denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
17,289 Commits 1 Branch 0 Tags
10e0faf477edc8064b11471fd94deef2f49167c4
Commit Graph
1436 Commits
Author SHA1 Message Date
Tobias Brunner d46f857511 Fixed unintentional fall-through in task_manager. 
Reported by Howard Windsor.
 2011-10-06 13:55:50 +02:00
Tobias Brunner d7c552a25e Fixed compilation of ike_me_t. 2011-10-04 10:19:10 +02:00
Andreas Steffen 4fb6b7a12c Migrated child_delete to INIT/METHOD macros 2011-10-04 08:05:27 +02:00
Andreas Steffen 0fc9dd1194 Migrated child_rekey to INIT/METHOD macros 2011-10-04 07:10:46 +02:00
Andreas Steffen ad8f42e898 Migrated ike_auth_lifetime to INIT/METHOD macros 2011-10-04 06:47:35 +02:00
Andreas Steffen 27d7641641 Migrated ike_cert_post to INIT/METHOD macros 2011-10-04 05:59:09 +02:00
Andreas Steffen 08f9f44176 Migrated ike_cert_pre to INIT/METHOD macros 2011-10-04 05:54:08 +02:00
Andreas Steffen 1bf77c8168 Migrated ike_config to INIT/METHOD macros 2011-10-03 23:55:15 +02:00
Andreas Steffen 2e89c3413b Migrated ike_delete to INIT/METHOD macros 2011-10-03 23:49:44 +02:00
Andreas Steffen 6dab816eb2 Migrated ike_dpd to INIT/METHOD macros 2011-10-03 22:37:44 +02:00
Andreas Steffen c73694e7fb Migrated ike_init to INIT/METHOD macros 2011-10-03 22:28:32 +02:00
Andreas Steffen bb6bbe6ddd Migrated ike_me to INIT/METHOD macros 2011-10-03 22:19:46 +02:00
Andreas Steffen 6ade8d6163 Migrated ike_natd to INIT/METHOD macros 2011-10-03 22:06:56 +02:00
Andreas Steffen 7db8fd0d9a Migrated ike_reauth to INIT/METHOD macros 2011-10-03 21:38:04 +02:00
Tobias Brunner b0eb026c05 Migrated mediation_manager_t to INIT/METHOD macros. 2011-10-03 18:42:29 +02:00
Tobias Brunner 02846e5e7f Migrated connect_manager_t to INIT/METHOD macros. 2011-10-03 18:32:12 +02:00
Tobias Brunner 6401b18f12 Migrated ike_sa_id_t to INIT/METHOD macros. 2011-10-03 18:01:05 +02:00
Martin Willi f8437dd8d2 Clear traps during shutdown before unloading kernel plugins 2011-09-12 13:02:51 +02:00
Andreas Steffen a8bbdb1f26 log entry for outbound hash-and-url 2011-08-24 06:05:44 +02:00
Martin Willi 61cf9f512c Try to detect Windows Clients by looking for INTERNAL_IP4/6_SERVER attribute 2011-08-19 09:16:16 +02:00
Andreas Steffen f69f067958 fix double delete of old IKE_SA during reauthentication 2011-08-16 23:25:45 +02:00
Andreas Steffen 65d5f6bc2b some more typos 2011-08-15 21:43:26 +02:00
Tobias Brunner 7ebf021d37 typos: initator->initiator, authenticaion->authentication. 2011-08-15 16:31:04 +02:00
Tobias Brunner 9af9c6772b If we close a duplicate SA, it is also no authentication failure. 2011-08-12 10:11:39 +02:00
Tobias Brunner d9eaecd373 If local authentication fails, it is not really a peer auth failure. 2011-08-12 10:04:02 +02:00
Tobias Brunner ccbe380377 Throw an alert if authentication of the peer fails (not only for initiator). 2011-08-12 10:04:02 +02:00
Tobias Brunner 7ab19d571d Throw an alert when the peer address cannot be resolved during initiation. 2011-08-12 09:59:27 +02:00
Tobias Brunner ff4b25f9b7 Throw an alert via bus_t when remote authentication fails. 2011-08-12 09:59:27 +02:00
Martin Willi efee3ed80f Migrated all SIM/AKA code to libsimaka, use SIM and AKA backend managers registered by name 2011-08-08 13:36:56 +02:00
Tobias Brunner 5baaaa5ed5 Properly initialize ike_sa_t. 2011-08-01 13:08:15 +02:00
Tobias Brunner 241cf8e791 Update fallback drop policies if required. 2011-07-29 12:34:51 +02:00
Tobias Brunner f1c1965d64 Install fallback drop policies for all three directions. 2011-07-28 16:56:15 +02:00
Tobias Brunner d7a59f1976 Install fallback drop policies to avoid transmitting unencrypted packets. 
During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy
is first uninstalled and then the new one is installed.  In the short
time in between, where no policy is available in the kernel, unencrypted
packets could have been transmitted.
 2011-07-27 13:44:33 +02:00
Tobias Brunner fbedc6a45b Remove policies in kernel interfaces based on their priority. 
This allows to unroute a connection while the same connection is
currently established.  In this case both CHILD_SAs share the same
reqid but the installed policies have different priorities.
 2011-07-27 13:41:35 +02:00
Martin Willi 5d6b981572 Inherit authentication information during IKE_SA rekeying 2011-07-25 14:19:17 +02:00
Andreas Steffen 9c67f5ff54 fixed some more misspellings 2011-07-20 22:19:01 +02:00
Tobias Brunner f3bb1bd039 Fixed common misspellings. 
Mostly found by 'codespell'.
 2011-07-20 16:14:10 +02:00
Andreas Steffen 4742d6501a shunt manager installs policies with %any hosts 2011-07-14 13:51:36 +02:00
Tobias Brunner 0c2ce1905a Adapted shunt manager to changed kernel interface (reqid in del_policy). 2011-07-06 12:48:26 +02:00
Tobias Brunner 47daa0e6fe Replaced more complex iterator usages. 2011-07-06 09:43:45 +02:00
Tobias Brunner 572abc6cbd Replaced ike_sa_t.create_additional_address_iterator with enumerator. 2011-07-06 09:43:45 +02:00
Tobias Brunner 4bbce1ef37 Replaced ike_sa_t.create_child_sa_iterator with enumerator. 
This required two new methods on ike_sa_t. One returns the number of
CHILD_SAs and one allows to remove a CHILD_SA.
 2011-07-06 09:43:45 +02:00
Tobias Brunner e26304348c Replaced simple iterator usages. 2011-07-06 09:43:45 +02:00
Tobias Brunner 328f22e1d3 Add the reqid to kernel_ipsec_t.del_policy. 2011-07-06 09:43:45 +02:00
Andreas Steffen f87991704e implemented PASS and DROP shunt policies 2011-06-28 19:42:54 +02:00
Martin Willi 6a5c8ee7a5 Initialize trap_manager listener with INIT macro, too 2011-06-28 17:19:20 +02:00
Andreas Steffen 06356a2981 Migrated trap_manager_t to INIT/METHOD macros 2011-06-28 14:42:29 +02:00
Martin Willi bc20bc1927 Check if colliding task has actually a CHILD, i.e. after a migrate 2011-06-03 10:49:54 +02:00
Andreas Steffen c76b8a21fe logging initial EAP Identifier in EAP Identity Request 2011-05-29 10:30:02 +02:00
Martin Willi a4c040d536 Added strongswan.conf option to override half open IKE_SA timeout 2011-05-16 15:24:15 +02:00