denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,365 Commits 1 Branch 0 Tags
e5a7f1cd0872017acc7024a12bb036d332fc6651
Commit Graph
146 Commits
Author SHA1 Message Date
Martin Willi e5a7f1cd08 implemented cookies as initiator 
proper logging of notifies in IKE_SA setup
 2007-03-08 20:18:39 +00:00
Martin Willi 8b8dd69dee some cleanups 
not installing %any DNS servers
 2007-03-08 16:58:59 +00:00
Martin Willi f007a70055 allocation fixes, not complete 2007-03-08 14:41:30 +00:00
Martin Willi 2c7fe7f530 handling "No policy found" properly 2007-03-08 14:41:09 +00:00
Martin Willi 9b8b3e5f5c fixed CHILD_SA creation within existing IKE_SA 2007-03-08 12:28:10 +00:00
Martin Willi 49e8ac052d ported changes from EAP branch, renabling EAP framework 2007-03-08 00:27:43 +00:00
Martin Willi ea235d388e added more debug output 2007-03-08 00:15:15 +00:00
Andreas Steffen 4eacb268a0 added parsing level to x509_create_from_chunk() 2007-03-07 22:58:25 +00:00
Martin Willi 2540992a06 prevent from initiating multiple exchanges the same time 2007-03-06 22:17:53 +00:00
Martin Willi c676f2e2a6 fixed notify handling in IKE_AUTH 
moved nonce payload before TS in CHILD_SA setup
 2007-03-06 20:58:39 +00:00
Martin Willi f2d4ec5639 moved REKEY_SA notify to the beginning of the message 2007-03-06 20:56:58 +00:00
Martin Willi ddae0f9673 sending an SPI of 0 as responder when IKE_SA_INIT fails 2007-03-06 13:06:47 +00:00
Martin Willi 6e1be42744 some cleanups 
not assigning %any virtual IPs to peer anymore
 2007-03-05 22:07:36 +00:00
Martin Willi 02b3101b67 fixed double free bug 2007-03-05 22:02:14 +00:00
Martin Willi 5bf1be3c9f fixed ID selection bug when peer doesn't include IDr payload 
allowing vendor ID in any messag
 2007-03-05 15:22:50 +00:00
Martin Willi 373b8a607f fixed netlink socket receiver code 
implemented interface enumeration code with netlink: no getifaddrs reqired anymore
 2007-03-03 14:56:24 +00:00
Martin Willi 1d51abb71b implemented get_iface() using RTM_GETADDR 
added support for multi-header netlink messages
really ugly now, need a lot of refactoring
 2007-03-02 17:08:38 +00:00
Martin Willi 8f03147376 added firewalling support when using virtual IPs 2007-03-01 12:31:58 +00:00
Andreas Steffen 9b1f4540c6 preparations for PLUTO_MY_SOURCEIP 2007-03-01 07:45:43 +00:00
Andreas Steffen 7493cd0b6b corrected typo 2007-03-01 00:00:35 +00:00
Martin Willi 9362e063b9 fixed reauthentication when connections other is %any 2007-02-28 14:17:31 +00:00
Martin Willi c60c7694d2 merged tasking branch into trunk 2007-02-28 14:04:36 +00:00
Martin Willi cda642a152 removed eap aka module due nda 2007-02-13 15:19:30 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk 
includes a lot of other modifications
 2007-02-12 15:56:47 +00:00
Martin Willi d3032a9a82 renamed all static clone() functions to avoid naming conflicts with uclibc 2007-02-01 15:24:10 +00:00
Martin Willi 42dcd01ffe sending proper signal to the bus when detecting a dead peer 2007-02-01 15:23:31 +00:00
Andreas Steffen 883c1e3084 name the created CHILD_SA 2007-01-11 20:03:38 +00:00
Andreas Steffen 31e5d441d8 show rekeying|reauthentication time 2007-01-10 08:18:52 +00:00
Andreas Steffen af53aa9ec0 show name of created CHILD_SA 2007-01-10 08:18:20 +00:00
Andreas Steffen a40926c7eb combined use_in and use_fwd 2007-01-10 08:17:48 +00:00
Martin Willi a622c99240 fixed crash when CA for certrequest not found 2007-01-08 13:40:36 +00:00
Martin Willi 6a4be80d37 removed unused debugging code 2007-01-08 08:03:40 +00:00
Martin Willi 2dc9d7551b fixed reauthentication when using %any hosts 2007-01-08 07:32:39 +00:00
Martin Willi 21f42524e0 support for transport in create_child_sa 
include TRANSPORT/TUNNEL information in statusall
 2007-01-08 06:55:50 +00:00
Andreas Steffen 42687ff5d1 fixed typo 2007-01-04 14:29:50 +00:00
Martin Willi f73d4c9eb0 fixed reuathentication when connections other host is %any 2007-01-03 09:26:44 +00:00
Martin Willi 7652be891c added support for transport mode and (experimental!) BEET mode 
support for the type=transport/tunnel parameter in charon
 2006-12-21 14:35:17 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Andreas Steffen 730e2c0542 log IKE SPIs on a separate line 2006-11-01 20:29:04 +00:00
Andreas Steffen efa0ed68cf redesigned formatting of ipsec status|statusall 2006-11-01 17:28:47 +00:00
Martin Willi e691a5c493 some fixes for doxygen 2006-10-31 15:24:08 +00:00
Martin Willi db7ef62494 better split up of library files "types.h" & "definitions.h" 
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
 2006-10-31 12:27:59 +00:00
Andreas Steffen 29137c0cef preparations to include certreqs in policy decisions 2006-10-31 07:04:15 +00:00
Andreas Steffen 914eea92d7 moved (myself) in log output 2006-10-31 06:31:21 +00:00
Martin Willi 382b481795 moved typedefs to beginning of files to solve some include problems 
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
 2006-10-30 14:07:05 +00:00
Martin Willi 5923be21b4 fixed SIGSEGV when setup of an additional CHILD_SA fails 2006-10-30 09:53:54 +00:00
Andreas Steffen bcba0f0367 changed debug level of certreq log output 2006-10-29 09:11:50 +00:00
Andreas Steffen a702b731cb support of certreq payload in IKE_AUTH messages 2006-10-28 20:02:26 +00:00
Andreas Steffen e44f4d7eef send a certreq as initiator if other_ca is set 2006-10-28 15:37:23 +00:00
Martin Willi ebdddb74d4 some improvements in signaling code 2006-10-27 10:46:56 +00:00