denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,461 Commits 1 Branch 0 Tags
a36e175adee0787f982f3c2c0ad43ef01e7d5337
Commit Graph
902 Commits
Author SHA1 Message Date
Tobias Brunner a36e175ade Migrated initiate_mediation_job_t to INIT/METHOD macros. 2011-10-03 18:53:14 +02:00
Tobias Brunner 17a5861a6e Migrated mediation_job_t to INIT/METHOD macros. 2011-10-03 18:47:25 +02:00
Tobias Brunner b0eb026c05 Migrated mediation_manager_t to INIT/METHOD macros. 2011-10-03 18:42:29 +02:00
Tobias Brunner 02846e5e7f Migrated connect_manager_t to INIT/METHOD macros. 2011-10-03 18:32:12 +02:00
Tobias Brunner 6401b18f12 Migrated ike_sa_id_t to INIT/METHOD macros. 2011-10-03 18:01:05 +02:00
Tobias Brunner 4b7c63cf52 Send AT_NEXT_PSEUDONYM also if an AT_NEXT_REAUTH_ID is already added. 2011-09-13 11:09:07 +02:00
Martin Willi f8437dd8d2 Clear traps during shutdown before unloading kernel plugins 2011-09-12 13:02:51 +02:00
Martin Willi e6816e4670 Add missing semicolon 2011-09-12 13:01:40 +02:00
Tobias Brunner f35578acb1 Renamed 'use' database column as that is a keyword in MySQL. 
Reported by Stefan Tomas.
 2011-09-01 09:59:37 +02:00
Martin Willi d0e1b237be Properly remove listener when listen() times out 2011-08-31 16:50:06 +02:00
Thomas Jarosch 88d180c7d8 Fix file descriptor leak 
Credit goes to "cppcheck".

Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com>
 2011-08-29 09:10:28 +02:00
Martin Willi 8e3f14baab bus->listen() and the controller wrappers accept a timeout to wait for callbacks 2011-08-26 10:44:25 +02:00
Andreas Steffen 4a2ecc4147 support optional SSL passphrase for Axis2/C connection 2011-08-24 21:27:34 +02:00
Andreas Steffen a8bbdb1f26 log entry for outbound hash-and-url 2011-08-24 06:05:44 +02:00
Martin Willi 3f455c739d Added a certexpire empty_string option 2011-08-22 18:42:33 +02:00
Martin Willi e64fdfa172 Implemented CSV export functionality in certexpire plugin 2011-08-22 18:42:33 +02:00
Martin Willi d2aeb8fdfd Added generic cron style callback execution to certexpire plugin 2011-08-22 18:42:33 +02:00
Martin Willi f4bdc6a3aa Cache trustchain lifetimes for export 2011-08-22 18:42:33 +02:00
Martin Willi b274f20a1d Register a certexpire listener collecting trustchain information 2011-08-22 18:42:33 +02:00
Martin Willi ba2201edf0 Added plugin stub of certexpire plugin 2011-08-22 18:42:32 +02:00
Martin Willi bff1025201 Don't rekey but delete CHILD_SA to resying against NATed Windows clients 2011-08-19 09:16:17 +02:00
Martin Willi f54bcf35af Sync newer IKE_SA condition/extension flags in ha plugin 2011-08-19 09:16:16 +02:00
Martin Willi 61cf9f512c Try to detect Windows Clients by looking for INTERNAL_IP4/6_SERVER attribute 2011-08-19 09:16:16 +02:00
Andreas Steffen f69f067958 fix double delete of old IKE_SA during reauthentication 2011-08-16 23:25:45 +02:00
Andreas Steffen a022f0863d increased message buffer to cope with NCP's innumerable UNITY Configuration Payloads 2011-08-16 23:22:20 +02:00
Andreas Steffen 65d5f6bc2b some more typos 2011-08-15 21:43:26 +02:00
Tobias Brunner 7ebf021d37 typos: initator->initiator, authenticaion->authentication. 2011-08-15 16:31:04 +02:00
Andreas Steffen 7e85bbda19 implement MAP client certificate authentication 2011-08-12 15:16:05 +02:00
Andreas Steffen c7b8512cc0 cosmetics 2011-08-12 13:18:49 +02:00
Andreas Steffen 537205fa9d implemented enforcement-report metadata 2011-08-12 13:16:02 +02:00
Andreas Steffen ae8a984b5a use EAP identity 2011-08-12 11:34:56 +02:00
Andreas Steffen d6a69acba4 defined mapping of IKEv2 identity types to IF-MAP identity types 2011-08-12 11:07:29 +02:00
Tobias Brunner 9af9c6772b If we close a duplicate SA, it is also no authentication failure. 2011-08-12 10:11:39 +02:00
Tobias Brunner d9eaecd373 If local authentication fails, it is not really a peer auth failure. 2011-08-12 10:04:02 +02:00
Tobias Brunner ccbe380377 Throw an alert if authentication of the peer fails (not only for initiator). 2011-08-12 10:04:02 +02:00
Tobias Brunner 7ab19d571d Throw an alert when the peer address cannot be resolved during initiation. 2011-08-12 09:59:27 +02:00
Tobias Brunner ff4b25f9b7 Throw an alert via bus_t when remote authentication fails. 2011-08-12 09:59:27 +02:00
Andreas Steffen d0a9173ec9 support capability metadata 2011-08-11 15:06:19 +02:00
Andreas Steffen 3205e3be7a define server_cert in strongswan.conf 2011-08-10 09:29:35 +02:00
Andreas Steffen dcae107b5a getting rid of axis2.html configuration 2011-08-10 09:29:34 +02:00
Andreas Steffen 9d690477c9 output PEP device addresses as metadata 2011-08-10 09:29:34 +02:00
Andreas Steffen e37f1fd6b7 classify an EAP identity as a username 2011-08-10 09:29:34 +02:00
Andreas Steffen e016913725 refactoring of tnc-ifmap plugin 2011-08-10 09:29:34 +02:00
Andreas Steffen 5144463634 publish all IKE_SA metadata after tnc-ifmap plugin reload 2011-08-10 09:29:34 +02:00
Andreas Steffen 8c78772a05 implemented tnc-ifmap reload method 2011-08-10 09:29:34 +02:00
Andreas Steffen cc7cfbc16e moved ifmap code into tnc_ifmap_soap 2011-08-10 09:29:34 +02:00
Andreas Steffen 2c5e71b0c5 free device_name in destroy() 2011-08-10 09:29:34 +02:00
Andreas Steffen 1bae34e1a0 set device_name via strongswan.conf 2011-08-10 09:29:34 +02:00
Andreas Steffen d0236f9353 fixed delete filters 2011-08-10 09:29:34 +02:00
Andreas Steffen a3686ce33a check for publishReceived response 2011-08-10 09:29:34 +02:00