Tobias Brunner
41b2fbb29f
Initial version of the Hildon Desktop status menu plugin.
2010-10-14 17:36:17 +02:00
Tobias Brunner
d8f4efbf7b
Adding, editing and deleting connections is now possible in the settings plugin.
2010-10-14 17:36:17 +02:00
Tobias Brunner
2bf0caec66
Adding a dialog to the settings plugin that lists all connections.
2010-10-14 17:36:17 +02:00
Tobias Brunner
980c1b6e07
Helper methods added to StrongSwanConnections to easily show connections in a list widget.
2010-10-14 17:36:17 +02:00
Tobias Brunner
01f7455640
Management class for connection settings added, connections are stored in a simple GKeyFile.
2010-10-14 17:36:17 +02:00
Tobias Brunner
9a09e32b98
Simple GObject based class for connection settings added.
2010-10-14 17:36:16 +02:00
Tobias Brunner
d50670d50e
Adding a stub plugin for the Hildon control panel.
2010-10-14 17:36:16 +02:00
Tobias Brunner
0261b12419
Adding autotools framework for the maemo frontend.
2010-10-14 17:36:16 +02:00
Andreas Steffen
cf76984c28
Define explicit IKEv1 keyexchange mode V
2010-10-14 16:13:52 +02:00
Andreas Steffen
6587f1a04d
increase eap-tls max_message_count in fragments scenario
2010-10-14 16:09:44 +02:00
Tobias Brunner
e7e48fff9f
Added ssh_config to distribution.
2010-10-14 15:58:26 +02:00
Andreas Steffen
095e0e7940
version bump to 4.5.0rc1
2010-10-14 15:50:42 +02:00
Tobias Brunner
7ec11936e8
testing: Reduce testing runtime by reusing SSH sessions.
...
By using the ControlMaster and ControlPath options, existing SSH sessions
are reused (a session to each host is opened at the beginning of a test
run). Also, RC4 is used as encryption algorithm to further improve the
performance. These changes reduce the runtime by over 20%.
2010-10-14 14:01:26 +02:00
Tobias Brunner
972663ccb0
Define explicit IKEv1 keyexchange mode IV.
2010-10-14 13:55:04 +02:00
Tobias Brunner
4d10e260de
pluto: Install inbound policies together with outbound policies.
...
This avoids an error message when uninstalling the policies and charon
did it already like this.
2010-10-14 13:53:20 +02:00
Andreas Steffen
897a9baaba
define explicit IKEv1 keyexchange mode III
2010-10-14 07:34:13 +02:00
Andreas Steffen
a885f0737c
fixed ikev2/rw-eap-ttls-radius scenario
2010-10-14 07:26:10 +02:00
Andreas Steffen
d8a379e1e4
fixed ikev2/rw-eap-tnc-radius-block scenario
2010-10-14 07:22:39 +02:00
Andreas Steffen
adf5ebaa28
fixed ikev2/rw-eap-tnc scenario
2010-10-14 07:08:33 +02:00
Andreas Steffen
c763ec09db
fixed ikev2/rw-eap-sim-radius scenario
2010-10-14 07:01:06 +02:00
Andreas Steffen
15a7b95f86
fixed ikev2/rw-eap-sim-only-radius scenario
2010-10-14 06:55:06 +02:00
Andreas Steffen
907ca3d4df
fixed ikev2/mult-auth-rsa-eap-sim-id
2010-10-14 06:41:26 +02:00
Andreas Steffen
8e91079f7f
ignore : separator characters in chunk_from_hex()
2010-10-12 19:13:05 +02:00
Tobias Brunner
d4b8f98c1a
Store the exit code of executed commands in Dumm::Guest.execstatus.
...
Also, no exception is risen for failed exec calls, anymore.
2010-10-12 15:41:17 +02:00
Tobias Brunner
d679266fe1
Map the guests to a ruby hash to avoid creating new ruby objects on each call of Guest.each or Guest[].
2010-10-12 15:04:38 +02:00
Tobias Brunner
9b0847dd9a
Exposed the mutli-overlay functionality in the ruby bindings.
...
Overlays can be added to individual guests (which overlays exactly the
supplied directory) or to all guests (which overlays a subdirectory
with the guest's name to each guest).
The template functionality is provided as before.
2010-10-12 15:03:37 +02:00
Tobias Brunner
f29396b87e
Added support for multiple overlays to the main library.
...
Also implemented the template functionality using the new overlay functions.
2010-10-12 15:03:27 +02:00
Tobias Brunner
0dbbd47fe7
Added support for multiple overlays to guests (replaces the template functionality).
...
Compared to a template an overlay is an arbitrary directory, not the
parent directory of a directory with the guest's name.
2010-10-12 15:03:26 +02:00
Tobias Brunner
4542920a3e
Added support for multiple overlays to the copy-on-write filesystem.
2010-10-12 15:03:19 +02:00
Tobias Brunner
1dbf0ed982
Do not add additional addresses to MOBIKE path probing messages.
2010-10-12 11:11:06 +02:00
Tobias Brunner
5774408898
Change behavior of responder during roaming.
...
If the current source address is not available anymore, the responder
uses ike_mobike_t.roam, thus, uses multiple address combinations when
trying to notify the initiator.
2010-10-12 11:11:05 +02:00
Tobias Brunner
c5770f864f
Allow responder to use ike_mobike_t.roam.
...
After getting a response the responder updates the IPsec SAs.
2010-10-12 11:11:05 +02:00
Tobias Brunner
261b2572d1
Send list of additional addresses even if current path is still valid.
2010-10-12 11:11:05 +02:00
Tobias Brunner
bab56a4abb
Extracted path checking in ike_sa_t.roam into separate functions.
2010-10-12 11:11:05 +02:00
Tobias Brunner
769c69facc
Added support for responders to change their address via MOBIKE.
...
If the original responder updates its list of additional addresses we
check if the remote endpoint changed and update the IPsec SAs if it did,
as we assume the original address became unavailable and the responder
already updated the SAs on its side.
2010-10-12 11:11:05 +02:00
Tobias Brunner
13876431d6
Explicitly configure MOBIKE tasks to update the list of additional addresses.
2010-10-12 11:11:05 +02:00
Tobias Brunner
31e7dc4dfd
Improved check for first IKE_AUTH message in ike_mobike task.
...
If the original responder initiated a MOBIKE exchange, the previous
check was not always correct.
2010-10-12 11:11:05 +02:00
Tobias Brunner
c817e7bb90
Migrated ike_mobike task to INIT/METHOD macros.
2010-10-12 11:11:05 +02:00
Tobias Brunner
be90134211
Simplified apply_port function in mobike task.
2010-10-12 11:11:04 +02:00
Tobias Brunner
ec0c756d07
Do not fire roam events based on local route changes.
...
These kernel events are triggered on address changes, which is
problematic when deleting virtual IP addresses.
2010-10-12 11:11:04 +02:00
Tobias Brunner
29607690a8
If a changed route has no src, try to find it via interface.
2010-10-12 11:11:04 +02:00
Tobias Brunner
0ac6d2e658
Get source address from interface if the route does not provide one.
2010-10-12 11:11:04 +02:00
Tobias Brunner
cd26eedc5c
Do not update hosts based on retransmitted messages.
2010-10-12 11:11:04 +02:00
Tobias Brunner
d5bd775126
Do not update remote host if we are behind a NAT.
2010-10-12 11:11:04 +02:00
Andreas Steffen
e6f685b0fa
scenarios without RADIUS server can use default iptables script
2010-10-11 17:04:53 +02:00
Andreas Steffen
e5f5f612bd
fixed some evaltest.dat files
2010-10-11 16:58:12 +02:00
Andreas Steffen
7d8cb1f952
added ikev2/rw-eap-tnc-block scenario
2010-10-11 16:58:12 +02:00
Andreas Steffen
f2b1aa4962
added eap-radius-filter_id option to strongswan.conf
2010-10-11 12:20:45 +02:00
Andreas Steffen
456a4f398e
updated keyexchange entry in ipsec.conf.5 man page
2010-10-11 06:23:57 +02:00
Andreas Steffen
aff81d3bac
updated strongswan.conf
2010-10-11 06:12:26 +02:00
Tobias Brunner