Martin Willi
d43775ae58
Accept ARP requests with an ethernet trailer, but trim it
2010-06-03 08:39:33 +02:00
Martin Willi
d2c358742a
Added a EAP-SIM/AKA backend reading triplets/quintuplets from a SQL database
2010-06-02 15:59:44 +02:00
Martin Willi
2f57e6da0e
Disable close action for a redundant CHILD_SA resulting from a rekey collision
...
If a rekey collision is detected, the winning peer of the nonce compare
will delete the redundant CHILD_SA. The other peer should not enforce the
close action on this CHILD, as it would reestablish the redundat CHILD_SA.
Thanks to Thomas Egerer from secunet for pointing this out and the initial
patchset.
2010-06-02 11:48:52 +02:00
Martin Willi
fe02d99b96
Use wrapped getters for close/dpd action
2010-06-02 11:48:51 +02:00
Martin Willi
4c401ea216
Wrap getters for dpd/close action into CHILD_SA, allows us to override them
2010-06-02 11:48:44 +02:00
Tobias Brunner
d070e0a6d1
Do not install trap policy if remote host is %any.
2010-05-28 15:43:12 +02:00
Martin Willi
2e08be79a3
Send empty SIM/AKA-NOTIFICATION response for non-success codes, too
2010-05-27 15:04:25 +02:00
Martin Willi
8029e5efd2
Added generic implementations for crl_is_newer/certificate_is_newer
2010-05-21 16:25:51 +02:00
Martin Willi
ea409980b9
Handle collisions between rekey and the following delete properly
2010-05-18 12:21:38 +02:00
Martin Willi
d235274486
Added simple conditional packet receive delay
2010-05-18 12:21:05 +02:00
Martin Willi
45def2147b
Added simple conditional packet send delay
2010-05-18 12:20:32 +02:00
Andreas Steffen
31b39e5f7c
encoding of MODE_TUNNEL changed
2010-05-15 18:36:14 +02:00
Andreas Steffen
9a0333fa62
moved resolve plugin from libcharon to libhydra
2010-05-04 23:53:08 +02:00
Tobias Brunner
6d7f4e0653
Moved syslog.h include.
2010-05-04 18:34:20 +02:00
Tobias Brunner
6b57f5edff
Compiler warning fixed.
2010-05-04 18:28:28 +02:00
Adrian-Ken Rueegsegger
17a02ff1b0
Add 'flush_line' option to filelog section.
...
The new boolean 'flush_line' option in the filelog section of
strongswan.conf specifies if log messages should be flushed to the given
file for each new line.
2010-05-04 14:47:56 +02:00
Reto Buerki
71a66a623e
Use reqid from connection config if present.
2010-05-04 14:38:34 +02:00
Reto Buerki
277fcf9f86
Add reqid field and getter function to child_cfg_t.
2010-05-04 14:38:34 +02:00
Tobias Brunner
257e27df07
Fixing out-of-tree build after adding dependency to config.status.
2010-04-29 13:29:53 +02:00
Martin Willi
b0e789035c
Users of PLUGINS depend on config.status, rebuilding them if plugin configuration is updated
2010-04-29 11:28:27 +02:00
Andreas Steffen
12821bd674
include dhcp-client-identifier in the DHCP request
2010-04-23 12:57:43 +02:00
Andreas Steffen
19d49af539
make DHCP debug messages consistent
2010-04-23 07:37:16 +02:00
Andreas Steffen
500a6d38ee
fixed typo
2010-04-23 00:02:13 +02:00
Martin Willi
1f6a707d10
Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no DH group
2010-04-21 08:41:46 +02:00
Martin Willi
4590260b2d
Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten
2010-04-19 14:41:20 +02:00
Martin Willi
f0212e8837
Accept DHCP replies on bootps port, as we act as a relay agent if server address configured
2010-04-19 11:18:58 +02:00
Tobias Brunner
6edbe1652b
Integrating libhydra into the Android build system.
2010-04-12 16:47:47 +02:00
Tobias Brunner
355c3a66b1
When logging to the database, the IDs of an IKE SA are initially NULL.
2010-04-12 13:51:10 +02:00
Martin Willi
140418453a
Updated HA plugin to new APIs
2010-04-07 13:55:16 +02:00
Martin Willi
647008c8a7
Updated location of traffic selector header
2010-04-07 13:55:16 +02:00
Martin Willi
29a46aacad
Moved ha plugin to libcharon
2010-04-07 13:55:16 +02:00
Martin Willi
34d240a6e3
manage synced SAs in IKE_SA Manager, tag them with IKE_PASSIVE state
2010-04-07 13:55:12 +02:00
Tobias Brunner
9ed6341d3f
Adding support for debug groups in libstrongswan's logger.
2010-04-06 12:47:40 +02:00
Tobias Brunner
3fdee23f18
Move debug groups from charon's bus.h to libstrongswan's debug.h.
2010-04-06 12:47:40 +02:00
Tobias Brunner
a5ec302547
Moved attr plugin from libcharon to libhydra.
2010-04-06 12:47:40 +02:00
Tobias Brunner
c9235353f8
Use a read-write lock in stroke_attribute to increase concurrency.
2010-04-06 12:47:39 +02:00
Tobias Brunner
8c9f5bad8b
Migrated stroke_attribute_t to METHOD/INIT macros.
2010-04-06 12:47:38 +02:00
Tobias Brunner
ac5fb545c5
Extracted in-memory IP address pool from stroke plugin to libhydra.
2010-04-06 12:47:38 +02:00
Martin Willi
84aa96e5f5
Invoke updown hook if IKE_SA delete is enforced in deleting state
2010-04-06 12:11:28 +02:00
Martin Willi
360ef1606f
Fixed handling of IKE_SAs without a virtual IP in farp plugin
2010-03-30 10:24:47 +02:00
Martin Willi
28df533393
Accept messages with a "sufficient" payload if other payloads (such as V) follow
2010-03-26 16:26:09 +01:00
Tobias Brunner
18c68f22c7
Revert "Use the same formatting as in the Makefiles of the other plugins. Makes refactorings easier."
...
This reverts commit e91b116a6289bf11d204
2010-03-26 10:47:09 +01:00
Tobias Brunner
e91b116a62
Use the same formatting as in the Makefiles of the other plugins. Makes refactorings easier.
2010-03-26 10:40:14 +01:00
Martin Willi
89bf11d204
Respect line with in Makefile.am's, other cosmetics
2010-03-25 14:54:56 +01:00
Martin Willi
e40a629d4c
Added libhydra include to farp plugin
2010-03-25 14:41:51 +01:00
Martin Willi
f8e99e012a
Implemented ARP sniffing and spoofing functionality
2010-03-25 14:39:32 +01:00
Martin Willi
dc70a5bb0b
Use message hook to catch virtual IP, as it is not yet set in ike_updown
2010-03-25 14:39:32 +01:00
Martin Willi
479a7b7d17
Added locking to farp listener
2010-03-25 14:39:32 +01:00
Martin Willi
660e16f5b2
Added a listener to the farp plugin that keeps track of active virtual IPs
2010-03-25 14:39:32 +01:00
Martin Willi
0d7b48a388
Added a farp plugin stop to spoof ARP requests
2010-03-25 14:39:32 +01:00
Martin Willi