denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,152 Commits 1 Branch 0 Tags
fd2ebf0cf9354262a8d80320836ff586575bfde7
Commit Graph
264 Commits
Author SHA1 Message Date
Martin Willi fd2ebf0cf9 fixed encap enabling in xfrm (using new encap state, not the old one) 2008-11-14 13:12:07 +00:00
Martin Willi fb6c8591a3 do not use a route if outgoing interface is down 
other cleanups
 2008-11-14 13:04:22 +00:00
Martin Willi a65e1c5c3a rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead! 2008-11-14 10:30:26 +00:00
Martin Willi f5812086f8 do not use public interface for functions which are local anyway 2008-11-14 09:38:49 +00:00
Martin Willi b8cbb6451c ported some hard-to-merge cherries back to trunk :-/ 
shame, svn, shame: this was ways to complicated
	we should consider a switch to git...
 2008-11-12 15:09:24 +00:00
Martin Willi 479f295049 fixed compiler warnings issued by: 
gcc 4.3
	curl.h gcc type-checking
	glibc with enabled FORTIFY_SOURCE checking
 2008-11-11 18:37:19 +00:00
Martin Willi 3d2dbebd70 #defing out compress algs to avoid compiler warning 2008-11-11 18:35:10 +00:00
Martin Willi d94cadd69a updated method signature of add_policy 2008-11-11 18:33:48 +00:00
Martin Willi 4a537c9011 fixed compilation of medcli plugin 2008-11-11 15:20:25 +00:00
Martin Willi b252024c3e added missing include for ULONG_MAX 2008-11-11 15:19:13 +00:00
Martin Willi 4252938811 dynamic logging configuration through strongswan.conf 
fallback to existing ipsec.conf/stroke loglevel configuration
 2008-11-11 10:52:37 +00:00
Martin Willi dbb24102d4 fixed compiler warning 2008-11-11 10:29:31 +00:00
Tobias Brunner e7c27b4f3f fixing a memory leak 2008-11-11 09:56:47 +00:00
Tobias Brunner ea625fabf9 merging kernel_klips plugin back into trunk 2008-11-11 09:22:00 +00:00
Andreas Steffen c117f24e61 renamed proxy to proxy_mode in stroke_msg.h 2008-11-11 07:28:52 +00:00
Andreas Steffen d487b4b727 preliminary support of Mobile IPv6 2008-11-11 06:37:37 +00:00
Martin Willi a9f081e5ad make load_tester more strict to use it along stroke 2008-11-10 16:43:15 +00:00
Martin Willi e9a0d3a339 iterations = 0 for infinite iterations 2008-11-10 10:10:51 +00:00
Martin Willi 6c3f40f9a0 added PEM version of keys 2008-11-10 10:09:44 +00:00
Martin Willi 89d05ab5fb fixed copy/paste error 2008-11-07 14:48:54 +00:00
Andreas Steffen f11a54bc89 SADB_X_EXT_KMADDRESS is not present in old kernels 2008-11-07 03:38:56 +00:00
Andreas Steffen 2c81539395 added retrieval of remote kmaddress via PF_KEY 2008-11-07 03:23:59 +00:00
Martin Willi a70df08c9b added delete_after_established option 2008-11-06 14:07:46 +00:00
Martin Willi 27ed987ef7 wrapped all pthread_rwlock_t in profilable rwlock_t 2008-11-05 16:12:54 +00:00
Martin Willi ac29400e34 added missing includes 2008-11-05 14:22:58 +00:00
Martin Willi 3ac5a0db8c replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant 2008-11-05 11:29:56 +00:00
Martin Willi e13389a7f7 got rid of deprecated create_iterator_locked() 2008-11-05 08:32:38 +00:00
Martin Willi 31537fd970 do not install route if interface lookup failed 2008-11-05 07:38:55 +00:00
Martin Willi 6a8ecfc8be two new load_testing options: 
request_virtual_ip: request a INTERNAL_IPV4_ADDR as client
	pool: provide addresses from a named virtual IP pool
 2008-11-04 14:55:22 +00:00
Martin Willi 480be6436a added a delay option to delay initiations 2008-11-04 12:59:53 +00:00
Andreas Steffen ec1bddc50c corrected a copy-and-paste error 2008-11-03 23:46:42 +00:00
Andreas Steffen c636285878 updated copyright of kernel interface code 2008-11-03 23:34:23 +00:00
Andreas Steffen bab075b166 added support for xfrm remote kmaddress 2008-11-03 23:29:34 +00:00
Martin Willi 4d901e3584 added fake_kernel option to make dummy kernel implementation optional 2008-11-03 15:11:01 +00:00
Martin Willi 1145ca098d load testing between different hosts 2008-11-03 10:02:39 +00:00
Andreas Steffen a54e3d51c1 removed unused variables 2008-11-03 03:56:03 +00:00
Andreas Steffen ef6d339c09 migrate_job() finds a matching child_cfg 2008-11-03 02:05:41 +00:00
Andreas Steffen 5145ae48be fully implemented the parsing of XFRM and PF_KEY MIGRATE messages 2008-11-02 21:34:52 +00:00
Andreas Steffen b74bc4384c identify attributes of XFRM ACQUIRE and MIGRATE messages 2008-10-31 06:18:48 +00:00
Andreas Steffen e7f4fc537f subscribing XFRM socket for MIGRATE messages 2008-10-31 02:50:01 +00:00
Andreas Steffen e526d22818 parse xfrm and pf_key acquire messages and subscribe to migrate messages 2008-10-31 01:43:23 +00:00
Martin Willi 5dffdea1d7 added hooks for IKE and CHILD keymat 2008-10-30 12:58:54 +00:00
Martin Willi 80853d8498 moved CHILD_SA key derivation to keymat_t 
passing key chunks to CHILD_SA, not the PRF
 2008-10-29 16:06:16 +00:00
Martin Willi 6a4ff35cc4 moved key derivation and management into keymat object 
allows secured implementation of key management (e.g. in kernel or HW)
	only IKE keys for now
 2008-10-28 16:07:06 +00:00
Martin Willi 3c8234d408 store IKE proposal implicitly during derive_keys 2008-10-28 10:12:21 +00:00
Martin Willi 20fb671904 fixed reauthentication time in statusall 2008-10-28 09:41:33 +00:00
Martin Willi 85ac2fa547 use more generic stats getter, introducing new stats 2008-10-27 14:51:00 +00:00
Martin Willi 0935ba328b including a "none" tundev to make NM happy 2008-10-27 11:30:27 +00:00
Martin Willi a1db79b31a fixed some compiler warnings 2008-10-27 11:13:33 +00:00
Martin Willi 82d20c0588 additional getters for ipcomp and UDP encap 2008-10-24 09:51:48 +00:00