denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,447 Commits 1 Branch 0 Tags
45819d7d49bb1cbfb93ee08f8bbdc6d2e540b337
Commit Graph
1365 Commits
Author SHA1 Message Date
Martin Willi 45819d7d49 fixed rightsourceip=%config scenarios 2008-04-14 07:18:16 +00:00
Andreas Steffen ff41ca0dc4 host_srcip was not properly initialized in starterwhack.c 2008-04-13 21:42:44 +00:00
Andreas Steffen b1bdfa4890 fixed disabling the sending of cert requests 2008-04-13 17:31:07 +00:00
Martin Willi 96926b006d using dpd actions to enforce connection state 
dpd actions a per child-, not peer ike-sa
 2008-04-11 08:14:48 +00:00
Tobias Brunner 4a6474c2c3 enabling acquire for mediated connections 2008-04-10 12:51:04 +00:00
Tobias Brunner 78abba428f enabling reauthentication on mediation connections 2008-04-10 08:42:27 +00:00
Tobias Brunner 4a03518112 fixing a problem if the mediation server initiates the rekeying 2008-04-10 07:24:30 +00:00
Tobias Brunner 22452f70fc mediation connections should now properly rekey 2008-04-09 18:12:22 +00:00
Martin Willi ad81e51afc implemented a simple attribute provider for stroke 2008-04-09 12:56:20 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Tobias Brunner 4a96521965 signature in connectivity checks is now built with the message id in network byte order 2008-04-08 13:45:30 +00:00
Martin Willi 5df92bba51 changed force_encap to forceencaps 2008-04-08 12:53:36 +00:00
Tobias Brunner 1d295d1ffa printing the checklist, two bugfixes 2008-04-08 12:31:27 +00:00
Tobias Brunner 6f186d7e2e connect manager: restart the sender if it is not running anymore 2008-04-08 09:21:27 +00:00
Tobias Brunner 03e5336340 better logging for chunks in connect manager 2008-04-08 08:41:23 +00:00
Tobias Brunner 028a345c63 refactored callback data in connect manager 2008-04-08 08:33:15 +00:00
Martin Willi f6e7c0f785 removed stale ocsp header 2008-04-08 06:27:04 +00:00
Tobias Brunner 6970925422 fast finishing connectivity checks on the initiators side 2008-04-07 15:45:37 +00:00
Tobias Brunner dd563e60df corrected the logging for retransmissions of connectivity checks 2008-04-07 14:45:39 +00:00
Tobias Brunner b03c1d415c changed how retransmissions of connectivity checks are sent 2008-04-07 11:26:15 +00:00
Martin Willi 852abcd3a3 fixed doxygen groups to avoid recursion 2008-04-07 10:37:14 +00:00
Tobias Brunner 70a568b015 fixing another memory leak 2008-04-07 09:36:52 +00:00
Martin Willi 1749642b15 use cert->equals() to filter out equal certificates in seperate instances 2008-04-07 08:48:08 +00:00
Martin Willi da5e7bdb4c try to cache the same instance of equal certificates 2008-04-07 08:44:43 +00:00
Martin Willi b5dbcc6270 compare certificates against full encoding to allow equality check of untrusted certs 2008-04-07 08:28:35 +00:00
Martin Willi 9caadea8c8 fixed bad cleanup which results in segfault if no issuer cert found, fixes #43 2008-04-07 08:06:02 +00:00
Andreas Steffen 480297b883 cosmetics 2008-04-07 07:02:47 +00:00
Martin Willi ff867d062e added ./configure option --with-strongswan-conf= 
defaults to /etc/strongswan.conf
 2008-04-07 06:56:33 +00:00
Martin Willi 4071ad1e5b fixed segfault when opening a SQLite database fails 2008-04-07 06:49:13 +00:00
Andreas Steffen f8ab4a8f76 log shared secret with debug level 4 2008-04-06 17:51:29 +00:00
Andreas Steffen 1b247314fd default is hostaccess=no 2008-04-06 12:15:05 +00:00
Andreas Steffen bc722433be version bump to 4.2.1 2008-04-06 12:12:13 +00:00
Martin Willi a9184df36b do not build leak_detective.o if not enabled 2008-04-04 11:38:16 +00:00
Martin Willi 2429fb4958 defining hook functions ourself as definition in uClibc and glibc differ, fixes #36 2008-04-04 11:37:19 +00:00
Martin Willi 67d147e888 removed unused gmp.h to build libstrongswan without libgmp 2008-04-04 11:13:14 +00:00
Tobias Brunner 4c7e6112c5 and another 2008-04-03 15:22:06 +00:00
Tobias Brunner 471f923071 fixed two other memory leaks 2008-04-03 15:13:25 +00:00
Martin Willi cce97b647a redirecting all leak_report information to stderr 2008-04-03 11:25:08 +00:00
Martin Willi 6c45e62242 some code cleanups 2008-04-03 10:22:17 +00:00
Tobias Brunner 84b18d5fc7 replaced mutex in leak detective with thread scheduling 2008-04-03 09:24:35 +00:00
Tobias Brunner 8e91a36314 thread locking for sender and processor optimized 2008-04-03 09:19:12 +00:00
Martin Willi 6af29ccf33 configure option in strongswan.conf for thread count 2008-04-03 08:37:24 +00:00
Martin Willi 6e4e27f8de updated test data to use correct encoding data 2008-04-03 06:45:17 +00:00
Andreas Steffen 196b28a470 demoted more notify debug messages to level 2 2008-04-02 19:15:05 +00:00
Andreas Steffen f342cc08c0 make peer IP address and peer IP available to the xauth_module.verify_secret() method 2008-04-02 19:04:45 +00:00
Andreas Steffen 97da3d2de0 renamed AES_cbc_encrypt to SS_AES_cbc_encrypt due to name collision with OpenSSL library 2008-04-02 18:51:10 +00:00
Andreas Steffen 7a9d3ae471 support of force_keepalive parameter 2008-04-02 18:35:23 +00:00
Tobias Brunner c3f803c4c6 fixing some memory leaks 2008-04-02 18:21:03 +00:00
Tobias Brunner f049b29491 securing total_threads with the mutex while destroying the processor 2008-04-02 15:28:08 +00:00
Andreas Steffen 1ee637d8b1 generate debug output if ocsp response does not contain status information for a given certificate 2008-04-02 14:28:17 +00:00