Commit Graph
7884 Commits
Author SHA1 Message Date
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
2008-04-09 12:54:47 +00:00
Tobias Brunner 4a96521965 signature in connectivity checks is now built with the message id in network byte order 2008-04-08 13:45:30 +00:00
Martin Willi 5df92bba51 changed force_encap to forceencaps 2008-04-08 12:53:36 +00:00
Tobias Brunner 1d295d1ffa printing the checklist, two bugfixes 2008-04-08 12:31:27 +00:00
Tobias Brunner 6f186d7e2e connect manager: restart the sender if it is not running anymore 2008-04-08 09:21:27 +00:00
Tobias Brunner 03e5336340 better logging for chunks in connect manager 2008-04-08 08:41:23 +00:00
Tobias Brunner 028a345c63 refactored callback data in connect manager 2008-04-08 08:33:15 +00:00
Martin Willi f6e7c0f785 removed stale ocsp header 2008-04-08 06:27:04 +00:00
Tobias Brunner 6970925422 fast finishing connectivity checks on the initiators side 2008-04-07 15:45:37 +00:00
Tobias Brunner dd563e60df corrected the logging for retransmissions of connectivity checks 2008-04-07 14:45:39 +00:00
Tobias Brunner b03c1d415c changed how retransmissions of connectivity checks are sent 2008-04-07 11:26:15 +00:00
Martin Willi 852abcd3a3 fixed doxygen groups to avoid recursion 2008-04-07 10:37:14 +00:00
Andreas Steffen 571ad29507 wildcard matching in shared secrets not implemented yet 2008-04-07 10:29:08 +00:00
Andreas Steffen e44612c878 added sql/rw-psk-ipv4 scenario 2008-04-07 10:24:49 +00:00
Tobias Brunner 70a568b015 fixing another memory leak 2008-04-07 09:36:52 +00:00
Andreas Steffen af9e3954e2 set accelerated rekeying defaults in ipsec.sql for UML scenarios 2008-04-07 09:10:58 +00:00
Andreas Steffen 2c0df332a9 added sql/rw-cert scenario 2008-04-07 08:57:46 +00:00
Martin Willi 1749642b15 use cert->equals() to filter out equal certificates in seperate instances 2008-04-07 08:48:08 +00:00
Martin Willi da5e7bdb4c try to cache the same instance of equal certificates 2008-04-07 08:44:43 +00:00
Martin Willi b5dbcc6270 compare certificates against full encoding to allow equality check of untrusted certs 2008-04-07 08:28:35 +00:00
Martin Willi 9caadea8c8 fixed bad cleanup which results in segfault if no issuer cert found, fixes #43 2008-04-07 08:06:02 +00:00
Andreas Steffen 6fbd3f1738 fixed path to ipsec.sql 2008-04-07 07:57:38 +00:00
Andreas Steffen 56bcc343ff ipsec.sql remains in /etc/ipsec.d 2008-04-07 07:25:04 +00:00
Andreas Steffen decfd8e546 moved strongswan.conf to /etc 2008-04-07 07:21:06 +00:00
Andreas Steffen 480297b883 cosmetics 2008-04-07 07:02:47 +00:00
Martin Willi ff867d062e added ./configure option --with-strongswan-conf=
defaults to /etc/strongswan.conf
2008-04-07 06:56:33 +00:00
Martin Willi 4071ad1e5b fixed segfault when opening a SQLite database fails 2008-04-07 06:49:13 +00:00
Andreas Steffen 096b7f6889 do-tests now lists strongswan.conf and ip xfrm policy|state 2008-04-07 06:14:21 +00:00
Martin Willi 8ec032fc62 added helper scripts to create SQL scripts 2008-04-07 06:06:42 +00:00
Andreas Steffen 84fc1abf7a added sql/net2net-psk scenario 2008-04-06 18:11:19 +00:00
Andreas Steffen b6032b2400 corrected description 2008-04-06 18:10:57 +00:00
Andreas Steffen f8ab4a8f76 log shared secret with debug level 4 2008-04-06 17:51:29 +00:00
Andreas Steffen b26fecefa0 disable mobike in sql/net2net-cert scenario 2008-04-06 12:53:57 +00:00
Andreas Steffen 1b247314fd default is hostaccess=no 2008-04-06 12:15:05 +00:00
Andreas Steffen bc722433be version bump to 4.2.1 2008-04-06 12:12:13 +00:00
Andreas Steffen 69813bd27f added sql/net2net-cert scenario 2008-04-06 12:06:33 +00:00
Andreas Steffen babaaa3c11 support of SQL databases in UML scenarios 2008-04-06 12:05:42 +00:00
Martin Willi a9184df36b do not build leak_detective.o if not enabled 2008-04-04 11:38:16 +00:00
Martin Willi 2429fb4958 defining hook functions ourself as definition in uClibc and glibc differ, fixes #36 2008-04-04 11:37:19 +00:00
Martin Willi 67d147e888 removed unused gmp.h to build libstrongswan without libgmp 2008-04-04 11:13:14 +00:00
Tobias Brunner 4c7e6112c5 and another 2008-04-03 15:22:06 +00:00
Tobias Brunner 471f923071 fixed two other memory leaks 2008-04-03 15:13:25 +00:00
Martin Willi cce97b647a redirecting all leak_report information to stderr 2008-04-03 11:25:08 +00:00
Martin Willi 6c45e62242 some code cleanups 2008-04-03 10:22:17 +00:00
Tobias Brunner 84b18d5fc7 replaced mutex in leak detective with thread scheduling 2008-04-03 09:24:35 +00:00
Tobias Brunner 8e91a36314 thread locking for sender and processor optimized 2008-04-03 09:19:12 +00:00
Martin Willi 6af29ccf33 configure option in strongswan.conf for thread count 2008-04-03 08:37:24 +00:00
Martin Willi 6e4e27f8de updated test data to use correct encoding data 2008-04-03 06:45:17 +00:00
Andreas Steffen 196b28a470 demoted more notify debug messages to level 2 2008-04-02 19:15:05 +00:00
Andreas Steffen f342cc08c0 make peer IP address and peer IP available to the xauth_module.verify_secret() method 2008-04-02 19:04:45 +00:00