Martin Willi
a13c013b6f
include TSi/TSr of triggering packet in acquire
2009-05-20 11:44:43 +02:00
Martin Willi
c3626c2ce6
initiate trapped CHILD_SAs with same reqid
2009-05-08 10:04:00 +02:00
Martin Willi
17339b9a86
removed obsolete route/unroute code from ike_sa/controller
2009-05-08 10:03:59 +02:00
Martin Willi
e868a564d9
set IKE_SA on bus to catch unroute event properly
2009-05-05 09:51:28 +02:00
Tobias Brunner
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
Martin Willi
1490ff4d9b
updated Doxyfile
...
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Martin Willi
d2de674b9a
checkin of non-existing IKE_SAs
...
removed unneeded checkin() return values
2008-11-26 14:32:55 +00:00
Tobias Brunner
476c61fdcd
some typos
2008-11-11 13:11:44 +00:00
Martin Willi
a985db3ff3
reintegrated bus-refactoring branch
2008-10-14 08:52:13 +00:00
Martin Willi
a4a3e0c7dc
introduced an additional bus->signal parameter for signal specific data
...
added SIG_IKE/SIG_CHD macros for signal emitting
2008-07-18 15:51:40 +00:00
Martin Willi
ef3f717bfe
reverted [4125],[4166], reimplemented the proper way
2008-07-11 08:54:56 +00:00
Martin Willi
aafe8ced39
added strongswan.conf option charon.reuse_iksa=no to create each CHILD_SA in a new IKE_SA
2008-06-30 08:45:11 +00:00
Martin Willi
233b853dfa
extended credential_set_t interface by a cache_cert() method
...
allows persistent or in-memory caching of fetched certificates
2008-04-17 11:22:37 +00:00
Martin Willi
a593db5d35
ike_sa_manager enumerable, not iterable
2008-04-14 11:37:46 +00:00
Martin Willi
552cc11b1f
merged the modularization branch (credentials) back to trunk
2008-03-13 14:14:44 +00:00
Martin Willi
5bbac9ffff
split connections with different virtual IPs in different peer_cfgs
...
respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA
2008-02-05 12:39:30 +00:00
Martin Willi
0f806802ae
implemented Expanded EAP types to support vendor specific methods
2007-12-13 17:31:21 +00:00
Martin Willi
ee61471113
implemented RFC4478 (repeated authentication)
...
changed %V printf handler to take a time delta, %#V now takes two arguments
2007-11-20 12:06:40 +00:00
Martin Willi
729a6ec965
fixed two leaks in stroke_interface
2007-11-19 11:28:11 +00:00
Andreas Steffen
3a19f38d15
handle right=%any case in strongSwan manager
2007-11-17 23:08:16 +00:00
Martin Willi
e101f162ab
refactored bus and interface to resolve threading issues (WIP)
2007-11-15 18:35:54 +00:00
Martin Willi
5d4aea685f
filtering out IKEv1 configurations for manager
2007-11-15 10:09:14 +00:00
Martin Willi
30a68d715b
implemented configuration query and IKE_SA initiation in XML interface
2007-11-13 11:56:52 +00:00
Martin Willi
275cec2eac
implemented IKE/CHILD_SA termination through XML interface
2007-11-12 15:06:04 +00:00
Martin Willi
6705052c2d
fixed bad cast which resulted in a crash on "ipsec update"
2007-10-05 09:13:03 +00:00
Tobias Brunner
d5cc175833
experimental P2P-NAT-T for IKEv2 merged back from branch
2007-10-03 15:10:41 +00:00
Martin Willi
2970674faf
reverted changeset [3215], as we need NULL callback to do asynchronous calls
...
added interface_manager_cb_empty function, which calls synchronous but doesn't do anything
2007-10-03 08:10:03 +00:00
Martin Willi
06d00e4f7b
fixed "ipsec statusall" SPI formatting
2007-10-02 13:11:23 +00:00
Tobias Brunner
17e78a0981
dummy callback added to interface manager
2007-10-02 11:33:16 +00:00
Martin Willi
06011f6882
remove control sockets on startup, as we don't have privileges on shutdown
2007-10-02 11:20:07 +00:00
Martin Willi
f53b74c96f
moved force_encap to ike_config, enables responder to enforce udp encapsulation
...
fixed bugs in force_encap code
2007-10-01 16:41:34 +00:00
Martin Willi
9dae1bed00
implemented IKEv2 force_encap connection parameter
...
enforces UDP encapsulation by faking NAT detection payloads
to hurdle restrictive firewalls
2007-10-01 12:19:39 +00:00
Martin Willi
052d58feaf
fixed CHILD_SA SPI byte order in XML interface
2007-09-28 07:05:15 +00:00
Martin Willi
85c6fc0283
reduced debbugging level
2007-09-27 13:09:50 +00:00
Martin Willi
c295d0eb4b
refactored strongswan manager
...
removed buggy request parsing code, use ClearSilvers CGI kit instead
fixed CHILD_SA listing in manager (needs better design)
using secure XML communication through unix sockets
removed images with questionable (non-GPL) license
2007-09-26 14:02:21 +00:00
Martin Willi
8f561d4409
prototype implemementation of an sqlite configuration backend
2007-09-18 07:12:21 +00:00
Andreas Steffen
cf9cec125a
adapted format of IKE SPIs to strongSwan Manager's style
2007-09-15 15:35:02 +00:00
Martin Willi
c01f7bf989
added subnets of CHILD_SAs to xml interface
...
a first design of Managers IKE_SA list page
2007-09-14 14:07:30 +00:00
Andreas Steffen
15a9d460c0
peer_cfg now knows about group memberships
2007-09-13 15:33:17 +00:00
Martin Willi
6baca3b2f1
fixed 64bit issue with file descriptor
2007-09-13 08:19:15 +00:00
Martin Willi
b8c7453a82
manager can query and list IKE_SA status (no layout yet)
2007-09-13 07:45:04 +00:00
Martin Willi
9164e49ac0
added mobike=yes|no connection option
...
yes: include mobike support notifies as initiator
no: only enable mobike as responder when initiator supports it
default: yes
2007-08-29 12:11:25 +00:00
Andreas Steffen
8ff58b051c
ipsec stroke rereadaacerts|rereadacerts supported
2007-08-10 09:17:34 +00:00
Andreas Steffen
84db83336b
support of ipsec rereadsecrets for stroke
2007-08-10 07:16:32 +00:00
Andreas Steffen
f51d505e5e
implemented listing of attribute certificates
2007-08-07 20:32:11 +00:00
Martin Willi
3b574567ea
fixed segfault when sourceip in stroke message is NULL
2007-08-06 12:35:28 +00:00
Martin Willi
9ec19f13f7
allow starter to initiate connections simultaneously (on auto=start)
2007-08-06 07:41:19 +00:00
Martin Willi
ac1557af51
updated XML interface to new schema
2007-07-19 10:57:33 +00:00
Martin Willi
19ff7d2207
added first draft of SMP relax-ng schema
2007-07-06 13:44:43 +00:00
Martin Willi
209c2e9049
support for left=%any change our address dynamically
2007-06-18 05:57:59 +00:00
Martin Willi