denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,063 Commits 1 Branch 0 Tags
4f9c691adbb0763d59b3f58f5bbd3dbb36748a76
Commit Graph
7063 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner 4f9c691adb Replaced pkcs7_t.create_certificate_iterator with enumerator. 
The method is currently not used.
 2011-07-06 09:43:45 +02:00
Tobias Brunner e26304348c Replaced simple iterator usages. 2011-07-06 09:43:45 +02:00
Tobias Brunner 28623fc538 "this" removed from comments. 2011-07-06 09:43:45 +02:00
Tobias Brunner f0ba8ae042 Record the history of a policy installed in the kernel. 
This allows to properly delete a policy e.g. if reauth=yes and
auto=route, because reqids are increased during reauthentication.

It also avoids overriding an installed policy with a trap policy.
 2011-07-06 09:43:45 +02:00
Tobias Brunner 328f22e1d3 Add the reqid to kernel_ipsec_t.del_policy. 2011-07-06 09:43:45 +02:00
Tobias Brunner 0b6ff2a9fe Added a replace function to linked_list_t. 2011-07-06 09:43:45 +02:00
Tobias Brunner fbf014b0c1 Added an insert_after and insert_before function to linked_list_t. 2011-07-06 09:43:45 +02:00
Tobias Brunner 178760012c Migrated linked_list_t to INIT/METHOD macros. 2011-07-06 09:43:45 +02:00
Tobias Brunner 3ee8fed445 Cache the most recent reqid in the PF_KEY kernel interface. 
This makes the PF_KEY kernel interface behave the same as the Netlink
kernel interface.
 2011-07-06 09:43:45 +02:00
Andreas Steffen 1f3b5c7778 corrected description of shunt-policies scenario 2011-07-05 22:07:42 +02:00
Andreas Steffen 06b5b61838 install PASS and DROP shunt policies via PFKEYv2 interface 2011-07-05 21:57:45 +02:00
Tobias Brunner a7edbd219f Added news about library dir change. 2011-07-05 15:26:50 +02:00
Tobias Brunner 60d62b9e5c Don't install the libraries directly in lib/. 
Instead use a subdirectory (prefix/lib/ipsec by default). Also moved the
plugins from libexec to a subdirectory of that dir.
 2011-07-05 14:42:14 +02:00
Andreas Steffen 9b2b434fe7 ignore ports of IPv4 and IPv6 loopback interfaces 2011-07-05 09:16:01 +02:00
Andreas Steffen 7fd120d5b6 fixed UTF-8 representation of polish reason string 2011-07-05 07:44:46 +02:00
Andreas Steffen 7dc1ff73c1 version bump to 4.5.3dr8 2011-07-05 07:37:36 +02:00
Andreas Steffen e1976a7120 delete orphan file 2011-07-04 23:02:06 +02:00
Andreas Steffen d6e40a3b91 start and stop apache server on dave 2011-07-04 22:40:46 +02:00
Andreas Steffen 0b0f36cc1a added ITA Scanner IMC/IMV pair to tnccs-11-radius-block scenario 2011-07-04 22:32:34 +02:00
Andreas Steffen e760e0ad23 fixed debug statement 2011-07-04 22:27:46 +02:00
Andreas Steffen 31479712b5 added ITA Scanner IMC/IMV pair to tnccs-20 and tnccs-20-block scenarios 2011-07-04 21:44:22 +02:00
Andreas Steffen d9cdab9249 added ITA Scanner IMC/IMV pair which detects open server ports on TNC clients 2011-07-04 21:40:25 +02:00
Andreas Steffen 956759533f added support if the IETF port filter attribute 2011-07-01 18:10:33 +02:00
Andreas Steffen 294c25fa60 again a bitwise or is required 2011-06-30 22:26:36 +02:00
Andreas Steffen d6b6a1615e version bump to 4.5.3dr7 2011-06-29 16:51:33 +02:00
Andreas Steffen c755c365d7 fixed sql/shunt-policies scenario 2011-06-29 08:23:58 +02:00
Andreas Steffen f87991704e implemented PASS and DROP shunt policies 2011-06-28 19:42:54 +02:00
Martin Willi 6a5c8ee7a5 Initialize trap_manager listener with INIT macro, too 2011-06-28 17:19:20 +02:00
Andreas Steffen 06356a2981 Migrated trap_manager_t to INIT/METHOD macros 2011-06-28 14:42:29 +02:00
Andreas Steffen 32af7f32ea version bump to 4.5.3dr6 2011-06-27 22:35:20 +02:00
Andreas Steffen 9d997f31f1 oops, should have been a bitwise and 2011-06-25 14:57:49 +02:00
Andreas Steffen cb14d7379f fixed copy-and-paste error 2011-06-25 14:21:20 +02:00
Andreas Steffen b324976aa1 output all known PA-TNC subtype names 2011-06-24 17:31:47 +02:00
Andreas Steffen 535f5d8a10 added tnc/tnccs-20-server-retry scenario 2011-06-23 19:59:27 +02:00
Andreas Steffen 6b57728cce renamed tncss-20-retry scenario to tnccs-20-client-retry 2011-06-23 19:59:00 +02:00
Andreas Steffen 7401269517 refactoring of change_state() 2011-06-23 19:52:30 +02:00
Andreas Steffen 315c554571 implemented server-initiated handshake retry in IMC/IMV Test pair 2011-06-23 15:23:53 +02:00
Andreas Steffen 43af575002 notify IMVs about handshake retries 2011-06-23 15:22:41 +02:00
Andreas Steffen 91a7703bc4 version bump to 4.5.3dr5 2011-06-19 23:27:43 +02:00
Andreas Steffen c8eb2dea04 added libimcv options to strongswan.conf 2011-06-18 14:08:37 +02:00
Andreas Steffen 4d1a31632a some cosmetics 2011-06-16 11:34:52 +02:00
Andreas Steffen ec1eab0319 fixed XML parsing of TNCCS 1.1 ReasonString message 2011-06-16 11:30:38 +02:00
Andreas Steffen 9368185260 restablish the lost links to the TNC@FHH project 2011-06-15 14:16:58 +02:00
Andreas Steffen f9b5d9ae9c fixed some descriptions 2011-06-15 14:07:16 +02:00
Andreas Steffen da73199fe5 added the tnc/tnccs-20-retry scenario 2011-06-15 14:06:48 +02:00
Andreas Steffen 26691de27f clear reason strings after delivering them 2011-06-15 13:53:53 +02:00
Andreas Steffen 96d0ff1237 implemented handshake retry on the client side 2011-06-15 13:09:41 +02:00
Martin Willi 6fe53bde24 We actually need to link against libz, as neo libraries are often static 
This reverts commit 3c0630a797.
 2011-06-15 12:23:21 +02:00
Martin Willi 38dc106cde Set cookies for the complete domain 2011-06-15 12:22:41 +02:00
Martin Willi 7804b7f420 Migrated libfast to INIT/METHOD macros 2011-06-15 11:25:53 +02:00