Martin Willi
ce27ac8012
routing/unrouting through interface
2007-05-16 08:32:15 +00:00
Andreas Steffen
9b6591e796
authentication failure is handled in ike_auth.c
2007-05-15 19:05:26 +00:00
Andreas Steffen
16c72c0c4f
cosmetics
2007-05-15 19:04:15 +00:00
Andreas Steffen
8a664830d0
cosmetics
2007-05-15 19:03:23 +00:00
Andreas Steffen
df9fbd2c64
adapted authentication failure text to those in the authenticators
2007-05-15 14:52:44 +00:00
Andreas Steffen
2e324229c0
support of multiple certificates with same peer id
2007-05-15 12:46:05 +00:00
Andreas Steffen
b17e0db372
cosmetics
2007-05-15 12:45:19 +00:00
Martin Willi
3cd3f48428
properly implemented interface_managers initiate, terminte_[ike|child]
...
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
2007-05-09 12:33:08 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi
a84fb01b96
restructuring of configuration backends
...
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
configuration backends
control interfaces
using pluggable modules as in EAP
2007-04-27 14:25:08 +00:00
Martin Willi
f47e450be9
properly checking received IDr as initiator
2007-04-25 06:06:13 +00:00
Martin Willi
63c477244d
fixed keyingtries
2007-04-23 12:19:23 +00:00
Martin Willi
0706c39cda
added support for EAP methods not establishing an MSK
2007-04-19 12:37:48 +00:00
Martin Willi
1fd5383e61
added PDF support for CHILD_SAs
...
support for INVALID_KE_PAYLOAD negotiation for rekeying
2007-04-19 08:02:19 +00:00
Martin Willi
41ab00da6b
fixed memleak in IKE_SA manager
2007-04-19 07:04:35 +00:00
Martin Willi
db97fd8298
not using %m printf handler, as late errno interpration over bus may be problematic
2007-04-12 08:52:36 +00:00
Martin Willi
5f088665ad
removed IKE_SA_ID (%J) printf hook, two more to go
2007-04-11 13:01:08 +00:00
Martin Willi
a3ce4bc214
removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to go
2007-04-11 12:14:51 +00:00
Martin Willi
3b138b8422
cleaned up apidoc
...
added some comments
removed configuration.[ch], as it does not make sense like it is
2007-04-11 07:20:39 +00:00
Andreas Steffen
86b7215627
fixed bug with roadwarrior and wildcard IDs
2007-04-10 22:39:09 +00:00
Andreas Steffen
a07aad39dc
edited comment and debug output
2007-04-10 22:38:06 +00:00
Martin Willi
00ccb87671
requesting the same virtual IP on reauthentication
2007-04-10 15:02:57 +00:00
Martin Willi
d3e1da2378
proper notification handling
2007-04-10 15:00:51 +00:00
Martin Willi
e0fe765152
restructured file layout
...
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
2007-04-10 06:01:03 +00:00
Martin Willi
80b7162531
improved log output for checkout_by_message()
2007-04-04 07:11:12 +00:00
Martin Willi
b9e363f86f
added IKE_SA_INIT retransmission detection
...
fixed thread exhaustion when IKE_SA is blocked for a longer time
2007-03-29 14:20:10 +00:00
Martin Willi
361e6df8c1
fixed task manager message id bug for cookies
2007-03-29 11:08:30 +00:00
Martin Willi
a6bdc731b1
added retry limit for IKE_SA_INIT (give up after 5 cookie failures)
2007-03-29 11:07:49 +00:00
Martin Willi
4deb89485c
removed send_queue, handled internally in sender_t know
...
do header parsing in receiver, ready for cookie integration
2007-03-28 13:34:02 +00:00
Martin Willi
9179ac9667
merged changes from eap-aka trunk
2007-03-28 07:32:54 +00:00
Martin Willi
c00840478e
fixed state and logging of IKE_SA when using EAP authentication
2007-03-27 16:11:29 +00:00
Martin Willi
e23a59f635
fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progress
2007-03-27 13:32:12 +00:00
Martin Willi
b34f86f545
giving up EAP-SIM authentication after 3 failed challenges
2007-03-27 06:24:17 +00:00
Martin Willi
92275b0981
added CHILD_SA compare check for rekeying collisions
2007-03-22 07:34:42 +00:00
Martin Willi
4315f5c88b
fixed some rekey collision issues
...
added retry with jitter when rekeying fails
2007-03-21 16:11:14 +00:00
Martin Willi
eef0859043
fixed child rekey collision
...
implemented ike rekey collision
2007-03-21 14:42:49 +00:00
Martin Willi
195ada0b4b
handling of CHILD_SA rekeying collisions
2007-03-21 09:25:36 +00:00
Martin Willi
403f8fd300
fixed inproper delete of CHILD_SA
2007-03-21 07:01:14 +00:00
Martin Willi
128ca073d2
prevent from initiating to %any
2007-03-21 07:00:04 +00:00
Martin Willi
0f33e8264a
fixed some exchange collisions (except IKE/CHILD rekeying)
2007-03-20 16:13:21 +00:00
Martin Willi
e70d5576fa
fixed statusall rekey time jitter bug (again)
2007-03-20 14:56:41 +00:00
Martin Willi
39a268b867
fixed CHILD_SA rekeying time in statusall
2007-03-20 12:29:42 +00:00
Martin Willi
37c6ebb78b
fixed nat detection bug
2007-03-20 12:25:08 +00:00
Martin Willi
fdb9b2bdde
respecting "keyingtries" parameter on IKE_SA setup
2007-03-20 08:16:16 +00:00
Martin Willi
1edf116cfd
cleanups
...
fixed reset()
2007-03-20 08:15:53 +00:00
Martin Willi
755bdcc274
adjusted loglevels
2007-03-20 08:13:54 +00:00
Martin Willi
ccf96c7e43
EAP-SIM cleanups
2007-03-19 09:59:17 +00:00
Martin Willi
e05a0b765a
fixed CHILD_SA rekeying/delete bug on 64bit machines
...
removed obsolete methods in delete_payload
2007-03-19 08:04:37 +00:00
Martin Willi
d560c849e3
added --with-sim-reader option to configure script
...
some cleanups in eap_sim
2007-03-14 15:39:45 +00:00
Martin Willi
c105696d1c
removed dublicated code in eap_authenticator
2007-03-14 15:25:00 +00:00
Martin Willi