denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,760 Commits 1 Branch 0 Tags
b8bf01ddee09faa020d65992d12b4be42be582bb
Commit Graph
5760 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner b8bf01ddee Do not install routes for pluto. 
There are some incompatibilities with e.g. passthrough policies.
Pluto installs required source routes via updown script.
 2010-09-02 19:04:24 +02:00
Tobias Brunner 76467e030c pluto: Handle changed NAT mappings via libhydra's kernel interface. 2010-09-02 19:04:24 +02:00
Tobias Brunner a0cbce9e7c pluto: Removed no_klips flag (--noklips option). 2010-09-02 19:04:24 +02:00
Tobias Brunner eeca1b0466 pluto: Removed references to KLIPS from documentation, log messages and comments. 2010-09-02 19:04:24 +02:00
Tobias Brunner 6374671110 pluto: Added --debug-kernel as alias for --debug-klips. 2010-09-02 19:04:24 +02:00
Tobias Brunner ebdbf28a4a pluto: Replaced DBG_KLIPS with DBG_KERNEL. 2010-09-02 19:04:24 +02:00
Tobias Brunner 8dade8e6eb pluto: Removed the KLIPS preprocessor flag. 2010-09-02 19:04:24 +02:00
Tobias Brunner fc06e34e46 pluto: Removed unneeded kernel abstractions. 2010-09-02 19:04:23 +02:00
Tobias Brunner 36ff473016 pluto: Completely removed struct kernel_ops. 2010-09-02 19:04:23 +02:00
Tobias Brunner 296972aeaf pluto: Refactored PF_KEY capabilities registration. 
Although we use the kernel interface from libhydra we still need this to make
the available algorithms known to pluto.
 2010-09-02 19:04:23 +02:00
Tobias Brunner 4f898afc22 pluto: Removed unneeded functions from PF_KEY interface. 
We still use the algorithm registration.
 2010-09-02 19:04:23 +02:00
Tobias Brunner 03ee9623f3 pluto: Completely removed orphaned_holds. 2010-09-02 19:04:23 +02:00
Tobias Brunner f6697eadb9 Scheduler and processor have been moved to libstrongswan. 
Also reverts 0c21dc000d as the dependency
to libcharon is no longer required.
 2010-09-02 19:04:23 +02:00
Tobias Brunner 44b4f0d06f pluto: Install IN policy of a shunt eroute with protocol. 2010-09-02 19:04:23 +02:00
Tobias Brunner 9052216813 pluto: Fixed byte-order of ports in traffic selectors. 2010-09-02 19:04:23 +02:00
Tobias Brunner 80c0328eec testing: Print output of 'make oldconfig' to STDOUT, besides logging it. 2010-09-02 19:04:23 +02:00
Tobias Brunner f32c0ce7b6 testing: Only sleep after a host has actually been started. 2010-09-02 19:04:22 +02:00
Tobias Brunner ad808bc2a2 testing: Build strongSwan a bit faster using make -j. 2010-09-02 19:04:22 +02:00
Tobias Brunner 38dd45c480 testing: Force the UML Kernel to x86. 2010-09-02 19:04:22 +02:00
Tobias Brunner 91ea48352c testing: Adding kernel-netlink to pluto.load statements. 2010-09-02 19:04:22 +02:00
Tobias Brunner cc9cfc2e11 testing: Added missing host alice to test.conf. 2010-09-02 19:04:22 +02:00
Tobias Brunner 06cdeac25f Charon specific strongswan.conf options generalized. 2010-09-02 19:04:22 +02:00
Tobias Brunner c6fd7549e8 pluto: Listen for kernel events via libhydra's kernel interface. 2010-09-02 19:04:22 +02:00
Tobias Brunner 40bbff5dbf pluto: Adapted kernel.c to changed kernel interface. 2010-09-02 19:04:22 +02:00
Tobias Brunner 71b6d2ff5e Adapted child_sa_t to changed kernel interface. 2010-09-02 19:04:22 +02:00
Tobias Brunner 34cf6def83 Fixing installation of trap policies (SPI=0) in kernel interface. 2010-09-02 19:04:21 +02:00
Tobias Brunner c3f4d68f0d pluto: Do not close all file descriptors on startup, just redirect stdin, stdout and stderr to /dev/null. 
Otherwise the pipe used to synchronize pluto->events with the main
thread would be closed.
 2010-09-02 19:04:21 +02:00
Tobias Brunner 8808edfb4c pluto: Added a generic event queue. 
This allows to easily execute arbitrary callbacks in the context of the pluto
main thread (e.g. in order to synchronize with threads from the thread-pool).
 2010-09-02 19:04:21 +02:00
Tobias Brunner 4cf459a054 pluto: Fixed the reqid that is passed to the updown script. 2010-09-02 19:04:21 +02:00
Tobias Brunner 199a415710 pluto: Migrated setup_half_ipsec_sa to libhydra's kernel interface. 2010-09-02 19:04:21 +02:00
Tobias Brunner 44643c2d01 pluto: Removed unneeded get_proto_reqid. 
We will use the same reqid for all protocols, as in charon.
 2010-09-02 19:04:21 +02:00
Tobias Brunner 717d60f13f pluto: Added missing return_on in out_sa. 2010-09-02 19:04:21 +02:00
Tobias Brunner 1d61bcaabd pluto: Use time_monotonic() instead of time() for use time calculation. 
That's because get_sa_info now returns a monotonic timestamp.
 2010-09-02 19:04:21 +02:00
Tobias Brunner 91f44a8bfc pluto: Removed KLIPS specific code from was_eroute_idle. 2010-09-02 19:04:21 +02:00
Tobias Brunner 013698d51e pluto: Migrated get_sa_info to libhydra's kernel interface. 2010-09-02 19:04:21 +02:00
Tobias Brunner 95898bcc56 pluto: Migrated teardown_half_ipsec_sa to libhydra's kernel interface. 2010-09-02 19:04:20 +02:00
Tobias Brunner 3ecf66c9e3 pluto: Adapted sag_eroute to the new signature of eroute_connection. 2010-09-02 19:04:20 +02:00
Tobias Brunner 952487d689 pluto: Migrated raw_eroute to libhydra's kernel interface. 
This introduces a new struct to pass the protocol information like spis.
Also adapted eroute_connection and the simple calls of raw_eroute to
the new signature.
 2010-09-02 19:04:20 +02:00
Tobias Brunner deea15f04e pluto: Added a function to create a traffic_selector_t from an ip_subnet. 2010-09-02 19:04:20 +02:00
Tobias Brunner 230aa11fb4 pluto: Migrated update_ipsec_sa to libhydra's kernel interface. 2010-09-02 19:04:20 +02:00
Tobias Brunner 1ad497c78f pluto: Functions to convert IKEv1 ESP algos to IKEv2 identifiers added. 2010-09-02 19:04:20 +02:00
Tobias Brunner 7dd0c17cd4 pluto: Refactored IKEv2/IKEv1 crypto algorithm conversion functions. 2010-09-02 19:04:20 +02:00
Tobias Brunner 6da26f3008 Do not overwrite the original mode when installing policies. 
The mode is later used to decide if a route has to be installed.
 2010-09-02 19:04:20 +02:00
Tobias Brunner afc4505e11 pluto: Removed KLIPS specific algorithm detection. 2010-09-02 19:04:19 +02:00
Tobias Brunner 54f42e350e pluto: Removed KLIPS specific bare shunt scanning. 2010-09-02 19:04:19 +02:00
Tobias Brunner 749d3cccaf Added support for different policy types in kernel_netlink plugin. 2010-09-02 19:04:19 +02:00
Tobias Brunner bd7a2f3bfc Added an option to specify the type of a policy to kernel_ipsec.add_policy. 
This will later allow us to support pluto's passthrough and drop
policies in charon.
 2010-09-02 19:04:19 +02:00
Tobias Brunner 6a066ad19b pluto: Migrated get_my_cpi to libhydra's kernel interface. 2010-09-02 19:04:19 +02:00
Tobias Brunner 89f0cca111 pluto: Migrated get_ipsec_spi to libhydra's kernel interface. 2010-09-02 19:04:19 +02:00
Tobias Brunner 55be07a15f Added support for combined IPComp/ESP/AH policies in kernel_netlink plugin. 2010-09-02 19:04:19 +02:00