denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,255 Commits 1 Branch 0 Tags
d7c529f5a6d123a94dd987f37d402534363a0835
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi d7c529f5a6 creating public key from RSA private key 
RSA key generation and signature test
 2008-03-18 12:13:51 +00:00
Martin Willi 50045c3b14 better normalized tables for SQL plugin (IDs) 2008-03-18 09:07:04 +00:00
Martin Willi 34e281ed32 enforcing x509_flags on certificate construction 2008-03-17 08:06:49 +00:00
Martin Willi d4ba109c9c fixed CRL revoked certs enumeration 2008-03-17 07:25:32 +00:00
Martin Willi 933f80c391 logging to SQL database 2008-03-15 14:17:09 +00:00
Martin Willi 72d68379dc correctly unregister IKE_SA at the bus 2008-03-15 14:08:43 +00:00
Martin Willi 8d04f78d07 removed X509_PEER flag; flags are meant to read cert, not to store additional state in cert 
removed x509_t.set_flags for the reason above
implemented a simple, generic shared_key_t
 2008-03-14 15:11:29 +00:00
Martin Willi 39ea88f694 credential lookup in mysql/sqlite database 2008-03-14 15:06:42 +00:00
Martin Willi 9c410a8806 refactored buggy trustchain building, fixed refcount bug 2008-03-14 15:04:16 +00:00
Martin Willi dbcf4e7451 reduced mysql pool verbosity 2008-03-14 15:03:19 +00:00
Martin Willi 8f1596d606 SQL schema for MySQL and SQLite, test data 2008-03-14 07:39:01 +00:00
Martin Willi e42db695e2 fixed apidoc grouping 2008-03-13 14:53:57 +00:00
Martin Willi 419ee1072e added NetworkManager prototype DBUS policy, applet config 2008-03-13 14:41:27 +00:00
Martin Willi 2d94fdfab7 added old and unmaintained prototype of NetworkManager applet and authenticator 2008-03-13 14:37:11 +00:00
Martin Willi b820f8aa8e reverted accidentally commited testing config 2008-03-13 14:20:20 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Martin Willi e633b1998f creating sysconfdir if it does not exist 
moved all directory creations into starters Makefile
 2008-02-22 14:50:38 +00:00
Martin Willi 5bbac9ffff split connections with different virtual IPs in different peer_cfgs 
respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA
 2008-02-05 12:39:30 +00:00
Martin Willi 3b1692c058 use identifiers in EAP_SUCCESS/EAP_FAILURE payloads 2008-02-04 11:43:10 +00:00
Martin Willi 3a36ce1164 added missing hasher include 2008-01-03 10:42:21 +00:00
Martin Willi b8461a37db fixed EAP-MD5 to accept Name attribute in challenge 2007-12-18 10:44:44 +00:00
Martin Willi fdc7c943f9 updated NEWS 2007-12-13 17:52:49 +00:00
Martin Willi 0f806802ae implemented Expanded EAP types to support vendor specific methods 2007-12-13 17:31:21 +00:00
Martin Willi 3243ac6d5e fixed actual ID length when AT_IDENTITY gets padded 2007-12-13 14:39:38 +00:00
Martin Willi 26e2467692 ported EAP-AKA branch into trunk 2007-12-13 10:54:29 +00:00
Martin Willi 4b403e7672 merged EAP-MD5 into trunk 2007-12-12 14:29:10 +00:00
Martin Willi f9d80d53c3 accept unknown attributes in config payloads 2007-12-09 19:43:41 +00:00
Martin Willi 98d0002644 fixed build when using --disable-pluto 2007-12-07 10:25:01 +00:00
Martin Willi 3895125275 removed c++ style comments 
fixed compiler warnings
 2007-12-04 10:48:27 +00:00
Martin Willi b8249ff5ed fixed mobike/auth_lifetime in conjunction with p2p-natt 2007-12-04 10:05:36 +00:00
Martin Willi 8b678ad461 updated NEWS 2007-12-03 14:48:04 +00:00
Martin Willi cbfb2aff50 added more ./configure build options for 
EAP-Identity module
  ipsec tools (openac, scepclient)
  optional charon/pluto build
  charon stroke interface
 2007-12-03 14:47:15 +00:00
Martin Willi 7805ad302d moved AUTH_LIFETIME handling in its own task (cleaner separation, proper payload order) 2007-12-03 10:52:18 +00:00
Martin Willi 8e78e43220 added a "libcharon-" prefix to plugins to avoid conflicts 2007-12-03 09:03:22 +00:00
Martin Willi 733f336ad3 socket_t implementation withouth raw sockets 
--disable-raw-socket configure option
  prevents charon/pluto to run in parallel
 2007-11-26 11:20:00 +00:00
Martin Willi 8499042452 updated TODO 2007-11-20 12:26:37 +00:00
Martin Willi 6f274c2ae1 updated NEWS 2007-11-20 12:23:39 +00:00
Martin Willi ee61471113 implemented RFC4478 (repeated authentication) 
changed %V printf handler to take a time delta, %#V now takes two arguments
 2007-11-20 12:06:40 +00:00
Martin Willi 7b36b734a4 fixed callback_job cancellation for threads waiting in the bus 2007-11-19 12:32:28 +00:00
Martin Willi e533b928f0 fixed memrchr compiler warning 2007-11-19 12:27:08 +00:00
Martin Willi 729a6ec965 fixed two leaks in stroke_interface 2007-11-19 11:28:11 +00:00
Martin Willi e101f162ab refactored bus and interface to resolve threading issues (WIP) 2007-11-15 18:35:54 +00:00
Martin Willi 1871cffdc4 be less agressive, but more verbose in killing charon 2007-11-15 18:34:05 +00:00
Martin Willi 73294df547 added IKE IP addresses to config list for manager 2007-11-15 10:09:48 +00:00
Martin Willi 5d4aea685f filtering out IKEv1 configurations for manager 2007-11-15 10:09:14 +00:00
Martin Willi 93fc29c6cf fixed daemon kill before threads are spawned 2007-11-14 10:12:34 +00:00
Martin Willi 91b16af0fa fixed NO_PROPOSAL_CHOSEN response on IKE_SA_INIT 2007-11-14 09:41:08 +00:00
Martin Willi a8cd906576 changed session timeout to 15 minutes 2007-11-13 12:00:02 +00:00
Martin Willi e8287a405e implemented IKE_SA initiation in manager 2007-11-13 11:58:28 +00:00
Martin Willi 30a68d715b implemented configuration query and IKE_SA initiation in XML interface 2007-11-13 11:56:52 +00:00
Martin Willi e36f5f3fd3 configuration query for manager (WIP) 2007-11-12 18:34:50 +00:00
Martin Willi 55b02db74e implemented IKE/CHILD_SA close through manager 2007-11-12 15:09:11 +00:00
Martin Willi 275cec2eac implemented IKE/CHILD_SA termination through XML interface 2007-11-12 15:06:04 +00:00
Martin Willi 00fb758755 adding new virtual ip before deleting old one to keep IP on reauthentication 2007-10-25 07:50:23 +00:00
Martin Willi bd99d1852a added vsignal todo 2007-10-25 07:49:32 +00:00
Martin Willi 0e0e7d5b71 request_t.redirect takes variable argument list 
request_t.serve to serve non-template data
fixed dispatcher thread locking code
 2007-10-19 19:40:53 +00:00
Martin Willi 04685885f5 added addr2strongline script which helps to resolve leaking symbols in libstrongswan 2007-10-11 13:40:52 +00:00
Martin Willi 39a8e5a580 fixed some typos 2007-10-05 09:52:23 +00:00
Martin Willi 1169ab4ec7 removed recursive mutex and __USE_UNIX98, should fix uClibc build 2007-10-05 09:47:55 +00:00
Martin Willi 6705052c2d fixed bad cast which resulted in a crash on "ipsec update" 2007-10-05 09:13:03 +00:00
Martin Willi 493f377b41 fixed memory leak 2007-10-04 15:20:00 +00:00
Martin Willi c96aefe268 implemented an optional DH public value test 
some other cleanups, using RFC2631 variable names
 2007-10-04 15:19:24 +00:00
Martin Willi 40f10fd88e cleanups, fixes and simplification of diffie hellman code 2007-10-04 12:08:11 +00:00
Martin Willi a7e65d5262 implemented enumerator for linked_list 2007-10-04 08:40:20 +00:00
Martin Willi d62a4526fd moved enumerator from libappserv to libstrongswan 2007-10-04 08:21:53 +00:00
Martin Willi b9bc74979e fixed sqlite_backend compilation to respect changes from [3238] 2007-10-04 08:18:42 +00:00
Martin Willi 99670c3714 proper cleanup on error 2007-10-03 15:07:46 +00:00
Martin Willi 6a8e7381d0 more libstrongswan-like error handling in optionsfrom 2007-10-03 15:02:29 +00:00
Martin Willi 2970674faf reverted changeset [3215], as we need NULL callback to do asynchronous calls 
added interface_manager_cb_empty function, which calls synchronous but doesn't do anything
 2007-10-03 08:10:03 +00:00
Martin Willi a6f31da40a added missing enumerator implementation 2007-10-03 05:29:49 +00:00
Martin Willi 06d00e4f7b fixed "ipsec statusall" SPI formatting 2007-10-02 13:11:23 +00:00
Martin Willi e4c9b92171 fixed sqlite database path 2007-10-02 11:55:19 +00:00
Martin Willi 6e19327473 updated NEWS for 4.1.7 2007-10-02 11:36:54 +00:00
Martin Willi 754f90165f added thread initialization/deinitialization hooks 
moved empty_enumerator to a public implementation
 2007-10-02 11:23:14 +00:00
Martin Willi 06011f6882 remove control sockets on startup, as we don't have privileges on shutdown 2007-10-02 11:20:07 +00:00
Martin Willi a3f100fa09 improved debugging code for traffic selector processing 2007-10-02 07:39:56 +00:00
Martin Willi f9b8417a7c renamed force_encap to forceencaps (as it is named in openswan) 2007-10-02 06:57:58 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 011fb1b97e removed accidentally checked in debugging code 2007-10-01 12:25:26 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi 92232dab33 fixed stuid()/setgid() and error handling 2007-10-01 09:07:10 +00:00
Martin Willi 9f3c55cdc4 fixed updown script privilige inheritance for pluto, too 2007-09-28 09:42:55 +00:00
Martin Willi f215e91999 implemented more aggressive MOBIKE path probing 
do not queue more than one MOBIKE task
 2007-09-28 08:22:37 +00:00
Martin Willi 052d58feaf fixed CHILD_SA SPI byte order in XML interface 2007-09-28 07:05:15 +00:00
Martin Willi 055d016b49 changed inheritable capability set to the permitted one to execute firewall script with CAP_NET_ADMIN 2007-09-28 07:04:09 +00:00
Martin Willi 780050cbc3 implemented proper argument parsing code 2007-09-28 06:43:59 +00:00
Martin Willi a57ab4d690 removed colons from session cookie 2007-09-27 13:10:10 +00:00
Martin Willi 85c6fc0283 reduced debbugging level 2007-09-27 13:09:50 +00:00
Martin Willi 983d7cd292 made add_ip()/del_ip() calls synchron (waiting until kernel event received) 
this should fix MOBIKE route migration with virtual IPs
 2007-09-27 12:48:00 +00:00
Martin Willi 93720075df implemented SHA1 encrypted passwords for manager 2007-09-27 07:15:47 +00:00
Martin Willi 324abae2ef added vsyslog to leak detectives white list 
removed debugging hook on openac cleanup
 2007-09-27 06:40:50 +00:00
Martin Willi 87d0427def updated TODO 2007-09-26 15:08:34 +00:00
Martin Willi 8207e3ea4d fixed argument processing bug 2007-09-26 15:07:34 +00:00
Martin Willi c295d0eb4b refactored strongswan manager 
removed buggy request parsing code, use ClearSilvers CGI kit instead
fixed CHILD_SA listing in manager (needs better design)
using secure XML communication through unix sockets
removed images with questionable (non-GPL) license
 2007-09-26 14:02:21 +00:00
Martin Willi d9d69536b0 improved MOBIKE roaming between interfaces 2007-09-24 12:15:25 +00:00
Martin Willi 740153e6f7 fixed typo / include 2007-09-18 13:30:01 +00:00
Martin Willi 8f561d4409 prototype implemementation of an sqlite configuration backend 2007-09-18 07:12:21 +00:00
Martin Willi c93a608747 removed unneded template logout.cs, fixes #10 2007-09-18 05:37:31 +00:00
Martin Willi bd2e6c0347 added connection name to IKE_SA title 2007-09-14 14:18:09 +00:00
Martin Willi d919f2f8db added missing distribution/install files 2007-09-14 14:17:43 +00:00