denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,230 Commits 1 Branch 0 Tags
dc1b2eb2e843d2547001959cbf136200a0c72c33
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner e6f42b0721 Include the destination net in the policy priority calculation. 
The resulting priorities are as follows:

    IPv6               IPv4
    routed   normal    routed   normal
max 4096(+3) 2048(+3)  4096(+3) 2048(+3)
min 3072     1024      3840     1792

Where min is for a policy between two single hosts and max is
for /0 on both ends (lower priorities are preferred by the kernel).
(+3) applies for cases where no protocol and no ports are defined.
 2010-12-07 12:14:50 +01:00
Tobias Brunner 503e1c558e CDP enumerator added to SQL plugin. 2010-12-03 18:07:17 +01:00
Tobias Brunner 37bc379951 Tables added for CAs and CDPs. 2010-12-03 18:07:17 +01:00
Tobias Brunner ece5d52e38 Migrated sql_cred_t to INIT/METHOD macros. 2010-12-03 18:07:17 +01:00
Tobias Brunner 75827463fa Insert certificates and secrets at the front of the lists. 
As the lookup is also from front to back, certificates added later are
now found first, which is useful in case of e.g. "reread cacerts".
 2010-12-03 18:00:00 +01:00
Tobias Brunner 5b2d9f24f5 Refactored stroke_cred_t to use mem_cred_t. 2010-12-03 18:00:00 +01:00
Tobias Brunner 5ad4fa295a Function add_crl added to mem_cred_t. 2010-12-03 18:00:00 +01:00
Tobias Brunner 982de5a5f5 Function added to clear secrets (but not certs) from mem_cred_t. 2010-12-03 18:00:00 +01:00
Tobias Brunner 68c7f18643 Alternative to mem_cred_t.add_cert added, which returns the certificate. 
If the certificate is already cached, the cached version is returned.
 2010-12-03 17:59:59 +01:00
Tobias Brunner 3023a75e67 Function added to mem_cred_t to add shared secret with a linked list of owners. 2010-12-03 17:59:59 +01:00
Tobias Brunner 88f97e5c34 Added functions to modify/create settings in settings_t. 2010-12-03 17:40:52 +01:00
Tobias Brunner e997706273 Added an option to create non-existing key/value pairs during search. 2010-12-03 17:40:52 +01:00
Tobias Brunner 011f901d55 Compare shorter "boolean" values first. 2010-12-03 17:40:52 +01:00
Tobias Brunner d657edf576 Helper functions added to easily convert enumerated values. 2010-12-03 17:40:52 +01:00
Tobias Brunner f2649f354d Ensure that sections exist when using load_files_section. 2010-12-03 17:40:52 +01:00
Tobias Brunner 67c464d1a9 Skip values and sections without key. 2010-12-03 17:40:52 +01:00
Tobias Brunner dc46fd5879 Some refactorings in lookup code in settings_t. 2010-12-03 17:40:52 +01:00
Tobias Brunner 9a1e5261d6 Added documentation about new features of settings_t. 2010-12-03 17:40:52 +01:00
Tobias Brunner b79f7d4208 Made settings_t thread-safe. 2010-12-03 17:40:52 +01:00
Tobias Brunner 0552135213 Added functions to settings_t to load files dynamically at runtime. 2010-12-03 17:40:52 +01:00
Tobias Brunner 6388a758ba Allow inclusion of other files in strongswan.conf. 2010-12-03 17:38:37 +01:00
Tobias Brunner 65d88a09f5 Loading of strongswan.conf refactored to a separate function. 2010-12-03 17:38:37 +01:00
Tobias Brunner 5e3be75829 Allow to replace/extend previously defined values/sections in strongswan.conf. 2010-12-03 17:38:37 +01:00
Tobias Brunner 3eb23f3864 Don't create a section in parse_section. 
Just add subsections and values to the passed section.
 2010-12-03 17:38:37 +01:00
Tobias Brunner f6037d79cf Removed unused static variable "lev". 2010-12-03 17:38:36 +01:00
Tobias Brunner 413d8fe0e3 Avoid calling globfree twice on failure. 2010-12-03 17:38:36 +01:00
Tobias Brunner e49bc77f90 Removed signing artifact. 2010-11-02 09:30:09 +01:00
Tobias Brunner 5feda42724 pluto: Fixed a regression introduced in f565d0c575. 
Since scx_add could return a previously created smartcard object, using
sc->last_cert to store the newly added certificate could lead to segfaults.
 2010-10-26 09:58:13 +02:00
Tobias Brunner 71711b67b4 pluto: Locking fixed in cert_add. 2010-10-26 09:58:13 +02:00
Tobias Brunner 4915ea8217 Updated Android.mk to latest Makefile.am. 2010-10-21 15:02:32 +02:00
Tobias Brunner ed174fd7e2 Added missing include for RAND_seed and RAND_status. 2010-10-21 14:16:09 +02:00
Tobias Brunner a5477a6fa3 Changed some minor stuff in ipsec.conf(5) man page. 
Also added some "links" to strongswan.conf(5).
 2010-10-19 17:18:30 +02:00
Tobias Brunner 6bcf6016e6 Added accepted values to all options in ipsec.conf(5) man page. 2010-10-19 17:16:07 +02:00
Tobias Brunner a6f8100812 Removed unsupported options from ipsec.conf(5) man page. 2010-10-19 17:06:57 +02:00
Tobias Brunner 8207a74200 Fixed SEE ALSO references in main man pages. 2010-10-19 10:53:54 +02:00
Tobias Brunner 9f8ceffbd9 Added notes about expiry and rekey to ipsec.conf(5) man page. 2010-10-19 10:53:54 +02:00
Tobias Brunner b3cabd1f03 Added some NEWS about Maemo, MOBIKE and the kernel interfaces. 2010-10-15 18:17:09 +02:00
Tobias Brunner 6c6492d7e8 Some Doxygen fixes. 2010-10-15 18:14:48 +02:00
Tobias Brunner 5ce1a63054 Missed one unneeded destructor. 2010-10-15 17:33:57 +02:00
Tobias Brunner fa20849431 Deferred instantiation of socket implmentations until registration. 
Instantiating the implementations on plugin load was problematic
in case multiple socket plugins were loaded. Now, the first one
registered is instantiated.
 2010-10-15 17:30:21 +02:00
Tobias Brunner d3622166dd Added some generated files to .gitignore. 2010-10-15 10:25:08 +02:00
Tobias Brunner cf1bf2656e Moved sources of the NetworkManager plugin to src/frontends. 2010-10-14 17:47:02 +02:00
Tobias Brunner 333bb05122 Maemo: Added a basic debian package for charon. 2010-10-14 17:36:20 +02:00
Tobias Brunner c2fad1916a Avoid recursive loop if no socket implementations are loaded. 2010-10-14 17:36:20 +02:00
Tobias Brunner 070b63d704 Maemo: Added a widget to "unselect" a certificate. 2010-10-14 17:36:20 +02:00
Tobias Brunner 889c7947a6 Avoid duplicate certificates in mem_cred_t. 2010-10-14 17:36:20 +02:00
Tobias Brunner 3a6c5493af Maemo: Load CA certificates from system directories. 2010-10-14 17:36:20 +02:00
Tobias Brunner 31e7a45647 Maemo: OK is default response in password dialog. 2010-10-14 17:36:20 +02:00
Tobias Brunner be26f9a280 Maemo: Handle status changes from charon. 
Use synchronous invocation for "Connect" again.
 2010-10-14 17:36:19 +02:00
Tobias Brunner ef247379ea Maemo: Track the status of the current SA and send changes to the frontend. 2010-10-14 17:36:19 +02:00
Tobias Brunner 6f59971371 Maemo: Properly unregister the RPC callbacks. 2010-10-14 17:36:19 +02:00
Tobias Brunner 9f01ba4044 Maemo: Plugin implements the listener_t interface. 2010-10-14 17:36:19 +02:00
Tobias Brunner 39e5b21310 Maemo: Extracted most plugin code to a separate class, so we can use that as listener. 2010-10-14 17:36:19 +02:00
Tobias Brunner 4fef86d1ed Maemo: Initiate consumes a child_sa reference, so get an additional one. 2010-10-14 17:36:19 +02:00
Tobias Brunner 28c51809a7 Maemo: Basic functionality added to notify the applet about status updates. 2010-10-14 17:36:19 +02:00
Tobias Brunner c213353393 Maemo: Clear the credentials before each connection attempt. 2010-10-14 17:36:19 +02:00
Tobias Brunner 5232ebb1b4 Added function to clear all credentials from mem_cred_t. 2010-10-14 17:36:19 +02:00
Tobias Brunner 8a47cd909b Maemo: Do not store the password in the config file, ask the user for it on demand. 2010-10-14 17:36:19 +02:00
Tobias Brunner 04164cba44 Maemo: Debianized the status applet. 2010-10-14 17:36:18 +02:00
Tobias Brunner 12b61b17ae Maemo: Added basic connect/disconnect functionality to frontend. 2010-10-14 17:36:18 +02:00
Tobias Brunner c0d9c1817b Maemo: Listen for a special "Start" D-BUS call. 
This call is made on the system D-BUS so that charon is started as root.
 2010-10-14 17:36:18 +02:00
Tobias Brunner 174b31bce6 Maemo: Added support for connection initiation and shutdown. 2010-10-14 17:36:18 +02:00
Tobias Brunner e29aa7696f Fixed possible segmentation fault. 2010-10-14 17:36:18 +02:00
Tobias Brunner 9889c9d84c Maemo: Do not unref the dialog. 2010-10-14 17:36:18 +02:00
Tobias Brunner ab02058d78 Maemo: Improved icon loading in status applet. 2010-10-14 17:36:18 +02:00
Tobias Brunner df4f82a9ad Maemo: Register the status applet with libosso. 2010-10-14 17:36:18 +02:00
Tobias Brunner 8464e25a0f Maemo: Register with libosso and init Glib main loop. 2010-10-14 17:36:18 +02:00
Tobias Brunner 2bce814190 Maemo: Register charon as D-BUS system service. 
In order to be able to access this service via libosso, charon is
started with the run-standalone.sh script, which sets up the required
environment.
 2010-10-14 17:36:18 +02:00
Tobias Brunner 8411dc6e70 Maemo: Changed the input mode of several text boxes. 2010-10-14 17:36:17 +02:00
Tobias Brunner ce736b759b Maemo: Ensure that the settings directory exists. 2010-10-14 17:36:17 +02:00
Tobias Brunner 005e45330d Fixed a subtle SIGSEGV. 2010-10-14 17:36:17 +02:00
Tobias Brunner f79161e866 Stub plugin for Maemo specific extensions added. 2010-10-14 17:36:17 +02:00
Tobias Brunner 8df3749c6a Dialog to initiate or terminate connections added. 2010-10-14 17:36:17 +02:00
Tobias Brunner 59df6ff93c Enable dynamic registration of StrongswanConnection(s) type. 
Because status menu plugins get loaded and unloaded dynamically by the
Hildon Desktop, we have to register our Types dynamically.
 2010-10-14 17:36:17 +02:00
Tobias Brunner 41b2fbb29f Initial version of the Hildon Desktop status menu plugin. 2010-10-14 17:36:17 +02:00
Tobias Brunner d8f4efbf7b Adding, editing and deleting connections is now possible in the settings plugin. 2010-10-14 17:36:17 +02:00
Tobias Brunner 2bf0caec66 Adding a dialog to the settings plugin that lists all connections. 2010-10-14 17:36:17 +02:00
Tobias Brunner 980c1b6e07 Helper methods added to StrongSwanConnections to easily show connections in a list widget. 2010-10-14 17:36:17 +02:00
Tobias Brunner 01f7455640 Management class for connection settings added, connections are stored in a simple GKeyFile. 2010-10-14 17:36:17 +02:00
Tobias Brunner 9a09e32b98 Simple GObject based class for connection settings added. 2010-10-14 17:36:16 +02:00
Tobias Brunner d50670d50e Adding a stub plugin for the Hildon control panel. 2010-10-14 17:36:16 +02:00
Tobias Brunner 0261b12419 Adding autotools framework for the maemo frontend. 2010-10-14 17:36:16 +02:00
Tobias Brunner e7e48fff9f Added ssh_config to distribution. 2010-10-14 15:58:26 +02:00
Tobias Brunner 7ec11936e8 testing: Reduce testing runtime by reusing SSH sessions. 
By using the ControlMaster and ControlPath options, existing SSH sessions
are reused (a session to each host is opened at the beginning of a test
run).  Also, RC4 is used as encryption algorithm to further improve the
performance.  These changes reduce the runtime by over 20%.
 2010-10-14 14:01:26 +02:00
Tobias Brunner 972663ccb0 Define explicit IKEv1 keyexchange mode IV. 2010-10-14 13:55:04 +02:00
Tobias Brunner 4d10e260de pluto: Install inbound policies together with outbound policies. 
This avoids an error message when uninstalling the policies and charon
did it already like this.
 2010-10-14 13:53:20 +02:00
Tobias Brunner d4b8f98c1a Store the exit code of executed commands in Dumm::Guest.execstatus. 
Also, no exception is risen for failed exec calls, anymore.
 2010-10-12 15:41:17 +02:00
Tobias Brunner d679266fe1 Map the guests to a ruby hash to avoid creating new ruby objects on each call of Guest.each or Guest[]. 2010-10-12 15:04:38 +02:00
Tobias Brunner 9b0847dd9a Exposed the mutli-overlay functionality in the ruby bindings. 
Overlays can be added to individual guests (which overlays exactly the
supplied directory) or to all guests (which overlays a subdirectory
with the guest's name to each guest).

The template functionality is provided as before.
 2010-10-12 15:03:37 +02:00
Tobias Brunner f29396b87e Added support for multiple overlays to the main library. 
Also implemented the template functionality using the new overlay functions.
 2010-10-12 15:03:27 +02:00
Tobias Brunner 0dbbd47fe7 Added support for multiple overlays to guests (replaces the template functionality). 
Compared to a template an overlay is an arbitrary directory, not the
parent directory of a directory with the guest's name.
 2010-10-12 15:03:26 +02:00
Tobias Brunner 4542920a3e Added support for multiple overlays to the copy-on-write filesystem. 2010-10-12 15:03:19 +02:00
Tobias Brunner 1dbf0ed982 Do not add additional addresses to MOBIKE path probing messages. 2010-10-12 11:11:06 +02:00
Tobias Brunner 5774408898 Change behavior of responder during roaming. 
If the current source address is not available anymore, the responder
uses ike_mobike_t.roam, thus, uses multiple address combinations when
trying to notify the initiator.
 2010-10-12 11:11:05 +02:00
Tobias Brunner c5770f864f Allow responder to use ike_mobike_t.roam. 
After getting a response the responder updates the IPsec SAs.
 2010-10-12 11:11:05 +02:00
Tobias Brunner 261b2572d1 Send list of additional addresses even if current path is still valid. 2010-10-12 11:11:05 +02:00
Tobias Brunner bab56a4abb Extracted path checking in ike_sa_t.roam into separate functions. 2010-10-12 11:11:05 +02:00
Tobias Brunner 769c69facc Added support for responders to change their address via MOBIKE. 
If the original responder updates its list of additional addresses we
check if the remote endpoint changed and update the IPsec SAs if it did,
as we assume the original address became unavailable and the responder
already updated the SAs on its side.
 2010-10-12 11:11:05 +02:00
Tobias Brunner 13876431d6 Explicitly configure MOBIKE tasks to update the list of additional addresses. 2010-10-12 11:11:05 +02:00
Tobias Brunner 31e7dc4dfd Improved check for first IKE_AUTH message in ike_mobike task. 
If the original responder initiated a MOBIKE exchange, the previous
check was not always correct.
 2010-10-12 11:11:05 +02:00