denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,770 Commits 1 Branch 0 Tags
face844a872481d7ee4aabc31dcf801f441f160a
Commit Graph
230 Commits
Author SHA1 Message Date
Martin Willi face844a87 proper update of IPsec SA when roaming a host-to-host tunnel 
roaming of IPsec SAs using virtual IPs
 2007-07-02 09:49:22 +00:00
Martin Willi ffbca197c1 fixed dpd=hold when using virtual IPs 2007-06-29 08:03:32 +00:00
Martin Willi 8ba7d34253 removed accidently checked in debbuging code 2007-06-29 07:40:04 +00:00
Martin Willi c532d6460d fixed IKE_SA reestablishment after DPD using port 500 2007-06-28 15:24:24 +00:00
Martin Willi fc2d1c420f further mobike improvements, regarding to NAT-T 2007-06-27 13:10:55 +00:00
Martin Willi 2b3100b5d0 simple roaming of the client works (not MOBIKE conform yet!) 2007-06-26 13:04:13 +00:00
Martin Willi 4cb9d7a758 further fixed for mobike roaming 2007-06-25 13:26:02 +00:00
Martin Willi 17d92e9732 further MOBIKE stuff: 
kernel properly reports network reconfiguration and informs all IKE_SAs
  MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange
  reestablishment of IKE_SAs on network reconfiguration kinda works
  not stable yet!
 2007-06-21 15:25:28 +00:00
Martin Willi 3b04350ab2 added extensions management to IKE_SA 
fixed NATD payload (port) when using route lookup
 2007-06-18 10:32:01 +00:00
Martin Willi 7068410b6f source address lookup in kernel interface 
use it for NAT detection if no source address known from config
  support for %any...%any connections
 2007-06-18 07:25:58 +00:00
Martin Willi 08a8f4496f implemented more flexible iterator hook API 
kernel interface handles interface changes and updates address list
 2007-06-15 13:23:18 +00:00
Martin Willi 02b3ec0a10 implemented address change notification (for MOBIKE) 
implemented up to date address list cache to list interfaces
 2007-06-14 15:16:15 +00:00
Martin Willi fede28be8b fixed memleak when initiating to %any 2007-06-14 08:44:19 +00:00
Martin Willi 04f4e82d53 added missing files to the last commit 2007-06-14 08:17:23 +00:00
Martin Willi 26424f03c3 proper reauthentication: 
IKE_SA is closed completely before the new is initiated, 
  resolves some issues when a dynamic IP is requested from a pool
 2007-06-14 08:13:05 +00:00
Martin Willi 9fe1a1ca76 introduced callback_job: 
simple asynchronous method invocation
  use daemons thread pool for all threads
  proper cancellation and cleanups
  cancellation mechanism to dynamically unload multithreaded code
unified event_queue and scheduler => scheduler
unified job_queue and thread_pool => processor
removed job_type_t, not really needed
fixes here, there and everywhere
 2007-06-11 10:57:19 +00:00
Martin Willi 76042f8471 proper thread cancellation when using the charon->interfaces 2007-05-23 09:08:13 +00:00
Martin Willi b1450b48a0 removed misleading warning when rekeying 2007-05-23 06:32:41 +00:00
Martin Willi 16878f6823 support for virtual IP definition on client side: 
if leftsourceip is defined, it is requested.
  server may define rightsourceip=%config to accept any,
  or it may overwrite it using rightsourceip.
  if server does not return an IP, client enforces its configured leftsourceip.
 2007-05-22 13:49:31 +00:00
Martin Willi a06c068191 fixed memleak 2007-05-22 09:38:42 +00:00
Andreas Steffen 6e04f25313 support of CA-based ipsec policies 2007-05-18 12:25:37 +00:00
Andreas Steffen 889c2ded1c output of eap_type_names requires %N format 2007-05-18 10:14:01 +00:00
Andreas Steffen ec3c02a303 added set_other_ca() and get_other_ca() 2007-05-17 17:55:29 +00:00
Andreas Steffen 7d26a0ee03 added set_other_ca() and get_other_ca() 2007-05-17 17:55:02 +00:00
Martin Willi bcd887781a removed route_job, handled all in interface_manager 2007-05-16 08:49:10 +00:00
Martin Willi ce27ac8012 routing/unrouting through interface 2007-05-16 08:32:15 +00:00
Andreas Steffen 9b6591e796 authentication failure is handled in ike_auth.c 2007-05-15 19:05:26 +00:00
Andreas Steffen 16c72c0c4f cosmetics 2007-05-15 19:04:15 +00:00
Andreas Steffen 8a664830d0 cosmetics 2007-05-15 19:03:23 +00:00
Andreas Steffen df9fbd2c64 adapted authentication failure text to those in the authenticators 2007-05-15 14:52:44 +00:00
Andreas Steffen 2e324229c0 support of multiple certificates with same peer id 2007-05-15 12:46:05 +00:00
Andreas Steffen b17e0db372 cosmetics 2007-05-15 12:45:19 +00:00
Martin Willi 3cd3f48428 properly implemented interface_managers initiate, terminte_[ike|child] 
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
 2007-05-09 12:33:08 +00:00
Martin Willi 6874bf698c changing UID/GID after startup of pluto/charon 
added --with-uid/--with-gid configure option
 2007-05-07 12:38:46 +00:00
Martin Willi a84fb01b96 restructuring of configuration backends 
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
  configuration backends
  control interfaces
using pluggable modules as in EAP
 2007-04-27 14:25:08 +00:00
Martin Willi f47e450be9 properly checking received IDr as initiator 2007-04-25 06:06:13 +00:00
Martin Willi 63c477244d fixed keyingtries 2007-04-23 12:19:23 +00:00
Martin Willi 0706c39cda added support for EAP methods not establishing an MSK 2007-04-19 12:37:48 +00:00
Martin Willi 1fd5383e61 added PDF support for CHILD_SAs 
support for INVALID_KE_PAYLOAD negotiation for rekeying
 2007-04-19 08:02:19 +00:00
Martin Willi 41ab00da6b fixed memleak in IKE_SA manager 2007-04-19 07:04:35 +00:00
Martin Willi db97fd8298 not using %m printf handler, as late errno interpration over bus may be problematic 2007-04-12 08:52:36 +00:00
Martin Willi 5f088665ad removed IKE_SA_ID (%J) printf hook, two more to go 2007-04-11 13:01:08 +00:00
Martin Willi a3ce4bc214 removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to go 2007-04-11 12:14:51 +00:00
Martin Willi 3b138b8422 cleaned up apidoc 
added some comments
removed configuration.[ch], as it does not make sense like it is
 2007-04-11 07:20:39 +00:00
Andreas Steffen 86b7215627 fixed bug with roadwarrior and wildcard IDs 2007-04-10 22:39:09 +00:00
Andreas Steffen a07aad39dc edited comment and debug output 2007-04-10 22:38:06 +00:00
Martin Willi 00ccb87671 requesting the same virtual IP on reauthentication 2007-04-10 15:02:57 +00:00
Martin Willi d3e1da2378 proper notification handling 2007-04-10 15:00:51 +00:00
Martin Willi e0fe765152 restructured file layout 
new configuration structure:
  peer_cfg: configuration related to a peer (authenitcation, ...=
  ike_cfg: config to use for IKE setup (proposals)
  child_Cfg: config for CHILD_SA (proposals, traffic selectors)
  a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
 2007-04-10 06:01:03 +00:00
Martin Willi 80b7162531 improved log output for checkout_by_message() 2007-04-04 07:11:12 +00:00