 Martin Willi
|
dcbea444ee
|
fixed memleak
|
2008-11-04 13:01:36 +00:00 |
|
|
Martin Willi
|
480be6436a
|
added a delay option to delay initiations
|
2008-11-04 12:59:53 +00:00 |
|
|
Andreas Steffen
|
ec1bddc50c
|
corrected a copy-and-paste error
|
2008-11-03 23:46:42 +00:00 |
|
|
Andreas Steffen
|
c636285878
|
updated copyright of kernel interface code
|
2008-11-03 23:34:23 +00:00 |
|
|
Andreas Steffen
|
bab075b166
|
added support for xfrm remote kmaddress
|
2008-11-03 23:29:34 +00:00 |
|
|
Martin Willi
|
7de6da0c88
|
added locking mechanism for multithreaded use of OpenSSL
|
2008-11-03 16:14:12 +00:00 |
|
|
Martin Willi
|
4d901e3584
|
added fake_kernel option to make dummy kernel implementation optional
|
2008-11-03 15:11:01 +00:00 |
|
|
Martin Willi
|
ee66fa625e
|
removed accidently checked in debug code
|
2008-11-03 12:40:42 +00:00 |
|
|
Martin Willi
|
1145ca098d
|
load testing between different hosts
|
2008-11-03 10:02:39 +00:00 |
|
|
Martin Willi
|
64ff7a5142
|
log loaded plugins at startup
|
2008-11-03 09:44:54 +00:00 |
|
|
Martin Willi
|
d6dc9db5ef
|
reverted 4541, does not fix the problem
|
2008-11-03 09:44:20 +00:00 |
|
|
Andreas Steffen
|
9c33987471
|
migrate job creates a new IKE_SA
|
2008-11-03 07:08:59 +00:00 |
|
|
Andreas Steffen
|
cdf69f103a
|
replace tab by spaces
|
2008-11-03 06:56:22 +00:00 |
|
|
Andreas Steffen
|
a54e3d51c1
|
removed unused variables
|
2008-11-03 03:56:03 +00:00 |
|
|
Andreas Steffen
|
ef6d339c09
|
migrate_job() finds a matching child_cfg
|
2008-11-03 02:05:41 +00:00 |
|
|
Andreas Steffen
|
bd354bee5f
|
corrected parameter description
|
2008-11-03 00:24:38 +00:00 |
|
|
Andreas Steffen
|
a066f7e6c2
|
corrected captions
|
2008-11-02 22:13:17 +00:00 |
|
|
Andreas Steffen
|
5145ae48be
|
fully implemented the parsing of XFRM and PF_KEY MIGRATE messages
|
2008-11-02 21:34:52 +00:00 |
|
|
Martin Willi
|
e301a69d6c
|
removed 0-byte truncation, fixes random Openssl RSA signature verification failures
|
2008-10-31 17:07:04 +00:00 |
|
|
Martin Willi
|
a13862be61
|
fixed crash in openssl signature verification if sizeof(size_t) != sizeof(int) (64bit)
|
2008-10-31 17:05:40 +00:00 |
|
|
Andreas Steffen
|
b74bc4384c
|
identify attributes of XFRM ACQUIRE and MIGRATE messages
|
2008-10-31 06:18:48 +00:00 |
|
|
Andreas Steffen
|
e7f4fc537f
|
subscribing XFRM socket for MIGRATE messages
|
2008-10-31 02:50:01 +00:00 |
|
|
Andreas Steffen
|
e526d22818
|
parse xfrm and pf_key acquire messages and subscribe to migrate messages
|
2008-10-31 01:43:23 +00:00 |
|
|
Martin Willi
|
19aff61b19
|
reverted changeset 4529:
Camellia is 22 in IKEv1, but not-yet defined in IKEv2
in IKEv2, 22 is reserved for AES-XTS
|
2008-10-30 13:21:21 +00:00 |
|
|
Martin Willi
|
5dffdea1d7
|
added hooks for IKE and CHILD keymat
|
2008-10-30 12:58:54 +00:00 |
|
|
Martin Willi
|
5a76bb7f7a
|
store plain skd, not the prf
|
2008-10-30 09:18:52 +00:00 |
|
|
Andreas Steffen
|
fdaed5289a
|
added Camellia CBC to list of encryption algorithms
|
2008-10-30 03:31:36 +00:00 |
|
|
Andreas Steffen
|
113a4afa55
|
corrected parameter description
|
2008-10-30 00:35:37 +00:00 |
|
|
Martin Willi
|
80853d8498
|
moved CHILD_SA key derivation to keymat_t
passing key chunks to CHILD_SA, not the PRF
|
2008-10-29 16:06:16 +00:00 |
|
|
Martin Willi
|
f65ba4e978
|
prf handles zero-length allocations graceful
|
2008-10-29 14:12:54 +00:00 |
|
|
Martin Willi
|
a64cc8f75f
|
do not store DH redundant in keymat
|
2008-10-29 13:35:06 +00:00 |
|
|
Andreas Steffen
|
217d95c82e
|
upgrade to linux-2.6.28 headers with support for kmaddress struct
|
2008-10-29 05:32:38 +00:00 |
|
|
Martin Willi
|
6a4ff35cc4
|
moved key derivation and management into keymat object
allows secured implementation of key management (e.g. in kernel or HW)
only IKE keys for now
|
2008-10-28 16:07:06 +00:00 |
|
|
Martin Willi
|
3c8234d408
|
store IKE proposal implicitly during derive_keys
|
2008-10-28 10:12:21 +00:00 |
|
|
Martin Willi
|
20fb671904
|
fixed reauthentication time in statusall
|
2008-10-28 09:41:33 +00:00 |
|
|
Andreas Steffen
|
f5ab7f5f57
|
refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key
|
2008-10-28 01:59:01 +00:00 |
|
|
Martin Willi
|
85ac2fa547
|
use more generic stats getter, introducing new stats
|
2008-10-27 14:51:00 +00:00 |
|
|
Martin Willi
|
0935ba328b
|
including a "none" tundev to make NM happy
|
2008-10-27 11:30:27 +00:00 |
|
|
Martin Willi
|
a1db79b31a
|
fixed some compiler warnings
|
2008-10-27 11:13:33 +00:00 |
|
|
Andreas Steffen
|
aeaa6a9b45
|
remove unused local DH_EXPONENT_ENTROPY definition
|
2008-10-27 00:02:22 +00:00 |
|
|
Andreas Steffen
|
21a45f2f2d
|
use 512 bits of entropy for secret DH exponents
|
2008-10-26 23:53:52 +00:00 |
|
|
Martin Willi
|
82d20c0588
|
additional getters for ipcomp and UDP encap
|
2008-10-24 09:51:48 +00:00 |
|
|
Martin Willi
|
6e10aeadab
|
more CHILD_SA refactorings
|
2008-10-24 08:02:35 +00:00 |
|
|
Martin Willi
|
f2a5aa4a9d
|
initiate connections simultaneously in load tester
|
2008-10-22 09:01:36 +00:00 |
|
|
Martin Willi
|
0fd6e95562
|
a load testing plugin, to:
find multi-threading issues
do performance profiling
|
2008-10-21 13:00:38 +00:00 |
|
|
Martin Willi
|
6df2837a8c
|
fixed enumeration of CHILD_SA traffic selectors
|
2008-10-21 10:57:40 +00:00 |
|
|
Martin Willi
|
f2e1ff59ab
|
reset threads IKE_SA after checking other IKE_SAs
invoke updown script only if we have valid IKE_SA
|
2008-10-20 11:38:16 +00:00 |
|
|
Andreas Steffen
|
7790ab0f37
|
re-established all previous AUD level messages
|
2008-10-17 03:44:06 +00:00 |
|
|
Martin Willi
|
104c28d603
|
fixed perl oid generation
|
2008-10-16 15:38:48 +00:00 |
|
|
Martin Willi
|
ad3af574a4
|
moved updown script invocation to an optional plugin
|
2008-10-16 11:48:18 +00:00 |
|