denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
635 Commits 1 Branch 0 Tags
16b9a73cc4bd4c4fafc8618fdd4c05ab72195df1
Commit Graph
64 Commits
Author SHA1 Message Date
Martin Willi 16b9a73cc4 - reworked configuration framework completly 
- configuration is now split up in: connections, policies, credentials and daemon config
- further alloc/free fixes needed!
 2006-03-16 15:25:06 +00:00
Martin Willi b1953ccd05 - first attempt for connection loading and starting via "stroke" 
- some improvements here and there
 2006-03-14 13:22:48 +00:00
Martin Willi 8a49112907 - configuration_manager replaced by configuration_t interface 
- current configuration_manager is now static_configuration (testing)
- first draft of starter_configuration, which should once interact with ipsec starter (via whack?)
- some cleanups
- socket_t uses RAW socket, which allows parallel service of pluto/charon
 2006-03-07 09:42:15 +00:00
Martin Willi aa5a35a005 - comments and cleanups 2006-03-02 09:56:30 +00:00
Martin Willi 5d187bd234 - working policy installation and removal 2006-03-01 15:56:51 +00:00
Martin Willi a527a426d6 - proposal setup implementation begun 2006-02-22 16:14:40 +00:00
Martin Willi 0a373aec33 - fixed socket code, so we know on which address we receive traffic 
- AH/ESP setup in kernel is working now!!! :-)))
 2006-02-16 16:24:50 +00:00
Martin Willi 30b5b412da - installing of child sa works 
- need correct IP adresses to actually use IPsec
 2006-02-16 09:55:07 +00:00
Martin Willi ce461bbd13 - refactored ike proposal 
- uses now proposal_t, wich is also used by child proposals
- ike key derivation refactored
- crypter_t api has get_key_size now
- some other improvements here and there
 2006-02-14 14:52:00 +00:00
Martin Willi 409d010131 - config uses uml hosts alice and bob 2006-02-13 13:42:01 +00:00
Martin Willi dfa6e086a0 - fixed memleaks 2006-02-09 11:56:24 +00:00
Martin Willi 93df94acad - works with new proposal code 
- still some(!) memleaks
 2006-02-09 10:16:20 +00:00
Martin Willi c06dbbabd1 - fixed alot of bugs in child_proposal 
- near to working state ;-)
 2006-02-08 15:25:34 +00:00
Martin Willi 384efc76d5 - dead end implementation 2006-02-06 14:05:35 +00:00
Martin Willi 19f78a6fed - fixed doxygen warnings 2005-12-15 12:10:53 +00:00
Jan Hutter e9c0ca15e1 - added deletion of IKE_SA 2005-12-12 14:14:52 +00:00
Martin Willi 6db4e80b56 - fixed some BAD bugs 
- clean localhost-testcases for bad_dh, shared and rsa
 2005-12-12 12:52:59 +00:00
Jan Hutter 7fa8decb78 - added todo's 2005-12-12 08:44:35 +00:00
Jan Hutter 6329a25750 - changed config values 2005-12-12 08:38:22 +00:00
Jan Hutter f4d8999cc1 - added support for empty traffic selectors and empty sa payload in 
IKE_AUTH request and reply
 2005-12-07 10:25:32 +00:00
Martin Willi aee3eb5299 ../svn-commit.tmp 2005-12-07 07:57:18 +00:00
Martin Willi 2b54748131 - code cleanup in network and config 
- moved packet_t members to private, added getter and setters
 2005-12-06 16:00:07 +00:00
Jan Hutter e314700cb5 - implemented jobs DELETE_HALF_OPEN_IKE_SA and DELETE_ESTABLISHED_IKE_SA 2005-12-06 12:27:09 +00:00
Jan Hutter f6ba78c370 - added payload CERT 
- cleaned code of different states
- added additional notify handling
 2005-12-05 12:21:38 +00:00
Jan Hutter 6efb10ece3 - code documented 2005-12-04 15:50:19 +00:00
Jan Hutter b66cb98743 - code documented 2005-12-04 15:44:18 +00:00
Martin Willi 25c41f4df7 - logging cleanup 
- pid re-replaced with thread_ids, since nptl does not distinguish pids between threads
 2005-12-04 11:46:58 +00:00
Martin Willi 8ff8c33d1d - implemented RSA, only signing and verifying esma_pkcs1 padded 
- removed gmp-helper: chunk_to_mpz is now done with gmp functions, prime generation in prime-pool
- added prime-pool (needs priority fix)
- proof of concept RSA authentication
- mpz uses LEAK_DETECTIVE
- configuration-manager supports rsa keys
 2005-12-04 01:30:35 +00:00
Jan Hutter aebb38a093 - preshared secrets are now retrieved over configuration_manager 2005-12-03 16:02:06 +00:00
Martin Willi 01de2f3cd5 - fixes 2005-12-02 16:09:04 +00:00
Jan Hutter 94b0f906e6 fixed different bugs when checking out ike sa and retransmitting 
requests
 2005-12-02 15:40:04 +00:00
Jan Hutter 0df63d6be4 - retransmitting of requests implemented 2005-12-02 14:07:36 +00:00
Martin Willi ccf783d29d - state ike_sa_init_responded implemented (has some memleaks) 2005-12-02 12:38:55 +00:00
Jan Hutter 8c7824fb57 2005-12-02 08:05:20 +00:00
Jan Hutter 56aeee4936 cleaned code 2005-12-02 07:43:05 +00:00
Jan Hutter 1b3f92d28d - fixed bugs 2005-12-01 19:53:48 +00:00
Martin Willi 257fa50386 - added ts for both initator and responder 
- ts_payload can get now ts's
 2005-12-01 18:14:22 +00:00
Martin Willi 03283349a9 - creation of ts payloads using ts 2005-12-01 17:38:06 +00:00
Jan Hutter a9428251cd - new configuration support added to ike_sa and states 2005-12-01 17:16:10 +00:00
Martin Willi 0675d5e1a1 - commented 2005-12-01 14:54:54 +00:00
Martin Willi ed1b7b40cd - tested sa with traffic selectors 
- fixed ALOT of bugs ;-)
 2005-12-01 14:17:51 +00:00
Martin Willi 7d85e0ac6e 2005-12-01 13:48:18 +00:00
Martin Willi 712db4bf3e - compileable 2005-12-01 13:42:21 +00:00
Martin Willi 47cf33820d - added spis 2005-12-01 09:31:33 +00:00
Martin Willi ca060d4cd1 - fixed equals for new struct definition 2005-12-01 09:03:36 +00:00
Martin Willi 2dce422c6d - fixed proposal 2005-12-01 08:54:23 +00:00
Jan Hutter b737e9d9e8 implemented and tested functionality to create sa_payload from 
ike_proposal_t's and also generate ike_proposal_t's from sa_payload
 2005-12-01 08:48:57 +00:00
Martin Willi d45ec1dedf - implemented sa_config 
- uses identification
- and host
- untested
- ts need further tuning
 2005-12-01 07:35:03 +00:00
Jan Hutter 2ef11339c7 created class init_config_t encapsulating configuration issues of 
IKE_SA_INIT phase
 2005-11-30 17:21:33 +00:00
Martin Willi df3af01a5c - empty created 2005-11-30 13:47:08 +00:00