Tobias Brunner
facf887253
Store the name of the daemon that initialized libhydra to load daemon-specific settings.
2010-04-06 12:47:40 +02:00
Tobias Brunner
6bfa8e907c
Added options to whack to query in-memory leases.
2010-04-06 12:47:39 +02:00
Tobias Brunner
4db0af9080
Added function to list the leases of the in-memory pools.
2010-04-06 12:47:39 +02:00
Tobias Brunner
4e06abe0fa
Delete the in-memory IP address pools if a connection gets deleted.
...
This fixes ipsec reload.
2010-04-06 12:47:39 +02:00
Tobias Brunner
bd22823358
Use whack_attribute in pluto to provide in-memory IP address pools.
...
The pools are configured by setting rightsourceip in ipsec.conf to a
network in CIDR notation.
2010-04-06 12:47:39 +02:00
Tobias Brunner
89715bd790
Adding a whack_attribute class which manages in-memory pools in pluto and is very similar to stroke_attribute.
2010-04-06 12:47:39 +02:00
Andreas Steffen
061c95b449
fixed pluto crash caused by expired leftcert and rightca=%same
2010-03-29 17:44:37 +02:00
Tobias Brunner
58f86d0f0f
Changed all usages of lib->attributes to hydra->attributes.
2010-03-24 18:54:26 +01:00
Tobias Brunner
52bff307e1
Init/deinit libhydra in charon and pluto.
2010-03-24 18:53:10 +01:00
Tobias Brunner
39856897e6
Link pluto and charon to libhydra, fixes monolithic build.
2010-03-24 18:53:10 +01:00
Tobias Brunner
7b1fc2f7cf
Fixing a compiler warning when building with -Wextra.
2010-03-16 12:42:58 +01:00
Tobias Brunner
01b87c2bc1
Fixed a bug in pluto's x509 handling.
...
This bug would have lead to a segmentation fault, if no public key could
have been extracted from a certificate.
2010-03-12 17:28:20 +01:00
Andreas Steffen
4cedab5ad7
deleted old strongSwan VIDs
2010-03-12 03:29:18 +01:00
Andreas Steffen
469d448333
recognize strongSwan VID
2010-03-07 17:52:04 +01:00
Martin Willi
3eb633e1e6
Remove the invalid cast in time() parameter, as reported by Marius Tomaschewski.
2010-03-04 08:44:23 +01:00
Tobias Brunner
38da64fe12
Detect windows hosts to add specific workarounds.
2010-02-12 10:57:39 +01:00
Tobias Brunner
71baf5a8f0
Adding support for AES GMAC (RFC4543).
2010-02-12 10:57:39 +01:00
Tobias Brunner
3cc0cc4332
Increased the buffer for netlink responses.
...
If an error occurs while manipulating policies in the kernel, the
original netlink request gets attached to the response.
Prior to Linux 2.6.32 the size in the netlink header of the response was
wrong.
2010-02-05 20:10:54 +01:00
Andreas Steffen
6c9c0baee9
init_fetch() changed to fetch_initialize()
2010-02-05 06:17:02 +01:00
Andreas Steffen
889ff9389b
renamed init_fetch() to fetch_initialize()
2010-02-02 19:44:34 +01:00
Tobias Brunner
dc5969242f
Join pluto's fetching thread instead of detaching it in order to avoid that the leak-detective reports a memleak.
2010-02-02 15:23:39 +01:00
Andreas Steffen
bf1e0df7c5
warn if loaded local certificate is invalid
2010-02-01 12:29:32 +01:00
Andreas Steffen
dd37fa8620
pluto and charon are using the same strongSwan Vendor ID
2010-01-11 00:43:46 +01:00
Tobias Brunner
e9a1852aac
Pluto's fetcher thread is now created via libstrongswan.
2009-12-26 15:50:34 +01:00
Tobias Brunner
070ac5b0b7
Check if libpthread is required or not.
2009-12-23 17:02:26 +01:00
Andreas Steffen
b6623e87b4
IKEv1 daemon supports DNS and NBNS server assignment from database
2009-12-16 21:49:51 +01:00
Andreas Steffen
de962d6e7d
add IKEv1 support for the Camellia cipher
2009-12-15 19:13:06 +01:00
Andreas Steffen
353b829177
fixed IKEv1 support of HMAC_SHA2_256_96
2009-12-09 09:33:32 +01:00
Andreas Steffen
a07531250e
IKEv1 support of ESP SHA2_HMAC with correct truncation
2009-12-09 00:24:42 +01:00
Andreas Steffen
eba568563c
changed error messages in the case of faulty esp and ike strings
2009-11-24 16:45:52 +01:00
Andreas Steffen
2eeab939a0
do not send all available kernel algorithms if esp string is faulty
2009-11-24 16:38:10 +01:00
Elmar Vonlanthen
792876ff87
check if alg_info_esp exists
2009-11-24 16:15:12 +01:00
Andreas Steffen
cda8ec7afc
added some parentheses
2009-11-24 14:36:17 +01:00
Andreas Steffen
c4570d188e
issue error message for expired certificates in OCSP trust chain checking
2009-11-24 12:37:38 +01:00
Martin Willi
0850e33518
Fixed compiler warning about missing return value
2009-11-12 11:17:02 +01:00
Andreas Steffen
209f52cb63
fixed 4.3.6 ocsp regression
2009-11-11 11:06:07 +01:00
Andreas Steffen
a618e33e8b
merged pluto's PGP certificate parsing with charon's
2009-11-10 23:54:51 +01:00
Andreas Steffen
f565d0c575
merged pluto's PGP certificate parsing with charon's
2009-11-10 23:54:04 +01:00
Andreas Steffen
e92e19c177
pluto ignores proprietary Juniper SRX notification 40001
2009-11-05 08:38:00 +01:00
Andreas Steffen
4c68a85a75
implemented path length constraint checkinf for IKEv2
2009-11-04 23:37:15 +01:00
Andreas Steffen
8fac84bcdd
check if acerts linked_list has been initialized before destroying it
2009-11-04 19:36:02 +01:00
Andreas Steffen
c95671cec2
implemented path length constraint checking for IKEv1
2009-11-04 18:10:31 +01:00
Andreas Steffen
efab9f551d
removed redundant and buggy debug statement
2009-11-04 14:28:20 +01:00
Andreas Steffen
fae322219f
output optional pathLenConstraint in ipsec listcacerts
2009-11-04 07:30:07 +01:00
Andreas Steffen
a58b1722b0
version bump to 4.3.6
2009-11-02 22:47:55 +01:00
Andreas Steffen
f893bce3e7
fixed a memory leak in OCSP fetching
2009-10-29 10:00:19 +01:00
Heiko Hund
158e9386d2
setting the IP family enables mixed tunnels
2009-10-16 14:50:12 +02:00
Andreas Steffen
215b0402b3
use directory enumerator to load authcerts
2009-10-15 18:01:10 +02:00
Andreas Steffen
ff1ca9a8a3
cleaned out some bugs in refactoring of ac.c
2009-10-15 17:30:04 +02:00
Andreas Steffen
38031878dd
moved .gitignore for pool
2009-10-15 14:58:09 +02:00
Tobias Brunner