denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,752 Commits 1 Branch 0 Tags
7613a68f33d0e233fdfcb217fa4cf5839ba102d1
Commit Graph
85 Commits
Author SHA1 Message Date
Tobias Brunner 71baf5a8f0 Adding support for AES GMAC (RFC4543). 2010-02-12 10:57:39 +01:00
Tobias Brunner 89ec5bef08 Whitespace cleanup. 2009-12-23 17:03:41 +01:00
Tobias Brunner 4a5a5dd290 Using the thread wrapper in charon, libstrongswan and their plugins. 2009-12-23 17:03:41 +01:00
Tobias Brunner eba64cef41 Separated the public interfaces of the threading primitives. 2009-12-23 17:01:53 +01:00
Tobias Brunner 14f7091280 Moved mutex.c to a separate folder in order to cleanly wrap other threading primitives (and utils/mutex.h is now threading.h). 2009-12-23 17:00:58 +01:00
Martin Willi 6ec949e022 Fixed BEET mode by installing SAs with negotiated address in traffic selector 2009-12-17 10:52:07 +01:00
Martin Willi fc85786921 Install v6 routes via outgoing interface for now 2009-12-14 14:44:24 +01:00
Andreas Steffen 4b615edab4 some code optimizations 2009-12-09 00:24:42 +01:00
Martin Willi 2b2c69e992 Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP header 2009-11-26 16:03:06 +01:00
Martin Willi 6780edc07e Use full algorithm name for SHA384/512 HMACs 2009-11-26 10:39:26 +01:00
Martin Willi 6546482a68 Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keyword 2009-11-26 10:39:25 +01:00
Martin Willi eebfa73fd5 Install SHA256_128 auth algorithm with specified 128 bit truncation 2009-11-26 10:39:25 +01:00
Martin Willi 5be75c2cb1 Added support for IPv6 source route installation 2009-11-26 10:31:00 +01:00
Martin Willi 67c3875c02 Install bypass policies after creating XFRM netlink socket, loading xfrm_user module 2009-11-09 15:07:00 +01:00
Martin Willi 4a38687ae7 Use XFRM instead of PF_KEY IKE bypass policies in netlink based kernel interface 2009-10-30 11:19:32 +01:00
Martin Willi 4b1cd5a367 Reenabled acq_expires SA timer using rekey timeout 
While not using a SA expiration for allocating SPIs works fine,
the situation is much more problematic for kernel-created temporary
SAs from acquires. If the negotiation of such a CHILD_SA fails,
the created temporary SA can not be deleted.
 2009-10-07 13:09:59 +02:00
Martin Willi 0406ed7a16 Fixed a crash in source address lookup 2009-09-23 11:18:30 +02:00
Martin Willi 4a03e85b37 Fixed nexthop lookup, used by source route installation 2009-09-16 13:55:32 +02:00
Martin Willi 36b7ba5ee3 Use continue to advance to next iteration 2009-09-16 13:32:47 +02:00
Martin Willi b7b5653386 Use macros to define --with options 2009-09-07 15:00:45 +02:00
Martin Willi 7b3814f75d remove spaces before tabs at the beginning of lines (^( )+\t) 2009-09-04 15:02:11 +02:00
Martin Willi b9b8a98f47 remove spaces within tabs (\t( )+\t) 2009-09-04 15:00:19 +02:00
Martin Willi 323f9f990f replaces four spaces by tabs, where appropriate 2009-09-04 14:50:23 +02:00
Martin Willi 7daf5226b7 removed trailing spaces ([[:space:]]+$) 2009-09-04 13:46:09 +02:00
Martin Willi d176994235 Use recursive source address lookup if we get a gateway only 2009-09-03 14:46:39 +02:00
Tobias Brunner e75f423753 Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static. 2009-09-01 12:54:33 +02:00
Tobias Brunner 1087b9cebb Set the packet and byte limits in the netlink and pfkey kernel interfaces. 2009-09-01 12:53:44 +02:00
Tobias Brunner 888af96343 Adapted the kernel interfaces to the new lifetime configuration. 2009-09-01 12:53:13 +02:00
Martin Willi 6180a55852 use time_monotonic() instead of time() for statistics and time difference calculations 2009-08-31 18:00:28 +02:00
Martin Willi de5784452b use time_monotonic() instead of gettimeofday() for time difference calculations 2009-08-31 15:25:03 +02:00
Martin Willi 469083cc7d disable lifetimes of allocated SPIs 
The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine.
 2009-08-25 18:15:25 +02:00
Tobias Brunner 3901937d14 OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t. 2009-08-14 13:30:59 +02:00
Andreas Steffen 8ddcac4c48 prepare CAMELLIA_CCM ESP encryption 2009-08-10 16:30:42 +02:00
Andreas Steffen 2ad51539f6 display transmitted bytes per SA 2009-07-30 21:33:19 +02:00
Andreas Steffen c5ebd00517 put variable definitions up front 2009-07-12 00:05:42 +02:00
Martin Willi 00fcc0f8f3 added -avoid-version to LDFLAGS, plugins are not versioned 2009-07-03 08:57:11 +02:00
Martin Willi 9474a0d90c added a charon.install_virtual_ip option to disable IP installation for testing 2009-06-02 13:45:29 +02:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk 
important change for developers: %Y replaces %D to print identities!
 2009-04-30 11:37:54 +00:00
Martin Willi 18eef5d6b6 added support for AES counter mode in ESP 
proposal keywords: aes128ctr aes192ctr aes256ctr
 2009-04-27 12:16:52 +00:00
Martin Willi 6554b5e412 schedule_job uses seconds to support time values larger than 49 days 
added schedule_job_ms for ms resolution events
 2009-04-21 15:16:56 +00:00
Andreas Steffen 247e665a44 support of the ESP CAMELLIA-CBC cipher by charon 2009-04-17 09:15:15 +00:00
Martin Willi 1490ff4d9b updated Doxyfile 
properly close all doxygen groups
fixed remaining doxygen warnings
 2009-03-24 17:43:01 +00:00
Andreas Steffen 37fbc74121 hiding XFRM message names from netlink 2009-01-09 09:37:13 +00:00
Andreas Steffen 40d9388037 renamed chunk 2009-01-09 08:51:41 +00:00
Andreas Steffen 88db1fa3b4 refactored DBG3 output of sent XFRM messages 2009-01-09 08:46:31 +00:00
Andreas Steffen abc177e035 DBG3 output of sent XFRM messages 2009-01-09 08:27:17 +00:00
Tobias Brunner 0dbd9788e5 initial size of 1 is nonsense 2008-12-10 13:45:05 +00:00
Martin Willi 19e0010f51 hashtable enumerator enumerates over both, key and values 2008-12-05 10:01:52 +00:00
Tobias Brunner 3fb404d8da implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead of a linked list. 2008-12-04 16:46:08 +00:00