denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,952 Commits 1 Branch 0 Tags
d4113a42e9ac5c1085bebc07a5aa8da20174d52d
Commit Graph
4952 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi d4113a42e9 support for IKE_SA rekeying sync 2010-04-07 13:55:12 +02:00
Martin Willi aa98188af5 IKE_SA activation/deactivation magic using a fifo socket 2010-04-07 13:55:12 +02:00
Martin Willi c94fe198e9 syncing of complete IKE/CHILD_SAs works 2010-04-07 13:55:11 +02:00
Martin Willi 7999be5b0e pushing basic CHILD_SA sync data to backup node 2010-04-07 13:55:11 +02:00
Martin Willi 765935c8f6 basic syncing of IKE_SAs 
recreating SAs with keymat derivation
 2010-04-07 13:55:11 +02:00
Martin Willi 190edaf527 added a dispatcher class to receive HA sync messages 
simple attribute parser enumerator (probably needs a cleaner implementation)
 2010-04-07 13:55:11 +02:00
Martin Willi 12ec91ba3a generating basic IKE_SA sync messages 
pushing to statically configured failover node
 2010-04-07 13:55:11 +02:00
Martin Willi e5e91eec29 set up basic infrastructure ha_sync plugin 2010-04-07 13:55:11 +02:00
Martin Willi e16d76f9a4 added child_sa serialization to ha_sync plugin 2010-04-07 13:55:11 +02:00
Martin Willi e67f5136c0 HA sync plugin stub 2010-04-07 13:55:11 +02:00
Andreas Steffen e6e8eb09dd fixed ikev1/protoport-route timing 2010-04-07 13:24:58 +02:00
Andreas Steffen c3379af391 removed whitespace 2010-04-07 13:07:11 +02:00
Andreas Steffen ef4aa67bf7 generated new research and sales CA certs for carol and dave, respectively 2010-04-07 13:05:17 +02:00
Tobias Brunner 0a4dc78755 Some whitespace fixes. 2010-04-06 12:56:06 +02:00
Tobias Brunner e41932320c Explicitly unload plugins before deinitializing libhydra and libstrongswan in pluto. 2010-04-06 12:47:41 +02:00
Tobias Brunner 894936ce9e Replaced some DBG_LIB with more specific groups. 2010-04-06 12:47:40 +02:00
Tobias Brunner 8b0e09103b Adding DBG_LIB to all calls of libstrongswan's version of DBG*. 2010-04-06 12:47:40 +02:00
Tobias Brunner 9ed6341d3f Adding support for debug groups in libstrongswan's logger. 2010-04-06 12:47:40 +02:00
Tobias Brunner 3fdee23f18 Move debug groups from charon's bus.h to libstrongswan's debug.h. 2010-04-06 12:47:40 +02:00
Tobias Brunner 9f3df622e4 Manually loading the pluto.(n)dns* settings is not needed anymore. 2010-04-06 12:47:40 +02:00
Tobias Brunner 7ac6060e8d Use daemon-specific config for the attr plugin. 2010-04-06 12:47:40 +02:00
Tobias Brunner a5ec302547 Moved attr plugin from libcharon to libhydra. 2010-04-06 12:47:40 +02:00
Tobias Brunner facf887253 Store the name of the daemon that initialized libhydra to load daemon-specific settings. 2010-04-06 12:47:40 +02:00
Tobias Brunner e82b5755be Added pluto/whack output to 'ipsec leases'. 2010-04-06 12:47:40 +02:00
Tobias Brunner 6bfa8e907c Added options to whack to query in-memory leases. 2010-04-06 12:47:39 +02:00
Tobias Brunner 4db0af9080 Added function to list the leases of the in-memory pools. 2010-04-06 12:47:39 +02:00
Tobias Brunner 4e06abe0fa Delete the in-memory IP address pools if a connection gets deleted. 
This fixes ipsec reload.
 2010-04-06 12:47:39 +02:00
Tobias Brunner bd22823358 Use whack_attribute in pluto to provide in-memory IP address pools. 
The pools are configured by setting rightsourceip in ipsec.conf to a
network in CIDR notation.
 2010-04-06 12:47:39 +02:00
Tobias Brunner 89715bd790 Adding a whack_attribute class which manages in-memory pools in pluto and is very similar to stroke_attribute. 2010-04-06 12:47:39 +02:00
Tobias Brunner c9235353f8 Use a read-write lock in stroke_attribute to increase concurrency. 2010-04-06 12:47:39 +02:00
Tobias Brunner fb111e5507 Make in-memory pool thread-safe. 2010-04-06 12:47:39 +02:00
Tobias Brunner 8c9f5bad8b Migrated stroke_attribute_t to METHOD/INIT macros. 2010-04-06 12:47:38 +02:00
Tobias Brunner ac5fb545c5 Extracted in-memory IP address pool from stroke plugin to libhydra. 2010-04-06 12:47:38 +02:00
Martin Willi 84aa96e5f5 Invoke updown hook if IKE_SA delete is enforced in deleting state 2010-04-06 12:11:28 +02:00
Andreas Steffen 586c137016 prolonged Research and Sales CA certs 2010-04-06 12:05:39 +02:00
Andreas Steffen 7d00ebfb54 wait one second before running evaluations 2010-04-06 10:55:59 +02:00
Andreas Steffen efd16e405a increase UML root file system to 700 MB 2010-04-05 20:23:20 +02:00
Andreas Steffen d6457833ec added support of PEM output by ipsec pki --gen|pub commands to NEWS 2010-04-05 14:08:06 +02:00
Andreas Steffen 5ee07585aa added ikev2/nat-virtual-ip scenario 2010-04-05 14:03:38 +02:00
Andreas Steffen a287bdd46c farp scenario requires logging of arp packets 2010-04-05 14:01:29 +02:00
Andreas Steffen eb11d1c58c added ikev2/farp scenario 2010-04-05 12:50:32 +02:00
Andreas Steffen b49cbd68a6 added dave2 and carol2 entries to /etc/hosts 2010-04-05 12:50:07 +02:00
Andreas Steffen 29cf15a919 PEM encoding for OpenSSL RSA and EC public and private keys 2010-04-04 23:59:24 +02:00
Andreas Steffen cea2857263 PEM encoding for GMP RSA public and private keys 2010-04-04 19:11:18 +02:00
Andreas Steffen e3943f5559 fixed short option name 2010-04-04 10:30:08 +02:00
Andreas Steffen b2be771ad8 fixed typo 2010-04-04 10:29:36 +02:00
Andreas Steffen efcd3c7a63 fixed doxygen group 2010-04-03 21:55:30 +02:00
Andreas Steffen 0dee20d958 change #define to PEM_BUILDER_H_ 2010-04-03 21:43:27 +02:00
Thomas Egerer 980f0eccd0 Fixed use of stack local variable outside of function scope 2010-03-31 16:44:31 +02:00
Thomas Egerer a47576bff7 Fixed undefined behavior in use of stack variable 2010-03-31 11:04:27 +02:00