 Martin Willi
|
b9e363f86f
|
added IKE_SA_INIT retransmission detection
fixed thread exhaustion when IKE_SA is blocked for a longer time
|
2007-03-29 14:20:10 +00:00 |
|
|
Martin Willi
|
891e69944f
|
implemented DoS protection with cookies and IP filter
|
2007-03-29 11:26:55 +00:00 |
|
|
Martin Willi
|
361e6df8c1
|
fixed task manager message id bug for cookies
|
2007-03-29 11:08:30 +00:00 |
|
|
Martin Willi
|
a6bdc731b1
|
added retry limit for IKE_SA_INIT (give up after 5 cookie failures)
|
2007-03-29 11:07:49 +00:00 |
|
|
Martin Willi
|
25eaae17db
|
added chunk_from_thing() macro
|
2007-03-29 11:06:59 +00:00 |
|
|
Andreas Steffen
|
6819e4d754
|
implemented ipsec purgeocsp
|
2007-03-28 20:43:38 +00:00 |
|
|
Andreas Steffen
|
6af6c0bfc3
|
cosmetics
|
2007-03-28 20:43:25 +00:00 |
|
|
Andreas Steffen
|
2bfadf7f3b
|
implemented ipsec purgeocsp
|
2007-03-28 20:43:11 +00:00 |
|
|
Martin Willi
|
4deb89485c
|
removed send_queue, handled internally in sender_t know
do header parsing in receiver, ready for cookie integration
|
2007-03-28 13:34:02 +00:00 |
|
|
Martin Willi
|
077a6fff95
|
implemented a simple IP blocking filter in receiver thread
|
2007-03-28 09:23:03 +00:00 |
|
|
Martin Willi
|
9179ac9667
|
merged changes from eap-aka trunk
|
2007-03-28 07:32:54 +00:00 |
|
|
Andreas Steffen
|
9d9c72e317
|
is_trusted() adds cert_status to cert_to_be_trusted
|
2007-03-28 05:38:42 +00:00 |
|
|
Andreas Steffen
|
203e15fe03
|
fixed delta time format: 2 seconds, 1 second, 0 seconds
|
2007-03-28 05:37:20 +00:00 |
|
|
Andreas Steffen
|
7a89380eca
|
replaced expired since %V by expired %V ago
|
2007-03-28 05:36:27 +00:00 |
|
|
Martin Willi
|
c00840478e
|
fixed state and logging of IKE_SA when using EAP authentication
|
2007-03-27 16:11:29 +00:00 |
|
|
Martin Willi
|
e23a59f635
|
fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progress
|
2007-03-27 13:32:12 +00:00 |
|
|
Martin Willi
|
b34f86f545
|
giving up EAP-SIM authentication after 3 failed challenges
|
2007-03-27 06:24:17 +00:00 |
|
|
Andreas Steffen
|
1bf8530507
|
implemented ipsec listocsp function
|
2007-03-27 04:40:25 +00:00 |
|
|
Andreas Steffen
|
469e9686ae
|
cmp_chunk returns int argument
|
2007-03-27 04:39:44 +00:00 |
|
|
Andreas Steffen
|
0953f2a65f
|
registered PRINT_CERTINFO function with symbol Y
|
2007-03-27 04:38:22 +00:00 |
|
|
Andreas Steffen
|
ef49c3486a
|
added chunk_compare() which compares orders chunks
|
2007-03-27 04:37:15 +00:00 |
|
|
Andreas Steffen
|
0f7995b11e
|
added CERT_ROOF
|
2007-03-23 22:01:59 +00:00 |
|
|
Andreas Steffen
|
387c29c62d
|
added CERT_ROOF
|
2007-03-23 22:01:40 +00:00 |
|
|
Andreas Steffen
|
d7eee6e1ca
|
added certificate encoding OCSP content
|
2007-03-23 21:53:12 +00:00 |
|
|
Andreas Steffen
|
e92b363955
|
strongSwan version bumps and Windows Vista VIDs
|
2007-03-23 17:19:57 +00:00 |
|
|
Martin Willi
|
92275b0981
|
added CHILD_SA compare check for rekeying collisions
|
2007-03-22 07:34:42 +00:00 |
|
|
Martin Willi
|
ddd1b31595
|
adjusted rekey-retry delay and jitter
|
2007-03-21 16:12:16 +00:00 |
|
|
Martin Willi
|
4315f5c88b
|
fixed some rekey collision issues
added retry with jitter when rekeying fails
|
2007-03-21 16:11:14 +00:00 |
|
|
Martin Willi
|
6de7cf4e2f
|
fixed SPI byte order
|
2007-03-21 16:09:27 +00:00 |
|
|
Martin Willi
|
eef0859043
|
fixed child rekey collision
implemented ike rekey collision
|
2007-03-21 14:42:49 +00:00 |
|
|
Martin Willi
|
195ada0b4b
|
handling of CHILD_SA rekeying collisions
|
2007-03-21 09:25:36 +00:00 |
|
|
Martin Willi
|
403f8fd300
|
fixed inproper delete of CHILD_SA
|
2007-03-21 07:01:14 +00:00 |
|
|
Martin Willi
|
128ca073d2
|
prevent from initiating to %any
|
2007-03-21 07:00:04 +00:00 |
|
|
Martin Willi
|
0f33e8264a
|
fixed some exchange collisions (except IKE/CHILD rekeying)
|
2007-03-20 16:13:21 +00:00 |
|
|
Martin Willi
|
e70d5576fa
|
fixed statusall rekey time jitter bug (again)
|
2007-03-20 14:56:41 +00:00 |
|
|
Martin Willi
|
39a268b867
|
fixed CHILD_SA rekeying time in statusall
|
2007-03-20 12:29:42 +00:00 |
|
|
Martin Willi
|
37c6ebb78b
|
fixed nat detection bug
|
2007-03-20 12:25:08 +00:00 |
|
|
Martin Willi
|
9b45443dc2
|
updated NEWS, TODO and man page
|
2007-03-20 08:59:03 +00:00 |
|
|
Martin Willi
|
fdb9b2bdde
|
respecting "keyingtries" parameter on IKE_SA setup
|
2007-03-20 08:16:16 +00:00 |
|
|
Martin Willi
|
1edf116cfd
|
cleanups
fixed reset()
|
2007-03-20 08:15:53 +00:00 |
|
|
Martin Willi
|
44cd2bf0fa
|
not installing a route when policy gets updated
|
2007-03-20 08:15:18 +00:00 |
|
|
Martin Willi
|
a1e5881c42
|
renamed keyingtries attribute
|
2007-03-20 08:14:18 +00:00 |
|
|
Martin Willi
|
755bdcc274
|
adjusted loglevels
|
2007-03-20 08:13:54 +00:00 |
|
|
Martin Willi
|
e59bd409ab
|
always update reqid on policy install, fixes dpdaction=hold issue
|
2007-03-19 10:00:56 +00:00 |
|
|
Martin Willi
|
ccf96c7e43
|
EAP-SIM cleanups
|
2007-03-19 09:59:17 +00:00 |
|
|
Martin Willi
|
e05a0b765a
|
fixed CHILD_SA rekeying/delete bug on 64bit machines
removed obsolete methods in delete_payload
|
2007-03-19 08:04:37 +00:00 |
|
|
Andreas Steffen
|
4a82b49126
|
Shortened distribution string
|
2007-03-16 11:48:29 +00:00 |
|
|
Andreas Steffen
|
59097f9db1
|
Shortened distribution string
|
2007-03-16 11:47:48 +00:00 |
|
|
Andreas Steffen
|
85877eabdf
|
shortened distribution string
|
2007-03-16 11:41:54 +00:00 |
|
|
Andreas Steffen
|
448d8789d5
|
fixed case of missing subjectKeyID
|
2007-03-14 21:06:57 +00:00 |
|