denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,382 Commits 1 Branch 0 Tags
c3f803c4c62c054fdbebf99e79c8d1fb877dc43f
Commit Graph
98 Commits
Author SHA1 Message Date
Tobias Brunner c3f803c4c6 fixing some memory leaks 2008-04-02 18:21:03 +00:00
Andreas Steffen 1ee637d8b1 generate debug output if ocsp response does not contain status information for a given certificate 2008-04-02 14:28:17 +00:00
Andreas Steffen 080555e76a demoted received notify debug message to level 2 2008-04-01 20:22:38 +00:00
Tobias Brunner 9c2a905d63 stopping connectivity checks on the responders side after receiving an IKE_SA_INIT request with the proper ME_CONNECTID 2008-04-01 11:38:18 +00:00
Tobias Brunner 9e183cd5b8 signal fixed 2008-03-31 14:27:16 +00:00
Andreas Steffen dcc777652e changed error message 2008-03-29 13:26:53 +00:00
Tobias Brunner 54150b3f13 checking the size of ME_* notify payloads 2008-03-27 10:17:29 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Martin Willi 3c7e72f5b0 added equals() method to peer_cfg, ike_cfg, proposals, auth_info 
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
 2008-03-26 10:06:45 +00:00
Martin Willi 36524c4844 added support for certificate requests for not yet known CAs 2008-03-20 10:09:56 +00:00
Andreas Steffen ae8715f956 attempt to achieve consistent debugging output 2008-03-19 12:06:38 +00:00
Tobias Brunner df3462ddbe two small fixes 2008-03-13 15:03:06 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Andreas Steffen b48bdac20b improved P2P_NAT debugging 2008-02-27 20:30:39 +00:00
Martin Willi 0f806802ae implemented Expanded EAP types to support vendor specific methods 2007-12-13 17:31:21 +00:00
Martin Willi 3895125275 removed c++ style comments 
fixed compiler warnings
 2007-12-04 10:48:27 +00:00
Martin Willi b8249ff5ed fixed mobike/auth_lifetime in conjunction with p2p-natt 2007-12-04 10:05:36 +00:00
Andreas Steffen addc4b3ce4 removed redundant server reflexive endpoint debug message 2007-12-04 00:45:00 +00:00
Andreas Steffen 3af513753a improved P2P_ENDPOINT debugging 2007-12-03 23:06:17 +00:00
Martin Willi 7805ad302d moved AUTH_LIFETIME handling in its own task (cleaner separation, proper payload order) 2007-12-03 10:52:18 +00:00
Martin Willi ee61471113 implemented RFC4478 (repeated authentication) 
changed %V printf handler to take a time delta, %#V now takes two arguments
 2007-11-20 12:06:40 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Tobias Brunner 56db479192 ID payload with explicit payload type 2007-10-02 11:55:10 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi f215e91999 implemented more aggressive MOBIKE path probing 
do not queue more than one MOBIKE task
 2007-09-28 08:22:37 +00:00
Martin Willi d9d69536b0 improved MOBIKE roaming between interfaces 2007-09-24 12:15:25 +00:00
Andreas Steffen 703b4b0332 connection name to IKE_SA initiating 2007-09-15 20:30:04 +00:00
Andreas Steffen a2ab401c56 put IKE_SA and CHILD_SA names in single quotes 2007-09-15 16:06:58 +00:00
Andreas Steffen 3f4076b7c8 log name of established IKE_SA 2007-09-15 15:54:30 +00:00
Andreas Steffen 21b3099ac4 log name of established CHILD_SA 2007-09-15 15:53:10 +00:00
Martin Willi dd52993068 only switch to port 4500 if we are on 500: fixed reauthentication in NAT 
scenarios
 2007-09-12 11:11:10 +00:00
Martin Willi a8827c9b63 moving virtual IP when interface changes due mobike 2007-09-12 07:36:45 +00:00
Martin Willi 12fa4387c6 fixed NAT detection with mobike 2007-09-12 07:14:05 +00:00
Martin Willi 5474dc6500 implemented routeability checks for mobike (experimental) 2007-09-03 12:37:25 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option 
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
 2007-08-29 12:11:25 +00:00
Martin Willi c87395908a not touching IKE_SA_INIT from ike_mobike_t anymore 2007-07-19 08:08:22 +00:00
Martin Willi cc68e173fe fixed payload order (Nonce, KE) for IKE_SA_INIT 2007-07-16 07:01:49 +00:00
Martin Willi 419201c15d fixed responder initiated CHILD_SA rekeying when using virtual IPs 2007-07-04 06:27:33 +00:00
Martin Willi 3bc62fe70e improved MOBIKE: 
prefer address family already used
  do not change address implicit when mobike supported
  handle multiple simultaneous roaming requests more properly
  proper enabling/disabling of UDP encapsulation
 2007-07-03 12:32:38 +00:00
Andreas Steffen bcac22f3a6 DBG1 level for 'peer supports MOBIKE' debug message 2007-07-02 20:13:15 +00:00
Martin Willi fc2d1c420f further mobike improvements, regarding to NAT-T 2007-06-27 13:10:55 +00:00
Martin Willi 2b3100b5d0 simple roaming of the client works (not MOBIKE conform yet!) 2007-06-26 13:04:13 +00:00
Martin Willi 4cb9d7a758 further fixed for mobike roaming 2007-06-25 13:26:02 +00:00
Martin Willi 17d92e9732 further MOBIKE stuff: 
kernel properly reports network reconfiguration and informs all IKE_SAs
  MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange
  reestablishment of IKE_SAs on network reconfiguration kinda works
  not stable yet!
 2007-06-21 15:25:28 +00:00
Martin Willi 3b04350ab2 added extensions management to IKE_SA 
fixed NATD payload (port) when using route lookup
 2007-06-18 10:32:01 +00:00
Martin Willi 7068410b6f source address lookup in kernel interface 
use it for NAT detection if no source address known from config
  support for %any...%any connections
 2007-06-18 07:25:58 +00:00
Martin Willi 02b3ec0a10 implemented address change notification (for MOBIKE) 
implemented up to date address list cache to list interfaces
 2007-06-14 15:16:15 +00:00
Martin Willi 04f4e82d53 added missing files to the last commit 2007-06-14 08:17:23 +00:00
Martin Willi 26424f03c3 proper reauthentication: 
IKE_SA is closed completely before the new is initiated, 
  resolves some issues when a dynamic IP is requested from a pool
 2007-06-14 08:13:05 +00:00