 Martin Willi
|
281dd55891
|
using strongSwan, not NetworkManager version number
|
2008-08-26 14:27:53 +00:00 |
|
|
Martin Willi
|
be49236373
|
fixing charon path for now for ubuntu package
|
2008-08-26 14:27:12 +00:00 |
|
|
Martin Willi
|
f6ecd44fc6
|
added NM gnome plugin to distribution
|
2008-08-25 08:21:51 +00:00 |
|
|
Martin Willi
|
c1ee908e4c
|
removed generated Makefile.in.in from svn
|
2008-08-25 08:15:57 +00:00 |
|
|
Martin Willi
|
a88aae3df6
|
enforce DN of configured gateway certificate
|
2008-08-25 07:50:21 +00:00 |
|
|
Martin Willi
|
7945c90adb
|
new EAP-Identity handling uses ID_EAP in plugins
|
2008-08-25 07:49:48 +00:00 |
|
|
Martin Willi
|
1a109c9fc6
|
disabled PSK option until we have a way to enforce strong secrets
|
2008-08-25 07:48:11 +00:00 |
|
|
Martin Willi
|
1995f79f10
|
use username part of RFC822 IDs for PAM authentication
|
2008-08-25 07:47:16 +00:00 |
|
|
Martin Willi
|
822901061b
|
ported parts of two-sim branch
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
|
2008-08-22 10:44:51 +00:00 |
|
|
Martin Willi
|
7c112a12c0
|
run guests with some niceness
|
2008-08-22 08:37:15 +00:00 |
|
|
Martin Willi
|
5ba7efb083
|
pool names are unique
|
2008-08-22 07:38:59 +00:00 |
|
|
Martin Willi
|
3e45b3a1ad
|
do not return IPv6 src addresses for IPv4 destinations
|
2008-08-21 15:17:45 +00:00 |
|
|
Martin Willi
|
b848f0377c
|
fixed EAP-GTC secret lookup
improved error logging
PAM authentication needs CAP_AUDIT_WRITE capability
|
2008-08-21 14:40:03 +00:00 |
|
|
Martin Willi
|
1caa265c61
|
a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM
|
2008-08-21 12:10:07 +00:00 |
|
|
Martin Willi
|
2d6559b107
|
added sqlite busy handler: retries on locking conflicts
|
2008-08-21 09:25:06 +00:00 |
|
|
Martin Willi
|
02e907fe66
|
avoid too many alloca()s in netlink send, problematic on MIPS
|
2008-08-21 07:55:16 +00:00 |
|
|
Martin Willi
|
bdbf3c49fc
|
some string fixes
|
2008-08-20 13:59:37 +00:00 |
|
|
Martin Willi
|
6368a58ffc
|
added missing tooltip
|
2008-08-20 12:02:53 +00:00 |
|
|
Martin Willi
|
1b9f6c2410
|
handle DBUS permission problems gracefully
|
2008-08-20 11:44:47 +00:00 |
|
|
Martin Willi
|
142eaea43c
|
fixed shared key lookup by ID
proper auth method selection
|
2008-08-20 08:51:18 +00:00 |
|
|
Martin Willi
|
592dc30108
|
fixed auth-dialog password flush
|
2008-08-20 08:49:47 +00:00 |
|
|
Martin Willi
|
ec24987164
|
certificate based gateway authentication
prototype PSK user authentication with auth-dialog
|
2008-08-19 15:19:45 +00:00 |
|
|
Martin Willi
|
62556b2b45
|
updated nm plugin to NetworkManager API changes
|
2008-08-18 11:59:19 +00:00 |
|
|
Martin Willi
|
475814ce5f
|
roam jobs for routing table changes not fired for virtual IP routes
|
2008-08-18 11:07:26 +00:00 |
|
|
Martin Willi
|
39c0ae3780
|
configuration plugin for NetworkManager
|
2008-07-31 15:07:52 +00:00 |
|
|
Martin Willi
|
092a9b88ad
|
added options for virtual IP, UDP encapsulation, IPComp
proper handling of libstrongswan/glib TRUE/FALSE conflict
|
2008-07-31 14:32:11 +00:00 |
|
|
Martin Willi
|
6dbce9c803
|
reimplemented dbus plugin for NetworkManager 0.7, renamed to nm
|
2008-07-31 11:16:14 +00:00 |
|
|
Martin Willi
|
2d87903db9
|
recreating FIFO if it exists
|
2008-07-31 09:04:54 +00:00 |
|
|
Martin Willi
|
eb04645c10
|
fixed usage typo
|
2008-07-31 09:01:56 +00:00 |
|
|
Martin Willi
|
19ad10b5d3
|
increased stroke socket backlog to 10
|
2008-07-30 14:17:05 +00:00 |
|
|
Martin Willi
|
f0a8fa25ba
|
using a entry cache for duplicate checks, avoids deadlocks
|
2008-07-30 14:15:08 +00:00 |
|
|
Martin Willi
|
7a4ad866b0
|
use condvar broadcasts to signal threads waiting for an IP, there might be more than one
|
2008-07-30 13:19:12 +00:00 |
|
|
Martin Willi
|
38a8e39739
|
using shared read locks in credential set enumerators to avoid deadlocks
|
2008-07-30 11:38:44 +00:00 |
|
|
Martin Willi
|
21632b76e0
|
added strongswan.conf option "charon.dos_protection" to disable cookies/aggressiveness check
|
2008-07-30 08:27:08 +00:00 |
|
|
Martin Willi
|
7fb2693724
|
switched xterm console title
|
2008-07-28 13:10:34 +00:00 |
|
|
Martin Willi
|
bc8f868c99
|
using gnome-terminal in irdumm
|
2008-07-28 12:37:01 +00:00 |
|
|
Martin Willi
|
7c04589335
|
use XFRM_MSG_UPDPOLICY for existing policies only
|
2008-07-28 08:29:04 +00:00 |
|
|
Martin Willi
|
6ef70d2109
|
added tests.h to distribution
|
2008-07-24 12:48:36 +00:00 |
|
|
Martin Willi
|
b6bf863459
|
fixed UCI thread cancellation on ARM
|
2008-07-24 08:52:12 +00:00 |
|
|
Martin Willi
|
3bc5a137cb
|
added option charon.plugins.sql.lease_history to disable lease history logging
|
2008-07-24 08:28:45 +00:00 |
|
|
Martin Willi
|
875a8326b3
|
fixed statistic calcuation for static leases
|
2008-07-24 08:21:55 +00:00 |
|
|
Martin Willi
|
a01ad99341
|
fixed pool statistics
|
2008-07-23 13:56:07 +00:00 |
|
|
Martin Willi
|
f7198e7e8c
|
experimental and untested reimplementation of sql based IP pool
uses address preallocation and separate address/lease tables for linear lookup time
|
2008-07-22 14:56:15 +00:00 |
|
|
Martin Willi
|
ee93541783
|
fixed bus args copy on non i386 archs
|
2008-07-21 14:23:43 +00:00 |
|
|
Martin Willi
|
0a625fde3e
|
pool performance testing
|
2008-07-21 11:17:20 +00:00 |
|
|
Martin Willi
|
6b64fe2684
|
loading unit-tester plugin as the last one
|
2008-07-21 11:16:07 +00:00 |
|
|
Martin Willi
|
c7314e68ab
|
reverted bus to non-recursive mutex due instability
|
2008-07-21 11:15:16 +00:00 |
|
|
Martin Willi
|
fc861b0b7e
|
added a driver type getter for database implementations
|
2008-07-21 11:13:06 +00:00 |
|
|
Martin Willi
|
a4a3e0c7dc
|
introduced an additional bus->signal parameter for signal specific data
added SIG_IKE/SIG_CHD macros for signal emitting
|
2008-07-18 15:51:40 +00:00 |
|
|
Martin Willi
|
2f725443e5
|
removed testing app, this is scriptable with irdumm now
|
2008-07-18 12:14:43 +00:00 |
|
|
Martin Willi
|
a98793adfe
|
allow but filter recursive listener invocation
|
2008-07-18 11:05:01 +00:00 |
|
|
Martin Willi
|
1082b06121
|
fixed compiler warning
|
2008-07-18 10:54:49 +00:00 |
|
|
Martin Willi
|
12b1c1a1bc
|
extended UCI plugin by a simple control interface using a fifo
|
2008-07-18 10:34:44 +00:00 |
|
|
Martin Willi
|
bd07b59079
|
avoid heap allocation in bus->signal for performance reasons
|
2008-07-17 11:45:58 +00:00 |
|
|
Martin Willi
|
5353f22ed7
|
fixed potential segfault in resolve_hosts
|
2008-07-17 11:06:31 +00:00 |
|
|
Martin Willi
|
d61d1913e1
|
ignore IPCOMP acquires, fixes additional CHILD_SA setup with acquired SAs using compression
|
2008-07-17 08:25:34 +00:00 |
|
|
Martin Willi
|
7ca49551c8
|
do not distinguish different policy protocols in userland cache
|
2008-07-16 12:33:19 +00:00 |
|
|
Martin Willi
|
7b9e1ff0fd
|
do not complain about existing routes
|
2008-07-16 12:30:47 +00:00 |
|
|
Martin Willi
|
8384cfa338
|
build dumm with leak ./configure
|
2008-07-16 11:54:44 +00:00 |
|
|
Martin Willi
|
7beea2e99f
|
fixed acquire-delay bug by:
installing policies before states
updating policies if protocol has changed
|
2008-07-16 11:51:37 +00:00 |
|
|
Martin Willi
|
66d4745f8e
|
ported patch to final 2.6.26 release, including UML Makefile fixes
|
2008-07-15 14:41:12 +00:00 |
|
|
Martin Willi
|
ef3f717bfe
|
reverted [4125],[4166], reimplemented the proper way
|
2008-07-11 08:54:56 +00:00 |
|
|
Martin Willi
|
6b5d95919c
|
setting ike_sa on bus in checkout_new
|
2008-07-11 08:47:18 +00:00 |
|
|
Martin Willi
|
e7991a2eef
|
do a route lookup to allow routing of left=%any connections
|
2008-07-09 14:16:19 +00:00 |
|
|
Martin Willi
|
6c652e6b55
|
added /usr/local/[s]bin to uml exec path
|
2008-07-09 12:39:11 +00:00 |
|
|
Martin Willi
|
ddf944be3e
|
loading ruby scripts specified at command line
|
2008-07-09 12:18:06 +00:00 |
|
|
Martin Willi
|
a9c46ace99
|
ruby bindings/fixes for template loading
|
2008-07-09 11:43:48 +00:00 |
|
|
Martin Willi
|
ee70c94835
|
passing a block to guest.exec() processes output lines
|
2008-07-09 10:51:10 +00:00 |
|
|
Martin Willi
|
bf44108019
|
uml "exec" writes stdout/stderr back to mconsole
guest->exec() accepts a callback for output
sligtly refactored mconsole.c
|
2008-07-08 14:58:20 +00:00 |
|
|
Martin Willi
|
02a6083633
|
guest interface/address management using hackish mconsole exec patch, ruby bindings
|
2008-07-07 14:56:04 +00:00 |
|
|
Martin Willi
|
36beca7cef
|
disconnecting interfaces properly on bridge destruction
|
2008-07-05 09:32:55 +00:00 |
|
|
Martin Willi
|
c4d72bdb01
|
throwing proper exeptions on errors, correct return values
mixin enumerable in classes/objects with .each
|
2008-07-04 16:42:54 +00:00 |
|
|
Martin Willi
|
ca275ae2ca
|
prototype of irdumm - interactive ruby shell for dumm
|
2008-07-04 14:21:41 +00:00 |
|
|
Martin Willi
|
4302d4f012
|
some stability improvements
|
2008-07-04 06:58:04 +00:00 |
|
|
Martin Willi
|
4a231f1a2e
|
changed medcli settings keys
|
2008-07-02 09:02:38 +00:00 |
|
|
Martin Willi
|
d932435e18
|
sql plugin supports a list of pools to fall back, specified by e.g. rightsourceip=%pool1,pool2
|
2008-07-02 08:31:48 +00:00 |
|
|
Martin Willi
|
11e855179e
|
using token enumerator to parser plugin list
|
2008-07-02 08:19:43 +00:00 |
|
|
Martin Willi
|
5848e473e8
|
fixed another compiler warning
|
2008-07-02 08:16:43 +00:00 |
|
|
Martin Willi
|
fca4d3ee03
|
implementation of a simple "token enumerator"
|
2008-07-02 08:09:07 +00:00 |
|
|
Martin Willi
|
2f2b99282a
|
fixed compiler warning
updated svn:ignore property
|
2008-07-02 08:05:51 +00:00 |
|
|
Martin Willi
|
ab89517218
|
fixed medsrv database uri key
|
2008-07-01 13:57:47 +00:00 |
|
|
Martin Willi
|
131064995a
|
added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by remote virtual ip
|
2008-07-01 12:48:56 +00:00 |
|
|
Martin Willi
|
d01783dba4
|
logging peer addresses in peer_cfg lookup
|
2008-07-01 11:10:37 +00:00 |
|
|
Martin Willi
|
9eeaa25f5d
|
added host match prio to debugging output
|
2008-07-01 11:01:27 +00:00 |
|
|
Martin Willi
|
62bd123952
|
peer_cfg lookup takes peer addresses into account
|
2008-07-01 09:05:20 +00:00 |
|
|
Martin Willi
|
866ba8e0b6
|
strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if CHILD_SA setup in IKE_AUTH fails
|
2008-07-01 07:54:09 +00:00 |
|
|
Martin Willi
|
fe5d7c43be
|
whitelisting leaks of ENGINE_load_builtin_engines
|
2008-07-01 07:53:03 +00:00 |
|
|
Martin Willi
|
d510eaea47
|
sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none found
|
2008-07-01 06:36:52 +00:00 |
|
|
Martin Willi
|
b119f89a4e
|
fixed chunk_increment, fixes reuse of already assigned addresses
|
2008-06-30 12:33:38 +00:00 |
|
|
Martin Willi
|
7da767f773
|
sqlite plugin requires libsqlite3 => 3.3.1 to share connections
use recursive locking if libsqlite3 < 3.5.0
|
2008-06-30 11:06:18 +00:00 |
|
|
Martin Willi
|
aafe8ced39
|
added strongswan.conf option charon.reuse_iksa=no to create each CHILD_SA in a new IKE_SA
|
2008-06-30 08:45:11 +00:00 |
|
|
Martin Willi
|
c66a1b757f
|
ike/kernel protocol identifier conversion functions
|
2008-06-26 08:59:39 +00:00 |
|
|
Martin Willi
|
854a2e1760
|
fixed ifndef typo for MYSQL_DATA_TRUNCATED check
|
2008-06-26 07:31:52 +00:00 |
|
|
Martin Willi
|
236083cb56
|
fixed plugin loader destruction
|
2008-06-25 14:53:49 +00:00 |
|
|
Martin Willi
|
7e8af02626
|
flushing task_manager on shutdown while IKE_SA is usable
|
2008-06-25 11:40:50 +00:00 |
|
|
Martin Willi
|
fae6e24dad
|
reintroducing MYSQL_DATA_TRUNCATED if supported on that mysql version
|
2008-06-24 14:30:14 +00:00 |
|
|
Martin Willi
|
a02bc1dbea
|
updated location of auth_class_t
|
2008-06-24 13:36:10 +00:00 |
|
|
Martin Willi
|
eec675bf8c
|
enumerating loaded plugins in "ipsec statusall"
|
2008-06-24 12:49:04 +00:00 |
|
|
Martin Willi
|
857ba3574b
|
fixed "double-close" of stroke fd resulting in "bad fd" errors if multiple threads are active
|
2008-06-23 08:53:37 +00:00 |
|
|
Martin Willi
|
417421048c
|
fixed medsrv mysql scheme
|
2008-06-23 08:30:57 +00:00 |
|