This website requires JavaScript.
eab05274f4
Handling of unsupported policy directions (FWD) fixed.
Tobias Brunner
2009-07-30 14:04:17 +02:00
e20bd8b6ea
Enabling NAT-T on Mac OS X using the private SADB_X_EXT_NATT flag and sadb_sa_2 struct.
Tobias Brunner
2009-07-30 13:52:08 +02:00
789ba17024
Configure the NAT-T port via sysctl on Mac OS X to enable handling of incoming UDP encapsulated ESP packets in the kernel.
Tobias Brunner
2009-07-29 11:34:47 +02:00
b2117eee20
Make accept(2) and recvfrom(2) cancellation points on Mac OS X.
Tobias Brunner
2009-07-24 10:58:27 +02:00
ecff28c5c5
fixe KW_END_FIRST..KW_END_LAST keyword range
Andreas Steffen
2009-07-28 15:44:24 +02:00
acb34739e4
improved DPD error message
Andreas Steffen
2009-07-22 22:30:21 +02:00
e1089f5906
added file and segment lengths to checksum.c
Andreas Steffen
2009-07-21 22:23:51 +02:00
8ce8e19068
version bump to 4.3.4
Andreas Steffen
2009-07-21 22:21:52 +02:00
144b433402
version bump of Linux UML kernel to 2.6.30.2
Andreas Steffen
2009-07-21 15:51:04 +02:00
fcac8f6571
filter objects for segment checksumming by dlpi_name, excludes rare false positives
Martin Willi
2009-07-21 15:10:24 +02:00
7655843ab5
enumerate executable sections only to build checksum
Martin Willi
2009-07-21 15:00:18 +02:00
acd4afc997
announce integrity testing only once
Martin Willi
2009-07-21 14:58:14 +02:00
6ff7ab850b
Fixed GID lookup in cases where the configured group is a prefix of another group.
Tobias Brunner
2009-07-20 21:20:03 +02:00
9af7715c3d
Fixed installation of config files in out-of-tree builds.
Tobias Brunner
2009-07-20 21:13:45 +02:00
7cdf712d3e
Use the numerical UID/GID to install the config files and create the ipsec.d directories.
Tobias Brunner
2009-07-20 21:03:05 +02:00
7d2b06da6a
Translate the configured user and group to a numerical UID and GID.
Tobias Brunner
2009-07-20 21:01:13 +02:00
def1777eca
streamlined integrity test output some more
Andreas Steffen
2009-07-18 11:23:27 +02:00
1d941f12ad
advertise activated integrity tests
Andreas Steffen
2009-07-18 00:37:35 +02:00
aa74d70595
added latest NEWS
Andreas Steffen
2009-07-17 22:54:23 +02:00
d9b67a9fc0
added ikev1/net2net-pgp-v4 scenario
Andreas Steffen
2009-07-17 22:36:12 +02:00
542471e3fe
adapted scenario description for OpenPGP V3 keys
Andreas Steffen
2009-07-17 22:33:22 +02:00
03b704fd55
enable crypt debugging in ikev1/esp-alg-camellia scenario
Andreas Steffen
2009-07-17 21:27:54 +02:00
2e4a94ec26
added strongswan-2.8.11 and strongswan-4.2.17 VIDs
Andreas Steffen
2009-07-17 21:19:32 +02:00
f179ba474e
enable integrity test in all rw-cert scenarios
Andreas Steffen
2009-07-17 20:52:14 +02:00
e3f3b004e2
fix test vector error output
Andreas Steffen
2009-07-17 20:36:21 +02:00
eab241fb56
stop strongswan if integrity check of libstrongswan or daemon fails
Andreas Steffen
2009-07-17 20:33:19 +02:00
6b04ba288d
streamlined debug output of integrity tests
Andreas Steffen
2009-07-17 17:00:17 +02:00
ca366aeea0
enforce strongSwan coding rules
Andreas Steffen
2009-07-17 16:57:07 +02:00
521aa00fb1
shortened cypto test output
Andreas Steffen
2009-07-17 16:36:01 +02:00
848133ff1c
accelerate lookup in non-concatenated pools
Andreas Steffen
2009-07-17 13:58:29 +02:00
dfd8ddfb33
added scenario ikev2/ip-split-pools-db
Andreas Steffen
2009-07-17 13:38:57 +02:00
ec54df1762
added sql/ip-split-pools-db and sql/ip-split-pools-db-restart scenarios
Andreas Steffen
2009-07-17 11:50:59 +02:00
7f522b5fd8
check for an existing lease over all assigned pools first
Andreas Steffen
2009-07-17 11:48:35 +02:00
07be083b7f
fixed problem with static leases over multiple pools
Andreas Steffen
2009-07-16 21:53:46 +02:00
375a91bb9b
Fixing distribution build (checksum.c is created on the user's system).
Tobias Brunner
2009-07-16 16:50:55 +02:00
e0964e2e26
fixed memleak in SQL config lookup
Martin Willi
2009-07-16 15:59:56 +02:00
69fc782000
Check for gperf version added to configure script.
Tobias Brunner
2009-07-16 14:59:30 +02:00
88957f54f2
raise an alert() if the RADIUS server is not responding
Martin Willi
2009-07-15 16:13:51 +02:00
e85b83c737
added an alert() bus hook to raise critical system errors and notifications
Martin Willi
2009-07-15 16:12:02 +02:00
c7e0f07ced
Typo fixed.
Tobias Brunner
2009-07-16 10:59:20 +02:00
cf00cffef2
Added an option to the configure script to disable building the scripts.
Tobias Brunner
2009-07-16 10:52:14 +02:00
599d2bcea8
Revert "gperf under FreeBSD does not know the -m option."
Tobias Brunner
2009-07-16 10:09:23 +02:00
233a132634
Removed an unnecessary include of a header that is not available on Mac OS X.
Tobias Brunner
2009-07-15 22:39:40 +02:00
225bb2b810
conversion from ECDSA_WITH_SHAxxx OIDs to signature schemes
Andreas Steffen
2009-07-15 18:12:40 +02:00
f5410905ac
moved the CFLAGS mangling AC_LIB_PREFIX macro behind CFLAG test
Martin Willi
2009-07-15 16:04:37 +02:00
449e90e1af
updated debian package
Martin Willi
2009-07-15 14:09:49 +02:00
0a1d168752
updated Standards-Version to 3.8.2
Martin Willi
2009-07-15 14:01:47 +02:00
e04c5d9371
added ${misc:Depends} dependency, fixes debhelper-but-no-misc-depends lintian warning
Martin Willi
2009-07-15 14:00:42 +02:00
426e1c3d0f
added copyright information, fixes copyright-without-copyright-notice lintian warning
Martin Willi
2009-07-15 13:59:25 +02:00
74b14b4008
cast pointers to uintptr_t for alignement check
Martin Willi
2009-07-15 10:07:15 +02:00
0ead254919
gperf under FreeBSD does not know the -m option.
Tobias Brunner
2009-07-14 12:03:12 +02:00
fd0df7ec75
Corrected check for valid ASN1 types in rdn_enumerate.
Tobias Brunner
2009-07-14 11:55:09 +02:00
0b5f2a81da
Added --with-lib-prefix option to the configure script.
Tobias Brunner
2009-07-14 11:50:24 +02:00
75682462fc
added SHA224_WITH_RSA and ECDSA_WITH_SHAxxx OIDs
Andreas Steffen
2009-07-14 05:35:01 +02:00
d44b03563a
double free caused strange side effects
Andreas Steffen
2009-07-13 20:28:36 +02:00
ecb32c75ce
report installation failure of inbound and/or outbound IPsec SA, separately
Andreas Steffen
2009-07-13 15:13:12 +02:00
5c49289e27
great, I got my comma back
Andreas Steffen
2009-07-12 21:08:37 +02:00
1c7f456a0b
ecp_x_coordinate_only option and IKEv1 AEAD support
Andreas Steffen
2009-07-11 20:04:38 +02:00
a7a42f92d5
addes ikev1/esp-alg-aes-ccm and ikev1/esp-alg-aes-gcm scenarios
Andreas Steffen
2009-07-11 18:44:50 +02:00
540d02f6c0
pluto supports AES_CCM and AES_GCM ESP algorithms
Andreas Steffen
2009-07-11 18:43:09 +02:00
c5ebd00517
put variable definitions up front
Andreas Steffen
2009-07-10 22:58:47 +02:00
ad92c1f6cd
cosmetics
Andreas Steffen
2009-07-10 22:18:26 +02:00
a3ee331b0c
added listener.h to charon_SOURCES
Andreas Steffen
2009-07-10 21:43:21 +02:00
69b8058925
use the configured NM connection id as configuration/IKE_SA name
Martin Willi
2009-07-10 11:01:44 +02:00
ce741aa649
fixed state check if establishing the CHILD_SA fails
Martin Willi
2009-07-10 09:40:02 +02:00
bad99d5aff
use the new updown()/rekey() hooks to track the state of NetworkManager connections
Martin Willi
2009-07-10 09:37:27 +02:00
356cdc2d72
update libfreeswan/pfkeyv2.h
Andreas Steffen
2009-07-10 07:15:08 +02:00
8e905c44c9
added AES_CTR, AES_CCM, and AES_GCM strings
Andreas Steffen
2009-07-10 06:53:54 +02:00
977ec0c316
implemented ike_down() bus hook
Martin Willi
2009-07-09 14:44:08 +02:00
fa1d3c6629
implemented ike_up() bus hook
Martin Willi
2009-07-09 13:44:06 +02:00
f5f37cc7fa
implemented child_down() bus hook
Martin Willi
2009-07-09 13:35:33 +02:00
f669f45333
implemented child_up() bus hook
Martin Willi
2009-07-09 13:11:46 +02:00
622b56a52e
implemented ike_rekey()/child_rekey() bus hooks
Martin Willi
2009-07-08 14:33:24 +02:00
7527f43c76
added new listener callbacks to track SAs
Martin Willi
2009-07-08 14:08:31 +02:00
a40cc76bc7
moved listener_t interface definition to a separate file
Martin Willi
2009-07-08 09:00:02 +02:00
9d9cb65c8e
enforced strongSwan coding rules
Andreas Steffen
2009-07-09 15:02:51 +02:00
3f67126226
added a RADIUS id_prefix option to prefix the IMSI
Martin Willi
2009-07-07 15:47:09 +02:00
2eac2578a5
updated ikev2bis draft from 03 to 04
Martin Willi
2009-07-09 11:17:43 +02:00
01e43e3183
memxor does not access unaligned words anymore, but still uses words if possible
Martin Willi
2009-07-08 17:19:49 +02:00
751a65f9da
fixed doxygen section pgp
Martin Willi
2009-07-08 10:29:12 +02:00
d7b965e931
fixed two doxygen warnings
Martin Willi
2009-07-08 10:28:54 +02:00
c99227630c
updated HACKING info
Martin Willi
2009-07-07 17:26:16 +02:00
efb4bb248f
remove obsolete child_cfg_t.equal_traffic_selectors() method
Martin Willi
2009-07-07 14:38:55 +02:00
20188fcad4
child_cfg matching code prefers a config containing the first proposed TS
Martin Willi
2009-07-07 14:38:19 +02:00
2d00984d73
added missing equals() method assignment for ID_ANY identities
Martin Willi
2009-07-07 13:42:22 +02:00
92a65c506a
use architecture specific Elf header
Martin Willi
2009-07-06 16:36:01 +02:00
0c31b9db84
centralized ID type specific method assignement in generic constructor
Martin Willi
2009-07-06 13:11:03 +02:00
bbf6a4c0ff
removed obsolete init_rdn()/get_next_rdn() functions
Martin Willi
2009-07-06 12:47:18 +02:00
8309798fae
reimplemented dnota() using RDN enumerator
Martin Willi
2009-07-06 12:42:09 +02:00
f48c3c72f4
added a chunk_printable() function (replaces sanitize_chunk)
Martin Willi
2009-07-06 12:37:26 +02:00
d692557298
replaced {same,match}_dn() by compare_dn(), using the RDN enumerator
Martin Willi
2009-07-06 11:46:26 +02:00
ed680e33c0
fixed memleak if RND parsing fails
Martin Willi
2009-07-06 11:45:26 +02:00
dca2eee92a
added unit test for identification_t.matches()
Martin Willi
2009-07-06 11:44:46 +02:00
05fe0a7d25
added unit test for identification_t.equals()
Martin Willi
2009-07-06 11:16:41 +02:00
01da687f78
contains_wildcard() for DNs uses RDN enumerator
Martin Willi
2009-07-03 17:09:17 +02:00
d35650115b
added unit test for identification_t.contains_wildcard()
Martin Willi
2009-07-03 17:07:04 +02:00
2147da40a5
simplified identification_t.clone() using memcpy
Martin Willi
2009-07-03 16:30:08 +02:00
6bdd79d86c
use an enumerator to parse RDNs, based on asn1_unwrap() function
Martin Willi
2009-07-03 16:12:17 +02:00
5dd492efff
make filter enumerator methods static
Martin Willi
2009-07-03 14:17:05 +02:00
596e0540a5
asn1_unwrap() function to parse ASN.1 objects with length/type
Martin Willi
2009-07-03 11:06:51 +02:00