Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• f36143b0ba Implemented a read-write lock using only mutex_t and condvar_t (in case the pthread_rwlock_* group of functions is not available). Tobias Brunner 2009-12-08 14:06:11 +01:00
• b1f35d0695 Threading primitives separated. Tobias Brunner 2009-12-07 17:26:39 +01:00
• 14f7091280 Moved mutex.c to a separate folder in order to cleanly wrap other threading primitives (and utils/mutex.h is now threading.h). Tobias Brunner 2009-12-07 15:56:04 +01:00
• 32d8f44229 verify RFC3779 IP address blocks along X.509 certificate trust chain Andreas Steffen 2009-12-23 14:17:28 +01:00
• f8f4f31a77 Fixed untoh32 function Martin Willi 2009-12-23 13:08:42 +01:00
• 925eadba5f do not recalculate netbits for true subnets Andreas Steffen 2009-12-22 17:07:08 +01:00
• e16a01a5e6 X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension Andreas Steffen 2009-12-22 13:18:27 +01:00
• 91e35b7c9e added create_ipAddrBlock_enumerator() method to x509_t Andreas Steffen 2009-12-22 11:58:30 +01:00
• 7686f981a4 cosmetics Andreas Steffen 2009-12-22 09:53:53 +01:00
• 194c3cedc5 fixed IPv6 bug in calc_range() Andreas Steffen 2009-12-22 00:49:23 +01:00
• 3f4d8815a4 fixed initialization of netbits Andreas Steffen 2009-12-21 23:03:14 +01:00
• 252f38f6f8 fixed distribution list Andreas Steffen 2009-12-21 22:28:08 +01:00
• 157125e4c9 traffic_selector supports RFC 3779 address range format Andreas Steffen 2009-12-21 21:28:45 +01:00
• 2fcb2cc653 Migrated identification_t to INIT/METHOD macros Martin Willi 2009-12-21 15:23:34 +01:00
• 678aab7850 this->type is set by traffic_selector_create() Andreas Steffen 2009-12-20 20:01:18 +01:00
• 513eb95e60 parse RFC 3779 addressFamily Andreas Steffen 2009-12-20 19:26:28 +01:00
• 7d379a786c plugin name is x509 Andreas Steffen 2009-12-20 16:01:35 +01:00
• 28c25485ba discard certificate with unknown critical extensions Andreas Steffen 2009-12-20 15:53:39 +01:00
• f3e366a9a0 use traffic_selector_t object to represent ipAddrBlocks Andreas Steffen 2009-12-20 15:15:02 +01:00
• 1125a0be81 moved traffic_selectors from charon to libstrongswan Andreas Steffen 2009-12-20 14:57:38 +01:00
• 92f0aa9736 firewall-enabled ipv6/net2net-ip6-in-ip4-ikev2 scenario Andreas Steffen 2009-12-17 19:43:33 +01:00
• 02ee613325 firewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario Andreas Steffen 2009-12-17 18:50:45 +01:00
• ad858aee15 parse ipAddrBlocks Andreas Steffen 2009-12-17 17:32:26 +01:00
• 9789d3a9b9 fixed updown plugin for mixed IPv4/IPv6 tunnels Andreas Steffen 2009-12-17 17:28:11 +01:00
• 83b760cb42 Migrated curl_fetcher to INIT/METHOD macros Martin Willi 2009-12-08 16:21:08 +01:00
• 1a1ff9d127 Added a METHOD() macro to define methods with both public and private signatures Martin Willi 2009-12-08 16:12:16 +01:00
• 74eed73a40 Added a INIT() macro to initialize class instances Martin Willi 2009-12-08 16:11:37 +01:00
• 6ec949e022 Fixed BEET mode by installing SAs with negotiated address in traffic selector Martin Willi 2009-12-17 10:50:37 +01:00
• f721e0fb5f added IKEv1 Camellia support to NEWS Andreas Steffen 2009-12-16 21:52:32 +01:00
• 98b0657c0a ikev1/ip-pool-db-push scenario tests DNS and NBNS server support Andreas Steffen 2009-12-16 21:50:39 +01:00
• b6623e87b4 IKEv1 daemon supports DNS and NBNS server assignment from database Andreas Steffen 2009-12-16 21:49:51 +01:00
• 4d64cbbc4e ikev1/ip-pool-db scenario tests DNS and NBNS server support Andreas Steffen 2009-12-16 21:22:13 +01:00
• c236049850 sql/ip-pool-db scenario tests DNS and NBNS server support Andreas Steffen 2009-12-16 19:02:23 +01:00
• 42eb4951f9 ikev2/ip-pool-db scenario tests DNS and NBNS server support Andreas Steffen 2009-12-16 18:45:29 +01:00
• a71556060a added ipsec pool DNS and NBNS support to NEWS Andreas Steffen 2009-12-16 18:20:07 +01:00
• 645f3865b2 ipsec pool manages dns and nbns servers Andreas Steffen 2009-12-16 18:11:57 +01:00
• 3747f0f2e7 cosmetics Andreas Steffen 2009-12-16 13:33:09 +01:00
• a461e20dd8 provide attributes from SQL database Andreas Steffen 2009-12-16 12:31:41 +01:00
• b75002bc95 added openssl-ikev1/alg-camellia scenario Andreas Steffen 2009-12-15 19:55:58 +01:00
• 1191779744 removed superfluous ikev1/esp-alg-camellia scenario Andreas Steffen 2009-12-15 19:16:28 +01:00
• cbcd91314b added gcrypt-ikev1/alg-camellia scenario Andreas Steffen 2009-12-15 19:15:44 +01:00
• de962d6e7d add IKEv1 support for the Camellia cipher Andreas Steffen 2009-12-15 19:13:06 +01:00
• 0be12e3546 Added htoun16/32 and untoh16/32 to read/write unaligned network order integers Martin Willi 2009-12-15 13:39:01 +01:00
• fc85786921 Install v6 routes via outgoing interface for now Martin Willi 2009-12-14 14:44:24 +01:00
• 25df6196df activate tcpdump in ikev1/esp-alg-des scenario Andreas Steffen 2009-12-10 22:37:43 +01:00
• 982596e427 shuffled output order to achieve consistence Andreas Steffen 2009-12-09 17:26:35 +01:00
• 4d025314c8 added pfkey/alg-sha384 and pfkey/alg-sha512 scenarios Andreas Steffen 2009-12-09 17:25:12 +01:00
• 3e4b1010b0 adapted openssl-ikev2/alg scenarios Andreas Steffen 2009-12-09 15:51:43 +01:00
• 4ab5874ccd adapted gcrypt-ikev2/alg-camellia scenario Andreas Steffen 2009-12-09 15:48:03 +01:00
• fcca5b5caf adapted gcrypt-ikev1 alg scenarios Andreas Steffen 2009-12-09 15:45:45 +01:00
• 8603d1d76c adapted ikev1 alg and esp scenarios Andreas Steffen 2009-12-09 15:41:54 +01:00
• 4c8f3dff9c adapted pfkey alg and esp scenarios Andreas Steffen 2009-12-09 15:38:17 +01:00
• 8e7e81451b remove again the ikev2/esp-alg-camellia scenario Andreas Steffen 2009-12-09 15:26:43 +01:00
• 99133d3086 adapted ikev2 alg and esp scenarios Andreas Steffen 2009-12-09 15:19:10 +01:00
• 344061ebce removed redundant ikev1/ike-alg-sha2 scenarios Andreas Steffen 2009-12-09 10:11:03 +01:00
• 01a8af1b1b added ikev1/alg-sha512 scenario Andreas Steffen 2009-12-09 09:51:54 +01:00
• cb7e304d33 added ikev1/alg-sha384 scenario Andreas Steffen 2009-12-09 09:46:40 +01:00
• 5d9d779808 renamed ikev1/alg-sha2_256 scenario to ikev1/alg-sha256 Andreas Steffen 2009-12-09 09:36:16 +01:00
• 05ffbc6e59 added ikev1/alg-sha256-96 scenario Andreas Steffen 2009-12-09 09:35:17 +01:00
• 353b829177 fixed IKEv1 support of HMAC_SHA2_256_96 Andreas Steffen 2009-12-09 09:33:32 +01:00
• 0a975307f1 added Juniper SRX support to NEWS Andreas Steffen 2009-12-09 08:00:19 +01:00
• ee2679ec25 if end id is missing assign IP address to raw public key Andreas Steffen 2009-12-09 07:24:43 +01:00
• a07531250e IKEv1 support of ESP SHA2_HMAC with correct truncation Andreas Steffen 2009-12-09 00:24:22 +01:00
• 4b615edab4 some code optimizations Andreas Steffen 2009-12-09 00:19:03 +01:00
• e1573b3fe8 added ipAddrBlocks OID Andreas Steffen 2009-12-08 23:48:56 +01:00
• 7747210f26 removed redundant ikev2/esp-alg-camellia scenario Andreas Steffen 2009-12-08 21:43:03 +01:00
• a6225e4936 Improved libfast session management, using a hashtable Martin Willi 2009-12-05 17:56:44 +01:00
• 4e90d9de9f Removed obsolete curl interface specific destructor Martin Willi 2009-12-08 16:21:58 +01:00
• 89d236f0da Support "_" and "-" variants of NetworkManager pkg-config packages Martin Willi 2009-12-08 14:35:16 +01:00
• f469754f7f Undef PACKAGE_BUG/URL of strongSwan before including ruby variants Martin Willi 2009-12-08 14:34:14 +01:00
• 88dbccc842 Remove generated config.h.in from source tree Martin Willi 2009-12-08 14:29:48 +01:00
• 04933ea74e added ikev2/alg-3des-md5 scenario Andreas Steffen 2009-12-08 12:54:42 +01:00
• 268911a5cc The attribute manager was moved from daemon_t to libstrongswan. Tobias Brunner 2009-12-07 16:00:27 +01:00
• cd51437e43 Do not execute the callback job if it has been cancelled since registration Martin Willi 2009-12-03 08:00:04 +01:00
• c636bc7e17 Cleanup library if daemon initialization fails Martin Willi 2009-12-03 07:56:19 +01:00
• 65c8bff7a1 To build strongSwan from git sources, gettext is required Martin Willi 2009-12-02 11:49:11 +01:00
• 376a11db3c Do not install invalid 0.0.0.0 DNS servers Martin Willi 2009-12-01 15:46:56 +01:00
• 5b4d0de7d4 Prefer EAP-Identity for provider attribute/address lookup Martin Willi 2009-12-01 13:01:56 +00:00
• f6116e61fc Save EAP-Identity on auth config Martin Willi 2009-12-01 14:23:37 +01:00
• 44ce749360 Store completed authentication rounds permanently on IKE_SA, with flush option Martin Willi 2009-12-01 11:35:30 +01:00
• 5b2b4d190a Removed obsolete and unused [gs]et_eap_identity() methods Martin Willi 2009-11-30 16:59:23 +01:00
• 5351e51951 Do not propose transport mode as initiator if connection is NATed Martin Willi 2009-11-30 11:32:26 +01:00
• bff9f824ed Verify EAP-SIM/AKA AT_MAC before processing any attributes Martin Willi 2009-11-30 09:58:54 +01:00
• b04e72c21c SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the response Martin Willi 2009-11-27 15:40:40 +01:00
• 5a91fd4536 Invoke attribute/key hooks from libsimaka Martin Willi 2009-11-27 11:16:20 +01:00
• 8434c88b5e Extended SIM manager by hooks, currently featuring attribute and key hooks Martin Willi 2009-11-27 11:14:40 +01:00
• fb1ae8da52 Added a get_sa() method to the bus, allowing a thread to lookup its IKE_SA Martin Willi 2009-11-27 09:34:38 +01:00
• c56d958243 Handle NOT_SUPPORTED or other errors properly in get_quintuplet Martin Willi 2009-11-27 14:55:20 +01:00
• 7868162b35 added RFC-conforming ikev2/sha2 scenarios Andreas Steffen 2009-11-26 23:48:29 +01:00
• 68db91ca32 adapted ikev2/alg-aes-xcbc scenario Andreas Steffen 2009-11-26 23:46:27 +01:00
• 2b2c69e992 Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP header Martin Willi 2009-11-26 15:58:55 +01:00
• 52fd0ef9e0 Added NEWS about SHA2 changes Martin Willi 2009-11-26 10:27:35 +01:00
• 6780edc07e Use full algorithm name for SHA384/512 HMACs Martin Willi 2009-11-24 15:21:16 +01:00
• 6546482a68 Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keyword Martin Willi 2009-11-20 09:49:03 +00:00
• eebfa73fd5 Install SHA256_128 auth algorithm with specified 128 bit truncation Martin Willi 2009-11-20 09:42:29 +00:00
• 2379fdba1e Updated XFRM linux header, includes specified truncations for auth algos Martin Willi 2009-11-20 09:41:46 +00:00
• 5be75c2cb1 Added support for IPv6 source route installation Martin Willi 2009-11-24 14:10:18 +01:00
• 387a6e6c32 Check existing path in mobike probing only if we still have a route Martin Willi 2009-11-24 14:09:09 +01:00
• 4b55cf5d09 put identities in single quotes Andreas Steffen 2009-11-25 09:02:09 +01:00
• 653da7c907 added more debugging in configuration attribute handling Andreas Steffen 2009-11-24 23:17:07 +01:00