denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
921 Commits 1 Branch 0 Tags
e7356568b2327f838745462454b15958159cf38f
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi e7356568b2 added all currently known notify payload types 2006-07-12 14:05:57 +00:00
Martin Willi aeeb4f4f97 added policy cache to kernel interface 
allows refcounting of multiple installed policies
	finally brings us stable simultaneous rekeying
 2006-07-12 11:42:36 +00:00
Martin Willi 269f7f448b leak detective blanks memory on free & alloc, allows further membug detection 2006-07-12 11:15:31 +00:00
Martin Willi 4c19900ce8 code cleanups 2006-07-12 11:13:48 +00:00
Martin Willi abba7ecb9d further work done for simultaneous rekeying/delete 
still some cases which cause trouble
 2006-07-10 14:24:04 +00:00
Martin Willi c5d2d7c023 fixed compiler warnings in parser when using -O2 2006-07-07 12:48:27 +00:00
Martin Willi af2faa1f1d reenabled check_expiry 2006-07-07 12:25:25 +00:00
Martin Willi c71d53ba4e updated copyright information 2006-07-07 08:49:06 +00:00
Martin Willi 698d774918 reimplemented CHILD_SA rekeying & delete 
no simultanous transaction with CHILD_SAs yet!
 2006-07-07 07:04:07 +00:00
Martin Willi efa40c11e4 updated NEWS 2006-07-05 14:13:45 +00:00
Martin Willi d109b48968 added support for leftprotoport and rightprotoport 2006-07-05 13:13:07 +00:00
Martin Willi 5f0eb96fc4 improved CHILD_SA output for "ipsec statusall" 2006-07-05 13:11:55 +00:00
Martin Willi b190424716 updated whitelist (getprotobynumber) 2006-07-05 13:10:47 +00:00
Martin Willi 3dd3c5f39e redesigned IKE_SA using a transaction mechanism: 
removed old state machine
  reimplemented IKE_SA setup and delete
  implemented dead peer detection
  implemented keep-alives
  a lot of fixes
  no rekeying yet
 2006-07-05 10:53:20 +00:00
Martin Willi b12af2ead6 fixed compiler warnings 2006-07-05 10:09:42 +00:00
Martin Willi 57d02978cf made thread ids unsigned again, to avoid negative thread ids on some systems 2006-07-04 13:30:49 +00:00
Martin Willi 1135f79898 fixed memleak when initiating a connection already up 2006-07-04 13:29:16 +00:00
Martin Willi 318dc7b6c4 updated leak detective whitelist 2006-07-04 13:26:20 +00:00
Martin Willi f141214e64 applied latest NATT patch with some fixes and cleanups 2006-07-04 13:25:00 +00:00
Martin Willi 2f89902d07 applied new changes from NATT team 
DPD only done when no IPsec and IKE traffic processed
	minor changes here and there
 2006-06-23 14:02:30 +00:00
Martin Willi 2891590b05 some message code cleanups 2006-06-23 14:00:15 +00:00
Martin Willi eecb2da87d fixed identification_t clone to apply function pointers 2006-06-23 13:20:17 +00:00
Martin Willi 4b24dd2d7d cleaner error handling on UDP encapsultion sockopt failure 2006-06-22 13:05:15 +00:00
Martin Willi 6f51c9f184 added mysterious UDP encapsulation socket option to get encapsulation working 2006-06-22 12:57:49 +00:00
Martin Willi 1396815afb first merge of NATT code 2006-06-22 06:36:28 +00:00
Martin Willi 6bf1352032 fixed testing build 2006-06-21 12:58:02 +00:00
Martin Willi e986c40bc7 updated for 4.0.1 release 2006-06-21 12:14:40 +00:00
Martin Willi 7e81e97543 updated news for 4.0.1 release 2006-06-21 12:11:29 +00:00
Martin Willi b29bfa7c76 fixed whitelist detection 2006-06-20 11:03:47 +00:00
Martin Willi 986d23bd6e reworked function ignore mechanism to not-report whitelist 
rather than overriding functions
 2006-06-20 10:05:56 +00:00
Martin Willi 13b8fa0e8d fixed execv call args to work when using strictcrl and syslog 2006-06-20 10:04:35 +00:00
Martin Willi 5c6b5bf599 fixed bug: usage of already freed mem 2006-06-20 09:53:25 +00:00
Martin Willi aed58dcc93 readded local_credential_store 
added sendcert policy to connection
some other cleanups
 2006-06-20 08:43:57 +00:00
Martin Willi b965b8456b fixed SPI when acting as initiator of rekeying 2006-06-19 09:27:14 +00:00
Martin Willi c65a4fff3f fixed SPI when rekeying and deleting CHILD_SAs 2006-06-19 08:54:19 +00:00
Martin Willi 891dfaf983 change key derivation order to fullfill RFC 2006-06-19 08:11:42 +00:00
Martin Willi f7eb60dd5e 2006-06-16 14:10:49 +00:00
Martin Willi c859ec9592 fixed compilation error 2006-06-15 13:41:06 +00:00
Martin Willi c15c3d4be9 updated for release 2006-06-15 13:23:06 +00:00
Martin Willi 147fe5095d fixed aes code, we support now aes128, aes192, aes256 in IKE 2006-06-15 13:14:09 +00:00
Martin Willi c095388f7f added support for "ike" and "esp" keywords 
fixed bugs in proposal code
algorithm selection for charon works now with ipsec.conf
a lot of other fixes
 2006-06-15 11:09:11 +00:00
Martin Willi 3efbf98312 implemented clean spi allocation behavior when using multiple proposals 2006-06-15 11:06:22 +00:00
Martin Willi 525a5538db fixed logleve(l) keyword typo 2006-06-15 11:03:41 +00:00
Martin Willi 56f1a8f2d6 handling of "rekey=no" parameter added 2006-06-15 11:02:15 +00:00
Martin Willi ad038f770d changed default algorithms to: 
ike: aes128-sha-modp2048
  esp: aes128-sha1, 3des-md5
 2006-06-15 11:01:17 +00:00
Martin Willi b7e3329f17 fixed down keyword 2006-06-13 10:11:45 +00:00
Martin Willi fa32cd3c47 debug and logging improvements 2006-06-13 10:01:04 +00:00
Martin Willi 22ff6f578f 2006-06-13 10:00:19 +00:00
Martin Willi 50f98119dd using same reqid if a child sa rekeys an existing one 2006-06-12 08:36:41 +00:00
Martin Willi a2a3fb3e25 workaround for peers rekeying at the same time 
loading lifetime policies from ipsec.conf
 2006-06-12 07:33:20 +00:00
Martin Willi 695723d4e8 old child_sa gets deleted after rekeying 
rekeying almost complete, but:
	IKE_SA get in an invalid state when both initiate rekeying at the same time,
 2006-06-09 15:12:43 +00:00
Martin Willi b543bef50c improved kernel interface logging 2006-06-09 08:41:41 +00:00
Martin Willi 0bb32cb5f3 fixed clone/destroy behavior when not using CAs 2006-06-09 07:40:40 +00:00
Martin Willi 5c131a016b specifying keysize in bits, as it is required in IKEv2 
added generic kernel SA algorithm handling, which brings us:
        aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
 2006-06-09 07:31:30 +00:00
Martin Willi 180f924ba5 removed unused Makefile 2006-06-09 05:42:29 +00:00
Martin Willi 5238c9afef fixed compile warnings when using -Wall 
further CHILD_SA rekeying work done:
	creation of a new CHILD_SA on a expire from a kernel works
	delete of old CHILD_SA still missing
	some issues when both initiate rekeing
 2006-06-08 14:20:05 +00:00
Martin Willi c0d63ac9db updated INSTALL to conform with autotools 
added a short HACKING introduction
 2006-06-08 06:34:52 +00:00
Martin Willi 8d77eddec2 further work for rekeying: 
get liftimes from policy
  added new state
  initiation of rekeying done
proposal redone:
  removed support for AH+ESP proposals
 2006-06-07 13:26:23 +00:00
Martin Willi a401efd091 proper leak detective hook for realloc 
excluded pthread_setspecific from leak detective
 2006-06-07 13:22:38 +00:00
Martin Willi 6a030ba9ea fixed a memleak 2006-06-07 05:54:09 +00:00
Martin Willi 32b6500fbf job management: 
moved job code from thread_pool to job, jobs have an "execute" method now
  added two new jobs: delete_child_sa & rekey_child_sa
kernel interface:
  listens now for ACQUIRE & EXPIRE
  supports hard and soft lifetimes
  fires jobs for delete and rekey child sa
ike sa manager:
  can checkout IKE SAs by requid of owned CHILD SAs
we have now the infrastructure to do the rekeying... :-)
 2006-05-31 14:23:15 +00:00
Martin Willi 6f2aba1322 - fixed some memleaks/freebugs 
- leak detective works almost usable now (?!)
 2006-05-31 14:13:26 +00:00
Martin Willi 3b8af2ab60 - added host2host test for ikev2 2006-05-31 08:15:23 +00:00
Martin Willi bd72398729 - fixed host-host tunnel traffic selection, host-host works now 2006-05-31 06:52:27 +00:00
Martin Willi 2d6c3bce06 2006-05-30 14:56:12 +00:00
Martin Willi b93782903f - fixed event queue for events >36min 2006-05-30 13:22:46 +00:00
Martin Willi 8403b34bd9 2006-05-30 13:01:50 +00:00
Martin Willi 0773bdcf3f - included charons module tests to build & dist 2006-05-30 13:00:18 +00:00
Martin Willi 5e5f0bd4b2 - added testing files to dist 
- required the use of the "ustar" format to support 
    filenames longer than 99 chars
 2006-05-30 08:51:48 +00:00
Martin Willi db66c624bf - fixed daemon destruction order to prevent 
crashes on termination
 2006-05-30 06:14:23 +00:00
Martin Willi 139ce7871f - fixed memleak when deleting a connection 2006-05-29 11:29:23 +00:00
Martin Willi 60b9abf5c1 - updated todo list 2006-05-29 11:19:31 +00:00
Martin Willi 9fe14f4b8a - policies contain a connections name now 
- used for initiate and delete
- connections won't get initiated twice anymore
- deleting of connections is now possible, which allows us to use
  ipsec update and ipsec reload
 2006-05-29 11:09:45 +00:00
Martin Willi 4c59264d9b - changed iterator->remove behavior 2006-05-29 11:04:09 +00:00
Martin Willi 65996a534d - some logging improvements and cosmetics 2006-05-24 11:59:58 +00:00
Martin Willi 3a13a78084 - handle IKE_SA setup without a piggy-packed CHILD_SA 
more IKEv2 conform
 2006-05-24 09:05:21 +00:00
Martin Willi b82908b8b5 - initiate IKE_SA deletion befor manager destruction 2006-05-24 09:02:39 +00:00
Martin Willi 49e6a32353 2006-05-24 06:47:33 +00:00
Martin Willi 298b06c28c - build gets perl and gperf from configure now 
- moved built sources to maintainer-clean
 2006-05-24 06:36:46 +00:00
Martin Willi 8b5be79d83 - show connection templates in status & statusall 
- don't complain on termination of IKEv1 connections
 2006-05-23 13:25:57 +00:00
Martin Willi 3572b3b689 - updated ipsec.conf manual to reflect actual state of 
keyexchange-parameter
 2006-05-23 10:53:44 +00:00
Martin Willi 5ade114fd5 - using hubs instead of switches, which allows us 
to sniff the traffic from the host system.
 2006-05-23 10:08:12 +00:00
Martin Willi 7ba69503aa - changed config load strategy: 
starter loads both connections in charon & pluto,
  charon ignores anything with keyexchange!=ikev2.
  pluto needs the same behavior.
 2006-05-23 10:07:02 +00:00
Martin Willi de1584de40 - changed build order to fix build error after distclean 2006-05-23 09:41:18 +00:00
Martin Willi 4a5bba25e2 - reimplemented proper IKE SA deletion using a seperate state, 
should conform now to IKEv2
 2006-05-23 08:01:49 +00:00
Martin Willi 4acc8989ce - fixed build when using --enable-leak-detective 2006-05-23 08:00:29 +00:00
Martin Willi a2744feb63 - added removed files to svn:ignore 
- fixed bug in pluto/Makefile.am
 2006-05-19 14:25:08 +00:00
Martin Willi d6c32b83de - removed perl-generated oid.c/h from svn, 
added them to "dist" and "distclean"
 2006-05-19 14:16:58 +00:00
Martin Willi 7ca49e4037 - removed lex, yacc and gperf output from svn, 
added them to "dist" and "distclean"
 2006-05-19 14:05:26 +00:00
Martin Willi d7272314fc - storing release revision in svn property "release-revision", because I forget it all the times 2006-05-19 13:08:06 +00:00
Martin Willi a4c75933cc - added ingorelist for builded files 2006-05-19 12:20:26 +00:00
Martin Willi b1e69188ce - re-added doxygen apidoc, buildable with "make apidoc" 2006-05-19 12:10:06 +00:00
Martin Willi bea98d4dd7 - added missing ipsec.conf.5 to distribution :-/ 2006-05-19 11:16:48 +00:00
Martin Willi 1dec928446 - fixed another typo 2006-05-19 09:29:17 +00:00
Martin Willi fea5e716c4 - added missing ipsec.conf ipsec.conf.5 
- existing ipsec.conf won't get overwritten anymore
 2006-05-19 08:59:19 +00:00
Martin Willi 2403d26472 - fixed typo in Makefile which corrupted the build 2006-05-19 08:12:02 +00:00
Martin Willi 7881ac141e - applied patch from the NAT-T team fixing several typos 2006-05-19 06:46:22 +00:00
Martin Willi 86a7937b45 - applied patch from andreas, which allows certificate listing via stroke 2006-05-19 06:44:08 +00:00
Martin Willi 3e61d63a3a - added ipsec.conf template and man page back 
- removed old Makefiles
- added new strongswan KDevelop project & startup hack
 2006-05-18 14:21:58 +00:00
Martin Willi 17b296836a - fixed Revision in changelog fo 4.0.0 2006-05-18 08:41:12 +00:00