denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,353 Commits 1 Branch 0 Tags
e5ab32a7ee26d64b708860ad7ee4663c4cb0d6eb
Commit Graph
299 Commits
Author SHA1 Message Date
Tobias Brunner e5ab32a7ee timing of connectivity checks adjusted 2008-03-31 15:04:38 +00:00
Tobias Brunner 9e183cd5b8 signal fixed 2008-03-31 14:27:16 +00:00
Andreas Steffen dcc777652e changed error message 2008-03-29 13:26:53 +00:00
Martin Willi d20e5c6ab5 replaced get_public() by create_public_enumerator() to try multiple public keys for signature verification 2008-03-27 19:07:23 +00:00
Tobias Brunner 54150b3f13 checking the size of ME_* notify payloads 2008-03-27 10:17:29 +00:00
Tobias Brunner b0dee635d2 replaced the COOKIE notify payload in connectivity checks with a ME_CONNECTAUTH notify payload 2008-03-27 09:54:09 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Martin Willi 3c7e72f5b0 added equals() method to peer_cfg, ike_cfg, proposals, auth_info 
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
 2008-03-26 10:06:45 +00:00
Martin Willi 36524c4844 added support for certificate requests for not yet known CAs 2008-03-20 10:09:56 +00:00
Andreas Steffen ae8715f956 attempt to achieve consistent debugging output 2008-03-19 12:06:38 +00:00
Martin Willi 72d68379dc correctly unregister IKE_SA at the bus 2008-03-15 14:08:43 +00:00
Tobias Brunner df3462ddbe two small fixes 2008-03-13 15:03:06 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Andreas Steffen b48bdac20b improved P2P_NAT debugging 2008-02-27 20:30:39 +00:00
Tobias Brunner fb7e7dc484 refactored connect_manager_t to use the find functions on linked lists 2008-02-14 13:42:36 +00:00
Martin Willi 5bbac9ffff split connections with different virtual IPs in different peer_cfgs 
respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA
 2008-02-05 12:39:30 +00:00
Andreas Steffen 663fedbe44 implemented IKEV2 EAP-SIM server and client test module that use triplets stored in a file. For details see the scenario 'ikev2/rw-eap-sim-rsa' 2008-02-04 14:52:06 +00:00
Martin Willi 3b1692c058 use identifiers in EAP_SUCCESS/EAP_FAILURE payloads 2008-02-04 11:43:10 +00:00
Andreas Steffen b0e40caafb NAT-T conditions were not inherited during IKE_SA rekeying 2008-01-29 01:41:47 +00:00
Martin Willi 3a36ce1164 added missing hasher include 2008-01-03 10:42:21 +00:00
Martin Willi b8461a37db fixed EAP-MD5 to accept Name attribute in challenge 2007-12-18 10:44:44 +00:00
Martin Willi 0f806802ae implemented Expanded EAP types to support vendor specific methods 2007-12-13 17:31:21 +00:00
Martin Willi 3243ac6d5e fixed actual ID length when AT_IDENTITY gets padded 2007-12-13 14:39:38 +00:00
Martin Willi 26e2467692 ported EAP-AKA branch into trunk 2007-12-13 10:54:29 +00:00
Martin Willi 4b403e7672 merged EAP-MD5 into trunk 2007-12-12 14:29:10 +00:00
Martin Willi 3895125275 removed c++ style comments 
fixed compiler warnings
 2007-12-04 10:48:27 +00:00
Martin Willi b8249ff5ed fixed mobike/auth_lifetime in conjunction with p2p-natt 2007-12-04 10:05:36 +00:00
Andreas Steffen addc4b3ce4 removed redundant server reflexive endpoint debug message 2007-12-04 00:45:00 +00:00
Andreas Steffen 3af513753a improved P2P_ENDPOINT debugging 2007-12-03 23:06:17 +00:00
Martin Willi 7805ad302d moved AUTH_LIFETIME handling in its own task (cleaner separation, proper payload order) 2007-12-03 10:52:18 +00:00
Tobias Brunner 17d6e9aa00 improving [3361]: moved one of the added return values 2007-11-22 11:22:33 +00:00
Andreas Steffen f210387a6b added two return statements comitted by Marius Tomaschewski 2007-11-21 23:42:27 +00:00
Martin Willi ee61471113 implemented RFC4478 (repeated authentication) 
changed %V printf handler to take a time delta, %#V now takes two arguments
 2007-11-20 12:06:40 +00:00
Martin Willi 91b16af0fa fixed NO_PROPOSAL_CHOSEN response on IKE_SA_INIT 2007-11-14 09:41:08 +00:00
Andreas Steffen d5da42a9e4 fixed _updown target for ipv6 2007-11-06 13:45:54 +00:00
Martin Willi 00fb758755 adding new virtual ip before deleting old one to keep IP on reauthentication 2007-10-25 07:50:23 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Tobias Brunner 56db479192 ID payload with explicit payload type 2007-10-02 11:55:10 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 011fb1b97e removed accidentally checked in debugging code 2007-10-01 12:25:26 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi f215e91999 implemented more aggressive MOBIKE path probing 
do not queue more than one MOBIKE task
 2007-09-28 08:22:37 +00:00
Tobias Brunner 278396b6da typos 2007-09-27 10:36:03 +00:00
Martin Willi d9d69536b0 improved MOBIKE roaming between interfaces 2007-09-24 12:15:25 +00:00
Andreas Steffen 703b4b0332 connection name to IKE_SA initiating 2007-09-15 20:30:04 +00:00
Andreas Steffen a2ab401c56 put IKE_SA and CHILD_SA names in single quotes 2007-09-15 16:06:58 +00:00
Andreas Steffen be682af3e8 log name of IKE_SA in state changes 2007-09-15 15:54:51 +00:00
Andreas Steffen 3f4076b7c8 log name of established IKE_SA 2007-09-15 15:54:30 +00:00
Andreas Steffen 21b3099ac4 log name of established CHILD_SA 2007-09-15 15:53:10 +00:00
Tobias Brunner eff806eb5a added missing 'break' in checkout_by_peer 2007-09-13 13:00:23 +00:00