denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,489 Commits 1 Branch 0 Tags
e67197a7f9c55fde4f9342d4a96ef2800241e0e3
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 82f0707fa3 updated ikev2bis to 03 2009-04-27 14:57:50 +00:00
Martin Willi 9e080c899e removed .cvsignore files 2009-04-27 14:40:38 +00:00
Martin Willi 18eef5d6b6 added support for AES counter mode in ESP 
proposal keywords: aes128ctr aes192ctr aes256ctr
 2009-04-27 12:16:52 +00:00
Martin Willi 3bf7c2491f added nm NEWS 2009-04-27 11:50:53 +00:00
Martin Willi be0a03be64 set default CFLAGS globally, including -Wno-format 2009-04-27 11:34:07 +00:00
Martin Willi 12c8c3c4be fixed nbns handling, missing break 2009-04-27 10:48:49 +00:00
Martin Willi 568ced956c prefer nm plugin over resolv-conf 2009-04-27 10:46:51 +00:00
Martin Willi 3ab0e8a04b nm plugin handles DNS/NBNS configuration attributes 2009-04-27 09:38:31 +00:00
Martin Willi adc25ec252 added missing configure.in changes for attr/resolv_conf plugins 2009-04-24 14:14:43 +00:00
Martin Willi 7f56b49461 attribute_manager supports attribute_handler's to handle configuration attributes via plugins 
moved resolv.conf editing to a separate plugin (resolv_conf)
extended attribute_provider interface to hand out arbitrary attributes
  moved strongswan.conf based dns/nbns configuration to a plugin (attr)
 2009-04-24 14:13:52 +00:00
Martin Willi da17b0169a added return_true/false() dummy functions 2009-04-24 14:08:42 +00:00
Martin Willi 090ba9453c fixed compiler warnings on 64bit 2009-04-22 08:26:54 +00:00
Martin Willi 134c9d9db0 fixed a bunch of compiler warnings, pgp end certificate listing 2009-04-21 15:36:58 +00:00
Martin Willi c258a3b36a fixed pluto/scepclient out-of-tree builds 2009-04-21 15:24:02 +00:00
Martin Willi 6554b5e412 schedule_job uses seconds to support time values larger than 49 days 
added schedule_job_ms for ms resolution events
 2009-04-21 15:16:56 +00:00
Martin Willi 81fc8e5f77 added more NEWS for 4.3.0 2009-04-21 11:22:52 +00:00
Martin Willi 405e30a4a7 dump CHILD_SA keys in loglevel 4 2009-04-21 09:29:23 +00:00
Martin Willi 09f706ec3e fixed IKE_SA rekeying collisions 2009-04-20 11:29:27 +00:00
Martin Willi 8a36c7e20d do not adopt already initiated tasks after rekeying 2009-04-20 11:28:23 +00:00
Martin Willi c04e75487f added ike_rekey/child_rekey options to load-tester 2009-04-17 12:30:56 +00:00
Martin Willi d5d199ff6b add keylength transform attribute for all algorithms with a keylength != 0 2009-04-17 08:46:02 +00:00
Martin Willi 98e7317daa fixed OID encoding 2009-04-17 08:28:53 +00:00
Martin Willi 5cac9e4c34 fixed some newline encodings 2009-04-16 14:00:14 +00:00
Martin Willi 0bd7ad6cff added create_part_enumerator() to indentity, allows to enumerate RDNs etc. 2009-04-14 14:32:22 +00:00
Martin Willi c31687daa7 moved RDN OIDs to oid.txt, use asn1_get_known_oid() for lookup 2009-04-14 13:53:06 +00:00
Martin Willi 56807f35b9 implemented asn1_get_known_oid(), mapping OID index to ASN1 OID 2009-04-14 13:50:23 +00:00
Martin Willi b63f4c75e2 added missing string.h include 2009-04-14 10:50:29 +00:00
Martin Willi e8a0be4895 fixed proposal_keywords.c generation in out-of-tree builds 2009-04-14 10:49:12 +00:00
Martin Willi a44bb9345f merged multi-auth branch back into trunk 2009-04-14 10:34:24 +00:00
Martin Willi 6e5c8d9413 do not load guests starting with a ".", such as ".svn" 2009-04-09 13:43:26 +00:00
Martin Willi d848b951fc simplified statfs 2009-04-09 12:06:01 +00:00
Martin Willi 79f81838bc added template() shortcut 2009-04-07 17:58:23 +00:00
Martin Willi 8a7d32452c added Dumm.method_missing, allows direct invocation of guests/bridges 2009-04-07 17:54:15 +00:00
Martin Willi cf61575dc3 added booted?/boot methods 2009-04-07 17:13:44 +00:00
Martin Willi 801548155c use safe each() implementations, allowing delete() in block 
implement Client.reset() in ruby
 2009-04-07 14:56:19 +00:00
Martin Willi c4087a8e70 added a reset() method to Dumm and each client 
identation cleanups
 2009-04-07 14:22:02 +00:00
Martin Willi 28970d5967 fixed template loading/unloading 
identation cleanups
 2009-04-07 13:07:13 +00:00
Martin Willi 58da11911b store all templates in a subdirectory 2009-04-07 13:06:33 +00:00
Martin Willi 5ec7ff5675 do not purge interfaces on template load 2009-04-07 12:59:54 +00:00
Martin Willi 15e247922d moved AUTH_HMAC_MD5_128 to IANA defined number 2009-04-02 13:53:20 +00:00
Martin Willi 9d1bd18243 require Message-Authenticator attribute only if we have a EAP-Message 2009-03-27 13:25:34 +00:00
Martin Willi 510be1a32a reserve a socket only during request(), avoids thread pool starvation 
reduced thread pool default to 1
 2009-03-27 10:52:22 +00:00
Martin Willi e82c369519 implementation of contains_wildcards() for ID_DER_ASN1_DN identities 2009-03-26 13:25:46 +00:00
Martin Willi d3fbc75e85 set port for NATD hash calculation in the "include-all" case 2009-03-26 11:49:07 +00:00
Martin Willi 04eb746442 updated NetworkManager applet copyright 2009-03-25 12:03:29 +00:00
Martin Willi 5a5654ed1e added a NEWS file 
release NetworkManager-strongswan-1.1.0
 2009-03-25 07:49:11 +00:00
Martin Willi 1490ff4d9b updated Doxyfile 
properly close all doxygen groups
fixed remaining doxygen warnings
 2009-03-24 17:43:01 +00:00
Martin Willi e4838d02b3 set the default of plutostart/charonstart according to ./configure options 2009-03-24 15:02:12 +00:00
Martin Willi 4a6b84a934 reintegrated eap-radius branch into trunk 2009-03-24 10:24:58 +00:00
Martin Willi bff28074b9 fixed NetworkManager applet debian dependencies 2009-03-20 08:33:02 +00:00
Martin Willi 03991bc1f8 added NEWS 2009-03-19 12:25:15 +00:00
Martin Willi f18e2a15ac new debian packages for NetworkManager 7.1 2009-03-19 10:20:28 +00:00
Martin Willi c3340cf8da respect port in create_dns/create_from_string when passing %any 2009-03-19 09:16:03 +00:00
Martin Willi ce67ab162d print IPv6 %any hosts as %any6 2009-03-19 09:04:20 +00:00
Martin Willi c5c969639c fixed compiler warning 2009-03-19 08:54:39 +00:00
Martin Willi d7625f0990 ported nm plugin and gnome applet to NetworkManager 7.1 2009-03-18 19:48:06 +00:00
Martin Willi 9717826f10 fallback to family specific %any(6) if kernel lookup fails 2009-03-16 14:23:36 +00:00
Martin Willi c587052624 added updated mconsole-exec patch for 2.6.28 2009-03-05 14:32:15 +00:00
Martin Willi d9ad73d867 fixed format string argument error, resulting in crash 
fixed memleak if pool not found
 2009-03-03 14:56:17 +00:00
Martin Willi 7b2a032d28 stop searching other pools if lease successfully released 2009-03-03 14:43:53 +00:00
Martin Willi b654daf561 fixed MSCHAPv2 password lookup when used with NetworkManager 2009-02-24 13:39:50 +00:00
Martin Willi 3cad46da79 added EAP-Identity package 2009-02-24 11:50:24 +00:00
Martin Willi 8c30041336 updated debian packages to 4.2.12, supporting EAP-MSCHAPv2 2009-02-23 16:33:17 +00:00
Martin Willi d2ac1443d3 always encode EAP usernames as ID_KEY_ID 2009-02-18 15:03:33 +00:00
Martin Willi 2d887e8e08 removed unused extract_last_token() and the required memrchr implementation 2009-02-18 09:45:54 +00:00
Martin Willi 6ce32d8719 do not operate on strongswan-padlock on non-x86 2009-02-17 18:30:02 +00:00
Martin Willi 160fdc9d17 added missing kernel-netlink plugin 2009-02-17 09:38:42 +00:00
Martin Willi bd29dab446 fixed build on non-i386 architectures 2009-02-17 09:34:52 +00:00
Martin Willi b08e64a912 build strongswan-padlock on i386 only 2009-02-16 16:49:43 +00:00
Martin Willi 69eb1461ba use separate distribution tarballs for NetworkManager applet 2009-02-16 16:11:16 +00:00
Martin Willi 842e05d5de use a slightly adopted package versioning scheme 
NM applet uses strongSwan independent versions
 2009-02-16 16:05:30 +00:00
Martin Willi 0f9a47a880 added Makefile to build ubuntu PPA source packages 2009-02-16 16:03:09 +00:00
Martin Willi f4cb848eef initial version of new modular strongswan debian packages 
"strongswan" metapackage adds similar functionality as old debian packages
  "network-manager-strongswan" depends on required strongSwan packages
 2009-02-16 12:48:35 +00:00
Martin Willi b81d8cd3cc changed [4856] to dynamically choose traffic selector family 2009-02-11 13:09:52 +00:00
Martin Willi 8837080353 respect family when assigning pool addresses 2009-02-11 12:50:04 +00:00
Martin Willi 95f1735f87 send proper AUTHENTICATION_FAILED if EAP method is successful, but AUTH mismatches 2009-02-10 17:21:44 +00:00
Martin Willi 04a7a1c309 free unneeded retransmission packet when exchange completes 2009-02-09 10:45:51 +00:00
Martin Willi d34030a810 increase nonce size to 32 bytes, required when using SHA384/512 PRFs 2008-12-31 08:58:49 +00:00
Martin Willi 4856241c1e added some NEWS for 4.2.10 2008-12-22 12:48:50 +00:00
Martin Willi 12d4186f5c fixed a potential memory leak when reusing mobike task 2008-12-19 14:34:40 +00:00
Martin Willi f6035833fa RNG tests based on FIPS 140-1 2008-12-18 16:24:22 +00:00
Martin Willi 2241a29571 support for Padlock RNG 2008-12-18 16:21:05 +00:00
Martin Willi 5045eeba7b proper feature probing for padlock 2008-12-17 15:40:01 +00:00
Martin Willi 9bcc9bb60e updated documentation 
some minor cleanups
calloc does not need an additional memset(0)
 2008-12-17 09:00:22 +00:00
Martin Willi 097e4b8ff9 purge certificates after IKE_AUTH response has been built 2008-12-16 15:48:36 +00:00
Martin Willi 764e8b2211 reimplemented certificate cache: 
fixes unsafe certificate caching
	use fixed array instead of a list
	fine grained per-slot locking
	use cache hits for housekeeping
 2008-12-15 15:41:48 +00:00
Martin Willi 482218f075 signal each entry condvar after enumeration, required if wait_for_entry is called 2008-12-15 09:19:04 +00:00
Martin Willi abfde23ae9 added an additional frame to lock profiling backtraces 2008-12-15 09:13:43 +00:00
Martin Willi 50901d2550 do not respawn cancelled threads if we are shutting down 2008-12-12 15:57:12 +00:00
Martin Willi 248a1f57bb fixed possible deadlock in checkin_and_destroy 2008-12-12 10:40:45 +00:00
Martin Willi d183adbc9d avoid DNS lookup if possible 2008-12-12 10:38:53 +00:00
Martin Willi 3993b91334 execute events if difference is 0, prevents a busywait 2008-12-12 09:16:31 +00:00
Martin Willi 8006835ec1 load tester got a "shutdown_when_complete" option, allows performance test using "time" 2008-12-12 09:14:37 +00:00
Martin Willi 30841a0305 daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill 2008-12-12 09:13:06 +00:00
Martin Willi 7a485e90bd leak detective binds execution to a signle core, avoids corruption on SMP machines 2008-12-12 09:10:52 +00:00
Martin Willi f2bd424c89 wait until all IKE_SAs are in-house before destroying them 2008-12-12 08:33:48 +00:00
Martin Willi c636092c94 fixed usage of "leases" command 2008-12-11 12:49:41 +00:00
Martin Willi 6b83549d1a list assigned leases using "ipsec leases" 2008-12-10 13:00:02 +00:00
Martin Willi ed2bcd0315 added IKE_SA established timer to "ipsec statusall" 2008-12-10 09:59:35 +00:00
Martin Willi d5d5bc0f16 using rwlock to parallel build credentials 2008-12-09 15:57:51 +00:00