denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,661 Commits 1 Branch 0 Tags
e36c67aca463b7e92a8ec76397f659fab6f4825a
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi c6c842e9ad added Debian specific packaging files to NM applet 2009-05-19 14:01:40 +02:00
Martin Willi bf9e1d4444 new NM applet release 1.1.1 2009-05-19 14:01:39 +02:00
Martin Willi ef56ba51d4 fixed compiler warnings 2009-05-19 12:23:21 +02:00
Martin Willi f920bd1861 replaced deprecated g_strcasecmp() 2009-05-19 12:23:21 +02:00
Martin Willi 9e2d7f962f updated build system to newer autotool/gnome conventions 2009-05-19 12:23:20 +02:00
Martin Willi 39ded7128c do not write to unaligned memory in MSCHAPv2 2009-05-18 14:41:16 +02:00
Martin Willi 3f7611c59d cleanup of generator code 2009-05-18 14:06:48 +02:00
Martin Willi 79a2afedd5 removed unused 64-bit integer parsing rule 2009-05-18 13:36:56 +02:00
Martin Willi 4274885855 do not access unaligned words/half-words directly 2009-05-18 13:34:09 +02:00
Martin Willi 57ae766af8 cleaned up parser code 2009-05-18 13:13:12 +02:00
Martin Willi 12806574b8 removed trailing spaces/tabs 2009-05-18 13:13:12 +02:00
Martin Willi 09dbca9fbf fixed typos 2009-05-18 10:49:50 +02:00
Martin Willi 047b2e42df added NEWS for 4.3.1 2009-05-18 10:42:16 +02:00
Martin Willi 24cd2ca6ee moved very stroke specific x509 flag handling out of core library 2009-05-18 10:42:16 +02:00
Martin Willi 0ed6b7a7d7 If the NM gateway certificate has the CA constraint set, we use the gateway address as its identity. 
To allow the same certificate deployment for Windows 7 and NetworkManager clients,
the NM plugin now accepts CA certificates. To prevent any certificate holder
to act as a gateway, we bind the identity to the entered gateway address. The
gateways certificate therefore must contain the IP/DNS of the gateway
as subjectAltName.
 2009-05-15 16:35:14 +02:00
Martin Willi d4b403e2f3 updated glade dialog, using tooltip instead of tooltip_text 2009-05-15 16:04:07 +02:00
Martin Willi 6b967fb762 implemented save_secrets hook to avoid crash 2009-05-15 16:04:07 +02:00
Martin Willi a61395676f added .gitignore files to NM applet 2009-05-15 15:33:19 +02:00
Martin Willi 9caceb6ed5 updated prf identifiers 2009-05-15 13:49:05 +02:00
Martin Willi b79ca7858b updated integrity algorithm identifiers 2009-05-15 13:48:44 +02:00
Martin Willi 832427064c added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA 2009-05-15 11:02:56 +02:00
Martin Willi 5cb3210acf stroke accepts "down conn1{*}/[*]" to delete all CHILD/IKE_SAs using a given config 2009-05-15 10:18:43 +02:00
Martin Willi c296e51c40 added eap_start option to radius plugin 
EAP-Start sends an empty EAP message to initiate EAP conversation
before doing EAP-Identity.
 2009-05-14 14:14:29 +02:00
Martin Willi 64e8ca281f simplified SPI allocation after refactorings 2009-05-14 10:28:18 +02:00
Martin Willi d50746febe identation cleanups 2009-05-13 15:57:31 +02:00
Martin Willi ad65a713e4 fixed identation 2009-05-13 14:55:35 +02:00
Martin Willi 0a3ca29021 fixed cleanup of traffic selector lists 2009-05-12 17:13:09 +02:00
Martin Willi 8f0ab613e5 do not destroy packet twice if message generation failed 2009-05-12 14:38:48 +02:00
Martin Willi e1fa02bc62 properly end CERT_PRE task after detecting the final authentication round 2009-05-12 11:26:50 +02:00
Martin Willi 9dd2b42728 do not report increasing rekey times if rekeying currently active 2009-05-12 10:56:49 +02:00
Martin Willi 37974979bc do not report a CHILD_SA rekey time if rekeying disabled 2009-05-12 10:56:48 +02:00
Martin Willi 4a0c97e7d4 also update permission in template/guest folders 
some identation cleanups
 2009-05-11 17:26:13 +02:00
Martin Willi db879fdfac removed @brief doxygen keywords 2009-05-11 17:24:51 +02:00
Martin Willi 5d47f284b8 list available templates using "template" alias 2009-05-11 17:20:01 +02:00
Martin Willi 47a9a48f5b ruby bindings for template enumerator 2009-05-11 17:19:36 +02:00
Martin Willi 608046c09c added a Dumm template enumerator 2009-05-11 17:18:59 +02:00
Martin Willi 05ac17f0e1 allow "others" to read created dumm files/folders 2009-05-11 16:38:04 +02:00
Martin Willi 496064ba45 hand out a IPv4 virtual address if %any6 is requested 2009-05-11 13:33:55 +02:00
Martin Willi 30fc989c9c fixed configuration payload type as responder 2009-05-11 13:23:15 +02:00
Martin Willi a3d692ca87 never send a CERT payload in EAP 2009-05-11 11:37:58 +02:00
Martin Willi 5775283f8b updated MSK calculation in MSCHAPv2, compatible with Win7/2008 RC. 2009-05-11 10:42:53 +02:00
Martin Willi 25f2d52f30 Fixed EAP authentication regression 
Use correct nonce/init message again for EAP AUTH payload
sent from responder to initiator.
 2009-05-11 10:42:52 +02:00
Martin Willi b81917ea00 fixed memleak 2009-05-11 10:42:52 +02:00
Martin Willi 9d737ecfc5 drop acquires we already have a pending connection attempt 2009-05-08 10:04:01 +02:00
Martin Willi c3626c2ce6 initiate trapped CHILD_SAs with same reqid 2009-05-08 10:04:00 +02:00
Martin Willi fda97f2140 removed $Id$ from new template generated files 2009-05-08 10:04:00 +02:00
Martin Willi 56d461a1f1 listing routed connection in statusall 2009-05-08 10:04:00 +02:00
Martin Willi 17339b9a86 removed obsolete route/unroute code from ike_sa/controller 2009-05-08 10:03:59 +02:00
Martin Willi 8c99451ae1 make use of the new trap-manager 2009-05-08 10:03:58 +02:00
Martin Willi eb8ed130af added a trap-manager to handle routed policies outside of IKE_SAs 2009-05-08 10:03:58 +02:00
Martin Willi 0ce19b27a6 instanciate new tasks only if none queued 2009-05-07 15:57:34 +02:00
Martin Willi a627e31f46 properly delete IKE_SA if IKE_SA_INIT processing failed 2009-05-07 15:53:45 +02:00
Martin Willi be85459323 announce EAP method initiation once only 2009-05-07 11:11:56 +02:00
Martin Willi 84f1164c77 some additional .gitignore's 2009-05-07 10:33:30 +02:00
Martin Willi 45a4f3e2cf fixed .gitignore for backup files 2009-05-07 10:21:07 +02:00
Martin Willi a4df55e363 added .gitignore files for dumm 2009-05-07 10:19:19 +02:00
Martin Willi a8d938ca18 fixed removal of child configs 
purge empty peer configs
 2009-05-06 12:56:21 +02:00
Martin Willi 5bbfd264ec fixed remove_child_cfg(), use correct enumerator for remove_at 2009-05-06 11:09:57 +02:00
Martin Willi 94ffefc40c added backup files (*.~) and patch leftovers (*.orig) to .gitignore 2009-05-06 10:36:39 +02:00
Martin Willi e868a564d9 set IKE_SA on bus to catch unroute event properly 2009-05-05 09:51:28 +02:00
Martin Willi cae1ded1dc added apidoc output to .gitignore 2009-05-04 16:11:40 +02:00
Martin Willi 2c36ebb58e moved hasher to the correct doxygen group 2009-05-04 16:10:13 +02:00
Martin Willi 4f734a55b7 fixed dladdr ./configure check, leak detective whitelist 2009-05-04 13:59:44 +02:00
Martin Willi 466f11bfaf added .gitignore files, ready for the switch 2009-04-30 07:42:30 +00:00
Martin Willi 82f0707fa3 updated ikev2bis to 03 2009-04-27 14:57:50 +00:00
Martin Willi 9e080c899e removed .cvsignore files 2009-04-27 14:40:38 +00:00
Martin Willi 18eef5d6b6 added support for AES counter mode in ESP 
proposal keywords: aes128ctr aes192ctr aes256ctr
 2009-04-27 12:16:52 +00:00
Martin Willi 3bf7c2491f added nm NEWS 2009-04-27 11:50:53 +00:00
Martin Willi be0a03be64 set default CFLAGS globally, including -Wno-format 2009-04-27 11:34:07 +00:00
Martin Willi 12c8c3c4be fixed nbns handling, missing break 2009-04-27 10:48:49 +00:00
Martin Willi 568ced956c prefer nm plugin over resolv-conf 2009-04-27 10:46:51 +00:00
Martin Willi 3ab0e8a04b nm plugin handles DNS/NBNS configuration attributes 2009-04-27 09:38:31 +00:00
Martin Willi adc25ec252 added missing configure.in changes for attr/resolv_conf plugins 2009-04-24 14:14:43 +00:00
Martin Willi 7f56b49461 attribute_manager supports attribute_handler's to handle configuration attributes via plugins 
moved resolv.conf editing to a separate plugin (resolv_conf)
extended attribute_provider interface to hand out arbitrary attributes
  moved strongswan.conf based dns/nbns configuration to a plugin (attr)
 2009-04-24 14:13:52 +00:00
Martin Willi da17b0169a added return_true/false() dummy functions 2009-04-24 14:08:42 +00:00
Martin Willi 090ba9453c fixed compiler warnings on 64bit 2009-04-22 08:26:54 +00:00
Martin Willi 134c9d9db0 fixed a bunch of compiler warnings, pgp end certificate listing 2009-04-21 15:36:58 +00:00
Martin Willi c258a3b36a fixed pluto/scepclient out-of-tree builds 2009-04-21 15:24:02 +00:00
Martin Willi 6554b5e412 schedule_job uses seconds to support time values larger than 49 days 
added schedule_job_ms for ms resolution events
 2009-04-21 15:16:56 +00:00
Martin Willi 81fc8e5f77 added more NEWS for 4.3.0 2009-04-21 11:22:52 +00:00
Martin Willi 405e30a4a7 dump CHILD_SA keys in loglevel 4 2009-04-21 09:29:23 +00:00
Martin Willi 09f706ec3e fixed IKE_SA rekeying collisions 2009-04-20 11:29:27 +00:00
Martin Willi 8a36c7e20d do not adopt already initiated tasks after rekeying 2009-04-20 11:28:23 +00:00
Martin Willi c04e75487f added ike_rekey/child_rekey options to load-tester 2009-04-17 12:30:56 +00:00
Martin Willi d5d199ff6b add keylength transform attribute for all algorithms with a keylength != 0 2009-04-17 08:46:02 +00:00
Martin Willi 98e7317daa fixed OID encoding 2009-04-17 08:28:53 +00:00
Martin Willi 5cac9e4c34 fixed some newline encodings 2009-04-16 14:00:14 +00:00
Martin Willi 0bd7ad6cff added create_part_enumerator() to indentity, allows to enumerate RDNs etc. 2009-04-14 14:32:22 +00:00
Martin Willi c31687daa7 moved RDN OIDs to oid.txt, use asn1_get_known_oid() for lookup 2009-04-14 13:53:06 +00:00
Martin Willi 56807f35b9 implemented asn1_get_known_oid(), mapping OID index to ASN1 OID 2009-04-14 13:50:23 +00:00
Martin Willi b63f4c75e2 added missing string.h include 2009-04-14 10:50:29 +00:00
Martin Willi e8a0be4895 fixed proposal_keywords.c generation in out-of-tree builds 2009-04-14 10:49:12 +00:00
Martin Willi a44bb9345f merged multi-auth branch back into trunk 2009-04-14 10:34:24 +00:00
Martin Willi 6e5c8d9413 do not load guests starting with a ".", such as ".svn" 2009-04-09 13:43:26 +00:00
Martin Willi d848b951fc simplified statfs 2009-04-09 12:06:01 +00:00
Martin Willi 79f81838bc added template() shortcut 2009-04-07 17:58:23 +00:00
Martin Willi 8a7d32452c added Dumm.method_missing, allows direct invocation of guests/bridges 2009-04-07 17:54:15 +00:00
Martin Willi cf61575dc3 added booted?/boot methods 2009-04-07 17:13:44 +00:00
Martin Willi 801548155c use safe each() implementations, allowing delete() in block 
implement Client.reset() in ruby
 2009-04-07 14:56:19 +00:00
Martin Willi c4087a8e70 added a reset() method to Dumm and each client 
identation cleanups
 2009-04-07 14:22:02 +00:00