denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
13,987 Commits 1 Branch 0 Tags
a47e431ba9c8b88a7a2244b7793afd29d72bd729
Commit Graph
44 Commits
Author SHA1 Message Date
Martin Willi 4163421f91 plugins: Don't link with -rdynamic on Windows 2014-06-04 15:53:02 +02:00
Martin Willi 8d74ec9e80 ike: Add an additional but separate AEAD proposal to CHILD config 
This currently has no effect: We don't include AEAD algorithms in the default
ESP proposal, as we don't know if it is supported by the backend. But as we
hopefully get an algorithm query mechanism on kernel interfaces some day, we
add the appropriate functionality nonetheless.
 2014-05-16 16:51:19 +02:00
Martin Willi 879e3d12ca ike: Add an additional but separate AEAD proposal to IKE config, if supported 2014-05-16 16:51:19 +02:00
Martin Willi 3070697f9f ike: support multiple addresses, ranges and subnets in IKE address config 
Replace the allowany semantic by a more powerful subnet and IP range matching.
Multiple addresses, DNS names, subnets and ranges can be specified in a comma
separated list. Initiators ignore the ranges/subnets, responders match
configurations against all addresses, ranges and subnets.
 2013-09-04 10:38:37 +02:00
Martin Willi 9aeaa7396e peer-cfg: add a pull/push mode option to use with mode config 2013-09-04 10:33:37 +02:00
Martin Willi 19cb07b890 automake: replace INCLUDES by AM_CPPFLAGS 
INCLUDES are now deprecated and throw warnings when using automake 1.13.
We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and
defines are passed to AM_CPPFLAGS only.
 2013-07-18 14:59:19 +02:00
Tobias Brunner e183a6c36d maemo: Use plugin features 2013-06-11 11:18:19 +02:00
Martin Willi 0be946dce3 Use the GEN silent rule when generating files with sed 2013-05-06 15:04:56 +02:00
Martin Willi 306a269e34 Add a DSCP configuration value to IKE configs 2013-02-06 15:20:32 +01:00
Tobias Brunner 365d9a6f67 Added an option that allows to force IKEv1 fragmentation 2013-01-12 11:54:32 +01:00
Tobias Brunner 97973f8609 Use a connection specific option to en-/disable IKEv1 fragmentation 2012-12-24 13:00:01 +01:00
Martin Willi 1fdd62ffce Remove version argument on peer_cfg constructor, use ike_cfg version instead 2012-10-24 10:19:33 +02:00
Martin Willi 9fc7cc6f9b Add IKE version information to ike_cfg_t 2012-10-24 10:18:35 +02:00
Martin Willi 497ce2cf51 Support multiple address pools configured on a peer_cfg 2012-08-30 16:43:42 +02:00
Martin Willi 101d26babe Support multiple virtual IPs on peer_cfg and ike_sa classes 2012-08-30 16:43:42 +02:00
Tobias Brunner b223d517c8 Replaced usages of CHARON_*_PORT with calls to get_port(). 2012-08-08 15:12:25 +02:00
Tobias Brunner e7ea057fd2 Make the UDP ports charon listens for packets on (and uses as source ports) configurable. 2012-08-08 15:07:43 +02:00
Tobias Brunner 26d77eb3e6 Centralized thread cancellation in processor_t 
This ensures that no threads are active when plugins and the rest of the
daemon are unloaded.

callback_job_t was simplified a lot in the process as its main
functionality is now contained in processor_t.  The parent-child
relationships were abandoned as these were only needed to simplify job
cancellation.
 2012-06-25 17:38:59 +02:00
Andreas Steffen 1d315bddd3 implemented the right|leftallowany feature 2012-06-08 21:24:41 +02:00
Andreas Steffen 80c5b17d1a make IKEv1 DPD timeout configurable in charon 2012-05-17 19:49:22 +02:00
Martin Willi 5ce59d4c06 Added an aggressive mode peer_cfg option 2012-03-20 17:31:34 +01:00
Martin Willi 3d54ae94d9 Handle initiation of not supported IKE versions properly 2012-03-20 17:31:30 +01:00
Tobias Brunner f7a8fcedc0 Use enum to define IKE version on peer_cfg_t. 
Replaced all those magic numbers.
 2012-03-20 17:30:41 +01:00
Martin Willi 8e3f14baab bus->listen() and the controller wrappers accept a timeout to wait for callbacks 2011-08-26 10:44:25 +02:00
Martin Willi 14bf2f689d Use CRITICAL job priority class for long running dispatcher jobs 2011-05-16 15:24:15 +02:00
Martin Willi c55818ebb0 Added a (not yet implemented) plugin_t method to reload plugin configuration 2011-04-15 10:07:13 +02:00
Martin Willi 787b5884aa Added a get_name() function to plugin_t, create_plugin_enumerator enumerates over plugin_t 2011-04-15 10:07:12 +02:00
Tobias Brunner feb8ada613 maemo: Create DBUS service file with correct path to charon. 2011-02-08 15:17:36 +01:00
Tobias Brunner 56f57e5814 maemo: Listen for IKE_SA state changes insted of CHILD_SA state changes. 
If the IKE_SA_INIT request fails, there is not yet a CHILD_SA that could
trigger state changes.
 2011-02-04 18:02:48 +01:00
Martin Willi 37788b1d06 Added a TFC padding option to child_cfg 2010-12-20 09:45:39 +01:00
Andreas Steffen c616d84c3f start and route connections defined in an SQL database via start_action field and ipsec up %startall command 2010-11-28 11:57:49 +01:00
Tobias Brunner 3a6c5493af Maemo: Load CA certificates from system directories. 2010-10-14 17:36:20 +02:00
Tobias Brunner ef247379ea Maemo: Track the status of the current SA and send changes to the frontend. 2010-10-14 17:36:19 +02:00
Tobias Brunner 6f59971371 Maemo: Properly unregister the RPC callbacks. 2010-10-14 17:36:19 +02:00
Tobias Brunner 9f01ba4044 Maemo: Plugin implements the listener_t interface. 2010-10-14 17:36:19 +02:00
Tobias Brunner 39e5b21310 Maemo: Extracted most plugin code to a separate class, so we can use that as listener. 2010-10-14 17:36:19 +02:00
Tobias Brunner 4fef86d1ed Maemo: Initiate consumes a child_sa reference, so get an additional one. 2010-10-14 17:36:19 +02:00
Tobias Brunner 28c51809a7 Maemo: Basic functionality added to notify the applet about status updates. 2010-10-14 17:36:19 +02:00
Tobias Brunner c213353393 Maemo: Clear the credentials before each connection attempt. 2010-10-14 17:36:19 +02:00
Tobias Brunner c0d9c1817b Maemo: Listen for a special "Start" D-BUS call. 
This call is made on the system D-BUS so that charon is started as root.
 2010-10-14 17:36:18 +02:00
Tobias Brunner 174b31bce6 Maemo: Added support for connection initiation and shutdown. 2010-10-14 17:36:18 +02:00
Tobias Brunner 8464e25a0f Maemo: Register with libosso and init Glib main loop. 2010-10-14 17:36:18 +02:00
Tobias Brunner 2bce814190 Maemo: Register charon as D-BUS system service. 
In order to be able to access this service via libosso, charon is
started with the run-standalone.sh script, which sets up the required
environment.
 2010-10-14 17:36:18 +02:00
Tobias Brunner f79161e866 Stub plugin for Maemo specific extensions added. 2010-10-14 17:36:17 +02:00