Commit Graph
670 Commits
Author SHA1 Message Date
Martin Willi eea353466e - reworked usage of IDs in various states
- using ID_ANY for any, not NULL as before
- initiator sends IDr payload in IKE_AUTH when ID unique
2006-04-27 11:38:24 +00:00
Martin Willi f1e87b9022 - fixed charon checks
- using status & statusall
2006-04-27 07:33:01 +00:00
Martin Willi 8cd73fe546 - patch for 2.7.0 2006-04-27 07:29:59 +00:00
Martin Willi e168ee1785 - add connection names to connections
- stroke status / ipsec status shows them
- added statusall for stroke
- added status by connection name
- some tests repaired, more to come
2006-04-27 07:24:04 +00:00
Martin Willi 108b489f88 - fixed spi conversion 2006-04-26 12:45:15 +00:00
Martin Willi b92eef2868 - improved "stroke status" output 2006-04-26 12:28:02 +00:00
Martin Willi a2553ef8ad - setup PID file after daemon initilization, to correctly inform
starter about daemon startup
2006-04-26 07:50:06 +00:00
Martin Willi 13e4a62f5c - added separate implementation for connection_store, credential_store, policy_store
- added folder structure to config
- credentials are fetched solely on IDs now
2006-04-25 10:06:30 +00:00
Martin Willi a8c09d8cc0 - identification_t supports now almost all id types
- x509 certificates work with identification_t now
- fixes here, fixes there
2006-04-24 10:40:10 +00:00
Martin Willi fcfeb3220f - fixed doxygen build
- seperates now in lib and charon
2006-04-20 13:12:35 +00:00
Martin Willi 6b3292da85 - library initialization done at a central point (library.c)
- some leak_detective fixes
2006-04-20 11:48:57 +00:00
Martin Willi 14abc909e0 - updated Todos 2006-04-20 08:19:23 +00:00
Martin Willi 8bc96e08cb - fixed log-to-syslog behavior
- added patch against strongswan-2.6.4
2006-04-20 07:06:39 +00:00
Martin Willi ec6582ccaa - x509 certificate loading with pluto asn1 code
- x509 needs a lot more attention!
2006-04-19 11:40:48 +00:00
Martin Willi 4a93d6bafd - renamed some files 2006-04-18 07:23:20 +00:00
Martin Willi 1d025fbcea - using asn1 pluto stuff now 2006-04-18 07:22:20 +00:00
Martin Willi 1ab689ee60 - removed, since we use pluto asn1 stuff 2006-04-18 07:21:26 +00:00
Martin Willi 9d7597bb12 - leak detective is usable, but does not show static function names
- a script which gets address via ldd and resolves address via addr2line would be nice
- fixed a leak in child_sa with new detective ;-)
2006-04-13 13:24:45 +00:00
Martin Willi 2cb7d3cab2 - some improvements to new asn1 stuff
- to be continued
2006-04-12 08:38:10 +00:00
Martin Willi 8f1c27babb - fixed bad bugs in kernel interface
- added some logging info
- works now much more stable
2006-04-12 08:36:40 +00:00
Martin Willi b5cb0210f7 - startet importing pluto ASN1 stuff
- der PKCS#1 key loading works (as it did with der_decoder)
2006-04-10 14:19:10 +00:00
Martin Willi 5113680f95 - split up in libstrong, charon, stroke, testing done
- new leak detective with malloc hook in library
  - useable, but needs improvements
- logger_manager has now a single instance per library
  - allows use of loggers from any linking prog
- a LOT of other things
2006-04-10 08:07:38 +00:00
Martin Willi 6862128151 ../svn-commit.tmp 2006-04-05 12:10:50 +00:00
Martin Willi 3dbbbf3e16 - added misssing stroke.h 2006-04-05 05:59:05 +00:00
Martin Willi f2ee13a7e8 - improved strokeing
- down connection
	- status
- some other tweaks
2006-04-04 12:45:29 +00:00
Martin Willi efadbf79e9 - rewrote a lot of RSA stuff
- done major work for ASN1/decoder
- allow loading of ASN1 der encoded private keys, public keys and certificates
- extracting public key from certificates
- passing certificates from stroke to charon

=> basic authentication with RSA certificates works!
2006-03-30 07:22:01 +00:00
Martin Willi 9c781c152a - starter work on asn1 with der de/encoder
- RSA private and public key can load read key from ASN1 DER
- some other fixes here and there
2006-03-24 15:37:49 +00:00
Martin Willi dec598220b - rewrite of logger_manager, uses now one instance per context
- cleanups for logger here and there
- removed critical flag check in payload verification (conformance to IKEv2)
- so thats and theres everywere... ;-)
2006-03-23 15:25:43 +00:00
Martin Willi 3264ce50b9 - patch for strongswan-2.6.3
- added charon support for strongswan build process
- ipsec starter supports charon startup and control
2006-03-21 10:21:31 +00:00
Martin Willi e07d2dec73 - some cleanups
- compatibility to strongswan, Makefile can be called by "make programs"
  and "make install" (ikev2 patch must be applied to strongswan)
2006-03-21 10:13:21 +00:00
Martin Willi 4749578d9d - first version of stroke control utility 2006-03-21 10:11:45 +00:00
Martin Willi 2ade41c5aa - moved output to doc/api, since doc is used for other docs now 2006-03-21 10:11:21 +00:00
Martin Willi 86c5fe9d10 - some first documentation in english 2006-03-21 10:10:56 +00:00
Martin Willi 87a217f9f1 - works quite well now with ipsec.conf & ipsec starter 2006-03-20 15:43:26 +00:00
Martin Willi e8d25806f3 - belongs to previous commit ;-) 2006-03-16 15:25:41 +00:00
Martin Willi 16b9a73cc4 - reworked configuration framework completly
- configuration is now split up in: connections, policies, credentials and daemon config
- further alloc/free fixes needed!
2006-03-16 15:25:06 +00:00
Martin Willi b1953ccd05 - first attempt for connection loading and starting via "stroke"
- some improvements here and there
2006-03-14 13:22:48 +00:00
Martin Willi 8a49112907 - configuration_manager replaced by configuration_t interface
- current configuration_manager is now static_configuration (testing)
- first draft of starter_configuration, which should once interact with ipsec starter (via whack?)
- some cleanups
- socket_t uses RAW socket, which allows parallel service of pluto/charon
2006-03-07 09:42:15 +00:00
Martin Willi aa5a35a005 - comments and cleanups 2006-03-02 09:56:30 +00:00
Martin Willi 5d187bd234 - working policy installation and removal 2006-03-01 15:56:51 +00:00
Martin Willi fb8aa445d2 - fixed policy setup bug 2006-02-23 16:22:12 +00:00
Martin Willi a527a426d6 - proposal setup implementation begun 2006-02-22 16:14:40 +00:00
Martin Willi 0a373aec33 - fixed socket code, so we know on which address we receive traffic
- AH/ESP setup in kernel is working now!!! :-)))
2006-02-16 16:24:50 +00:00
Martin Willi 30b5b412da - installing of child sa works
- need correct IP adresses to actually use IPsec
2006-02-16 09:55:07 +00:00
Martin Willi ce461bbd13 - refactored ike proposal
- uses now proposal_t, wich is also used by child proposals
- ike key derivation refactored
- crypter_t api has get_key_size now
- some other improvements here and there
2006-02-14 14:52:00 +00:00
Martin Willi 409d010131 - config uses uml hosts alice and bob 2006-02-13 13:42:01 +00:00
Martin Willi fc18670524 2006-02-10 15:18:18 +00:00
Martin Willi aeda79ff78 - key derivation for child_sa works 2006-02-10 08:20:06 +00:00
Martin Willi 5b97779f66 - some fixes here and there 2006-02-09 16:25:02 +00:00
Martin Willi dfa6e086a0 - fixed memleaks 2006-02-09 11:56:24 +00:00