denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,301 Commits 1 Branch 0 Tags
c59825fbfc3384fbbe2aff8a14c9873dd4271744
Commit Graph
307 Commits
Author SHA1 Message Date
Andreas Steffen c59825fbfc support of dynamic/128 and %any6 2009-02-05 22:13:48 +00:00
Andreas Steffen 49971c4ce5 disable MOBIKE in load-tester 2009-02-05 10:10:20 +00:00
Andreas Steffen eeb1e2259d output pool name string rather than pool pointer 2009-01-28 00:37:11 +00:00
Andreas Steffen 67701cfdce fixed broken listing of connections in ipsec statusall 2009-01-14 08:10:16 +00:00
Andreas Steffen 5a45a5d0bc disable DPD and sending of cert requests in load-tester 2009-01-14 00:13:21 +00:00
Andreas Steffen 37fbc74121 hiding XFRM message names from netlink 2009-01-09 09:37:13 +00:00
Andreas Steffen 40d9388037 renamed chunk 2009-01-09 08:51:41 +00:00
Andreas Steffen 88db1fa3b4 refactored DBG3 output of sent XFRM messages 2009-01-09 08:46:31 +00:00
Andreas Steffen abc177e035 DBG3 output of sent XFRM messages 2009-01-09 08:27:17 +00:00
Andreas Steffen 01a8b40b99 fixed two bugs introduced by the stroke ip pool refactoring 2009-01-08 21:34:44 +00:00
Martin Willi f6035833fa RNG tests based on FIPS 140-1 2008-12-18 16:24:22 +00:00
Martin Willi 8006835ec1 load tester got a "shutdown_when_complete" option, allows performance test using "time" 2008-12-12 09:14:37 +00:00
Tobias Brunner f55a7a76dd address extensions refactored 2008-12-11 13:39:30 +00:00
Tobias Brunner 0dbd9788e5 initial size of 1 is nonsense 2008-12-10 13:45:05 +00:00
Martin Willi 6b83549d1a list assigned leases using "ipsec leases" 2008-12-10 13:00:02 +00:00
Martin Willi ed2bcd0315 added IKE_SA established timer to "ipsec statusall" 2008-12-10 09:59:35 +00:00
Martin Willi 6144daba9d fixed load-tester shared key lookup 2008-12-09 14:45:56 +00:00
Martin Willi 2e03196551 list pools and usage in ipsec statusall 2008-12-09 13:24:12 +00:00
Martin Willi adf9965272 extended stroke in-memory pool to use hash-tables 
supports online/offline leases
	properly reassign addresses to identities
 2008-12-09 13:23:42 +00:00
Martin Willi 15ed045c87 require explicit enabling of load-testing plugin 2008-12-09 09:11:37 +00:00
Martin Willi 5bdc8fc794 generating different initiator identities, configs and certificates on the fly 2008-12-08 19:18:28 +00:00
Martin Willi df68b54f4e basic x509 certificate generation 2008-12-08 15:29:36 +00:00
Martin Willi 19e0010f51 hashtable enumerator enumerates over both, key and values 2008-12-05 10:01:52 +00:00
Martin Willi 876d5c63a3 pass identity to release_address(), allows providers to do a lookup by id 2008-12-05 09:40:50 +00:00
Tobias Brunner 3fb404d8da implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead of a linked list. 2008-12-04 16:46:08 +00:00
Martin Willi 7710a286ca fixed copy-paste bug (double-free) 2008-12-04 10:10:37 +00:00
Andreas Steffen 9b6f9d14ab fixed double free of host in sadb_address2ts 2008-12-04 01:08:19 +00:00
Tobias Brunner 83c42156a2 add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg. 2008-12-03 10:12:20 +00:00
Tobias Brunner c3bdc3cd7f enable quoted tokens in the token enumerator 2008-12-03 10:03:59 +00:00
Martin Willi 70691c31b2 fixed double free of host in selector2ts 2008-12-03 09:15:29 +00:00
Martin Willi c50ad6f613 remove attribute provider in SQL plugin destruction 2008-11-27 14:33:41 +00:00
Martin Willi 9413628b87 token enumerator missed the last token if it contains only a single char 2008-11-27 09:21:52 +00:00
Martin Willi addfea95df moved the IPV6_IPSEC_POLICY definition to the ipsec plugins, fixes uClibc build 2008-11-24 08:22:05 +00:00
Martin Willi 18e2788fbe added a "load_tester.auth" option: "pubkey" (default) or "psk" 2008-11-23 11:58:41 +00:00
Martin Willi 88d4acd4de proper cancellation of load-testing initiators 2008-11-23 11:17:30 +00:00
Martin Willi a20abb81e9 added a MODP_NULL Diffie Hellman group to avoid calculation overhead in load-testing 2008-11-22 16:14:55 +00:00
Tobias Brunner cdee592e38 fixing Makefile of the nm plugin (avoids including a .svn directory in the distribution) 2008-11-20 14:46:03 +00:00
Martin Willi 32f59c56f1 consider interfaces we do not monitor as up (e.g. lo) 
fixes load-testing against 127.0.0.1
 2008-11-18 09:52:28 +00:00
Martin Willi 49653b6bc3 separated updown listener to its own class 
caching interface names to properly remove rules if interface has changed
 2008-11-17 09:29:27 +00:00
Andreas Steffen 7a915d627d completed migration of MIPv6 connections 2008-11-16 21:19:58 +00:00
Andreas Steffen ad60c249b6 show TRANSPORT_PROXY mode in ipsec status 2008-11-16 21:19:17 +00:00
Martin Willi 21bf86f740 using aligned buffers for netlink 2008-11-14 14:23:11 +00:00
Martin Willi 8d50c19833 also use correct encap parameter in PF_KEY 2008-11-14 13:15:26 +00:00
Martin Willi fd2ebf0cf9 fixed encap enabling in xfrm (using new encap state, not the old one) 2008-11-14 13:12:07 +00:00
Martin Willi fb6c8591a3 do not use a route if outgoing interface is down 
other cleanups
 2008-11-14 13:04:22 +00:00
Martin Willi a65e1c5c3a rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead! 2008-11-14 10:30:26 +00:00
Martin Willi f5812086f8 do not use public interface for functions which are local anyway 2008-11-14 09:38:49 +00:00
Martin Willi b8cbb6451c ported some hard-to-merge cherries back to trunk :-/ 
shame, svn, shame: this was ways to complicated
	we should consider a switch to git...
 2008-11-12 15:09:24 +00:00
Martin Willi 479f295049 fixed compiler warnings issued by: 
gcc 4.3
	curl.h gcc type-checking
	glibc with enabled FORTIFY_SOURCE checking
 2008-11-11 18:37:19 +00:00
Martin Willi 3d2dbebd70 #defing out compress algs to avoid compiler warning 2008-11-11 18:35:10 +00:00