denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,000 Commits 1 Branch 0 Tags
f0974eb2c2c71cae9165347529f0f186e701835b
Commit Graph
384 Commits
Author SHA1 Message Date
Martin Willi f0974eb2c2 fixed MOBIKE roaming if clients address changes 2008-10-09 08:25:11 +00:00
Martin Willi ce5b17082d mobike: try to keep existing source address before switching to another 2008-10-08 08:23:46 +00:00
Martin Willi aa9a300677 userland support to process notifies for new NAT mappings detected in UDP encapsulation 2008-10-07 07:55:28 +00:00
Martin Willi 9d9a772ee1 use MOBIKE enabled DPD if we are NATed 
update SAs if we detect changes in NAT mappings
 2008-10-06 13:37:04 +00:00
Martin Willi aa1b90a5b2 do not run CHILD_SA delete action if rekeying 2008-10-03 16:01:14 +00:00
Martin Willi 7827997346 also respect the mobike=no setting as responder 2008-09-30 12:36:58 +00:00
Tobias Brunner a341a68fac merging renaming of mode_t to ipsec_mode_t back to trunk 2008-09-25 13:56:23 +00:00
Tobias Brunner 507f26f685 merging modularized kernel interface back to trunk 2008-09-25 07:56:58 +00:00
Andreas Steffen 07d7f9a402 time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s) 2008-09-04 16:19:46 +00:00
Andreas Steffen 60055b7e1c charon.keep_alive = 0 disables the sending of NAT keep alives 2008-09-03 19:00:08 +00:00
Andreas Steffen 3dfecde4c0 configure NAT keep alive interval using the charon.keep_alive key 2008-09-03 18:49:06 +00:00
Martin Willi 703791715b handle INFORMATIONAL exchanges with NATD payloads in mobike task 2008-09-02 14:02:40 +00:00
Andreas Steffen a44d02627f cosmetics 2008-08-26 19:54:47 +00:00
Andreas Steffen 919019b3cd completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes 2008-08-26 05:15:34 +00:00
Martin Willi 822901061b ported parts of two-sim branch 
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
 2008-08-22 10:44:51 +00:00
Martin Willi 1caa265c61 a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM 2008-08-21 12:10:07 +00:00
Andreas Steffen 9f1ec81290 corrected typo 2008-08-11 18:40:22 +00:00
Andreas Steffen 342c84ddec initiator sends contents of rightca= if present as a certificate request without searching for further CA certificates 2008-08-05 09:05:57 +00:00
Martin Willi f0a8fa25ba using a entry cache for duplicate checks, avoids deadlocks 2008-07-30 14:15:08 +00:00
Andreas Steffen 98ba96f185 demoted IKE state change output to debug level 2 2008-07-28 14:01:45 +00:00
Andreas Steffen 3fd9c75717 ignore AUTH_LIFETIME value if reauthentication has already been scheduled earlier 2008-07-28 13:53:04 +00:00
Andreas Steffen f6facbe75c completed IKE_SA logging at the AUDIT level 2008-07-23 18:46:34 +00:00
Andreas Steffen 6410231335 IKE_SA rekeying inherits other_host from old IKE_SA 2008-07-23 07:44:26 +00:00
Andreas Steffen 0eede4a31f cosmetics 2008-07-23 06:38:24 +00:00
Andreas Steffen 51c8f8261f some more changes to IKE_SA and CHILD_SA logging 2008-07-22 17:10:10 +00:00
Andreas Steffen 32f5ee159e cosmetics 2008-07-22 12:13:48 +00:00
Andreas Steffen 66da78b4bb ipsec status lists IPCOMP CPIs 2008-07-22 12:03:58 +00:00
Andreas Steffen c3967e779e own CPI was not deleted due to copy-and-paste error 2008-07-22 10:53:56 +00:00
Andreas Steffen eba7470b76 consistent logging of SPIs and CPIs 2008-07-22 10:16:45 +00:00
Andreas Steffen fb34475b5c consistent logging of IKE and CHILD SAs 2008-07-21 12:47:59 +00:00
Martin Willi a4a3e0c7dc introduced an additional bus->signal parameter for signal specific data 
added SIG_IKE/SIG_CHD macros for signal emitting
 2008-07-18 15:51:40 +00:00
Martin Willi 5353f22ed7 fixed potential segfault in resolve_hosts 2008-07-17 11:06:31 +00:00
Martin Willi 7beea2e99f fixed acquire-delay bug by: 
installing policies before states
  updating policies if protocol has changed
 2008-07-16 11:51:37 +00:00
Martin Willi ef3f717bfe reverted [4125],[4166], reimplemented the proper way 2008-07-11 08:54:56 +00:00
Martin Willi 6b5d95919c setting ike_sa on bus in checkout_new 2008-07-11 08:47:18 +00:00
Martin Willi e7991a2eef do a route lookup to allow routing of left=%any connections 2008-07-09 14:16:19 +00:00
Martin Willi 62bd123952 peer_cfg lookup takes peer addresses into account 2008-07-01 09:05:20 +00:00
Martin Willi 866ba8e0b6 strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if CHILD_SA setup in IKE_AUTH fails 2008-07-01 07:54:09 +00:00
Martin Willi d510eaea47 sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none found 2008-07-01 06:36:52 +00:00
Andreas Steffen 125aaf1ab1 log received vendor id as a hex value 2008-06-27 17:11:54 +00:00
Martin Willi 7e8af02626 flushing task_manager on shutdown while IKE_SA is usable 2008-06-25 11:40:50 +00:00
Martin Willi e9ab669bc2 resolving hosts before route 2008-06-23 08:30:35 +00:00
Andreas Steffen bc997f6583 display selected IKE proposal in ipsec statusall 2008-06-22 11:24:33 +00:00
Andreas Steffen 7d4bb52073 make config_auth_method_t backward compatible to existing sql templates 2008-06-10 20:31:53 +00:00
Tobias Brunner ea0823dffd ECDSA with OpenSSL 2008-06-10 09:08:27 +00:00
Martin Willi 5a22a02156 DNS resolving of ike_cfg hosts dynamically on demand 2008-06-06 15:05:54 +00:00
Martin Willi 011b1cca94 do not roam IKE_SA in created or deleting state 2008-06-04 14:31:06 +00:00
Martin Willi de3d65a132 filtering out non matching path probing pairs explicitly 2008-05-23 15:43:42 +00:00
Martin Willi 85a119bc0b replying to COOKIE2 mobike notify properly 
including COOKIE2 ourself after path probing
 2008-05-21 17:56:21 +00:00
Martin Willi cb9edc54eb using fixed size keys in key derivation for AES-XCBC PRF 2008-05-21 14:58:03 +00:00