Tobias Brunner
617e59b7bc
Portably check for IPSEC_* constants (defined in ipsec.h).
...
The problem is that FreeBSD defines them as #defines whereas Linux defines them as enums.
2009-05-20 20:15:06 +02:00
Martin Willi
a13c013b6f
include TSi/TSr of triggering packet in acquire
2009-05-20 11:44:43 +02:00
Andreas Steffen
e36c67aca4
same format as IKEv1
2009-05-19 22:12:29 +02:00
Martin Willi
c6c842e9ad
added Debian specific packaging files to NM applet
2009-05-19 14:01:40 +02:00
Martin Willi
bf9e1d4444
new NM applet release 1.1.1
2009-05-19 14:01:39 +02:00
Martin Willi
ef56ba51d4
fixed compiler warnings
2009-05-19 12:23:21 +02:00
Martin Willi
f920bd1861
replaced deprecated g_strcasecmp()
2009-05-19 12:23:21 +02:00
Martin Willi
9e2d7f962f
updated build system to newer autotool/gnome conventions
2009-05-19 12:23:20 +02:00
Martin Willi
39ded7128c
do not write to unaligned memory in MSCHAPv2
2009-05-18 14:41:16 +02:00
Martin Willi
24cd2ca6ee
moved very stroke specific x509 flag handling out of core library
2009-05-18 10:42:16 +02:00
Andreas Steffen
7b72af2eba
another lease identity to be single-quoted
2009-05-16 11:05:15 +02:00
Martin Willi
0ed6b7a7d7
If the NM gateway certificate has the CA constraint set, we use the gateway address as its identity.
...
To allow the same certificate deployment for Windows 7 and NetworkManager clients,
the NM plugin now accepts CA certificates. To prevent any certificate holder
to act as a gateway, we bind the identity to the entered gateway address. The
gateways certificate therefore must contain the IP/DNS of the gateway
as subjectAltName.
2009-05-15 16:35:14 +02:00
Martin Willi
d4b403e2f3
updated glade dialog, using tooltip instead of tooltip_text
2009-05-15 16:04:07 +02:00
Martin Willi
6b967fb762
implemented save_secrets hook to avoid crash
2009-05-15 16:04:07 +02:00
Martin Willi
a61395676f
added .gitignore files to NM applet
2009-05-15 15:33:19 +02:00
Martin Willi
832427064c
added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA
2009-05-15 11:02:56 +02:00
Martin Willi
5cb3210acf
stroke accepts "down conn1{*}/[*]" to delete all CHILD/IKE_SAs using a given config
2009-05-15 10:18:43 +02:00
Tobias Brunner
7cdb1ddf08
Mac OS X doesn't have SADB_X_AALG_AES_XCBC_MAC
2009-05-14 17:38:36 +02:00
Tobias Brunner
9f090745cf
added another possible location for the ipsec.h header file
2009-05-14 17:38:32 +02:00
Martin Willi
c296e51c40
added eap_start option to radius plugin
...
EAP-Start sends an empty EAP message to initiate EAP conversation
before doing EAP-Identity.
2009-05-14 14:14:29 +02:00
Martin Willi
9dd2b42728
do not report increasing rekey times if rekeying currently active
2009-05-12 10:56:49 +02:00
Andreas Steffen
20da0b5ca5
quote identities
2009-05-11 22:07:49 +02:00
Martin Willi
496064ba45
hand out a IPv4 virtual address if %any6 is requested
2009-05-11 13:33:55 +02:00
Martin Willi
5775283f8b
updated MSK calculation in MSCHAPv2, compatible with Win7/2008 RC.
2009-05-11 10:42:53 +02:00
Martin Willi
c3626c2ce6
initiate trapped CHILD_SAs with same reqid
2009-05-08 10:04:00 +02:00
Martin Willi
56d461a1f1
listing routed connection in statusall
2009-05-08 10:04:00 +02:00
Martin Willi
8c99451ae1
make use of the new trap-manager
2009-05-08 10:03:58 +02:00
Martin Willi
be85459323
announce EAP method initiation once only
2009-05-07 11:11:56 +02:00
Martin Willi
84f1164c77
some additional .gitignore's
2009-05-07 10:33:30 +02:00
Martin Willi
a8d938ca18
fixed removal of child configs
...
purge empty peer configs
2009-05-06 12:56:21 +02:00
Tobias Brunner
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
Tobias Brunner
d24a74c5b4
merging changes from portability branch back to trunk
...
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Andreas Steffen
f67eebccc8
changed RNG_REAL to RNG_TRUE
2009-04-29 09:13:20 +00:00
Martin Willi
18eef5d6b6
added support for AES counter mode in ESP
...
proposal keywords: aes128ctr aes192ctr aes256ctr
2009-04-27 12:16:52 +00:00
Martin Willi
be0a03be64
set default CFLAGS globally, including -Wno-format
2009-04-27 11:34:07 +00:00
Martin Willi
12c8c3c4be
fixed nbns handling, missing break
2009-04-27 10:48:49 +00:00
Martin Willi
3ab0e8a04b
nm plugin handles DNS/NBNS configuration attributes
2009-04-27 09:38:31 +00:00
Martin Willi
7f56b49461
attribute_manager supports attribute_handler's to handle configuration attributes via plugins
...
moved resolv.conf editing to a separate plugin (resolv_conf)
extended attribute_provider interface to hand out arbitrary attributes
moved strongswan.conf based dns/nbns configuration to a plugin (attr)
2009-04-24 14:13:52 +00:00
Andreas Steffen
226308ebc4
l format modifier outputs garbage on 64 bit platforms
2009-04-22 10:43:39 +00:00
Martin Willi
6554b5e412
schedule_job uses seconds to support time values larger than 49 days
...
added schedule_job_ms for ms resolution events
2009-04-21 15:16:56 +00:00
Andreas Steffen
08b2d288a1
scepclient and pluto use asn1 from libstrongswan
2009-04-20 20:53:38 +00:00
Andreas Steffen
3eb5042e9c
migrated write_chunk() to chunk_write()
2009-04-20 06:58:00 +00:00
Martin Willi
c04e75487f
added ike_rekey/child_rekey options to load-tester
2009-04-17 12:30:56 +00:00
Andreas Steffen
63176bbcb0
moved strcaseeq() macro from constants.h to utils.h
2009-04-17 09:52:49 +00:00
Andreas Steffen
247e665a44
support of the ESP CAMELLIA-CBC cipher by charon
2009-04-17 09:15:15 +00:00
Martin Willi
5cac9e4c34
fixed some newline encodings
2009-04-16 14:00:14 +00:00
Martin Willi
0bd7ad6cff
added create_part_enumerator() to indentity, allows to enumerate RDNs etc.
2009-04-14 14:32:22 +00:00
Martin Willi
a44bb9345f
merged multi-auth branch back into trunk
2009-04-14 10:34:24 +00:00
Martin Willi
9d1bd18243
require Message-Authenticator attribute only if we have a EAP-Message
2009-03-27 13:25:34 +00:00
Martin Willi
510be1a32a
reserve a socket only during request(), avoids thread pool starvation
...
reduced thread pool default to 1
2009-03-27 10:52:22 +00:00
Tobias Brunner