Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 622c2b2c33 peer-cfg: Add method to atomically replace child configs Tobias Brunner 2015-10-16 12:31:38 +02:00
• 8db4f19ad9 ike-cfg: Use new method to compare proposal lists in equals() Tobias Brunner 2015-10-16 12:29:47 +02:00
• f6a5e6b6a9 peer-cfg: Use new method to compare linked lists in equals() Tobias Brunner 2015-10-16 12:26:57 +02:00
• 3af23606bf child-cfg: Add equals() method Tobias Brunner 2015-10-16 12:25:37 +02:00
• 348b0ffbc6 linked-list: Add method to compare two lists of objects for equality Tobias Brunner 2015-10-16 12:12:43 +02:00
• 229cdf6bc8 vici: Order auth rounds by optional round parameter instead of by position in the request Tobias Brunner 2015-11-19 12:58:23 +01:00
• fab4c845ec ikev1: Send NAT-D payloads after vendor ID payloads in Aggressive Mode messages Tobias Brunner 2016-03-07 14:04:41 +01:00
• d8adcb8ff9 ike-sa-manager: Log a checkin/failure message for every checkout Thomas Egerer 2016-03-07 09:21:21 +01:00
• c2523355a4 testing: Added swanctl/mult-auth-rsa-eap-sim-id scenario Andreas Steffen 2016-03-06 19:09:03 +01:00
• 70ff382e41 testing: Added swanctl/xauth-rsa scenario Andreas Steffen 2016-03-06 12:28:55 +01:00
• 99b794a4cf Display IKE ports with swanctl --list-sas Andreas Steffen 2016-03-05 18:19:00 +01:00
• 724f590711 Version bump to 5.4.0rc1 Andreas Steffen 2016-03-05 18:18:12 +01:00
• 07b0eac4b1 testing: attr-sql is a charon plugin Andreas Steffen 2016-03-05 15:53:22 +01:00
• 26d2011b14 testing: Added swanctl/rw-psk-ikev1 scenario Andreas Steffen 2016-03-05 13:50:41 +01:00
• 1989c7a381 testing: Include IKE port information in evaltests Andreas Steffen 2016-03-05 13:44:06 +01:00
• fe1f915b07 Version bump to 5.4.0dr8 Andreas Steffen 2016-03-04 20:55:50 +01:00
• ec9566ae24 ike-sa-manager: Log some additional details like SPIs when checking out SAs Tobias Brunner 2015-10-05 17:49:52 +02:00
• 67e28a3afa smp: Correctly return IKE SPIs stored in network order Tobias Brunner 2016-03-04 10:28:00 +01:00
• e32504352d vici: Correctly return IKE SPIs stored in network order Tobias Brunner 2016-03-04 10:25:40 +01:00
• db00982dad stroke: Correctly print IKE SPIs stored in network order Tobias Brunner 2016-03-04 10:19:37 +01:00
• fac9fd7368 byteorder: Simplify htoun64/untoh64 functions Tobias Brunner 2016-03-04 10:15:49 +01:00
• 14de79604a byteorder: Always define be64toh/htobe64 macros Tobias Brunner 2016-03-04 10:13:49 +01:00
• 5b45e15ad3 Merge branch 'ike-sig-contraints' Tobias Brunner 2016-03-04 16:42:41 +01:00
• c171afeaed NEWS: Add note about IKEv2 signature scheme constraints Tobias Brunner 2016-03-04 16:29:32 +01:00
• 130c485be6 swanctl: Document signature scheme constraints Tobias Brunner 2016-02-03 15:45:09 +01:00
• 1ecec95dff vici: Add support for pubkey constraints with EAP-TLS Tobias Brunner 2016-02-03 15:16:48 +01:00
• 3c23a75120 auth-cfg: Make IKE signature schemes configurable Tobias Brunner 2016-02-01 18:16:16 +01:00
• e37e6d6dca ikev2: Always store signature scheme in auth-cfg Tobias Brunner 2016-02-01 18:15:57 +01:00
• c8a0781334 ikev2: Diversify signature scheme rule Thomas Egerer 2016-02-01 18:15:15 +01:00
• 6fc6834361 NEWS: Document RFC 5685 support Tobias Brunner 2016-03-04 16:07:17 +01:00
• 765db8d2fe Merge branch 'ike-redirect' Tobias Brunner 2016-03-04 16:03:07 +01:00
• 47701e1178 ike-init: Verify REDIRECT notify before processing IKE_SA_INIT message Tobias Brunner 2015-05-21 14:56:01 +02:00
• fb7cc16d67 ikev2: Allow tasks to verify request messages before processing them Tobias Brunner 2015-05-21 14:48:35 +02:00
• 4b83619310 ikev2: Allow tasks to verify response messages before processing them Tobias Brunner 2015-05-21 14:45:52 +02:00
• b4968a952e task: Add optional pre_process() method Tobias Brunner 2015-05-21 14:38:02 +02:00
• f80e910cce testing: Add ikev2/redirect-active scenario Tobias Brunner 2015-05-12 16:53:04 +02:00
• 9282bc39a7 ike-init: Ignore notifies related to redirects during rekeying Tobias Brunner 2015-04-30 12:57:19 +02:00
• c6ebd0332e ike-sa: Add limit for the number of redirects within a defined time period Tobias Brunner 2015-04-30 12:44:56 +02:00
• 7505fb8d45 ike-sa: Reauthenticate to the same addresses we currently use Tobias Brunner 2015-04-30 12:26:41 +02:00
• c13eb73719 vici: Don't redirect all SAs if no selectors are given Tobias Brunner 2015-05-12 17:49:46 +02:00
• 27074f3155 vici: Match subnets and ranges against peer IP in redirect command Tobias Brunner 2015-04-30 10:56:27 +02:00
• bef4518de7 vici: Match identity with wildcards against remote ID in redirect command Tobias Brunner 2015-04-28 18:33:31 +02:00
• e92364db66 swanctl: Add --redirect command Tobias Brunner 2015-04-28 18:00:01 +02:00
• 43b46b26ea vici: Add redirect command Tobias Brunner 2015-04-28 17:45:52 +02:00
• 0d424d2107 redirect-job: Add job to redirect an active IKE_SA Tobias Brunner 2015-04-28 17:29:42 +02:00
• 71c7070588 ike-sa: Add redirect() method to actively redirect an IKE_SA Tobias Brunner 2015-04-28 14:50:11 +02:00
• 0840385b27 ike-redirect: Add task to redirect active IKE_SAs Tobias Brunner 2015-04-28 14:10:43 +02:00
• f5a9025ce9 ike-auth: Handle REDIRECT notifies during IKE_AUTH Tobias Brunner 2015-04-24 16:59:44 +02:00
• f20e00fe54 ike-sa: Handle redirect requests for established SAs as reestablishment Tobias Brunner 2015-04-24 16:57:43 +02:00
• 19233ef980 ike-auth: Send REDIRECT notify during IKE_AUTH if requested by providers Tobias Brunner 2015-04-23 16:43:35 +02:00
• fdc4b82728 ike-config: Do not assign attributes for redirected IKE_SAs Tobias Brunner 2015-04-28 18:15:35 +02:00
• b6fcb91762 child-create: Don't create CHILD_SA if the IKE_SA got redirected in IKE_AUTH Tobias Brunner 2015-04-23 16:36:49 +02:00
• d68c05d269 ike-sa: Add a condition to mark redirected IKE_SAs Tobias Brunner 2015-04-23 16:31:39 +02:00
• 3d074bce00 ike-init: Handle REDIRECTED_FROM similar to REDIRECT_SUPPORTED as server Tobias Brunner 2015-04-23 12:29:03 +02:00
• 6cde9875e1 ike-init: Send REDIRECTED_FROM instead of REDIRECT_SUPPORTED if appropriate Tobias Brunner 2015-04-23 12:23:46 +02:00
• e4af6e6b7a ike-sa: Keep track of the address of the gateway that redirected us Tobias Brunner 2015-04-23 12:16:21 +02:00
• 489d154e63 ikev2: Add option to disable following redirects as client Tobias Brunner 2015-04-20 17:36:45 +02:00
• c126ddd048 ikev2: Handle REDIRECT notifies during IKE_SA_INIT Tobias Brunner 2015-04-23 11:50:31 +02:00
• dd2b335b79 ike-init: Send REDIRECT notify during IKE_SA_INIT if requested by providers Tobias Brunner 2015-04-22 17:02:23 +02:00
• 2beb26b948 redirect-manager: Add helper function to create and parse REDIRECT notify data Tobias Brunner 2015-04-22 14:34:53 +02:00
• fa5cfbdcbf redirect-manager: Verify type of returned gateway ID Tobias Brunner 2015-04-22 14:19:54 +02:00
• 10009b2954 ike-init: Send REDIRECT_SUPPORTED as initiator Tobias Brunner 2015-04-20 15:16:10 +02:00
• 099c0b12b6 ike-init: Enable redirection extension if client sends REDIRECT_SUPPORTED notify Tobias Brunner 2015-04-20 14:59:08 +02:00
• c6aa749c28 ike-sa: Add new extension for IKEv2 redirection (RFC 5685) Tobias Brunner 2015-04-20 14:56:21 +02:00
• 32ba44424d daemon: Create global redirect manager instance Tobias Brunner 2015-04-20 14:41:09 +02:00
• 4a6e054122 redirect-manager: Add manager for redirect providers Tobias Brunner 2015-04-20 14:38:17 +02:00
• dbb3f7f921 redirect-provider: Add interface to redirect clients during initial messages Tobias Brunner 2015-04-20 14:05:16 +02:00
• ad82c95f0a Set PLUTO port variables to 0 in the case of no port restrictions Andreas Steffen 2016-03-04 12:52:35 +01:00
• 5c25780ce0 Added port range support to NEWS Andreas Steffen 2016-03-04 10:03:12 +01:00
• ba919f393d testing: Added swanctl/protoport-range scenario Andreas Steffen 2016-03-03 15:01:12 +01:00
• 0d7202c7c5 Port range support in updown script Andreas Steffen 2016-03-03 13:29:59 +01:00
• 6abae81f86 Implemented port ranges in kernel_netlink interface Andreas Steffen 2016-03-03 12:24:41 +01:00
• 8ea4cb3e5d thread: Allow thread ID to be value returned by gettid() Thomas Egerer 2016-02-12 17:09:47 +01:00
• f00f679af9 Request missing SWID tags in a directed PA-TNC message Andreas Steffen 2016-03-04 01:04:44 +01:00
• 88ce12a927 Merge branch 'libhydra-bye-bye' Tobias Brunner 2016-03-03 17:39:27 +01:00
• 28649f6d91 libhydra: Remove empty unused library Tobias Brunner 2016-02-12 16:35:54 +01:00
• 8394ea2a42 libhydra: Move kernel interface to libcharon Tobias Brunner 2016-02-12 15:30:18 +01:00
• dec9e1957f libhydra: Move all kernel plugins to libcharon Tobias Brunner 2016-02-12 15:21:54 +01:00
• 91d80298f9 ikev1: Send and verify IPv6 addresses correctly Tobias Brunner 2016-02-10 10:11:31 +01:00
• 2f3c08d268 ikev1: Allow immediate deletion of rekeyed CHILD_SAs Tobias Brunner 2016-02-17 17:31:51 +01:00
• 904f93f655 ikev1: Avoid modifying local auth config when detecting pubkey method Tobias Brunner 2015-12-17 18:18:09 +01:00
• 444565325a forecast: Fix alignment when adding rules Tobias Brunner 2015-11-30 16:30:22 +01:00
• c4cb652a56 connmark: Fix alignment when adding rules Tobias Brunner 2015-11-30 16:04:35 +01:00
• efd7fa7be1 ike: Keep track of send keepalive jobs to avoid scheduling more than one per IKE_SA Tobias Brunner 2015-11-16 17:14:18 +01:00
• 34f7d3b7ae ike: Don't send NAT keepalives if we have no path to the other peer Tobias Brunner 2015-11-16 17:01:46 +01:00
• 35d0b8b152 vici: Provide ports of local and remote IKE endpoints Tobias Brunner 2016-01-19 13:34:11 +01:00
• 337cf81aef duplicheck: Include required headers for FreeBSD Denis Volpato Martins 2016-02-25 10:52:59 -03:00
• 2080c7e1e2 charon: Add custom logger to daemon Thomas Egerer 2016-02-01 14:52:49 +01:00
• fedb16236c vici: Correctly document 'up' key for updown events Tobias Brunner 2016-02-03 16:33:24 +01:00
• 7823393926 ikev2: Use config value for sending of vendor IDs Thomas Egerer 2016-02-02 17:01:50 +01:00
• b84e905482 swanctl: Fix minor typos in documentation Chris Patterson 2016-02-26 09:32:39 -05:00
• efefa0c6a1 testing: Added swanctl/shunt-policies-nat-rw Andreas Steffen 2016-02-28 22:25:50 +01:00
• 13891e2a4f testing: Some minor fixes in test scenarios Andreas Steffen 2016-02-28 22:25:21 +01:00
• 794cfbad71 Version bump to 5.4.0dr7 Andreas Steffen 2016-02-28 15:56:06 +01:00
• 68c9f0bb80 testing: Added swanctl/protoport-dual scenario Andreas Steffen 2016-02-28 14:33:48 +01:00
• ddf1fc7692 testing: converted af-alg scenarios to swanctl Andreas Steffen 2016-02-26 13:31:36 +01:00
• 4625113b1a testing: Use absolute path to the _updown script in SQL scenarios Tobias Brunner 2016-02-17 11:55:45 +01:00
• c674233804 ike-sa-manager: Store a reference to the thread that checked out an IKE_SA Tobias Brunner 2016-02-10 16:41:52 +01:00
• 963b080810 testing: Increased ping interval in ikev2/trap-any scenario Andreas Steffen 2016-02-16 18:21:19 +01:00
• fc0f8466db Version bump to 5.4.0dr6 Andreas Steffen 2016-02-16 18:17:44 +01:00