denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,173 Commits 3 Branches 0 Tags
88d4acd4de2f556e86dabd1e12399ae3ce27ac5c
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 88d4acd4de proper cancellation of load-testing initiators 2008-11-23 11:17:30 +00:00
Martin Willi a20abb81e9 added a MODP_NULL Diffie Hellman group to avoid calculation overhead in load-testing 2008-11-22 16:14:55 +00:00
Martin Willi 8f45ece098 expecting int sized length arguments to chunk_split, as vararg functions use integers 2008-11-21 08:11:24 +00:00
Martin Willi fc3ef71fa7 fixed lock-profiler help message 2008-11-19 15:37:46 +00:00
Martin Willi 3aaf7908d1 refactored and cleaned up child_sa interface 
replaced add/update calls by a install() call
	allocating SPIs always externally
	support installation of non-allocated CHILD_SAs
	some other cleanups
 2008-11-19 15:31:27 +00:00
Martin Willi 0d1a57e496 setting default port of own address to have a proper fallback if src addr lookup fails 2008-11-18 10:10:36 +00:00
Martin Willi 32f59c56f1 consider interfaces we do not monitor as up (e.g. lo) 
fixes load-testing against 127.0.0.1
 2008-11-18 09:52:28 +00:00
Martin Willi 49653b6bc3 separated updown listener to its own class 
caching interface names to properly remove rules if interface has changed
 2008-11-17 09:29:27 +00:00
Martin Willi 21bf86f740 using aligned buffers for netlink 2008-11-14 14:23:11 +00:00
Martin Willi 32ec3c1a8b fallback to reauthentication if peer does not support CHILD_SA rekeying 2008-11-14 14:05:47 +00:00
Martin Willi dad8eceea3 fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SAS 2008-11-14 13:58:16 +00:00
Martin Willi 8d50c19833 also use correct encap parameter in PF_KEY 2008-11-14 13:15:26 +00:00
Martin Willi fd2ebf0cf9 fixed encap enabling in xfrm (using new encap state, not the old one) 2008-11-14 13:12:07 +00:00
Martin Willi fb6c8591a3 do not use a route if outgoing interface is down 
other cleanups
 2008-11-14 13:04:22 +00:00
Martin Willi a65e1c5c3a rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead! 2008-11-14 10:30:26 +00:00
Martin Willi f5812086f8 do not use public interface for functions which are local anyway 2008-11-14 09:38:49 +00:00
Martin Willi 65c907cd71 reset IKE_SA on bus during child_sa destruction 2008-11-14 08:38:53 +00:00
Martin Willi bbbe605fe3 updated API doc for socket.h 2008-11-13 07:48:27 +00:00
Martin Willi 8120943583 ported socket enumerator to raw-socket.c 
some cleanups in socket.c
 2008-11-13 07:15:45 +00:00
Martin Willi ce42db0921 BEET mode might want forwarding policies 2008-11-12 16:47:19 +00:00
Martin Willi e09481fb91 removed some obsolete includes 2008-11-12 16:10:34 +00:00
Martin Willi faf9569fdb moved ike_initiator flag to IKE_SAs condition bitfield 2008-11-12 16:07:17 +00:00
Martin Willi b8cbb6451c ported some hard-to-merge cherries back to trunk :-/ 
shame, svn, shame: this was ways to complicated
	we should consider a switch to git...
 2008-11-12 15:09:24 +00:00
Martin Willi 9fa5c75f48 fixing keylength bug at the right place: 
we usually don't touch output parameters if operations fails
 2008-11-12 08:27:48 +00:00
Martin Willi 479f295049 fixed compiler warnings issued by: 
gcc 4.3
	curl.h gcc type-checking
	glibc with enabled FORTIFY_SOURCE checking
 2008-11-11 18:37:19 +00:00
Martin Willi 3d2dbebd70 #defing out compress algs to avoid compiler warning 2008-11-11 18:35:10 +00:00
Martin Willi d94cadd69a updated method signature of add_policy 2008-11-11 18:33:48 +00:00
Martin Willi 4a537c9011 fixed compilation of medcli plugin 2008-11-11 15:20:25 +00:00
Martin Willi b252024c3e added missing include for ULONG_MAX 2008-11-11 15:19:13 +00:00
Martin Willi 73937bd838 added some NEWS for 4.2.9 2008-11-11 12:52:55 +00:00
Martin Willi 4252938811 dynamic logging configuration through strongswan.conf 
fallback to existing ipsec.conf/stroke loglevel configuration
 2008-11-11 10:52:37 +00:00
Martin Willi dbb24102d4 fixed compiler warning 2008-11-11 10:29:31 +00:00
Martin Willi c198fc5548 whitelisting localtime_r 2008-11-10 16:44:27 +00:00
Martin Willi a9f081e5ad make load_tester more strict to use it along stroke 2008-11-10 16:43:15 +00:00
Martin Willi f821bfb2b3 fixed leak in host_create_from_string("%any") 2008-11-10 16:42:05 +00:00
Martin Willi ae42288a81 fixed some minor issues found when using -DFORTIFY_SOURCE=2 2008-11-10 15:45:19 +00:00
Martin Willi e9a0d3a339 iterations = 0 for infinite iterations 2008-11-10 10:10:51 +00:00
Martin Willi 6c3f40f9a0 added PEM version of keys 2008-11-10 10:09:44 +00:00
Martin Willi c9ef4cee46 settings section enumeration 
printf style key lookup
 2008-11-07 15:08:53 +00:00
Martin Willi 89d05ab5fb fixed copy/paste error 2008-11-07 14:48:54 +00:00
Martin Willi a70df08c9b added delete_after_established option 2008-11-06 14:07:46 +00:00
Martin Willi ebf0e20ae7 fixed leak 
fixed build if !HAVE_BACKTRACE
 2008-11-06 14:05:58 +00:00
Martin Willi e76078e877 use read-write locks in crypto factory for parallelization 2008-11-05 16:21:57 +00:00
Martin Willi 27ed987ef7 wrapped all pthread_rwlock_t in profilable rwlock_t 2008-11-05 16:12:54 +00:00
Martin Willi c1be64eaff wrapped rwlock with profiling support 2008-11-05 15:51:57 +00:00
Martin Willi 0214012508 threshhold and ./configure option for lock profiler 2008-11-05 14:36:57 +00:00
Martin Willi ac29400e34 added missing includes 2008-11-05 14:22:58 +00:00
Martin Willi f7237cf37a separated backtrace functionality from leak_detective, used in 
leak_detective
	mutex profiling
	signal handler
 2008-11-05 13:58:19 +00:00
Martin Willi 2abc66b977 proper cleanup of openssl locking code 2008-11-05 12:37:37 +00:00
Martin Willi 465fe85ee1 fixed sender destruction order 2008-11-05 12:24:36 +00:00
Martin Willi a492eb2033 fixed iterator regression introduced in [4577] 2008-11-05 11:55:17 +00:00
Martin Willi 3ac5a0db8c replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant 2008-11-05 11:29:56 +00:00
Martin Willi 2662806b2c get rid of unused iterator hook functions 2008-11-05 08:37:09 +00:00
Martin Willi e13389a7f7 got rid of deprecated create_iterator_locked() 2008-11-05 08:32:38 +00:00
Martin Willi e10b0d0fc0 simple mutex profiler 2008-11-05 07:57:26 +00:00
Martin Willi 31537fd970 do not install route if interface lookup failed 2008-11-05 07:38:55 +00:00
Martin Willi 6a8ecfc8be two new load_testing options: 
request_virtual_ip: request a INTERNAL_IPV4_ADDR as client
	pool: provide addresses from a named virtual IP pool
 2008-11-04 14:55:22 +00:00
Martin Willi 7854475f42 OpenSSL requires a signature length of exactly RSA_size() 2008-11-04 14:05:42 +00:00
Martin Willi d4f08fe324 removed superfluous get_other_public_value in diffie_hellman_t interface 2008-11-04 13:12:11 +00:00
Martin Willi ddd7e6c656 fixed bignum export if BN_num_bytes() != DH_size() 2008-11-04 13:05:00 +00:00
Martin Willi dcbea444ee fixed memleak 2008-11-04 13:01:36 +00:00
Martin Willi 480be6436a added a delay option to delay initiations 2008-11-04 12:59:53 +00:00
Martin Willi 7de6da0c88 added locking mechanism for multithreaded use of OpenSSL 2008-11-03 16:14:12 +00:00
Martin Willi 4d901e3584 added fake_kernel option to make dummy kernel implementation optional 2008-11-03 15:11:01 +00:00
Martin Willi ee66fa625e removed accidently checked in debug code 2008-11-03 12:40:42 +00:00
Martin Willi 1145ca098d load testing between different hosts 2008-11-03 10:02:39 +00:00
Martin Willi 64ff7a5142 log loaded plugins at startup 2008-11-03 09:44:54 +00:00
Martin Willi d6dc9db5ef reverted 4541, does not fix the problem 2008-11-03 09:44:20 +00:00
Martin Willi e301a69d6c removed 0-byte truncation, fixes random Openssl RSA signature verification failures 2008-10-31 17:07:04 +00:00
Martin Willi a13862be61 fixed crash in openssl signature verification if sizeof(size_t) != sizeof(int) (64bit) 2008-10-31 17:05:40 +00:00
Martin Willi 19aff61b19 reverted changeset 4529: 
Camellia is 22 in IKEv1, but not-yet defined in IKEv2
	in IKEv2, 22 is reserved for AES-XTS
 2008-10-30 13:21:21 +00:00
Martin Willi 5dffdea1d7 added hooks for IKE and CHILD keymat 2008-10-30 12:58:54 +00:00
Martin Willi 5a76bb7f7a store plain skd, not the prf 2008-10-30 09:18:52 +00:00
Martin Willi 80853d8498 moved CHILD_SA key derivation to keymat_t 
passing key chunks to CHILD_SA, not the PRF
 2008-10-29 16:06:16 +00:00
Martin Willi f65ba4e978 prf handles zero-length allocations graceful 2008-10-29 14:12:54 +00:00
Martin Willi a64cc8f75f do not store DH redundant in keymat 2008-10-29 13:35:06 +00:00
Martin Willi 6faa0c3392 replaced not-maintained ChangeLog 2008-10-29 09:27:51 +00:00
Martin Willi 6a4ff35cc4 moved key derivation and management into keymat object 
allows secured implementation of key management (e.g. in kernel or HW)
	only IKE keys for now
 2008-10-28 16:07:06 +00:00
Martin Willi 3c8234d408 store IKE proposal implicitly during derive_keys 2008-10-28 10:12:21 +00:00
Martin Willi 20fb671904 fixed reauthentication time in statusall 2008-10-28 09:41:33 +00:00
Martin Willi 85ac2fa547 use more generic stats getter, introducing new stats 2008-10-27 14:51:00 +00:00
Martin Willi ddc5b90db2 new release of NM debs 2008-10-27 12:01:23 +00:00
Martin Willi 0935ba328b including a "none" tundev to make NM happy 2008-10-27 11:30:27 +00:00
Martin Willi a1db79b31a fixed some compiler warnings 2008-10-27 11:13:33 +00:00
Martin Willi 82d20c0588 additional getters for ipcomp and UDP encap 2008-10-24 09:51:48 +00:00
Martin Willi 6e10aeadab more CHILD_SA refactorings 2008-10-24 08:02:35 +00:00
Martin Willi f2a5aa4a9d initiate connections simultaneously in load tester 2008-10-22 09:01:36 +00:00
Martin Willi 0fd6e95562 a load testing plugin, to: 
find multi-threading issues
	do performance profiling
 2008-10-21 13:00:38 +00:00
Martin Willi 6df2837a8c fixed enumeration of CHILD_SA traffic selectors 2008-10-21 10:57:40 +00:00
Martin Willi f2e1ff59ab reset threads IKE_SA after checking other IKE_SAs 
invoke updown script only if we have valid IKE_SA
 2008-10-20 11:38:16 +00:00
Martin Willi 104c28d603 fixed perl oid generation 2008-10-16 15:38:48 +00:00
Martin Willi 6f3ea4a516 loading updown plugin if required 2008-10-16 12:48:27 +00:00
Martin Willi ad3af574a4 moved updown script invocation to an optional plugin 2008-10-16 11:48:18 +00:00
Martin Willi e17353fc31 bus uses finally recusive locking 
other small fixes
 2008-10-16 11:32:43 +00:00
Martin Willi f868dc0ca2 condvar->wait() can handle recursive mutex 2008-10-16 11:29:42 +00:00
Martin Willi 229ee197a3 added missing EAP-AKA RFC 2008-10-16 07:21:30 +00:00
Martin Willi 61508be2f5 added a guest.mconsole() method to script mconsole (e.g. add additional conX=) 2008-10-15 14:47:52 +00:00
Martin Willi 1df106bf39 cache keys for in and outbound ESP SAs 
removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t)
creating TS pairs dynamically using create_policy_enumerator()
 2008-10-15 12:24:44 +00:00
Martin Willi 0b9728986a reverted changeset [4440], [4443] uses old algorithm name again 2008-10-15 08:50:14 +00:00
Martin Willi 9f4e5f8c47 store ESP keys in CHILD_SA 2008-10-15 08:37:56 +00:00