Martin Willi
|
a61395676f
|
added .gitignore files to NM applet
|
2009-05-15 15:33:19 +02:00 |
|
Tobias Brunner
|
28154e35be
|
documented the idea behind the current implementation of the scheduler
|
2009-05-15 14:43:15 +02:00 |
|
Martin Willi
|
832427064c
|
added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA
|
2009-05-15 11:02:56 +02:00 |
|
Martin Willi
|
5cb3210acf
|
stroke accepts "down conn1{*}/[*]" to delete all CHILD/IKE_SAs using a given config
|
2009-05-15 10:18:43 +02:00 |
|
Tobias Brunner
|
7cdb1ddf08
|
Mac OS X doesn't have SADB_X_AALG_AES_XCBC_MAC
|
2009-05-14 17:38:36 +02:00 |
|
Tobias Brunner
|
9f090745cf
|
added another possible location for the ipsec.h header file
|
2009-05-14 17:38:32 +02:00 |
|
Tobias Brunner
|
c1532e840d
|
fixed compiler warning
|
2009-05-14 17:38:27 +02:00 |
|
Tobias Brunner
|
9015c073de
|
make socket_t compatible with RFC 2292 (that got obsoleted by RFC 3542)
|
2009-05-14 17:16:21 +02:00 |
|
Martin Willi
|
c296e51c40
|
added eap_start option to radius plugin
EAP-Start sends an empty EAP message to initiate EAP conversation
before doing EAP-Identity.
|
2009-05-14 14:14:29 +02:00 |
|
Martin Willi
|
64e8ca281f
|
simplified SPI allocation after refactorings
|
2009-05-14 10:28:18 +02:00 |
|
Martin Willi
|
d50746febe
|
identation cleanups
|
2009-05-13 15:57:31 +02:00 |
|
Martin Willi
|
ad65a713e4
|
fixed identation
|
2009-05-13 14:55:35 +02:00 |
|
Tobias Brunner
|
75a354bb6b
|
fixing compilation of socket_t on systems that have neither IP_PKTINFO (Linux) nor IP_SENDSRCADDR (FreeBSD)
|
2009-05-12 17:40:43 +02:00 |
|
Martin Willi
|
0a3ca29021
|
fixed cleanup of traffic selector lists
|
2009-05-12 17:13:09 +02:00 |
|
Martin Willi
|
8f0ab613e5
|
do not destroy packet twice if message generation failed
|
2009-05-12 14:38:48 +02:00 |
|
Martin Willi
|
e1fa02bc62
|
properly end CERT_PRE task after detecting the final authentication round
|
2009-05-12 11:26:50 +02:00 |
|
Martin Willi
|
9dd2b42728
|
do not report increasing rekey times if rekeying currently active
|
2009-05-12 10:56:49 +02:00 |
|
Martin Willi
|
37974979bc
|
do not report a CHILD_SA rekey time if rekeying disabled
|
2009-05-12 10:56:48 +02:00 |
|
Andreas Steffen
|
20da0b5ca5
|
quote identities
|
2009-05-11 22:07:49 +02:00 |
|
Martin Willi
|
496064ba45
|
hand out a IPv4 virtual address if %any6 is requested
|
2009-05-11 13:33:55 +02:00 |
|
Martin Willi
|
30fc989c9c
|
fixed configuration payload type as responder
|
2009-05-11 13:23:15 +02:00 |
|
Martin Willi
|
a3d692ca87
|
never send a CERT payload in EAP
|
2009-05-11 11:37:58 +02:00 |
|
Martin Willi
|
5775283f8b
|
updated MSK calculation in MSCHAPv2, compatible with Win7/2008 RC.
|
2009-05-11 10:42:53 +02:00 |
|
Martin Willi
|
25f2d52f30
|
Fixed EAP authentication regression
Use correct nonce/init message again for EAP AUTH payload
sent from responder to initiator.
|
2009-05-11 10:42:52 +02:00 |
|
Martin Willi
|
b81917ea00
|
fixed memleak
|
2009-05-11 10:42:52 +02:00 |
|
Martin Willi
|
9d737ecfc5
|
drop acquires we already have a pending connection attempt
|
2009-05-08 10:04:01 +02:00 |
|
Martin Willi
|
c3626c2ce6
|
initiate trapped CHILD_SAs with same reqid
|
2009-05-08 10:04:00 +02:00 |
|
Martin Willi
|
fda97f2140
|
removed $Id$ from new template generated files
|
2009-05-08 10:04:00 +02:00 |
|
Martin Willi
|
56d461a1f1
|
listing routed connection in statusall
|
2009-05-08 10:04:00 +02:00 |
|
Martin Willi
|
17339b9a86
|
removed obsolete route/unroute code from ike_sa/controller
|
2009-05-08 10:03:59 +02:00 |
|
Martin Willi
|
8c99451ae1
|
make use of the new trap-manager
|
2009-05-08 10:03:58 +02:00 |
|
Martin Willi
|
eb8ed130af
|
added a trap-manager to handle routed policies outside of IKE_SAs
|
2009-05-08 10:03:58 +02:00 |
|
Tobias Brunner
|
ca39743f06
|
Merge branch 'master' of git.strongswan.org:~/strongswan into HEAD
|
2009-05-07 17:47:48 +02:00 |
|
Tobias Brunner
|
433c0968e4
|
properly initialize buffer when printing loaded plugins.
|
2009-05-07 17:40:19 +02:00 |
|
Martin Willi
|
0ce19b27a6
|
instanciate new tasks only if none queued
|
2009-05-07 15:57:34 +02:00 |
|
Martin Willi
|
a627e31f46
|
properly delete IKE_SA if IKE_SA_INIT processing failed
|
2009-05-07 15:53:45 +02:00 |
|
Martin Willi
|
be85459323
|
announce EAP method initiation once only
|
2009-05-07 11:11:56 +02:00 |
|
Martin Willi
|
84f1164c77
|
some additional .gitignore's
|
2009-05-07 10:33:30 +02:00 |
|
Martin Willi
|
a8d938ca18
|
fixed removal of child configs
purge empty peer configs
|
2009-05-06 12:56:21 +02:00 |
|
Martin Willi
|
5bbfd264ec
|
fixed remove_child_cfg(), use correct enumerator for remove_at
|
2009-05-06 11:09:57 +02:00 |
|
Martin Willi
|
e868a564d9
|
set IKE_SA on bus to catch unroute event properly
|
2009-05-05 09:51:28 +02:00 |
|
Tobias Brunner
|
8c5d72cd0b
|
removing svn keyword $Id$ from all files
|
2009-04-30 13:19:35 +00:00 |
|
Tobias Brunner
|
d24a74c5b4
|
merging changes from portability branch back to trunk
important change for developers: %Y replaces %D to print identities!
|
2009-04-30 11:37:54 +00:00 |
|
Martin Willi
|
466f11bfaf
|
added .gitignore files, ready for the switch
|
2009-04-30 07:42:30 +00:00 |
|
Andreas Steffen
|
f67eebccc8
|
changed RNG_REAL to RNG_TRUE
|
2009-04-29 09:13:20 +00:00 |
|
Martin Willi
|
18eef5d6b6
|
added support for AES counter mode in ESP
proposal keywords: aes128ctr aes192ctr aes256ctr
|
2009-04-27 12:16:52 +00:00 |
|
Martin Willi
|
be0a03be64
|
set default CFLAGS globally, including -Wno-format
|
2009-04-27 11:34:07 +00:00 |
|
Martin Willi
|
12c8c3c4be
|
fixed nbns handling, missing break
|
2009-04-27 10:48:49 +00:00 |
|
Martin Willi
|
568ced956c
|
prefer nm plugin over resolv-conf
|
2009-04-27 10:46:51 +00:00 |
|
Martin Willi
|
3ab0e8a04b
|
nm plugin handles DNS/NBNS configuration attributes
|
2009-04-27 09:38:31 +00:00 |
|