denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,685 Commits 1 Branch 0 Tags
cb186f9922ff64d2773d801b6e1395fd2ff85d44
Commit Graph
1580 Commits
Author SHA1 Message Date
Tobias Brunner cb186f9922 Added some IPv6 tweaks for Android. 
Android 1.6 does not yet support the Advanced Sockets API for IPv6 as defined in
RFC 3542. Also, in6addr_any is missing.
 2009-12-23 17:03:42 +01:00
Tobias Brunner a37cf4580a Semicolon removed. 2009-12-23 17:03:42 +01:00
Tobias Brunner 3f490ff978 According to the man page (and the header files in Android) prctl takes a total of 5 arguments. 2009-12-23 17:03:42 +01:00
Tobias Brunner 01e606546c Cache queue locking in credential manager corrected. 2009-12-23 17:03:41 +01:00
Tobias Brunner 47e98cda5f Join worker threads when destroying the processor. 2009-12-23 17:03:41 +01:00
Tobias Brunner b97cc0ab3f Callback job refactored and fixed. 2009-12-23 17:03:41 +01:00
Tobias Brunner 89ec5bef08 Whitespace cleanup. 2009-12-23 17:03:41 +01:00
Tobias Brunner 4a5a5dd290 Using the thread wrapper in charon, libstrongswan and their plugins. 2009-12-23 17:03:41 +01:00
Tobias Brunner 070ac5b0b7 Check if libpthread is required or not. 2009-12-23 17:02:26 +01:00
Tobias Brunner eba64cef41 Separated the public interfaces of the threading primitives. 2009-12-23 17:01:53 +01:00
Tobias Brunner 14f7091280 Moved mutex.c to a separate folder in order to cleanly wrap other threading primitives (and utils/mutex.h is now threading.h). 2009-12-23 17:00:58 +01:00
Andreas Steffen 32d8f44229 verify RFC3779 IP address blocks along X.509 certificate trust chain 2009-12-23 14:21:31 +01:00
Andreas Steffen 1125a0be81 moved traffic_selectors from charon to libstrongswan 2009-12-20 14:57:38 +01:00
Andreas Steffen 9789d3a9b9 fixed updown plugin for mixed IPv4/IPv6 tunnels 2009-12-17 17:32:55 +01:00
Martin Willi 6ec949e022 Fixed BEET mode by installing SAs with negotiated address in traffic selector 2009-12-17 10:52:07 +01:00
Andreas Steffen a461e20dd8 provide attributes from SQL database 2009-12-16 12:31:41 +01:00
Martin Willi fc85786921 Install v6 routes via outgoing interface for now 2009-12-14 14:44:24 +01:00
Andreas Steffen 4b615edab4 some code optimizations 2009-12-09 00:24:42 +01:00
Martin Willi 89d236f0da Support "_" and "-" variants of NetworkManager pkg-config packages 2009-12-08 14:36:22 +01:00
Martin Willi 88dbccc842 Remove generated config.h.in from source tree 2009-12-08 14:36:21 +01:00
Tobias Brunner 268911a5cc The attribute manager was moved from daemon_t to libstrongswan. 2009-12-07 16:00:27 +01:00
Martin Willi cd51437e43 Do not execute the callback job if it has been cancelled since registration 2009-12-03 08:00:43 +01:00
Martin Willi c636bc7e17 Cleanup library if daemon initialization fails 2009-12-03 08:00:43 +01:00
Martin Willi 376a11db3c Do not install invalid 0.0.0.0 DNS servers 2009-12-01 15:46:56 +01:00
Martin Willi 5b4d0de7d4 Prefer EAP-Identity for provider attribute/address lookup 2009-12-01 14:24:07 +01:00
Martin Willi f6116e61fc Save EAP-Identity on auth config 2009-12-01 14:24:06 +01:00
Martin Willi 44ce749360 Store completed authentication rounds permanently on IKE_SA, with flush option 2009-12-01 11:35:30 +01:00
Martin Willi 5b2b4d190a Removed obsolete and unused [gs]et_eap_identity() methods 2009-11-30 16:59:23 +01:00
Martin Willi 5351e51951 Do not propose transport mode as initiator if connection is NATed 2009-11-30 11:32:26 +01:00
Martin Willi bff9f824ed Verify EAP-SIM/AKA AT_MAC before processing any attributes 2009-11-30 10:00:06 +01:00
Martin Willi b04e72c21c SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the response 2009-11-30 09:27:39 +01:00
Martin Willi 8434c88b5e Extended SIM manager by hooks, currently featuring attribute and key hooks 2009-11-30 09:27:26 +01:00
Martin Willi fb1ae8da52 Added a get_sa() method to the bus, allowing a thread to lookup its IKE_SA 2009-11-30 09:27:14 +01:00
Martin Willi c56d958243 Handle NOT_SUPPORTED or other errors properly in get_quintuplet 2009-11-30 09:26:35 +01:00
Martin Willi 2b2c69e992 Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP header 2009-11-26 16:03:06 +01:00
Martin Willi 6780edc07e Use full algorithm name for SHA384/512 HMACs 2009-11-26 10:39:26 +01:00
Martin Willi 6546482a68 Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keyword 2009-11-26 10:39:25 +01:00
Martin Willi eebfa73fd5 Install SHA256_128 auth algorithm with specified 128 bit truncation 2009-11-26 10:39:25 +01:00
Martin Willi 5be75c2cb1 Added support for IPv6 source route installation 2009-11-26 10:31:00 +01:00
Martin Willi 387a6e6c32 Check existing path in mobike probing only if we still have a route 2009-11-26 10:30:59 +01:00
Andreas Steffen 4b55cf5d09 put identities in single quotes 2009-11-25 09:02:09 +01:00
Andreas Steffen 653da7c907 added more debugging in configuration attribute handling 2009-11-24 23:17:07 +01:00
Andreas Steffen 227583ba59 updated IKEv2 notification messages assigned by IANA 2009-11-24 09:21:00 +01:00
Martin Willi 06f02f993c Do not recreate existing create_child subtask when retrying with different DH group 2009-11-23 13:50:01 +01:00
Martin Willi 0d1d19b99d Avoid potentially unaligned half-word read 2009-11-23 13:49:19 +01:00
Eric Mertens ad78bb13c8 Correctly set host number to zero when computing traffic selector range 2009-11-23 10:34:30 +01:00
Martin Willi dd326c114f Use abort() instead of raising SIGKILL, gives us proper core dumps if enabled 2009-11-20 14:36:24 +01:00
Martin Willi 832f283150 Use status_t return value for get_quintuplet() dummy implementations 2009-11-20 11:02:06 +01:00
Martin Willi 80b44cd71a Message stringification supports more detailed EAP payload information 2009-11-18 10:37:46 +01:00
Martin Willi 1427c93fcd Fixed memleak in attribute handling 2009-11-17 15:55:45 +00:00