denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,914 Commits 1 Branch 0 Tags
a88aae3df6de7dc905f8950b43edf49c1f2d7b82
Commit Graph
169 Commits
Author SHA1 Message Date
Martin Willi a88aae3df6 enforce DN of configured gateway certificate 2008-08-25 07:50:21 +00:00
Martin Willi 7945c90adb new EAP-Identity handling uses ID_EAP in plugins 2008-08-25 07:49:48 +00:00
Martin Willi 1a109c9fc6 disabled PSK option until we have a way to enforce strong secrets 2008-08-25 07:48:11 +00:00
Martin Willi 1995f79f10 use username part of RFC822 IDs for PAM authentication 2008-08-25 07:47:16 +00:00
Martin Willi 822901061b ported parts of two-sim branch 
eap_identity parameter to exchange in eap_identity
	some auth_info/peer_cfg refactorings
	fixed some bugs, introduced new ones
 2008-08-22 10:44:51 +00:00
Martin Willi 5ba7efb083 pool names are unique 2008-08-22 07:38:59 +00:00
Martin Willi b848f0377c fixed EAP-GTC secret lookup 
improved error logging
PAM authentication needs CAP_AUDIT_WRITE capability
 2008-08-21 14:40:03 +00:00
Martin Willi 1caa265c61 a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM 2008-08-21 12:10:07 +00:00
Martin Willi bdbf3c49fc some string fixes 2008-08-20 13:59:37 +00:00
Martin Willi 6368a58ffc added missing tooltip 2008-08-20 12:02:53 +00:00
Martin Willi 1b9f6c2410 handle DBUS permission problems gracefully 2008-08-20 11:44:47 +00:00
Martin Willi 142eaea43c fixed shared key lookup by ID 
proper auth method selection
 2008-08-20 08:51:18 +00:00
Martin Willi 592dc30108 fixed auth-dialog password flush 2008-08-20 08:49:47 +00:00
Martin Willi ec24987164 certificate based gateway authentication 
prototype PSK user authentication with auth-dialog
 2008-08-19 15:19:45 +00:00
Martin Willi 62556b2b45 updated nm plugin to NetworkManager API changes 2008-08-18 11:59:19 +00:00
Martin Willi 39c0ae3780 configuration plugin for NetworkManager 2008-07-31 15:07:52 +00:00
Martin Willi 092a9b88ad added options for virtual IP, UDP encapsulation, IPComp 
proper handling of libstrongswan/glib TRUE/FALSE conflict
 2008-07-31 14:32:11 +00:00
Martin Willi 6dbce9c803 reimplemented dbus plugin for NetworkManager 0.7, renamed to nm 2008-07-31 11:16:14 +00:00
Martin Willi 2d87903db9 recreating FIFO if it exists 2008-07-31 09:04:54 +00:00
Martin Willi eb04645c10 fixed usage typo 2008-07-31 09:01:56 +00:00
Martin Willi 19ad10b5d3 increased stroke socket backlog to 10 2008-07-30 14:17:05 +00:00
Martin Willi 38a8e39739 using shared read locks in credential set enumerators to avoid deadlocks 2008-07-30 11:38:44 +00:00
Martin Willi 6ef70d2109 added tests.h to distribution 2008-07-24 12:48:36 +00:00
Martin Willi b6bf863459 fixed UCI thread cancellation on ARM 2008-07-24 08:52:12 +00:00
Martin Willi 3bc5a137cb added option charon.plugins.sql.lease_history to disable lease history logging 2008-07-24 08:28:45 +00:00
Martin Willi 875a8326b3 fixed statistic calcuation for static leases 2008-07-24 08:21:55 +00:00
Martin Willi a01ad99341 fixed pool statistics 2008-07-23 13:56:07 +00:00
Martin Willi f7198e7e8c experimental and untested reimplementation of sql based IP pool 
uses address preallocation and separate address/lease tables for linear lookup time
 2008-07-22 14:56:15 +00:00
Andreas Steffen 32f5ee159e cosmetics 2008-07-22 12:13:48 +00:00
Andreas Steffen 66da78b4bb ipsec status lists IPCOMP CPIs 2008-07-22 12:03:58 +00:00
Andreas Steffen eba7470b76 consistent logging of SPIs and CPIs 2008-07-22 10:16:45 +00:00
Martin Willi 0a625fde3e pool performance testing 2008-07-21 11:17:20 +00:00
Martin Willi a4a3e0c7dc introduced an additional bus->signal parameter for signal specific data 
added SIG_IKE/SIG_CHD macros for signal emitting
 2008-07-18 15:51:40 +00:00
Martin Willi 12b1c1a1bc extended UCI plugin by a simple control interface using a fifo 2008-07-18 10:34:44 +00:00
Andreas Steffen 858a9fd584 update_peerid() does not accept %any as a certificate's subjectAltName 2008-07-09 22:13:39 +00:00
Andreas Steffen 2c258d7373 ipsec statusall displays dpd options 2008-07-02 10:48:57 +00:00
Martin Willi 4a231f1a2e changed medcli settings keys 2008-07-02 09:02:38 +00:00
Martin Willi d932435e18 sql plugin supports a list of pools to fall back, specified by e.g. rightsourceip=%pool1,pool2 2008-07-02 08:31:48 +00:00
Martin Willi fca4d3ee03 implementation of a simple "token enumerator" 2008-07-02 08:09:07 +00:00
Martin Willi ab89517218 fixed medsrv database uri key 2008-07-01 13:57:47 +00:00
Martin Willi 131064995a added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by remote virtual ip 2008-07-01 12:48:56 +00:00
Andreas Steffen 5397a7f91d show authentication method in ipsec statusall 2008-06-30 17:08:47 +00:00
Martin Willi b119f89a4e fixed chunk_increment, fixes reuse of already assigned addresses 2008-06-30 12:33:38 +00:00
Martin Willi eec675bf8c enumerating loaded plugins in "ipsec statusall" 2008-06-24 12:49:04 +00:00
Tobias Brunner ad4d3f81c1 changed ipsec.secrets keyword EC to ECDSA 2008-06-24 06:57:47 +00:00
Andreas Steffen 7c8eff1eaa cosmetics 2008-06-23 09:08:49 +00:00
Martin Willi 857ba3574b fixed "double-close" of stroke fd resulting in "bad fd" errors if multiple threads are active 2008-06-23 08:53:37 +00:00
Martin Willi 417421048c fixed medsrv mysql scheme 2008-06-23 08:30:57 +00:00
Andreas Steffen bc997f6583 display selected IKE proposal in ipsec statusall 2008-06-22 11:24:33 +00:00
Martin Willi bb1383183c support in smp for terminate-by-name 2008-06-20 07:14:35 +00:00