denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,944 Commits 1 Branch 0 Tags
f7c17aa15c13b10f7b624ae8da5ea3d921b77535
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi f7c17aa15c refactored credential builder 
allow enumeration of matching builders
	try a second builder if the first one fails
	builder clones resources internally on demand
	caller frees added resources on failure and success
	stricter handling of non-supported build parts
 2008-09-02 11:00:13 +00:00
Martin Willi eb3e27059b use libcap for capability dropping 
optional, must be enabled --with-capabilities=libcap
	will be extended to support --with-capabilities=libcap2
 2008-08-29 09:24:14 +00:00
Martin Willi e609b1cda2 capability API to allow plugin-controlled capability set 2008-08-28 16:27:48 +00:00
Martin Willi dc98e50153 cosmetics 2008-08-28 11:15:01 +00:00
Martin Willi e577ad3985 creating default IKE proposals dynamically using algorithm enumeration API 2008-08-28 11:07:57 +00:00
Martin Willi f1b014b9a3 separated sha1_prf implementation from sha1_hasher 2008-08-28 10:57:24 +00:00
Martin Willi 9482208633 crypto_factory algorithm enumeration API 
implementation of "ipsec listalgs"
 2008-08-28 09:24:42 +00:00
Martin Willi 018ae7c1aa build scripts for ubuntu NetworkManager packages 2008-08-27 13:51:05 +00:00
Martin Willi ee210ca353 check user account validity after PAM authentication 2008-08-27 13:48:54 +00:00
Martin Willi 609166f49f additional NEWS for 4.2.6 2008-08-27 08:39:09 +00:00
Martin Willi 281dd55891 using strongSwan, not NetworkManager version number 2008-08-26 14:27:53 +00:00
Martin Willi be49236373 fixing charon path for now for ubuntu package 2008-08-26 14:27:12 +00:00
Martin Willi f6ecd44fc6 added NM gnome plugin to distribution 2008-08-25 08:21:51 +00:00
Martin Willi c1ee908e4c removed generated Makefile.in.in from svn 2008-08-25 08:15:57 +00:00
Martin Willi a88aae3df6 enforce DN of configured gateway certificate 2008-08-25 07:50:21 +00:00
Martin Willi 7945c90adb new EAP-Identity handling uses ID_EAP in plugins 2008-08-25 07:49:48 +00:00
Martin Willi 1a109c9fc6 disabled PSK option until we have a way to enforce strong secrets 2008-08-25 07:48:11 +00:00
Martin Willi 1995f79f10 use username part of RFC822 IDs for PAM authentication 2008-08-25 07:47:16 +00:00
Martin Willi 822901061b ported parts of two-sim branch 
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
 2008-08-22 10:44:51 +00:00
Martin Willi 7c112a12c0 run guests with some niceness 2008-08-22 08:37:15 +00:00
Martin Willi 5ba7efb083 pool names are unique 2008-08-22 07:38:59 +00:00
Martin Willi 3e45b3a1ad do not return IPv6 src addresses for IPv4 destinations 2008-08-21 15:17:45 +00:00
Martin Willi b848f0377c fixed EAP-GTC secret lookup 
improved error logging
PAM authentication needs CAP_AUDIT_WRITE capability
 2008-08-21 14:40:03 +00:00
Martin Willi 1caa265c61 a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM 2008-08-21 12:10:07 +00:00
Martin Willi 2d6559b107 added sqlite busy handler: retries on locking conflicts 2008-08-21 09:25:06 +00:00
Martin Willi 02e907fe66 avoid too many alloca()s in netlink send, problematic on MIPS 2008-08-21 07:55:16 +00:00
Martin Willi bdbf3c49fc some string fixes 2008-08-20 13:59:37 +00:00
Martin Willi 6368a58ffc added missing tooltip 2008-08-20 12:02:53 +00:00
Martin Willi 1b9f6c2410 handle DBUS permission problems gracefully 2008-08-20 11:44:47 +00:00
Martin Willi 142eaea43c fixed shared key lookup by ID 
proper auth method selection
 2008-08-20 08:51:18 +00:00
Martin Willi 592dc30108 fixed auth-dialog password flush 2008-08-20 08:49:47 +00:00
Martin Willi ec24987164 certificate based gateway authentication 
prototype PSK user authentication with auth-dialog
 2008-08-19 15:19:45 +00:00
Martin Willi 62556b2b45 updated nm plugin to NetworkManager API changes 2008-08-18 11:59:19 +00:00
Martin Willi 475814ce5f roam jobs for routing table changes not fired for virtual IP routes 2008-08-18 11:07:26 +00:00
Martin Willi 39c0ae3780 configuration plugin for NetworkManager 2008-07-31 15:07:52 +00:00
Martin Willi 092a9b88ad added options for virtual IP, UDP encapsulation, IPComp 
proper handling of libstrongswan/glib TRUE/FALSE conflict
 2008-07-31 14:32:11 +00:00
Martin Willi 6dbce9c803 reimplemented dbus plugin for NetworkManager 0.7, renamed to nm 2008-07-31 11:16:14 +00:00
Martin Willi 2d87903db9 recreating FIFO if it exists 2008-07-31 09:04:54 +00:00
Martin Willi eb04645c10 fixed usage typo 2008-07-31 09:01:56 +00:00
Martin Willi 19ad10b5d3 increased stroke socket backlog to 10 2008-07-30 14:17:05 +00:00
Martin Willi f0a8fa25ba using a entry cache for duplicate checks, avoids deadlocks 2008-07-30 14:15:08 +00:00
Martin Willi 7a4ad866b0 use condvar broadcasts to signal threads waiting for an IP, there might be more than one 2008-07-30 13:19:12 +00:00
Martin Willi 38a8e39739 using shared read locks in credential set enumerators to avoid deadlocks 2008-07-30 11:38:44 +00:00
Martin Willi 21632b76e0 added strongswan.conf option "charon.dos_protection" to disable cookies/aggressiveness check 2008-07-30 08:27:08 +00:00
Martin Willi 7fb2693724 switched xterm console title 2008-07-28 13:10:34 +00:00
Martin Willi bc8f868c99 using gnome-terminal in irdumm 2008-07-28 12:37:01 +00:00
Martin Willi 7c04589335 use XFRM_MSG_UPDPOLICY for existing policies only 2008-07-28 08:29:04 +00:00
Martin Willi 6ef70d2109 added tests.h to distribution 2008-07-24 12:48:36 +00:00
Martin Willi b6bf863459 fixed UCI thread cancellation on ARM 2008-07-24 08:52:12 +00:00
Martin Willi 3bc5a137cb added option charon.plugins.sql.lease_history to disable lease history logging 2008-07-24 08:28:45 +00:00
Martin Willi 875a8326b3 fixed statistic calcuation for static leases 2008-07-24 08:21:55 +00:00
Martin Willi a01ad99341 fixed pool statistics 2008-07-23 13:56:07 +00:00
Martin Willi f7198e7e8c experimental and untested reimplementation of sql based IP pool 
uses address preallocation and separate address/lease tables for linear lookup time
 2008-07-22 14:56:15 +00:00
Martin Willi ee93541783 fixed bus args copy on non i386 archs 2008-07-21 14:23:43 +00:00
Martin Willi 0a625fde3e pool performance testing 2008-07-21 11:17:20 +00:00
Martin Willi 6b64fe2684 loading unit-tester plugin as the last one 2008-07-21 11:16:07 +00:00
Martin Willi c7314e68ab reverted bus to non-recursive mutex due instability 2008-07-21 11:15:16 +00:00
Martin Willi fc861b0b7e added a driver type getter for database implementations 2008-07-21 11:13:06 +00:00
Martin Willi a4a3e0c7dc introduced an additional bus->signal parameter for signal specific data 
added SIG_IKE/SIG_CHD macros for signal emitting
 2008-07-18 15:51:40 +00:00
Martin Willi 2f725443e5 removed testing app, this is scriptable with irdumm now 2008-07-18 12:14:43 +00:00
Martin Willi a98793adfe allow but filter recursive listener invocation 2008-07-18 11:05:01 +00:00
Martin Willi 1082b06121 fixed compiler warning 2008-07-18 10:54:49 +00:00
Martin Willi 12b1c1a1bc extended UCI plugin by a simple control interface using a fifo 2008-07-18 10:34:44 +00:00
Martin Willi bd07b59079 avoid heap allocation in bus->signal for performance reasons 2008-07-17 11:45:58 +00:00
Martin Willi 5353f22ed7 fixed potential segfault in resolve_hosts 2008-07-17 11:06:31 +00:00
Martin Willi d61d1913e1 ignore IPCOMP acquires, fixes additional CHILD_SA setup with acquired SAs using compression 2008-07-17 08:25:34 +00:00
Martin Willi 7ca49551c8 do not distinguish different policy protocols in userland cache 2008-07-16 12:33:19 +00:00
Martin Willi 7b9e1ff0fd do not complain about existing routes 2008-07-16 12:30:47 +00:00
Martin Willi 8384cfa338 build dumm with leak ./configure 2008-07-16 11:54:44 +00:00
Martin Willi 7beea2e99f fixed acquire-delay bug by: 
installing policies before states
  updating policies if protocol has changed
 2008-07-16 11:51:37 +00:00
Martin Willi 66d4745f8e ported patch to final 2.6.26 release, including UML Makefile fixes 2008-07-15 14:41:12 +00:00
Martin Willi ef3f717bfe reverted [4125],[4166], reimplemented the proper way 2008-07-11 08:54:56 +00:00
Martin Willi 6b5d95919c setting ike_sa on bus in checkout_new 2008-07-11 08:47:18 +00:00
Martin Willi e7991a2eef do a route lookup to allow routing of left=%any connections 2008-07-09 14:16:19 +00:00
Martin Willi 6c652e6b55 added /usr/local/[s]bin to uml exec path 2008-07-09 12:39:11 +00:00
Martin Willi ddf944be3e loading ruby scripts specified at command line 2008-07-09 12:18:06 +00:00
Martin Willi a9c46ace99 ruby bindings/fixes for template loading 2008-07-09 11:43:48 +00:00
Martin Willi ee70c94835 passing a block to guest.exec() processes output lines 2008-07-09 10:51:10 +00:00
Martin Willi bf44108019 uml "exec" writes stdout/stderr back to mconsole 
guest->exec() accepts a callback for output
sligtly refactored mconsole.c
 2008-07-08 14:58:20 +00:00
Martin Willi 02a6083633 guest interface/address management using hackish mconsole exec patch, ruby bindings 2008-07-07 14:56:04 +00:00
Martin Willi 36beca7cef disconnecting interfaces properly on bridge destruction 2008-07-05 09:32:55 +00:00
Martin Willi c4d72bdb01 throwing proper exeptions on errors, correct return values 
mixin enumerable in classes/objects with .each
 2008-07-04 16:42:54 +00:00
Martin Willi ca275ae2ca prototype of irdumm - interactive ruby shell for dumm 2008-07-04 14:21:41 +00:00
Martin Willi 4302d4f012 some stability improvements 2008-07-04 06:58:04 +00:00
Martin Willi 4a231f1a2e changed medcli settings keys 2008-07-02 09:02:38 +00:00
Martin Willi d932435e18 sql plugin supports a list of pools to fall back, specified by e.g. rightsourceip=%pool1,pool2 2008-07-02 08:31:48 +00:00
Martin Willi 11e855179e using token enumerator to parser plugin list 2008-07-02 08:19:43 +00:00
Martin Willi 5848e473e8 fixed another compiler warning 2008-07-02 08:16:43 +00:00
Martin Willi fca4d3ee03 implementation of a simple "token enumerator" 2008-07-02 08:09:07 +00:00
Martin Willi 2f2b99282a fixed compiler warning 
updated svn:ignore property
 2008-07-02 08:05:51 +00:00
Martin Willi ab89517218 fixed medsrv database uri key 2008-07-01 13:57:47 +00:00
Martin Willi 131064995a added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by remote virtual ip 2008-07-01 12:48:56 +00:00
Martin Willi d01783dba4 logging peer addresses in peer_cfg lookup 2008-07-01 11:10:37 +00:00
Martin Willi 9eeaa25f5d added host match prio to debugging output 2008-07-01 11:01:27 +00:00
Martin Willi 62bd123952 peer_cfg lookup takes peer addresses into account 2008-07-01 09:05:20 +00:00
Martin Willi 866ba8e0b6 strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if CHILD_SA setup in IKE_AUTH fails 2008-07-01 07:54:09 +00:00
Martin Willi fe5d7c43be whitelisting leaks of ENGINE_load_builtin_engines 2008-07-01 07:53:03 +00:00
Martin Willi d510eaea47 sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none found 2008-07-01 06:36:52 +00:00
Martin Willi b119f89a4e fixed chunk_increment, fixes reuse of already assigned addresses 2008-06-30 12:33:38 +00:00
Martin Willi 7da767f773 sqlite plugin requires libsqlite3 => 3.3.1 to share connections 
use recursive locking if libsqlite3 < 3.5.0
 2008-06-30 11:06:18 +00:00