denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
819 Commits 1 Branch 0 Tags
50f98119ddc495ae7dddad5169c39bbd1aa3b63c
Commit Graph
22 Commits
Author SHA1 Message Date
Martin Willi a2a3fb3e25 workaround for peers rekeying at the same time 
loading lifetime policies from ipsec.conf
 2006-06-12 07:33:20 +00:00
Martin Willi b543bef50c improved kernel interface logging 2006-06-09 08:41:41 +00:00
Martin Willi 5c131a016b specifying keysize in bits, as it is required in IKEv2 
added generic kernel SA algorithm handling, which brings us:
        aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
 2006-06-09 07:31:30 +00:00
Andreas Steffen b7f9ca5837 added support for leftsendcert= and left|rightca= parameters 2006-06-09 05:50:41 +00:00
Martin Willi 5238c9afef fixed compile warnings when using -Wall 
further CHILD_SA rekeying work done:
	creation of a new CHILD_SA on a expire from a kernel works
	delete of old CHILD_SA still missing
	some issues when both initiate rekeing
 2006-06-08 14:20:05 +00:00
Martin Willi 8d77eddec2 further work for rekeying: 
get liftimes from policy
  added new state
  initiation of rekeying done
proposal redone:
  removed support for AH+ESP proposals
 2006-06-07 13:26:23 +00:00
Martin Willi 32b6500fbf job management: 
moved job code from thread_pool to job, jobs have an "execute" method now
  added two new jobs: delete_child_sa & rekey_child_sa
kernel interface:
  listens now for ACQUIRE & EXPIRE
  supports hard and soft lifetimes
  fires jobs for delete and rekey child sa
ike sa manager:
  can checkout IKE SAs by requid of owned CHILD SAs
we have now the infrastructure to do the rekeying... :-)
 2006-05-31 14:23:15 +00:00
Andreas Steffen 6848dac603 minimized prefixed on stroke logger output 2006-05-31 05:50:04 +00:00
Andreas Steffen e1c00b96a6 list ca certificates 2006-05-30 07:48:29 +00:00
Martin Willi 139ce7871f - fixed memleak when deleting a connection 2006-05-29 11:29:23 +00:00
Martin Willi 9fe14f4b8a - policies contain a connections name now 
- used for initiate and delete
- connections won't get initiated twice anymore
- deleting of connections is now possible, which allows us to use
  ipsec update and ipsec reload
 2006-05-29 11:09:45 +00:00
Andreas Steffen ecadab2ba7 stroke now uses constant size string buffer 2006-05-29 07:14:57 +00:00
Martin Willi 3a13a78084 - handle IKE_SA setup without a piggy-packed CHILD_SA 
more IKEv2 conform
 2006-05-24 09:05:21 +00:00
Martin Willi 8b5be79d83 - show connection templates in status & statusall 
- don't complain on termination of IKEv1 connections
 2006-05-23 13:25:57 +00:00
Martin Willi 7ba69503aa - changed config load strategy: 
starter loads both connections in charon & pluto,
  charon ignores anything with keyexchange!=ikev2.
  pluto needs the same behavior.
 2006-05-23 10:07:02 +00:00
Andreas Steffen 96b82ed821 load_end_certificate() now loads certificates 2006-05-23 08:16:15 +00:00
Martin Willi 4a5bba25e2 - reimplemented proper IKE SA deletion using a seperate state, 
should conform now to IKEv2
 2006-05-23 08:01:49 +00:00
Martin Willi 7881ac141e - applied patch from the NAT-T team fixing several typos 2006-05-19 06:46:22 +00:00
Martin Willi 86a7937b45 - applied patch from andreas, which allows certificate listing via stroke 2006-05-19 06:44:08 +00:00
Martin Willi b5e1560659 - applied andreas's patch 
- logger output improvements
  - testin gupdates
  - and a lot more
 2006-05-18 06:02:28 +00:00
Martin Willi f2c2d395ff - introduced autotools 
- first working version
  - make dist should work
  - things to do:
    - UML testing!
    - more cleanups
 2006-05-16 14:24:03 +00:00
Martin Willi b8577029d1 2006-05-10 08:02:49 +00:00