denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,021 Commits 1 Branch 0 Tags
1df106bf391855202ed55c8d15e70c68bac5a06e
Commit Graph
209 Commits
Author SHA1 Message Date
Martin Willi 1df106bf39 cache keys for in and outbound ESP SAs 
removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t)
creating TS pairs dynamically using create_policy_enumerator()
 2008-10-15 12:24:44 +00:00
Martin Willi 9f4e5f8c47 store ESP keys in CHILD_SA 2008-10-15 08:37:56 +00:00
Martin Willi e517b4b174 passing chunks, not prf+, to kernel interface 
gives us better control of keymat in CHILD_SA
 2008-10-14 15:17:44 +00:00
Martin Willi a985db3ff3 reintegrated bus-refactoring branch 2008-10-14 08:52:13 +00:00
Tobias Brunner 1adaa02bb2 merging kernel_pfkey plugin back from kernel-interface branch 2008-10-14 08:46:31 +00:00
Martin Willi 79a878466c reintegrated two-sim branch providing SIM card plugin API 2008-10-10 08:36:01 +00:00
Andreas Steffen 03d5f41137 faster implementation of addr_in_subnet() 2008-10-09 05:44:00 +00:00
Martin Willi 85be7e5b75 ignore routing events for our own routes 2008-10-08 08:29:49 +00:00
Martin Willi ce5b17082d mobike: try to keep existing source address before switching to another 2008-10-08 08:23:46 +00:00
Andreas Steffen d1cbe55127 implemented ipsec listalgs as a stroke command 2008-10-08 07:00:13 +00:00
Andreas Steffen 51358f9f72 correct fix that replaces Changeset 4378 2008-10-08 06:57:52 +00:00
Andreas Steffen c85862931f removing fix applied by Changeset 4378 2008-10-08 06:15:41 +00:00
Andreas Steffen 7a07cd1c75 fixed loop termination criterion in addr_in_subnet(). Thanks go to Wolfgang Steudel, TU Ilmenau 2008-10-07 21:41:45 +00:00
Martin Willi aa9a300677 userland support to process notifies for new NAT mappings detected in UDP encapsulation 2008-10-07 07:55:28 +00:00
Martin Willi 9c0aa46b64 use dpd_action also for remotely closed tunnels 2008-10-02 13:47:19 +00:00
Tobias Brunner a341a68fac merging renaming of mode_t to ipsec_mode_t back to trunk 2008-09-25 13:56:23 +00:00
Tobias Brunner 507f26f685 merging modularized kernel interface back to trunk 2008-09-25 07:56:58 +00:00
Andreas Steffen b33c11b6c7 stroke parses and lists AC groups 2008-09-17 02:17:01 +00:00
Martin Willi f061d83358 ported NM plugin to upstream NetworkManager changes 
splitted secrets (4031)
	using uuid in auth-dialog (4053)
 2008-09-12 13:28:31 +00:00
Martin Willi 1d03954aad NM plugin supports (encrypted) private key files 2008-09-05 13:26:58 +00:00
Andreas Steffen 07d7f9a402 time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s) 2008-09-04 16:19:46 +00:00
Martin Willi 0c6a489046 fixed some translations/encoding 2008-09-04 13:51:35 +00:00
Martin Willi f0e8a8f7f3 an initial German translation for NM plugin 2008-09-04 13:39:37 +00:00
Martin Willi 82840e6c92 reduced nm verbosity 2008-09-04 10:35:20 +00:00
Martin Willi aff26a62c3 implemented NetworkManager certificate/private key authentication using ssh-agent 2008-09-04 08:40:37 +00:00
Martin Willi 994ed35312 added a configure option to select charon binary 2008-09-04 08:37:31 +00:00
Martin Willi f7c17aa15c refactored credential builder 
allow enumeration of matching builders
	try a second builder if the first one fails
	builder clones resources internally on demand
	caller frees added resources on failure and success
	stricter handling of non-supported build parts
 2008-09-02 11:00:13 +00:00
Martin Willi eb3e27059b use libcap for capability dropping 
optional, must be enabled --with-capabilities=libcap
	will be extended to support --with-capabilities=libcap2
 2008-08-29 09:24:14 +00:00
Andreas Steffen 8fa6f2dc66 streamlined ipsec listalgs output 2008-08-29 05:35:09 +00:00
Martin Willi e609b1cda2 capability API to allow plugin-controlled capability set 2008-08-28 16:27:48 +00:00
Martin Willi dc98e50153 cosmetics 2008-08-28 11:15:01 +00:00
Martin Willi 9482208633 crypto_factory algorithm enumeration API 
implementation of "ipsec listalgs"
 2008-08-28 09:24:42 +00:00
Martin Willi ee210ca353 check user account validity after PAM authentication 2008-08-27 13:48:54 +00:00
Andreas Steffen 41dc6b56b0 ipsec statusall lists eap_type and eap_identity 2008-08-26 19:45:44 +00:00
Martin Willi 281dd55891 using strongSwan, not NetworkManager version number 2008-08-26 14:27:53 +00:00
Martin Willi be49236373 fixing charon path for now for ubuntu package 2008-08-26 14:27:12 +00:00
Andreas Steffen 919019b3cd completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes 2008-08-26 05:15:34 +00:00
Andreas Steffen 3c87e92695 list CA restrictions in ipsec statusall 2008-08-25 12:35:18 +00:00
Martin Willi f6ecd44fc6 added NM gnome plugin to distribution 2008-08-25 08:21:51 +00:00
Martin Willi c1ee908e4c removed generated Makefile.in.in from svn 2008-08-25 08:15:57 +00:00
Martin Willi a88aae3df6 enforce DN of configured gateway certificate 2008-08-25 07:50:21 +00:00
Martin Willi 7945c90adb new EAP-Identity handling uses ID_EAP in plugins 2008-08-25 07:49:48 +00:00
Martin Willi 1a109c9fc6 disabled PSK option until we have a way to enforce strong secrets 2008-08-25 07:48:11 +00:00
Martin Willi 1995f79f10 use username part of RFC822 IDs for PAM authentication 2008-08-25 07:47:16 +00:00
Martin Willi 822901061b ported parts of two-sim branch 
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
 2008-08-22 10:44:51 +00:00
Martin Willi 5ba7efb083 pool names are unique 2008-08-22 07:38:59 +00:00
Martin Willi b848f0377c fixed EAP-GTC secret lookup 
improved error logging
PAM authentication needs CAP_AUDIT_WRITE capability
 2008-08-21 14:40:03 +00:00
Martin Willi 1caa265c61 a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM 2008-08-21 12:10:07 +00:00
Martin Willi bdbf3c49fc some string fixes 2008-08-20 13:59:37 +00:00
Martin Willi 6368a58ffc added missing tooltip 2008-08-20 12:02:53 +00:00