denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,826 Commits 1 Branch 0 Tags
68447302d62cb57f792da4e5f2f1bbf11c1c8ccb
Commit Graph
6826 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner 68447302d6 Typo fixed. 2011-04-28 12:50:30 +02:00
Andreas Steffen 7d39f3e1b9 log unsupported IMC_IMV message types 2011-04-28 02:27:08 +02:00
Andreas Steffen e7f21e33b1 list registered TNCCS message types 2011-04-28 01:35:45 +02:00
Tobias Brunner 67ec2be665 IKEv2 was only partially the default for connections with auto=route and auto=start. 
Connections with auto=route and auto=start that did not have
keyexchange=ikev2 explicitly specified did get added to charon,
but did not get routed or started by charon.
 2011-04-27 11:33:06 +02:00
Tobias Brunner cce8f65232 Fixed two typos in kernel-pfroute plugin. 2011-04-26 17:58:39 +02:00
Andreas Steffen 8af1e3606b fixed loop error in parsing of OCSP basic responses 2011-04-26 12:32:19 +02:00
Andreas Steffen 6ab1a83059 Migrated eap_sim_file to INIT/METHOD macros 2011-04-22 11:30:42 +02:00
Andreas Steffen 406051ea4e fixed segmentation fault due to null pointer 2011-04-22 10:11:16 +02:00
Andreas Steffen 4b06f9f265 debug type is EAP_TLS 2011-04-21 21:04:11 +02:00
Andreas Steffen 2778b6644b do not include length field in non-fragmented EAP-PEAP packets 2011-04-21 19:52:49 +02:00
Andreas Steffen c223ccd174 Win 7 accepts compressed EAP Identity request 2011-04-21 19:52:49 +02:00
Andreas Steffen 20c428b670 added level 3 debug output of forwarded EAP payloads 2011-04-21 19:52:49 +02:00
Martin Willi f9a552f011 Resolve and connect to RADIUS servers not before required 2011-04-21 14:01:25 +02:00
Martin Willi 5b0bcfb1fc Revert alloc_str changes 
This reverts commit fdead26ffe.
This reverts commit 3e2419ebe3.
This reverts commit 17ce69b47a.
 2011-04-21 13:35:31 +02:00
Martin Willi fdead26ffe If key not found, strdup default value, too 2011-04-21 10:57:17 +02:00
Martin Willi 3e2419ebe3 Use thread save settings alloc_str function where appropriate 2011-04-21 10:48:16 +02:00
Martin Willi 17ce69b47a Added a thread save, allocating settings get_str variant called alloc_str 2011-04-21 10:10:26 +02:00
Martin Willi 6d41218ced Be a little more liberal in checking maximum payload count 2011-04-20 15:15:00 +02:00
Martin Willi f7aca91603 Accept IKE_SA_INIT responses without CERTIFICATE_REQUESTs 2011-04-20 15:04:02 +02:00
Martin Willi 4778655726 Cast size_t len arguments to %.*s to int 2011-04-20 13:08:32 +02:00
Martin Willi 52846ec820 Remove superfluous test for peer_cfg on established IKE_SAs 2011-04-20 12:31:29 +02:00
Martin Willi 94c0e8346a Added charon.replay window to strongswan.conf.5 2011-04-20 12:26:58 +02:00
Martin Willi 378219546c Updated ipsec.conf.5 with new ESN options 2011-04-20 12:26:58 +02:00
Martin Willi d3d21c29db Add NEWS for ESN/custom replay window support 2011-04-20 12:26:58 +02:00
Martin Willi 98788537be Synchronize ESN support in HA plugin 2011-04-20 12:26:58 +02:00
Martin Willi 390b38b8c9 Add NO_EXT_SEQ_NUMBER to proposal only if it has not been specified in string 2011-04-20 12:26:58 +02:00
Martin Willi f8b26c452a Added proposal keywords for ESN support 2011-04-20 12:26:58 +02:00
Martin Willi bd01b9d8b2 Install ESN SAs if such a proposal has been negotiated 2011-04-20 12:26:58 +02:00
Martin Willi 05e9589783 Copy ESN enabled replay state during update_sa, if supported 2011-04-20 12:26:58 +02:00
Martin Willi ee8c89e2ee Add ESN support to kernel netlink plugin, including custom replay windows 2011-04-20 12:26:58 +02:00
Martin Willi 4876d4f3b3 Added an esn parameter to the kernel interface add_sa functions 2011-04-20 12:26:57 +02:00
Martin Willi f7925cad04 Updated copy of linux/xfrm.h to 2.6.39, featuring ESN support 2011-04-20 12:26:57 +02:00
Tobias Brunner dd0696ec8e Use strncpy when reading smartcard keyids from ipsec.secrets. 2011-04-19 18:00:16 +02:00
Tobias Brunner 6e0c82141f pluto: Replaced some strcpy usages with strncpy. 2011-04-19 17:35:57 +02:00
Tobias Brunner 81b598ca5f openac: --out is a mandatory argument. 2011-04-19 17:35:57 +02:00
Tobias Brunner 2bf1d44f7b openac: Fixed potential overflow while reading passphrase. 2011-04-19 13:48:51 +02:00
Tobias Brunner 68e9275134 openac: Make sure path is null-terminated. 2011-04-19 13:48:51 +02:00
Tobias Brunner 2653c08513 pluto: Make sure connection name is null-terminated during DPD restart. 2011-04-19 13:48:51 +02:00
Tobias Brunner f36a6ebd30 starter: Make sure interface name is null-terminated. 2011-04-19 13:48:51 +02:00
Tobias Brunner e0d388f2e3 Use proper return value for ietf_attr_t.compare. 2011-04-19 13:48:50 +02:00
Tobias Brunner e78c915241 scepclient: Proper handling of multiple received certificates. 2011-04-19 13:48:50 +02:00
Tobias Brunner 00b9f755f8 pool: Proper cleanup in error cases when adding addresses from a file. 2011-04-19 13:48:50 +02:00
Tobias Brunner e5143952f0 pool: Proper handling of address family when adding addresses. 2011-04-19 13:48:50 +02:00
Tobias Brunner a5543f99e4 Added missing return in iterator_t.insert_before of linked_list_t. 2011-04-19 13:48:50 +02:00
Tobias Brunner 75cf0cc012 pluto: Clarified parsing of long durations. 2011-04-19 13:48:50 +02:00
Tobias Brunner 1c004bebd8 Clearly mark switch cases that fall through. 2011-04-19 13:48:50 +02:00
Tobias Brunner 119fc2d3d7 Added missing break statement. 2011-04-19 13:48:50 +02:00
Tobias Brunner 73ac1f2040 pluto: Avoid potential null-pointer dereference when checking CRLs. 2011-04-19 13:48:50 +02:00
Tobias Brunner a61b696380 pluto: Added missing PF_KEY debug messages. 
libfreeswan does not use the version of the PF_KEY header file provided
in src/include/linux so this list is not exactly up to date.
 2011-04-19 13:48:50 +02:00
Tobias Brunner f526b35c45 Properly copy interface name if unknown. 
We use a static string if the interface name is unknown, so using memcpy
with IFNAMSIZ is incorrect as that would overrun the static string.
 2011-04-19 13:48:50 +02:00