Tobias Brunner
d377556863
Use native threads in host resolver so that it works even if processor has no threads
2012-10-18 12:26:49 +02:00
Tobias Brunner
b4f6c39e55
Terminate unused resolver threads after a timeout
2012-10-18 12:26:00 +02:00
Tobias Brunner
49e2d109a3
Only create more threads if needed in host_resolver_t
2012-10-18 12:26:00 +02:00
Tobias Brunner
eecd41e349
Use a helper function to add milliseconds to timeval structs
2012-10-18 12:25:59 +02:00
Tobias Brunner
2b6088c718
android: Ignore if peer is unreachable when reestablishing an SA
2012-10-18 12:25:59 +02:00
Tobias Brunner
901f6ac403
android: Use a shorter timeout for retransmits
2012-10-18 10:57:55 +02:00
Tobias Brunner
8658e87b35
android: Use keyingtries=%forever and dpd|closeaction=restart
...
We also ignore the CHILD_SA_DOWN event.
This should allow us to keep the connection up as long as the user does
not manually disconnect.
2012-10-18 10:57:55 +02:00
Tobias Brunner
292d8f41c3
Resolve hosts by DNS name in separate threads so we can cancel them
...
getaddrinfo(3) may block a long time so proper termination of the daemon may
block if DNS servers are not reachable.
getaddrinfo(3) is an optional cancellation point in posix threads so it
might still block a shutdown but at least on Android (with the signal based
pthread_cancel implementation) it works, on Linux starter will kill charon
anyway after a while.
2012-10-18 10:57:55 +02:00
Tobias Brunner
272ce5b580
android: Handle unreachable peers via alert
2012-10-16 14:16:17 +02:00
Tobias Brunner
1d6dc62727
Added a new alert that is raised if peer does not respond to initial IKE message
2012-10-16 14:16:17 +02:00
Tobias Brunner
b00806cf85
android: Use 0.0.0.0/0 as local traffic selector
...
This is helpful if the responder also wants to tunnel e.g. multicast
packages.
2012-10-16 14:16:17 +02:00
Tobias Brunner
488b1cad13
Log IP addresses for discarded inbound IPsec packets
2012-10-16 14:16:17 +02:00
Tobias Brunner
45885ca613
android: Bypass/protect previously bypassed sockets if connectivity changes
2012-10-16 14:16:17 +02:00
Tobias Brunner
9167ca8b2b
android: Support for IPsec SA update added
2012-10-16 14:16:17 +02:00
Tobias Brunner
51823c1f31
Use pointers for lookups in IPsec SA manager
2012-10-16 14:16:17 +02:00
Tobias Brunner
4785fbbc9c
IPsec SA manager implements update_sa()
2012-10-16 14:16:17 +02:00
Tobias Brunner
7622c5e97e
Setter for src and destination address of ipsec_sa_t added
2012-10-16 14:16:17 +02:00
Tobias Brunner
5b88d80f22
android: Trigger roam events in case connectivity changes
2012-10-16 14:16:17 +02:00
Tobias Brunner
ef3d1a1ba9
android: Register NetworkManager as BroadcastReceiver and relay events via JNI
2012-10-16 14:16:17 +02:00
Tobias Brunner
38bbca587f
android: Determine source address dynamically
2012-10-16 14:16:17 +02:00
Tobias Brunner
8f092a2221
android: Added NetworkManager class which allows to retrieve a local IP address
2012-10-16 14:16:17 +02:00
Tobias Brunner
b0e0932538
android: Increase compile warnings
2012-10-16 14:16:16 +02:00
Tobias Brunner
c3bce1aa3d
android: Fixed "Configure" button in Android VPN dialog
2012-10-16 14:16:16 +02:00
Tobias Brunner
e3d98f2c4c
android: Don't use the default ESP proposal as it includes unsupported algorithms
2012-10-16 14:16:16 +02:00
Martin Willi
a70851c941
Remove unused this parameter to load_issuer_cert/key(), as it is uninitialized
2012-10-16 14:11:14 +02:00
Martin Willi
c1024a6bd6
Generate a load-tester certificate only for DN or subjectAltName identities
2012-10-16 13:43:54 +02:00
Martin Willi
db97d67825
Add a load-tester initiator_match option to match custom initiator_id
2012-10-16 13:43:54 +02:00
Martin Willi
5359c7a437
Encode non-DN load-tester identities as subjectAltNames
2012-10-16 13:43:54 +02:00
Martin Willi
562b89ccee
Add a load-tester digest option for issuing peer certificates
2012-10-16 13:43:54 +02:00
Martin Willi
3f6e13f553
Load a multiple load-tester CA certificates from a directory
2012-10-16 13:43:54 +02:00
Martin Willi
24eb73b4fa
Added load-tester options to read issuing CA certificate and key from files
2012-10-16 13:43:53 +02:00
Tobias Brunner
8e2d3075aa
Use proper offset when adding mark attribute in kernel-netlink plugin
2012-10-15 11:11:29 +02:00
Tobias Brunner
ac24c4d323
Also add mark when querying current replay state in kernel-netlink plugin
2012-10-15 10:15:53 +02:00
Andreas Steffen
5f085d7e13
allow registration of multiple message type
2012-10-14 17:37:00 +02:00
Andreas Steffen
07a3dee937
implemented IETF Operational Status attribute
2012-10-13 20:34:50 +02:00
Andreas Steffen
4bc119afb7
corrected class description
2012-10-13 10:38:10 +02:00
Andreas Steffen
1afcff297a
implemented IETF Factory Default Password Enabled attribute
2012-10-12 22:04:51 +02:00
Andreas Steffen
4abe404d27
added tnc/tnccs-20-os scenario
2012-10-12 09:50:15 +02:00
Andreas Steffen
ca1a64742f
implemented the Forwarding Enabled attribute
2012-10-12 09:49:44 +02:00
Andreas Steffen
230a26ed01
minor fixes in imc_attestation.c
2012-10-12 00:53:07 +02:00
Tobias Brunner
2925aa725e
Fixed update_sa in kernel-netlink plugin if marks are used
2012-10-11 19:08:47 +02:00
Tobias Brunner
418dcf3aae
Fixed compilation of android_handler_t
2012-10-11 11:12:52 +02:00
Andreas Steffen
abcc762387
version bump to 5.0.2dr1
2012-10-11 09:21:38 +02:00
Andreas Steffen
6ab1502519
implemented os_info_t class
2012-10-10 21:54:21 +02:00
Martin Willi
7f3bf2b12f
Remove outdated TODO information
2012-10-10 13:10:28 +02:00
Andreas Steffen
7174a0a527
implemented IETF String Version attribute
2012-10-10 12:30:18 +02:00
Andreas Steffen
7d202f56b9
restrict package name and package version number fields to 255 octets
2012-10-10 09:03:11 +02:00
Andreas Steffen
e9f47ee2d5
created OS IMC/IMV pair
2012-10-09 23:58:36 +02:00
Andreas Steffen
49f0f7e7ca
implemented IETF Installed Packages attribute
2012-10-09 23:58:36 +02:00
Andreas Steffen
219d638db9
fixed PA-TNC error code to Invalid Parameter
2012-10-09 23:58:35 +02:00
Tobias Brunner