:00
Martin Willi e691a5c493 some fixes for doxygen 2006-10-31 15:24:08 +00:00
Martin Willi db7ef62494 better split up of library files "types.h" & "definitions.h" 
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
 2006-10-31 12:27:59 +00:00
Martin Willi de8b8a8c44 added nodebug configure script without any debug messages and without -g 2006-10-31 12:23:03 +00:00
Martin Willi 382b481795 moved typedefs to beginning of files to solve some include problems 
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
 2006-10-30 14:07:05 +00:00
Martin Willi 5923be21b4 fixed SIGSEGV when setup of an additional CHILD_SA fails 2006-10-30 09:53:54 +00:00
Martin Willi 7b898a0d8a added IKEv2 clarifications RFC 2006-10-30 09:47:37 +00:00
Martin Willi ebdddb74d4 some improvements in signaling code 2006-10-27 10:46:56 +00:00
Martin Willi ec92107923 include only source NATD payloads really needed 2006-10-27 10:46:35 +00:00
Martin Willi ea752560c8 updated for NAT team 2006-10-26 11:37:37 +00:00
Martin Willi b83806d83d improved signal handling and emitting 2006-10-26 09:46:56 +00:00
Martin Willi 191a26a6a7 removed deprecated iterator methods (has_next & current) 
added iterator hook to manipulate iterator the clean way
 2006-10-24 14:20:45 +00:00
Martin Willi 55bbff11ec linked list cleanups 
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
 2006-10-24 08:46:17 +00:00