Commit Graph
136 Commits
Author SHA1 Message Date
Martin Willi 56d461a1f1 listing routed connection in statusall 2009-05-08 10:04:00 +02:00
Martin Willi 8c99451ae1 make use of the new trap-manager 2009-05-08 10:03:58 +02:00
Martin Willi a8d938ca18 fixed removal of child configs
purge empty peer configs
2009-05-06 12:56:21 +02:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Martin Willi be0a03be64 set default CFLAGS globally, including -Wno-format 2009-04-27 11:34:07 +00:00
Martin Willi 7f56b49461 attribute_manager supports attribute_handler's to handle configuration attributes via plugins
moved resolv.conf editing to a separate plugin (resolv_conf)
extended attribute_provider interface to hand out arbitrary attributes
  moved strongswan.conf based dns/nbns configuration to a plugin (attr)
2009-04-24 14:13:52 +00:00
Andreas Steffen 226308ebc4 l format modifier outputs garbage on 64 bit platforms 2009-04-22 10:43:39 +00:00
Andreas Steffen 08b2d288a1 scepclient and pluto use asn1 from libstrongswan 2009-04-20 20:53:38 +00:00
Andreas Steffen 3eb5042e9c migrated write_chunk() to chunk_write() 2009-04-20 06:58:00 +00:00
Andreas Steffen 63176bbcb0 moved strcaseeq() macro from constants.h to utils.h 2009-04-17 09:52:49 +00:00
Martin Willi a44bb9345f merged multi-auth branch back into trunk 2009-04-14 10:34:24 +00:00
Martin Willi 1490ff4d9b updated Doxyfile
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Tobias Brunner d25ce3701e printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms). 2009-03-12 18:07:32 +00:00
Tobias Brunner 9086102dfd memleak fixed when reading smartcard secrets 2009-03-12 15:12:11 +00:00
Martin Willi 7b2a032d28 stop searching other pools if lease successfully released 2009-03-03 14:43:53 +00:00
Andreas Steffen 77e7eede36 ipsec statusall <conn> also filters address pools 2009-03-03 10:30:59 +00:00
Tobias Brunner 73883705bd force unique connections for mediation connections 2009-02-18 19:48:11 +00:00
Andreas Steffen 6f1271855b [4859] caused crash when handling the %config case 2009-02-11 22:39:35 +00:00
Andreas Steffen 392f0e9446 corrected syntax 2009-02-11 16:45:14 +00:00
Andreas Steffen a584a231b1 fixed a 64-bit issue with time_t printf hooks 2009-02-11 16:37:16 +00:00
Martin Willi b81d8cd3cc changed [4856] to dynamically choose traffic selector family 2009-02-11 13:09:52 +00:00
Martin Willi 8837080353 respect family when assigning pool addresses 2009-02-11 12:50:04 +00:00
Andreas Steffen c59825fbfc support of dynamic/128 and %any6 2009-02-05 22:13:48 +00:00
Andreas Steffen eeb1e2259d output pool name string rather than pool pointer 2009-01-28 00:37:11 +00:00
Andreas Steffen 67701cfdce fixed broken listing of connections in ipsec statusall 2009-01-14 08:10:16 +00:00
Andreas Steffen 01a8b40b99 fixed two bugs introduced by the stroke ip pool refactoring 2009-01-08 21:34:44 +00:00
Martin Willi 6b83549d1a list assigned leases using "ipsec leases" 2008-12-10 13:00:02 +00:00
Martin Willi ed2bcd0315 added IKE_SA established timer to "ipsec statusall" 2008-12-10 09:59:35 +00:00
Martin Willi 2e03196551 list pools and usage in ipsec statusall 2008-12-09 13:24:12 +00:00
Martin Willi adf9965272 extended stroke in-memory pool to use hash-tables
supports online/offline leases
	properly reassign addresses to identities
2008-12-09 13:23:42 +00:00
Martin Willi 876d5c63a3 pass identity to release_address(), allows providers to do a lookup by id 2008-12-05 09:40:50 +00:00
Tobias Brunner 83c42156a2 add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg. 2008-12-03 10:12:20 +00:00
Andreas Steffen ad60c249b6 show TRANSPORT_PROXY mode in ipsec status 2008-11-16 21:19:17 +00:00
Martin Willi 4252938811 dynamic logging configuration through strongswan.conf
fallback to existing ipsec.conf/stroke loglevel configuration
2008-11-11 10:52:37 +00:00
Andreas Steffen c117f24e61 renamed proxy to proxy_mode in stroke_msg.h 2008-11-11 07:28:52 +00:00
Andreas Steffen d487b4b727 preliminary support of Mobile IPv6 2008-11-11 06:37:37 +00:00
Martin Willi 27ed987ef7 wrapped all pthread_rwlock_t in profilable rwlock_t 2008-11-05 16:12:54 +00:00
Martin Willi e13389a7f7 got rid of deprecated create_iterator_locked() 2008-11-05 08:32:38 +00:00
Martin Willi 5dffdea1d7 added hooks for IKE and CHILD keymat 2008-10-30 12:58:54 +00:00
Martin Willi 80853d8498 moved CHILD_SA key derivation to keymat_t
passing key chunks to CHILD_SA, not the PRF
2008-10-29 16:06:16 +00:00
Martin Willi 6a4ff35cc4 moved key derivation and management into keymat object
allows secured implementation of key management (e.g. in kernel or HW)
	only IKE keys for now
2008-10-28 16:07:06 +00:00
Martin Willi 3c8234d408 store IKE proposal implicitly during derive_keys 2008-10-28 10:12:21 +00:00
Martin Willi 20fb671904 fixed reauthentication time in statusall 2008-10-28 09:41:33 +00:00
Martin Willi 85ac2fa547 use more generic stats getter, introducing new stats 2008-10-27 14:51:00 +00:00
Martin Willi a1db79b31a fixed some compiler warnings 2008-10-27 11:13:33 +00:00
Martin Willi 82d20c0588 additional getters for ipcomp and UDP encap 2008-10-24 09:51:48 +00:00
Martin Willi 6e10aeadab more CHILD_SA refactorings 2008-10-24 08:02:35 +00:00
Martin Willi 1df106bf39 cache keys for in and outbound ESP SAs
removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t)
creating TS pairs dynamically using create_policy_enumerator()
2008-10-15 12:24:44 +00:00
Martin Willi 9f4e5f8c47 store ESP keys in CHILD_SA 2008-10-15 08:37:56 +00:00