denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,806 Commits 1 Branch 0 Tags
52846ec820a0e936372e15fbf34b830e4cd8ccdb
Commit Graph
6806 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 52846ec820 Remove superfluous test for peer_cfg on established IKE_SAs 2011-04-20 12:31:29 +02:00
Martin Willi 94c0e8346a Added charon.replay window to strongswan.conf.5 2011-04-20 12:26:58 +02:00
Martin Willi 378219546c Updated ipsec.conf.5 with new ESN options 2011-04-20 12:26:58 +02:00
Martin Willi d3d21c29db Add NEWS for ESN/custom replay window support 2011-04-20 12:26:58 +02:00
Martin Willi 98788537be Synchronize ESN support in HA plugin 2011-04-20 12:26:58 +02:00
Martin Willi 390b38b8c9 Add NO_EXT_SEQ_NUMBER to proposal only if it has not been specified in string 2011-04-20 12:26:58 +02:00
Martin Willi f8b26c452a Added proposal keywords for ESN support 2011-04-20 12:26:58 +02:00
Martin Willi bd01b9d8b2 Install ESN SAs if such a proposal has been negotiated 2011-04-20 12:26:58 +02:00
Martin Willi 05e9589783 Copy ESN enabled replay state during update_sa, if supported 2011-04-20 12:26:58 +02:00
Martin Willi ee8c89e2ee Add ESN support to kernel netlink plugin, including custom replay windows 2011-04-20 12:26:58 +02:00
Martin Willi 4876d4f3b3 Added an esn parameter to the kernel interface add_sa functions 2011-04-20 12:26:57 +02:00
Martin Willi f7925cad04 Updated copy of linux/xfrm.h to 2.6.39, featuring ESN support 2011-04-20 12:26:57 +02:00
Tobias Brunner dd0696ec8e Use strncpy when reading smartcard keyids from ipsec.secrets. 2011-04-19 18:00:16 +02:00
Tobias Brunner 6e0c82141f pluto: Replaced some strcpy usages with strncpy. 2011-04-19 17:35:57 +02:00
Tobias Brunner 81b598ca5f openac: --out is a mandatory argument. 2011-04-19 17:35:57 +02:00
Tobias Brunner 2bf1d44f7b openac: Fixed potential overflow while reading passphrase. 2011-04-19 13:48:51 +02:00
Tobias Brunner 68e9275134 openac: Make sure path is null-terminated. 2011-04-19 13:48:51 +02:00
Tobias Brunner 2653c08513 pluto: Make sure connection name is null-terminated during DPD restart. 2011-04-19 13:48:51 +02:00
Tobias Brunner f36a6ebd30 starter: Make sure interface name is null-terminated. 2011-04-19 13:48:51 +02:00
Tobias Brunner e0d388f2e3 Use proper return value for ietf_attr_t.compare. 2011-04-19 13:48:50 +02:00
Tobias Brunner e78c915241 scepclient: Proper handling of multiple received certificates. 2011-04-19 13:48:50 +02:00
Tobias Brunner 00b9f755f8 pool: Proper cleanup in error cases when adding addresses from a file. 2011-04-19 13:48:50 +02:00
Tobias Brunner e5143952f0 pool: Proper handling of address family when adding addresses. 2011-04-19 13:48:50 +02:00
Tobias Brunner a5543f99e4 Added missing return in iterator_t.insert_before of linked_list_t. 2011-04-19 13:48:50 +02:00
Tobias Brunner 75cf0cc012 pluto: Clarified parsing of long durations. 2011-04-19 13:48:50 +02:00
Tobias Brunner 1c004bebd8 Clearly mark switch cases that fall through. 2011-04-19 13:48:50 +02:00
Tobias Brunner 119fc2d3d7 Added missing break statement. 2011-04-19 13:48:50 +02:00
Tobias Brunner 73ac1f2040 pluto: Avoid potential null-pointer dereference when checking CRLs. 2011-04-19 13:48:50 +02:00
Tobias Brunner a61b696380 pluto: Added missing PF_KEY debug messages. 
libfreeswan does not use the version of the PF_KEY header file provided
in src/include/linux so this list is not exactly up to date.
 2011-04-19 13:48:50 +02:00
Tobias Brunner f526b35c45 Properly copy interface name if unknown. 
We use a static string if the interface name is unknown, so using memcpy
with IFNAMSIZ is incorrect as that would overrun the static string.
 2011-04-19 13:48:50 +02:00
Tobias Brunner 82017bf417 pluto: from_state is strictly lower than STATE_IKE_ROOF. 2011-04-19 13:48:50 +02:00
Tobias Brunner c8bb9a2ec6 Fixed typo in unit-tester plugin. 2011-04-19 13:48:49 +02:00
Andreas Steffen a30e025901 support unstructuredAddress in left|rightid 2011-04-18 23:40:31 +02:00
Andreas Steffen 733813c7fb send an empty EAP Ack client message if TLS was successful and handle it on the server 2011-04-15 15:02:39 +02:00
Andreas Steffen ad5033a67c Windows 7 expects an uncompressed EAP Identity request 2011-04-15 15:02:39 +02:00
Martin Willi cf6ca6d729 Add plugin reloading NEWS 2011-04-15 13:05:02 +02:00
Martin Willi 2b3c87b49a Set broadcast flag in DHCP requests when sending broadcasts 2011-04-15 13:00:23 +02:00
Martin Willi 96409be320 Add reload support to attr plugin 2011-04-15 10:07:13 +02:00
Martin Willi 00b4b4b0d1 Migrated attr plugin to INIT/METHOD macros 2011-04-15 10:07:13 +02:00
Martin Willi f0331baf1a Added reload support to eap-radius plugin 2011-04-15 10:07:13 +02:00
Martin Willi 3b71d3d033 Reload strongswan.conf and plugins supporting reloading on SIGHUP 2011-04-15 10:07:13 +02:00
Martin Willi fd3c12bf06 Accept NULL files in load_files[_section] as we do in constructor 2011-04-15 10:07:13 +02:00
Martin Willi 32973044b0 Added a merge option to optionally reload files instead of merging them 2011-04-15 10:07:13 +02:00
Martin Willi ed49e9a303 Added plugin_loader method to reload plugin configurations 2011-04-15 10:07:13 +02:00
Martin Willi c55818ebb0 Added a (not yet implemented) plugin_t method to reload plugin configuration 2011-04-15 10:07:13 +02:00
Martin Willi 787b5884aa Added a get_name() function to plugin_t, create_plugin_enumerator enumerates over plugin_t 2011-04-15 10:07:12 +02:00
Martin Willi 6e2791715b Migrated remaining plugin_t implementations to INIT/METHOD macros 2011-04-15 10:07:12 +02:00
Martin Willi 2b36342551 Migrated plugin_loader to INIT/METHOD macros 2011-04-15 10:07:12 +02:00
Martin Willi 2db8b58f62 Continue without client authentication if no matching certificate found 2011-04-14 20:02:12 +02:00
Martin Willi 6a8f1a578f Ignore TLS certificate requests as peer if peer authentication disabled 2011-04-14 20:02:12 +02:00