denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,759 Commits 1 Branch 0 Tags
48e87e12ab3ca0bb1cebd2b6f05a0cf6ab16fb1e
Commit Graph
291 Commits
Author SHA1 Message Date
Mirko Parthey f3da58aaa9 Fix DNS error handling for keyexchange=ike. 
starter fails to load a connection when a peer's DNS name is temporarily
unresolvable and keyexchange=ike was specified, which defaults to IKEv2.
The connection loads just fine in case of keyexchange=ikev2.
 2011-10-25 09:44:17 +02:00
Tobias Brunner bb3357e886 starter: Android.mk updated to use kernel-netlink via libhydra. 2011-10-21 14:24:34 +02:00
Tobias Brunner adab84533e starter: Use kernel interfaces to flush SAD and SPD. 
This now supports platforms where neither 'ip xfrm' nor 'setkey' are
available (like Android).
 2011-10-21 14:24:34 +02:00
Tobias Brunner f3a682c1ff starter: Load plugins specific to starter. 2011-10-21 14:24:34 +02:00
Tobias Brunner d19eaf7457 starter: INFO_FILE is not used anymore. 2011-10-21 14:24:34 +02:00
Tobias Brunner 1c10577648 starter: Only try to start pluto on Android if it is actually enabled. 2011-10-14 17:36:21 +02:00
Tobias Brunner 652ddf5ce2 starter: Close open file descriptors after forking. 
This avoids problems with Android's adb which leaves several file
descriptors open when executing processes.
 2011-10-13 11:19:17 +02:00
Tobias Brunner aa82ae3aa4 starter: Only create self-signed certificate if scepclient is built. 2011-10-12 16:37:21 +02:00
Tobias Brunner b66a3b3d28 Build starter on Android. 2011-10-11 16:30:20 +02:00
Tobias Brunner 187a5faf64 starter: Updated gitignores after LEX/YACC change. 2011-10-10 20:07:37 +02:00
Tobias Brunner 6f4eaa41a7 starter: Use automake LEX/YACC automatisms. 2011-10-10 19:31:04 +02:00
Tobias Brunner e01fed7eb3 starter: fallback include handling without glob(3). 2011-10-10 18:05:44 +02:00
Tobias Brunner 0b706426a5 starter: Check for processes with PIDs stored in pid files. 2011-09-28 13:57:59 +02:00
Martin Willi 40921edc38 Support resolution of "allow_any" DNS names in charon (%hostname) 2011-09-02 13:42:45 +02:00
Martin Willi e59a50009c starter passes unresolved DNS names to charon 
Based on an initial patch by Mirko Parthey.
 2011-08-29 09:58:18 +02:00
Tobias Brunner 45048eae23 Verify that executables are available and set (pluto|charon)start accordingly. 
Some distributions enable both daemons but then distribute the
executables in two separate packages.  If only one package is installed
but both daemons are enabled in ipsec.conf, starter will try to start
the non existing daemon over and over again, and will each time readd
the configs to the other daemon.
 2011-08-11 13:38:05 +02:00
Tobias Brunner 889a62a8d4 pluto: --debug-kernel aliasing was not fully complete. 2011-08-02 18:15:50 +02:00
Andreas Steffen f87991704e implemented PASS and DROP shunt policies 2011-06-28 19:42:54 +02:00
Martin Willi f34ebc845b Add a closeaction ipsec.conf keyword to configure close action 2011-06-07 12:07:21 +02:00
Martin Willi 513701f41b Fix some warnings triggered by gcc 4.6 -Wunused-but-set-variable 2011-05-19 15:47:40 +02:00
Tobias Brunner 67ec2be665 IKEv2 was only partially the default for connections with auto=route and auto=start. 
Connections with auto=route and auto=start that did not have
keyexchange=ikev2 explicitly specified did get added to charon,
but did not get routed or started by charon.
 2011-04-27 11:33:06 +02:00
Tobias Brunner f36a6ebd30 starter: Make sure interface name is null-terminated. 2011-04-19 13:48:51 +02:00
Tobias Brunner 1c004bebd8 Clearly mark switch cases that fall through. 2011-04-19 13:48:50 +02:00
Tobias Brunner cc2429d9a2 In scanf the maxmium length of %s does not include the null-terminator. 2011-04-14 18:10:27 +02:00
Tobias Brunner bac28c73ed starter_conn_t.id is an unsigned long. 2011-04-14 18:10:27 +02:00
Tobias Brunner e92e687584 Removed empty man page for starter. 2011-02-07 11:39:41 +01:00
Martin Willi 2b52d5cb41 Do not install config files with user/group, as it might not exist on build machine 2011-01-17 18:08:17 +01:00
Martin Willi 6367de28ad Added a left/rightcertpolicy keyword to specify certificatePolicy requirements 2011-01-07 15:51:35 +01:00
Martin Willi 6c302616f1 Added a tfc ipsec.conf keyword to control Traffic Flow Confidentiality 2010-12-20 09:45:39 +01:00
Andreas Steffen 0bc5547d0c *** HISTORICAL MOMENT: IKEv2 becomes the default! *** 2010-10-09 20:46:55 +02:00
Tobias Brunner 0a1233e642 Moved man pages for config files to a separate directory. 2010-09-10 12:01:19 +02:00
Tobias Brunner 3255e489be Of course, mark is also supported by pluto. 2010-09-06 12:04:26 +02:00
Tobias Brunner a674c79a37 mark_in and mark_out are also supported by pluto. 2010-09-06 11:53:59 +02:00
Tobias Brunner ddc961c369 Fixed left-/rightnexthop ipsec.conf options. 2010-09-03 11:47:42 +02:00
Tobias Brunner b5be105aaf pluto: Added support for statically configured reqids. 2010-09-02 19:04:25 +02:00
Tobias Brunner a0d13f42e6 starter: Some whitespace cleanup. 2010-09-02 19:04:25 +02:00
Tobias Brunner eeca1b0466 pluto: Removed references to KLIPS from documentation, log messages and comments. 2010-09-02 19:04:24 +02:00
Tobias Brunner 08c0d340b8 Moved ipsec_transform_t to kernel_ipsec.h in libhydra. 
Because of this libfreeswan, pluto, starter etc. now depend on that
file (and libhydra). This resolved some duplicate declarations.
 2010-09-02 19:01:25 +02:00
Martin Willi 64d7b0733f Added support for the ipsec.conf aaa_identity keyword 2010-08-31 17:52:52 +02:00
Martin Willi f13a03add0 Moved EAP type/code definitions to a seprate header file in libstrongswan 2010-08-31 15:35:29 +02:00
Andreas Steffen 87799b0c00 moved eap_from_string() fomr libcharon to libstrongswan to make it available in starter 2010-08-13 15:07:53 +02:00
Andreas Steffen 4412ee86c5 recognize eap-ttls method 2010-08-12 23:58:54 +02:00
Martin Willi 2107953804 Added EAP-TLS plugin stub 2010-08-03 15:39:24 +02:00
Waldemar Brodkorb 45e962edef substitute obsolete function calls(bzero/index) 2010-08-01 21:20:15 +02:00
Andreas Steffen ff090f8781 check for mark changes in ipsec update 2010-07-17 09:13:48 +02:00
Andreas Steffen 3de510ca43 Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option 2010-07-15 06:29:26 +02:00
Martin Willi 83b957107f Revert "Warn about manual plugin load directives for pluto/charon" 
This reverts commit 5c46726d0d.
 2010-07-14 07:17:16 +02:00
Martin Willi 5c46726d0d Warn about manual plugin load directives for pluto/charon 2010-07-13 14:43:45 +02:00
Andreas Steffen d5f29da3d2 added mark, mark_in, and mark_out to the ipsec.conf.5 man page 2010-07-13 09:15:53 +02:00
Andreas Steffen db4ad736be transport reqid, mark_in and mark_out in whack message 2010-07-09 12:19:39 +02:00