denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,971 Commits 1 Branch 0 Tags
be682af3e8af1f77f1750696609d03c43e7f5c88
Commit Graph
507 Commits
Author SHA1 Message Date
Andreas Steffen be682af3e8 log name of IKE_SA in state changes 2007-09-15 15:54:51 +00:00
Andreas Steffen 3f4076b7c8 log name of established IKE_SA 2007-09-15 15:54:30 +00:00
Andreas Steffen 21b3099ac4 log name of established CHILD_SA 2007-09-15 15:53:10 +00:00
Andreas Steffen cf9cec125a adapted format of IKE SPIs to strongSwan Manager's style 2007-09-15 15:35:02 +00:00
Martin Willi c01f7bf989 added subnets of CHILD_SAs to xml interface 
a first design of Managers IKE_SA list page
 2007-09-14 14:07:30 +00:00
Andreas Steffen 15a9d460c0 peer_cfg now knows about group memberships 2007-09-13 15:33:17 +00:00
Tobias Brunner eff806eb5a added missing 'break' in checkout_by_peer 2007-09-13 13:00:23 +00:00
Martin Willi 6baca3b2f1 fixed 64bit issue with file descriptor 2007-09-13 08:19:15 +00:00
Martin Willi b8c7453a82 manager can query and list IKE_SA status (no layout yet) 2007-09-13 07:45:04 +00:00
Martin Willi dd52993068 only switch to port 4500 if we are on 500: fixed reauthentication in NAT 
scenarios
 2007-09-12 11:11:10 +00:00
Andreas Steffen 794d2526b4 removed unused chunk variable 2007-09-12 07:54:56 +00:00
Martin Willi a8827c9b63 moving virtual IP when interface changes due mobike 2007-09-12 07:36:45 +00:00
Martin Willi 12fa4387c6 fixed NAT detection with mobike 2007-09-12 07:14:05 +00:00
Martin Willi 39cc6d1ad7 fixed shutdown order to prevent crash when kernel interface schedules events 2007-09-12 07:12:25 +00:00
Andreas Steffen 1cb2cb622e overwrite shared_key with random bytes before freeing it 2007-09-11 21:06:46 +00:00
Andreas Steffen 2f9f5149c4 check hash algorithms used in signatures 2007-09-11 20:10:38 +00:00
Andreas Steffen c1ff717690 removed rsa_private_key clone() function 2007-09-11 16:26:08 +00:00
Andreas Steffen f0c156fbc9 replaced get_rsa_private_key() by rsa_signature() in order restrict the distribution of private key material 2007-09-11 10:18:25 +00:00
Andreas Steffen 7bac086733 overwrite storage used for shared secrets with pseudo-random bytes before releasing it 2007-09-10 19:12:01 +00:00
Martin Willi 5474dc6500 implemented routeability checks for mobike (experimental) 2007-09-03 12:37:25 +00:00
Andreas Steffen f5da63e937 correct debug 2007-09-02 15:59:59 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option 
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
 2007-08-29 12:11:25 +00:00
Andreas Steffen 0bc5a23023 renamed integrity check to integrity test 2007-08-29 10:36:08 +00:00
Andreas Steffen ab13376877 fips_verify_hmac_signature() now returns a boolean status 2007-08-29 09:43:02 +00:00
Andreas Steffen 2fb15ac606 changed interface of fips_verify_hmac_signature 2007-08-29 05:43:45 +00:00
Andreas Steffen 55434a1ba5 started implementation of libstrongswan code integrity check 2007-08-29 00:37:10 +00:00
Martin Willi 98f97433af rerouting CHILD_SA if its IKE_SA gets deleted 2007-08-27 09:10:12 +00:00
Andreas Steffen 929b9e367a append new attribute certs at the end 2007-08-14 13:04:36 +00:00
Andreas Steffen 06faefe43d adding attribute certficates to a chained list 2007-08-14 12:27:02 +00:00
Andreas Steffen 8f687a7591 has_rsa_private_key() must also be protected by keys_mutex 2007-08-10 12:10:36 +00:00
Andreas Steffen c045d90a8e corrected debug output 2007-08-10 11:23:45 +00:00
Andreas Steffen 8ff58b051c ipsec stroke rereadaacerts|rereadacerts supported 2007-08-10 09:17:34 +00:00
Andreas Steffen 84db83336b support of ipsec rereadsecrets for stroke 2007-08-10 07:16:32 +00:00
Martin Willi 939e93787e made linked lists invoke() method consistent to clone_*() and destroy_*() methods 2007-08-09 12:43:11 +00:00
Andreas Steffen 037575682a bug fix in linked_list deletion - instead of acerts destroyed certs twice 2007-08-08 06:02:59 +00:00
Andreas Steffen f51d505e5e implemented listing of attribute certificates 2007-08-07 20:32:11 +00:00
Martin Willi 3b574567ea fixed segfault when sourceip in stroke message is NULL 2007-08-06 12:35:28 +00:00
Martin Willi 9ec19f13f7 allow starter to initiate connections simultaneously (on auto=start) 2007-08-06 07:41:19 +00:00
Tobias Brunner c019260e01 backports from the p2p-nat-t branch: 
* double assignment of function ''destroy'' in some jobs
 * typos
 2007-07-19 14:12:19 +00:00
Martin Willi ac1557af51 updated XML interface to new schema 2007-07-19 10:57:33 +00:00
Martin Willi c87395908a not touching IKE_SA_INIT from ike_mobike_t anymore 2007-07-19 08:08:22 +00:00
Martin Willi 0308865282 fixed compiler warning 2007-07-16 07:10:14 +00:00
Martin Willi cc68e173fe fixed payload order (Nonce, KE) for IKE_SA_INIT 2007-07-16 07:01:49 +00:00
Andreas Steffen db61efdbbb include default route also in src address evaluation 2007-07-13 09:00:39 +00:00
Andreas Steffen 018219ae3a include default route with missing dst field into route evaluation 2007-07-13 06:13:14 +00:00
Martin Willi e5e868e430 doing route lookup in userspace to ignore routes installed by us 2007-07-11 12:37:24 +00:00
Martin Willi 9ba1d73890 using own routing table for installed routes (table 100, prio 100) 2007-07-11 06:55:11 +00:00
Martin Willi 19ff7d2207 added first draft of SMP relax-ng schema 2007-07-06 13:44:43 +00:00
Martin Willi fa1bd44f23 ignoring unkown crl/ocsp uris 2007-07-04 12:00:33 +00:00
Martin Willi 1b8da84913 using correct nexthop for inserted route 2007-07-04 09:10:13 +00:00