denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,026 Commits 1 Branch 0 Tags
f53088c657cee6c5d180d4ded0086829132312c4
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner c3a78360a8 Fixed a race condition when querying stats of a child_sa in different order. 2009-08-06 16:47:32 +02:00
Tobias Brunner dd83c6d490 Don't query the policy usetime if there was no traffic on the SA. 
This helps in cases where a policy is assigned to more than one SA. That
is, SAs now should have different usetimes even if they use the same policy.
 2009-08-06 15:14:54 +02:00
Tobias Brunner b3f8ea8346 Reverted the interface changes introduced in 3f720dc7. 2009-08-06 13:31:54 +02:00
Tobias Brunner 1e7b4b0028 Reversed the check for udp.h, fixes compilation on Linux. 2009-08-06 10:01:59 +02:00
Tobias Brunner 7da1f4a0ff Enabling UDP encapsulation via setsockopt fails on Mac OS X (it is also not required as this is done using sysctl). 2009-08-05 12:31:10 +02:00
Tobias Brunner 524f9ac470 FreeBSD only reports a policy's usetime if a lifetime has been specified when the policy was added (we only specify a lifetime on the SA, not on the policy). 2009-08-04 11:08:58 +02:00
Tobias Brunner 56ee8fcc96 FreeBSD and Mac OS X both set the sequence number of an SADB_X_SPDGET response to zero, we accept that for now. 2009-08-04 11:08:58 +02:00
Tobias Brunner e8c3cdb25b Missing check for udp.h added. 2009-08-04 11:08:57 +02:00
Tobias Brunner eab05274f4 Handling of unsupported policy directions (FWD) fixed. 2009-07-30 14:06:26 +02:00
Tobias Brunner e20bd8b6ea Enabling NAT-T on Mac OS X using the private SADB_X_EXT_NATT flag and sadb_sa_2 struct. 2009-07-30 14:06:26 +02:00
Tobias Brunner 789ba17024 Configure the NAT-T port via sysctl on Mac OS X to enable handling of incoming UDP encapsulated ESP packets in the kernel. 2009-07-30 14:06:26 +02:00
Tobias Brunner b2117eee20 Make accept(2) and recvfrom(2) cancellation points on Mac OS X. 2009-07-30 14:06:26 +02:00
Tobias Brunner 6ff7ab850b Fixed GID lookup in cases where the configured group is a prefix of another group. 2009-07-20 21:20:03 +02:00
Tobias Brunner 9af7715c3d Fixed installation of config files in out-of-tree builds. 2009-07-20 21:13:45 +02:00
Tobias Brunner 7cdf712d3e Use the numerical UID/GID to install the config files and create the ipsec.d directories. 2009-07-20 21:03:05 +02:00
Tobias Brunner 7d2b06da6a Translate the configured user and group to a numerical UID and GID. 2009-07-20 21:01:13 +02:00
Tobias Brunner 375a91bb9b Fixing distribution build (checksum.c is created on the user's system). 2009-07-16 16:53:43 +02:00
Tobias Brunner 69fc782000 Check for gperf version added to configure script. 2009-07-16 15:15:40 +02:00
Tobias Brunner c7e0f07ced Typo fixed. 2009-07-16 15:15:35 +02:00
Tobias Brunner cf00cffef2 Added an option to the configure script to disable building the scripts. 2009-07-16 15:15:26 +02:00
Tobias Brunner 599d2bcea8 Revert "gperf under FreeBSD does not know the -m option." 
This reverts commit 0ead254919.
 2009-07-16 15:15:09 +02:00
Tobias Brunner 233a132634 Removed an unnecessary include of a header that is not available on Mac OS X. 2009-07-15 22:42:22 +02:00
Tobias Brunner 0ead254919 gperf under FreeBSD does not know the -m option. 
We could use AC_PATH_PROGS_FEATURE_CHECK (added in Autoconf 2.62) to check for this option.
 2009-07-14 12:09:22 +02:00
Tobias Brunner fd0df7ec75 Corrected check for valid ASN1 types in rdn_enumerate. 
Because of the range of u_char the comparison was always TRUE before.
 2009-07-14 12:09:22 +02:00
Tobias Brunner 0b5f2a81da Added --with-lib-prefix option to the configure script. 
This option enables users to add additional search paths for include
files and libraries.
 2009-07-14 12:09:22 +02:00
Tobias Brunner 272c81134c Typo in configure script fixed. 2009-06-12 10:42:07 +02:00
Tobias Brunner a6ae2a1490 Fixing IPSEC_* checks on older Linux distros. 2009-05-21 10:03:27 +02:00
Tobias Brunner 617e59b7bc Portably check for IPSEC_* constants (defined in ipsec.h). 
The problem is that FreeBSD defines them as #defines whereas Linux defines them as enums.
 2009-05-20 20:15:06 +02:00
Tobias Brunner ad36ab252e Automatically build (and install) the DUMM Ruby extension. 2009-05-20 19:38:01 +02:00
Tobias Brunner 2d9ce480fa Enable building the DUMM Ruby extension in a VPATH build. 2009-05-20 19:38:01 +02:00
Tobias Brunner d2e9cbc9a2 The configure script now tries to figure out where ruby.h is located. 
This is required because the location depends on the architecture.
 2009-05-20 19:38:01 +02:00
Tobias Brunner 68173e1fea typo 2009-05-18 13:04:18 +02:00
Tobias Brunner 28154e35be documented the idea behind the current implementation of the scheduler 2009-05-15 14:43:15 +02:00
Tobias Brunner 5020a456c0 more intuitive leap year check 2009-05-15 09:36:55 +02:00
Tobias Brunner 7cdb1ddf08 Mac OS X doesn't have SADB_X_AALG_AES_XCBC_MAC 2009-05-14 17:38:36 +02:00
Tobias Brunner 9f090745cf added another possible location for the ipsec.h header file 2009-05-14 17:38:32 +02:00
Tobias Brunner c1532e840d fixed compiler warning 2009-05-14 17:38:27 +02:00
Tobias Brunner 9015c073de make socket_t compatible with RFC 2292 (that got obsoleted by RFC 3542) 2009-05-14 17:16:21 +02:00
Tobias Brunner 75a354bb6b fixing compilation of socket_t on systems that have neither IP_PKTINFO (Linux) nor IP_SENDSRCADDR (FreeBSD) 2009-05-12 17:40:43 +02:00
Tobias Brunner bf45d6dd3b added a configure option to enable the Vstr string library even if register_printf_function is available 2009-04-24 05:32:17 +02:00
Tobias Brunner bcbf110938 fixing compilation when using the Vstr string library 2009-04-24 05:30:50 +02:00
Tobias Brunner 65ea37abcd fixed timezone compensation when parsing ASN.1 dates 2009-05-08 15:23:50 +02:00
Tobias Brunner d504f1cbac fixed compiler warnings 2009-05-07 17:53:05 +02:00
Tobias Brunner ca39743f06 Merge branch 'master' of git.strongswan.org:~/strongswan into HEAD 2009-05-07 17:47:48 +02:00
Tobias Brunner 5533a88936 properly convert boolean flags when parsing ipsec.conf 2009-05-07 17:43:16 +02:00
Tobias Brunner 723534283c use bool instead of int 2009-05-07 17:42:25 +02:00
Tobias Brunner 433c0968e4 properly initialize buffer when printing loaded plugins. 2009-05-07 17:40:19 +02:00
Tobias Brunner e382d96f62 compiler warning fixed 2009-05-06 09:11:19 -04:00
Tobias Brunner a9f56adb59 more portable handling of the bool data type (Mac OS X has stdbool.h) 2009-05-06 09:11:13 -04:00
Tobias Brunner 938b230fa7 renamed some conflicting function names 2009-05-06 09:11:07 -04:00
Tobias Brunner f52e9c1aa8 gethostbyname_r is not supported on Mac OS X (but gethostbyname uses thread-local buffers) 2009-05-06 09:11:03 -04:00
Tobias Brunner af05cc564c libtoolize is called glibtoolize on Mac OS X 2009-05-06 09:10:58 -04:00
Tobias Brunner 8af25c56af some typos 2009-04-30 17:15:28 +00:00
Tobias Brunner ea7e89c72c somehow missed these changes during the portability branch back-merge 2009-04-30 17:13:45 +00:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk 
important change for developers: %Y replaces %D to print identities!
 2009-04-30 11:37:54 +00:00
Tobias Brunner c889ce80ab fixing IKE_SA rekeying if charon.ikesa_table_size > 1 2009-04-17 16:58:11 +00:00
Tobias Brunner 3a80181b61 missed strcaseeq added 2009-04-17 10:52:41 +00:00
Tobias Brunner 6e7c0b1e44 fixing DES ECB decryption 2009-03-12 18:38:13 +00:00
Tobias Brunner d25ce3701e printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms). 2009-03-12 18:07:32 +00:00
Tobias Brunner 9086102dfd memleak fixed when reading smartcard secrets 2009-03-12 15:12:11 +00:00
Tobias Brunner 3078b18778 fixed some memleaks in mschapv2 plugin 2009-02-19 14:32:13 +00:00
Tobias Brunner 7b76702587 ECB mode added to the DES plugin 2009-02-19 14:29:25 +00:00
Tobias Brunner 5fa7aed491 des ecb enum value changed, ignores set for md4 plugin 2009-02-19 13:46:08 +00:00
Tobias Brunner f98cdf7a47 adding plugin for EAP-MS-CHAPv2 2009-02-18 19:57:15 +00:00
Tobias Brunner 73883705bd force unique connections for mediation connections 2009-02-18 19:48:11 +00:00
Tobias Brunner b250665f58 adding enum elements for MD4 and DES (ECB) 2009-02-18 19:45:46 +00:00
Tobias Brunner b8fa437fb7 adding MD4 and DES (ECB) to openssl plugin 2009-02-18 19:41:33 +00:00
Tobias Brunner abe1dafaa4 typo 2009-02-17 17:14:15 +00:00
Tobias Brunner bb835afa90 fixing cross-compilation 2009-01-13 10:38:16 +00:00
Tobias Brunner f30150d3da correct use of calloc in hashtable_t 2008-12-17 09:56:05 +00:00
Tobias Brunner 58464dd737 improved IKE_SA uniqueness check 2008-12-16 17:21:28 +00:00
Tobias Brunner f55a7a76dd address extensions refactored 2008-12-11 13:39:30 +00:00
Tobias Brunner a46173dfb4 nat_traversal in manpage corrected 2008-12-10 17:45:44 +00:00
Tobias Brunner 2475560c82 fixing checkout of IKE SAs with only the initiator SPI 2008-12-10 15:58:39 +00:00
Tobias Brunner 97016769fd increasing the performance of checkout_duplicate by using a hash table. 2008-12-10 13:51:21 +00:00
Tobias Brunner 0dbd9788e5 initial size of 1 is nonsense 2008-12-10 13:45:05 +00:00
Tobias Brunner d6dc0a21fb incremental version of chunk_hash 2008-12-10 13:43:51 +00:00
Tobias Brunner 3fb404d8da implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead of a linked list. 2008-12-04 16:46:08 +00:00
Tobias Brunner ffa6450695 fixed off by one error 2008-12-04 16:33:39 +00:00
Tobias Brunner 83c42156a2 add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg. 2008-12-03 10:12:20 +00:00
Tobias Brunner c3bdc3cd7f enable quoted tokens in the token enumerator 2008-12-03 10:03:59 +00:00
Tobias Brunner f4bcf49bcb fixed compiler warning 2008-12-03 10:03:02 +00:00
Tobias Brunner 81736d7d24 added memstr and extract_token_str helper functions 2008-12-03 09:45:58 +00:00
Tobias Brunner 0948edbbff adding general purpose hash table 2008-12-03 09:32:16 +00:00
Tobias Brunner 69e9698b17 allow to globally disable DOS protection by setting charon.dos_protection to no. 2008-11-26 09:22:19 +00:00
Tobias Brunner 999072ea02 optimized the scheduler for performance by replacing the linked list with a heap. 2008-11-25 19:56:05 +00:00
Tobias Brunner 6df2731e78 replacing the pthread_mutex in scheduler_t with the wrapped implementation. 
added a method to condvar_t which allows to wait for an absolute timeout.
 2008-11-25 19:30:02 +00:00
Tobias Brunner ed6146ffbe performance optimization for the DOS protection. 
* half-open SAs per peer are tracked in a hash table
 * charon.dos_protection setting replaced with charon.cookie_threshold and charon.block_threshold
 * chunk_hash function added
 2008-11-25 13:16:05 +00:00
Tobias Brunner cdee592e38 fixing Makefile of the nm plugin (avoids including a .svn directory in the distribution) 2008-11-20 14:46:03 +00:00
Tobias Brunner ba2ecf6831 optimized ike_sa_manager for concurrent access (default behavior is still as before, needs configuration in strongswan.conf). 2008-11-20 13:30:23 +00:00
Tobias Brunner 9dd1229407 fixing compilation on systems lacking linux/xfrm.h 2008-11-18 14:28:05 +00:00
Tobias Brunner 7bdc931e6c announcing the kernel plugins 2008-11-11 13:35:51 +00:00
Tobias Brunner f967db312d fixing mediation extension 2008-11-11 13:12:05 +00:00
Tobias Brunner 476c61fdcd some typos 2008-11-11 13:11:44 +00:00
Tobias Brunner e7c27b4f3f fixing a memory leak 2008-11-11 09:56:47 +00:00
Tobias Brunner ea625fabf9 merging kernel_klips plugin back into trunk 2008-11-11 09:22:00 +00:00
Tobias Brunner 35379b2130 typedef fixed 2008-10-15 11:34:29 +00:00
Tobias Brunner c25c8dce60 typos 2008-10-14 12:18:53 +00:00
Tobias Brunner 35ae2d7fe7 directory 'build' renamed as 'packages' 2008-10-14 11:53:23 +00:00