Commit Graph
117 Commits
Author SHA1 Message Date
Martin Willi cc7d8dca38 fixed UCI default proposals 2008-06-18 13:32:23 +00:00
Martin Willi fdacb2f181 support for more config options in UCI plugin 2008-06-18 08:50:32 +00:00
Martin Willi 61c4638646 first simple prototype of a UCI configuration plugin for OpenWRT 2008-06-17 14:17:51 +00:00
Martin Willi 9529fb6836 added mediation server web frontend
updated charons medsrv plugin to updated database scheme
2008-06-11 14:13:24 +00:00
Martin Willi 63608c9fc6 fixed compile error of medsrv plugin 2008-06-11 07:45:25 +00:00
Martin Willi ddedf511bb fixed compile error in smp plugin 2008-06-10 11:29:46 +00:00
Tobias Brunner ea0823dffd ECDSA with OpenSSL 2008-06-10 09:08:27 +00:00
Martin Willi 5a22a02156 DNS resolving of ike_cfg hosts dynamically on demand 2008-06-06 15:05:54 +00:00
Andreas Steffen 1e5522ffd7 convert comma-separated RDNs into slash-separated OpenSSL --subject format 2008-06-05 19:28:08 +00:00
Martin Willi 6649a3ca80 fixed --utc parsing position
support for DN filtering usign id="CN=asdf, O=asdf",addr=1.1.1.1
changed order of --leases columns
2008-06-05 13:56:10 +00:00
Martin Willi 4fa74562ae fixed UTC identitation
implement filtering in --leases
2008-06-05 08:52:27 +00:00
Andreas Steffen 89c87995e2 cosmetics in size field of ipsec pool --status command 2008-06-04 22:20:19 +00:00
Martin Willi 2ba1f9e761 added pool statistics (size, online, lease count, with usage ratio) 2008-06-04 14:01:44 +00:00
Martin Willi f3e11fc478 some input validation checks for --add and --resize
--purge keeps an entry for each address to allow their reallaction
2008-06-04 13:18:55 +00:00
Andreas Steffen f9b1bcad24 do not list empty certuribase strings 2008-05-24 05:47:37 +00:00
Andreas Steffen 7dfb8a1bde fix caption alignment if date is displayed in local time 2008-05-23 19:21:08 +00:00
Martin Willi 5e17e35c8d fixed some compiler warnings 2008-05-23 15:49:43 +00:00
Andreas Steffen c7d81ad12c added --utc option to ipsec pool 2008-05-23 15:46:25 +00:00
Andreas Steffen 0672aa7b0e added display of holderIssuer, holderSerial, and authorityKeyIdentifier 2008-05-23 14:24:24 +00:00
Andreas Steffen eaa1399812 fixed the strongswan.conf path 2008-05-22 21:59:30 +00:00
Andreas Steffen 7199d22e77 implement basic listing of attribute certificates 2008-05-22 21:58:22 +00:00
Andreas Steffen a327ee9589 suppress listing of integrity algorithm if it is undefined 2008-05-17 21:52:58 +00:00
Martin Willi 1ba62b5562 loading default modules depending on configure options 2008-05-16 08:52:32 +00:00
Martin Willi a3d92a3745 plugin load configuration in strongswan.conf
some components accept a "component.load" option with a space separated list of plugins to load
  libcharon- plugins are now handled the same way as libstrongswan- plugins
2008-05-15 14:01:26 +00:00
Martin Willi 89658f6d6c static leases use 0, not NULL timeout
fixed static leases
2008-05-15 09:26:47 +00:00
Martin Willi 782db7edd1 prototype of mediation client database plugin 2008-05-14 07:26:19 +00:00
Martin Willi 0fd4caea66 handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication 2008-05-14 06:49:31 +00:00
Martin Willi 4d4fc2eaa1 fixed "pool --purge" on mysql 2008-05-13 07:39:24 +00:00
Martin Willi 5373f2a642 fixed lookup for expired leases
initializing database if in inconsistent state
2008-05-13 07:24:53 +00:00
Andreas Steffen f85d02a419 fixed typos 2008-05-11 20:36:14 +00:00
Andreas Steffen 95c297b580 added missing ipcomp DB type definition 2008-05-11 16:41:51 +00:00
Martin Willi 6cf1215e3c ported IP pool to mysql 2008-05-09 15:01:22 +00:00
Martin Willi 7051ef4091 usable prototype of "ipsec pool" tool 2008-05-09 12:55:41 +00:00
Martin Willi f3bcd7f041 correctly reassigning valid leases 2008-05-09 12:22:20 +00:00
Tobias Brunner d4aad55434 IPComp for IKEv2 2008-05-08 16:19:11 +00:00
Martin Willi 0f074a4344 implemented append mode for xcbc, testcase 2008-05-08 14:51:37 +00:00
Martin Willi affd7a90ba moved RAW public key support to a separate plugin (pubkey) 2008-05-08 13:16:42 +00:00
Martin Willi 5b7ec6d4e0 renamed med_db plugin to medsrv, as we will introduce an additional medcli client plugin 2008-05-08 12:11:30 +00:00
Martin Willi 25b12c696b replaced --with-gid/uid by --with-group/user
using named users, groups
fixed capability dropping in pluto
2008-05-08 10:58:04 +00:00
Martin Willi 5302703407 prototype of sql pool administration utility 2008-05-07 09:37:08 +00:00
Martin Willi bc1f02a860 providing medation configuration through med_db plugin 2008-05-06 13:44:14 +00:00
Martin Willi 27d04e055d implemented XCBC algorithms (signer, prf) for IKE on top of a crypter
supporting ike=...-aesxcbc-... in ipsec.conf 
added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal
AES XCBC testcase
2008-04-30 14:26:24 +00:00
Martin Willi 3444390241 supporting multiple comma seperated subnets in left/rightsubnet definition
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
2008-04-25 12:41:37 +00:00
Martin Willi 5e6bbf4f77 added _GNU_SOURCE and limits.h to build against glibc-2.8 2008-04-24 13:49:20 +00:00
Martin Willi c624081a7f added missing base64 chunk test 2008-04-24 13:28:18 +00:00
Martin Willi 9213ad27c2 replaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions 2008-04-24 13:26:22 +00:00
Martin Willi 8570c648f1 fixed AES-128 test 2008-04-22 09:00:27 +00:00
Martin Willi 65456bfe33 added AES-128 unit test 2008-04-22 08:33:55 +00:00
Andreas Steffen 1d5d6f9667 Hash and URL cosmetics 2008-04-18 21:27:08 +00:00
Martin Willi fa3fe3c1cf sql pool prototype 2008-04-18 11:51:58 +00:00