 Martin Willi
|
d61d1913e1
|
ignore IPCOMP acquires, fixes additional CHILD_SA setup with acquired SAs using compression
|
2008-07-17 08:25:34 +00:00 |
|
|
Martin Willi
|
7ca49551c8
|
do not distinguish different policy protocols in userland cache
|
2008-07-16 12:33:19 +00:00 |
|
|
Martin Willi
|
7b9e1ff0fd
|
do not complain about existing routes
|
2008-07-16 12:30:47 +00:00 |
|
|
Martin Willi
|
8384cfa338
|
build dumm with leak ./configure
|
2008-07-16 11:54:44 +00:00 |
|
|
Martin Willi
|
7beea2e99f
|
fixed acquire-delay bug by:
installing policies before states
updating policies if protocol has changed
|
2008-07-16 11:51:37 +00:00 |
|
|
Martin Willi
|
66d4745f8e
|
ported patch to final 2.6.26 release, including UML Makefile fixes
|
2008-07-15 14:41:12 +00:00 |
|
|
Martin Willi
|
ef3f717bfe
|
reverted [4125],[4166], reimplemented the proper way
|
2008-07-11 08:54:56 +00:00 |
|
|
Martin Willi
|
6b5d95919c
|
setting ike_sa on bus in checkout_new
|
2008-07-11 08:47:18 +00:00 |
|
|
Martin Willi
|
e7991a2eef
|
do a route lookup to allow routing of left=%any connections
|
2008-07-09 14:16:19 +00:00 |
|
|
Martin Willi
|
6c652e6b55
|
added /usr/local/[s]bin to uml exec path
|
2008-07-09 12:39:11 +00:00 |
|
|
Martin Willi
|
ddf944be3e
|
loading ruby scripts specified at command line
|
2008-07-09 12:18:06 +00:00 |
|
|
Martin Willi
|
a9c46ace99
|
ruby bindings/fixes for template loading
|
2008-07-09 11:43:48 +00:00 |
|
|
Martin Willi
|
ee70c94835
|
passing a block to guest.exec() processes output lines
|
2008-07-09 10:51:10 +00:00 |
|
|
Martin Willi
|
bf44108019
|
uml "exec" writes stdout/stderr back to mconsole
guest->exec() accepts a callback for output
sligtly refactored mconsole.c
|
2008-07-08 14:58:20 +00:00 |
|
|
Martin Willi
|
02a6083633
|
guest interface/address management using hackish mconsole exec patch, ruby bindings
|
2008-07-07 14:56:04 +00:00 |
|
|
Martin Willi
|
36beca7cef
|
disconnecting interfaces properly on bridge destruction
|
2008-07-05 09:32:55 +00:00 |
|
|
Martin Willi
|
c4d72bdb01
|
throwing proper exeptions on errors, correct return values
mixin enumerable in classes/objects with .each
|
2008-07-04 16:42:54 +00:00 |
|
|
Martin Willi
|
ca275ae2ca
|
prototype of irdumm - interactive ruby shell for dumm
|
2008-07-04 14:21:41 +00:00 |
|
|
Martin Willi
|
4302d4f012
|
some stability improvements
|
2008-07-04 06:58:04 +00:00 |
|
|
Martin Willi
|
4a231f1a2e
|
changed medcli settings keys
|
2008-07-02 09:02:38 +00:00 |
|
|
Martin Willi
|
d932435e18
|
sql plugin supports a list of pools to fall back, specified by e.g. rightsourceip=%pool1,pool2
|
2008-07-02 08:31:48 +00:00 |
|
|
Martin Willi
|
11e855179e
|
using token enumerator to parser plugin list
|
2008-07-02 08:19:43 +00:00 |
|
|
Martin Willi
|
5848e473e8
|
fixed another compiler warning
|
2008-07-02 08:16:43 +00:00 |
|
|
Martin Willi
|
fca4d3ee03
|
implementation of a simple "token enumerator"
|
2008-07-02 08:09:07 +00:00 |
|
|
Martin Willi
|
2f2b99282a
|
fixed compiler warning
updated svn:ignore property
|
2008-07-02 08:05:51 +00:00 |
|
|
Martin Willi
|
ab89517218
|
fixed medsrv database uri key
|
2008-07-01 13:57:47 +00:00 |
|
|
Martin Willi
|
131064995a
|
added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by remote virtual ip
|
2008-07-01 12:48:56 +00:00 |
|
|
Martin Willi
|
d01783dba4
|
logging peer addresses in peer_cfg lookup
|
2008-07-01 11:10:37 +00:00 |
|
|
Martin Willi
|
9eeaa25f5d
|
added host match prio to debugging output
|
2008-07-01 11:01:27 +00:00 |
|
|
Martin Willi
|
62bd123952
|
peer_cfg lookup takes peer addresses into account
|
2008-07-01 09:05:20 +00:00 |
|
|
Martin Willi
|
866ba8e0b6
|
strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if CHILD_SA setup in IKE_AUTH fails
|
2008-07-01 07:54:09 +00:00 |
|
|
Martin Willi
|
fe5d7c43be
|
whitelisting leaks of ENGINE_load_builtin_engines
|
2008-07-01 07:53:03 +00:00 |
|
|
Martin Willi
|
d510eaea47
|
sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none found
|
2008-07-01 06:36:52 +00:00 |
|
|
Martin Willi
|
b119f89a4e
|
fixed chunk_increment, fixes reuse of already assigned addresses
|
2008-06-30 12:33:38 +00:00 |
|
|
Martin Willi
|
7da767f773
|
sqlite plugin requires libsqlite3 => 3.3.1 to share connections
use recursive locking if libsqlite3 < 3.5.0
|
2008-06-30 11:06:18 +00:00 |
|
|
Martin Willi
|
aafe8ced39
|
added strongswan.conf option charon.reuse_iksa=no to create each CHILD_SA in a new IKE_SA
|
2008-06-30 08:45:11 +00:00 |
|
|
Martin Willi
|
c66a1b757f
|
ike/kernel protocol identifier conversion functions
|
2008-06-26 08:59:39 +00:00 |
|
|
Martin Willi
|
854a2e1760
|
fixed ifndef typo for MYSQL_DATA_TRUNCATED check
|
2008-06-26 07:31:52 +00:00 |
|
|
Martin Willi
|
236083cb56
|
fixed plugin loader destruction
|
2008-06-25 14:53:49 +00:00 |
|
|
Martin Willi
|
7e8af02626
|
flushing task_manager on shutdown while IKE_SA is usable
|
2008-06-25 11:40:50 +00:00 |
|
|
Martin Willi
|
fae6e24dad
|
reintroducing MYSQL_DATA_TRUNCATED if supported on that mysql version
|
2008-06-24 14:30:14 +00:00 |
|
|
Martin Willi
|
a02bc1dbea
|
updated location of auth_class_t
|
2008-06-24 13:36:10 +00:00 |
|
|
Martin Willi
|
eec675bf8c
|
enumerating loaded plugins in "ipsec statusall"
|
2008-06-24 12:49:04 +00:00 |
|
|
Martin Willi
|
857ba3574b
|
fixed "double-close" of stroke fd resulting in "bad fd" errors if multiple threads are active
|
2008-06-23 08:53:37 +00:00 |
|
|
Martin Willi
|
417421048c
|
fixed medsrv mysql scheme
|
2008-06-23 08:30:57 +00:00 |
|
|
Martin Willi
|
e9ab669bc2
|
resolving hosts before route
|
2008-06-23 08:30:35 +00:00 |
|
|
Martin Willi
|
51f69943fc
|
added missing medsrv script.js to dist
|
2008-06-20 08:47:06 +00:00 |
|
|
Martin Willi
|
a47e16a508
|
including sys/queue.h to support TAILQ_LAST() macro
|
2008-06-20 08:17:03 +00:00 |
|
|
Martin Willi
|
9bbb794afc
|
shipping own linux/types.h for introduced __be32 in linux/xfrm.h
|
2008-06-20 08:15:38 +00:00 |
|
|
Martin Willi
|
29727a4447
|
compatibility fix for other shells than bash >= 3.1
|
2008-06-20 07:56:01 +00:00 |
|
|
Martin Willi
|
1345ebad0f
|
removed unused MYSQL_DATA_TRUNCATED check for compatibility with older mysql versions
|
2008-06-20 07:37:55 +00:00 |
|
|
Martin Willi
|
bb1383183c
|
support in smp for terminate-by-name
|
2008-06-20 07:14:35 +00:00 |
|
|
Martin Willi
|
364fca2cee
|
fixed identation
|
2008-06-19 11:50:13 +00:00 |
|
|
Martin Willi
|
252015f017
|
medcli initiates "active" connections on startup
|
2008-06-19 11:09:48 +00:00 |
|
|
Martin Willi
|
a5b8e6976b
|
medcli plugin writes connection status to database
|
2008-06-19 08:46:34 +00:00 |
|
|
Martin Willi
|
cc7d8dca38
|
fixed UCI default proposals
|
2008-06-18 13:32:23 +00:00 |
|
|
Martin Willi
|
fdacb2f181
|
support for more config options in UCI plugin
|
2008-06-18 08:50:32 +00:00 |
|
|
Martin Willi
|
61c4638646
|
first simple prototype of a UCI configuration plugin for OpenWRT
|
2008-06-17 14:17:51 +00:00 |
|
|
Martin Willi
|
285152b33d
|
do not use self-installed route for IKE if routing table is 0
|
2008-06-17 08:04:12 +00:00 |
|
|
Martin Willi
|
9e9d3ddc12
|
scepclient requires libcrypto to build
|
2008-06-16 07:10:48 +00:00 |
|
|
Martin Willi
|
eab63e8476
|
fixed matches() check for RFC822/FQDN without wildcards
|
2008-06-13 15:10:01 +00:00 |
|
|
Martin Willi
|
1726ca1027
|
implemented identification_t.match() case insensitive for RFC822/FQDN
|
2008-06-12 14:17:37 +00:00 |
|
|
Martin Willi
|
035930fc4a
|
added %P printf handler for poposal_t
added some proposal selection debugging code
|
2008-06-12 11:42:19 +00:00 |
|
|
Martin Willi
|
9529fb6836
|
added mediation server web frontend
updated charons medsrv plugin to updated database scheme
|
2008-06-11 14:13:24 +00:00 |
|
|
Martin Willi
|
697678979e
|
passing controller arguments to filter, not controller itself
|
2008-06-11 14:11:01 +00:00 |
|
|
Martin Willi
|
66860d3b8f
|
loading PEM encoded public keys
|
2008-06-11 14:10:02 +00:00 |
|
|
Martin Willi
|
d1ebd5de22
|
reduced default debug hook verbosity
|
2008-06-11 14:09:46 +00:00 |
|
|
Martin Willi
|
63608c9fc6
|
fixed compile error of medsrv plugin
|
2008-06-11 07:45:25 +00:00 |
|
|
Martin Willi
|
e484f7f3dd
|
fixed resolving numerical IPv6 addresses in host_create_from_dns()
|
2008-06-11 07:44:23 +00:00 |
|
|
Martin Willi
|
d35effa89b
|
fixed resolving numerical addresses in host_create_from_dns()
|
2008-06-11 07:31:24 +00:00 |
|
|
Martin Willi
|
ddedf511bb
|
fixed compile error in smp plugin
|
2008-06-10 11:29:46 +00:00 |
|
|
Martin Willi
|
a8ed846be7
|
added strongswan.conf option "routing_table" and "routing_table_prio"
|
2008-06-10 07:51:21 +00:00 |
|
|
Martin Willi
|
208b3baf10
|
fixed "enabled" value key word
more debugging for settings parser
|
2008-06-10 07:14:34 +00:00 |
|
|
Martin Willi
|
5dcda9e25b
|
added strongswan.conf option to disable route installation
|
2008-06-10 06:58:39 +00:00 |
|
|
Martin Willi
|
5a22a02156
|
DNS resolving of ike_cfg hosts dynamically on demand
|
2008-06-06 15:05:54 +00:00 |
|
|
Martin Willi
|
1e9c46f13d
|
configure option for updown firewall scripts
|
2008-06-06 08:24:39 +00:00 |
|
|
Martin Willi
|
915e04b2dd
|
extended leak detective white list for OpenSSL
|
2008-06-06 08:13:11 +00:00 |
|
|
Martin Willi
|
e581a31d6a
|
link against openssl crypto library only
|
2008-06-06 08:04:42 +00:00 |
|
|
Martin Willi
|
6649a3ca80
|
fixed --utc parsing position
support for DN filtering usign id="CN=asdf, O=asdf",addr=1.1.1.1
changed order of --leases columns
|
2008-06-05 13:56:10 +00:00 |
|
|
Martin Willi
|
4fa74562ae
|
fixed UTC identitation
implement filtering in --leases
|
2008-06-05 08:52:27 +00:00 |
|
|
Martin Willi
|
0f7aecf402
|
fixed NULL string mysql parameter
|
2008-06-05 08:24:55 +00:00 |
|
|
Martin Willi
|
011b1cca94
|
do not roam IKE_SA in created or deleting state
|
2008-06-04 14:31:06 +00:00 |
|
|
Martin Willi
|
2ba1f9e761
|
added pool statistics (size, online, lease count, with usage ratio)
|
2008-06-04 14:01:44 +00:00 |
|
|
Martin Willi
|
f3e11fc478
|
some input validation checks for --add and --resize
--purge keeps an entry for each address to allow their reallaction
|
2008-06-04 13:18:55 +00:00 |
|
|
Martin Willi
|
f13e23754f
|
tolerating chown failures on installation, required to build some packages
|
2008-06-04 12:09:24 +00:00 |
|
|
Martin Willi
|
9fa66e8bbf
|
removed unused variable
|
2008-06-03 12:14:02 +00:00 |
|
|
Martin Willi
|
7624dbf068
|
process payload length more strictly
|
2008-05-23 18:23:17 +00:00 |
|
|
Martin Willi
|
5e17e35c8d
|
fixed some compiler warnings
|
2008-05-23 15:49:43 +00:00 |
|
|
Martin Willi
|
de3d65a132
|
filtering out non matching path probing pairs explicitly
|
2008-05-23 15:43:42 +00:00 |
|
|
Martin Willi
|
e1d2435dbf
|
fixed parsing of UNKNOWN_PAYLOADs
|
2008-05-21 21:53:38 +00:00 |
|
|
Martin Willi
|
85a119bc0b
|
replying to COOKIE2 mobike notify properly
including COOKIE2 ourself after path probing
|
2008-05-21 17:56:21 +00:00 |
|
|
Martin Willi
|
ce62751b60
|
writing guest pid to file (simplifies debugging)
|
2008-05-21 16:02:16 +00:00 |
|
|
Martin Willi
|
cb9edc54eb
|
using fixed size keys in key derivation for AES-XCBC PRF
|
2008-05-21 14:58:03 +00:00 |
|
|
Martin Willi
|
4f23ec78d1
|
added more verbosity if signature hash OID is unknown
|
2008-05-21 13:01:58 +00:00 |
|
|
Martin Willi
|
da1bc5e860
|
fixed loading of smp plugin
|
2008-05-19 14:20:07 +00:00 |
|
|
Martin Willi
|
0b0fba9e0d
|
fixed warning if plugin list has trailing whitespaces
|
2008-05-16 13:48:58 +00:00 |
|
|
Martin Willi
|
99968bf0a0
|
fixed plugin names of EAP modules
|
2008-05-16 12:14:48 +00:00 |
|
|
Martin Willi
|
987a42c05e
|
moved manager to its own subdirectory in ipsecdir
|
2008-05-16 09:13:23 +00:00 |
|
|
Martin Willi
|
1ba62b5562
|
loading default modules depending on configure options
|
2008-05-16 08:52:32 +00:00 |
|
|
Martin Willi
|
7f491111e6
|
some NEWS for 4.2.2
|
2008-05-15 14:15:27 +00:00 |
|