Tobias Brunner
4f898afc22
pluto: Removed unneeded functions from PF_KEY interface.
...
We still use the algorithm registration.
2010-09-02 19:04:23 +02:00
Tobias Brunner
03ee9623f3
pluto: Completely removed orphaned_holds.
2010-09-02 19:04:23 +02:00
Tobias Brunner
44b4f0d06f
pluto: Install IN policy of a shunt eroute with protocol.
2010-09-02 19:04:23 +02:00
Tobias Brunner
9052216813
pluto: Fixed byte-order of ports in traffic selectors.
2010-09-02 19:04:23 +02:00
Tobias Brunner
c6fd7549e8
pluto: Listen for kernel events via libhydra's kernel interface.
2010-09-02 19:04:22 +02:00
Tobias Brunner
40bbff5dbf
pluto: Adapted kernel.c to changed kernel interface.
2010-09-02 19:04:22 +02:00
Tobias Brunner
c3f4d68f0d
pluto: Do not close all file descriptors on startup, just redirect stdin, stdout and stderr to /dev/null.
...
Otherwise the pipe used to synchronize pluto->events with the main
thread would be closed.
2010-09-02 19:04:21 +02:00
Tobias Brunner
8808edfb4c
pluto: Added a generic event queue.
...
This allows to easily execute arbitrary callbacks in the context of the pluto
main thread (e.g. in order to synchronize with threads from the thread-pool).
2010-09-02 19:04:21 +02:00
Tobias Brunner
4cf459a054
pluto: Fixed the reqid that is passed to the updown script.
2010-09-02 19:04:21 +02:00
Tobias Brunner
199a415710
pluto: Migrated setup_half_ipsec_sa to libhydra's kernel interface.
2010-09-02 19:04:21 +02:00
Tobias Brunner
44643c2d01
pluto: Removed unneeded get_proto_reqid.
...
We will use the same reqid for all protocols, as in charon.
2010-09-02 19:04:21 +02:00
Tobias Brunner
717d60f13f
pluto: Added missing return_on in out_sa.
2010-09-02 19:04:21 +02:00
Tobias Brunner
1d61bcaabd
pluto: Use time_monotonic() instead of time() for use time calculation.
...
That's because get_sa_info now returns a monotonic timestamp.
2010-09-02 19:04:21 +02:00
Tobias Brunner
91f44a8bfc
pluto: Removed KLIPS specific code from was_eroute_idle.
2010-09-02 19:04:21 +02:00
Tobias Brunner
013698d51e
pluto: Migrated get_sa_info to libhydra's kernel interface.
2010-09-02 19:04:21 +02:00
Tobias Brunner
95898bcc56
pluto: Migrated teardown_half_ipsec_sa to libhydra's kernel interface.
2010-09-02 19:04:20 +02:00
Tobias Brunner
3ecf66c9e3
pluto: Adapted sag_eroute to the new signature of eroute_connection.
2010-09-02 19:04:20 +02:00
Tobias Brunner
952487d689
pluto: Migrated raw_eroute to libhydra's kernel interface.
...
This introduces a new struct to pass the protocol information like spis.
Also adapted eroute_connection and the simple calls of raw_eroute to
the new signature.
2010-09-02 19:04:20 +02:00
Tobias Brunner
deea15f04e
pluto: Added a function to create a traffic_selector_t from an ip_subnet.
2010-09-02 19:04:20 +02:00
Tobias Brunner
230aa11fb4
pluto: Migrated update_ipsec_sa to libhydra's kernel interface.
2010-09-02 19:04:20 +02:00
Tobias Brunner
1ad497c78f
pluto: Functions to convert IKEv1 ESP algos to IKEv2 identifiers added.
2010-09-02 19:04:20 +02:00
Tobias Brunner
7dd0c17cd4
pluto: Refactored IKEv2/IKEv1 crypto algorithm conversion functions.
2010-09-02 19:04:20 +02:00
Tobias Brunner
afc4505e11
pluto: Removed KLIPS specific algorithm detection.
2010-09-02 19:04:19 +02:00
Tobias Brunner
54f42e350e
pluto: Removed KLIPS specific bare shunt scanning.
2010-09-02 19:04:19 +02:00
Tobias Brunner
6a066ad19b
pluto: Migrated get_my_cpi to libhydra's kernel interface.
2010-09-02 19:04:19 +02:00
Tobias Brunner
89f0cca111
pluto: Migrated get_ipsec_spi to libhydra's kernel interface.
2010-09-02 19:04:19 +02:00
Tobias Brunner
c5fb6882f2
Initialize the thread pool in pluto.
2010-09-02 19:04:19 +02:00
Tobias Brunner
08c0d340b8
Moved ipsec_transform_t to kernel_ipsec.h in libhydra.
...
Because of this libfreeswan, pluto, starter etc. now depend on that
file (and libhydra). This resolved some duplicate declarations.
2010-09-02 19:01:25 +02:00
Martin Willi
45684ee65c
Fixed pluto smartcard support after introducing encryption schemes
2010-08-30 10:14:45 +02:00
Tobias Brunner
cb7a0cef48
Fixed documentation of XAUTH in ipsec.secrets.
2010-08-26 10:25:08 +02:00
Martin Willi
3102d8669d
Use IV length of a crypter instead of block size for IV calculations
2010-08-13 17:11:53 +02:00
Martin Willi
8f01815143
Build dedicated plugin lists for each strongSwan component
2010-08-12 14:46:57 +02:00
Martin Willi
a944d2092b
Use bits instead of bytes for a private/public key
2010-08-10 18:46:30 +02:00
Martin Willi
33ddaaabec
Added support for different encryption schemes to private/public keys
2010-08-10 18:46:30 +02:00
Martin Willi
0d08ebe7ac
Pass type of requested key in the callback credential set
2010-08-04 09:26:21 +02:00
Martin Willi
15177f5785
Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use credential sets
2010-08-04 09:26:21 +02:00
Martin Willi
1e4e29076c
Updated ipsec.secrets.5 regarding IKEv2 smartcard support
2010-08-04 09:26:21 +02:00
Waldemar Brodkorb
45e962edef
substitute obsolete function calls(bzero/index)
2010-08-01 21:20:15 +02:00
Martin Willi
b8aeaea80c
Fix use of snprintf() in pluto subjectAltName enumeration
2010-07-28 10:54:48 +02:00
Martin Willi
0406eeaacb
Support different encoding types in certificate.get_encoding()
2010-07-13 13:53:20 +02:00
Martin Willi
da9724e6d0
Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding
2010-07-13 11:29:35 +02:00
Martin Willi
5db798c8e0
Charon uses a generic trunstchain length limit, not only for X509 certificates
2010-07-13 10:26:06 +02:00
Heiko Hund
ec7adea007
Added support for named attribute groups
...
Add the possibility to group attributes by a name and assign these
groups to connections. This allows a more granular configuration of
which client will receive what atrributes.
2010-07-09 13:09:31 +02:00
Martin Willi
5d31217232
Ignore IKEv2 packets in pluto with any minor version
2010-06-22 11:14:07 +02:00
Tobias Brunner
946be4d357
Adding support for the native Linux capabilities interface.
...
Note that this interface is deprecated and mainly added to support
Android. Use libcap, if possible.
2010-06-15 19:58:30 +02:00
Tobias Brunner
b77e493bea
Explicitly refer to LIBCAP in Makefiles.
2010-06-15 19:57:31 +02:00
Andreas Steffen
5d4c258de7
refer to correct PLUTO_XAUTH_ID variable
2010-06-09 15:21:26 +02:00
Andreas Steffen
fcfd54acde
rename environment variable to PLUTO_XAUTH_ID
2010-06-08 23:18:51 +02:00
Andreas Steffen
611368339b
do not destroy xauth_id if phase2 equals phase1 connection
2010-06-08 23:18:00 +02:00
Andreas Steffen
964f6372cc
make an optional XAUTH user ID available in the updown script
2010-06-08 17:50:22 +02:00
Tobias Brunner