denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,648 Commits 3 Branches 0 Tags
d93e2e5409b9d53ea0f2efb303691f0ce2d091ce
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tobias Brunner 2402dee177 Port floating patch partially reversed. 
If MOBIKE is enabled, we do have to switch to port 4500 with the
IKE_AUTH request, that is, before we know whether the other peer
actually supports MOBIKE or not.
 2010-08-30 14:54:31 +02:00
Tobias Brunner 277f02ce9e Slightly refactored port floating. 
In case of MOBIKE, only float to port 4500 if the other peer actually supports MOBIKE.
 2010-08-30 13:42:58 +02:00
Tobias Brunner 0433b4172b Typo in doxygen comment fixed. 2010-08-30 10:49:32 +02:00
Tobias Brunner fde2d34d0f Fixed ME after introduction of AEAD wrapper. 2010-08-30 10:48:09 +02:00
Tobias Brunner cb7a0cef48 Fixed documentation of XAUTH in ipsec.secrets. 2010-08-26 10:25:08 +02:00
Tobias Brunner 6432669fa2 Added support for early and late calls to Vstr wrappers. 
That is, prevent a SIGSEGV if Vstr wrappers are called before printf_hook_t
is initialized and after it is destroyed.
 2010-08-10 13:00:20 +02:00
Tobias Brunner fa9f101345 Properly initialize libstrongswan in _copyright. 
This is required if libvstr is used.
 2010-08-06 19:56:42 +02:00
Tobias Brunner 7c3dd613d7 Added missing Vstr wrappers for asprintf. 2010-08-06 19:56:42 +02:00
Tobias Brunner edb82ab8ae Some Doxygen fixes. 2010-08-05 11:53:53 +02:00
Tobias Brunner 744b83c7c9 Fixed loading of secrets with IDs. 
Since the ID string is manually terminated by a null character, write
permission is required for the mmapped ipsec.secrets.
 2010-08-04 16:03:46 +02:00
Tobias Brunner dca2d89209 Fixed loading of private keys without password. 
The chunk storing the password was not correctly initialized, resulting
in a segmentation fault when no password was specified in ipsec.secrets.
 2010-08-04 14:22:48 +02:00
Tobias Brunner 83628fd600 Accept EAP_ONLY_AUTHENTICATION notifies from any client, now that IANA allocated an ID. 2010-08-04 12:58:53 +02:00
Tobias Brunner 12549bedea IKEv2 notification types updated. 2010-08-04 10:06:00 +02:00
Tobias Brunner f8029ca3f9 test_cert adapted to extended signature of get_encoding(). 2010-08-03 19:00:56 +02:00
Tobias Brunner 56bceda7b5 Fixed compiler warnings. 2010-08-03 19:00:46 +02:00
Tobias Brunner dcb4651d8c apidoc is actually a directory not a file. 2010-07-12 15:28:55 +02:00
Tobias Brunner af7b34b13b Added missing pool parameter in DHCP attribute provider. 2010-07-12 12:27:49 +02:00
Tobias Brunner f395f28e44 Added missing markt_t in load tester, also migrated to INIT/METHOD macros. 2010-07-06 09:29:18 +02:00
Tobias Brunner 83b23011de Some Doxygen fixes. 2010-07-05 15:04:30 +02:00
Tobias Brunner 8f7e8e075a Fixed typo. 2010-07-05 14:53:56 +02:00
Tobias Brunner 43ab542b66 Disable EAP-GTC on Android. 
The EAP-GTC plugin does not compile due to its dependency on PAM.
 2010-07-05 09:40:26 +02:00
Tobias Brunner c177076b50 Enabling some EAP plugins on Android. 2010-06-30 10:02:15 +02:00
Tobias Brunner 5430d6ab3c The x509 plugin is not needed anymore on Android, using OpenSSL. 2010-06-30 10:01:16 +02:00
Tobias Brunner 0f21ebc81d The signature of keystore_get changed again. 
With Android 2.2 (Froyo) the interface of keystore_get was changed once
again. The change was made to allow the keys to contain \0 characters.
 2010-06-28 17:18:53 +02:00
Tobias Brunner 6f52d3b077 Compiler warning fixed. 2010-06-28 08:50:30 +02:00
Tobias Brunner c0914c457b Increased the loglevel for the arguments received via Android control socket. 2010-06-24 14:46:25 +02:00
Tobias Brunner e9e2a4fecf Terminate charon from the Android plugin if the tunnel goes down after it was initiated successfully. 2010-06-24 14:30:06 +02:00
Tobias Brunner 7913a74c36 Initiate the tunnel in the Android plugin asynchronously. 
Also track its initiation using the registered listener.
 2010-06-24 14:30:05 +02:00
Tobias Brunner 8b775e99ea Implement the listener_t interface in the Android plugin to track the status of an SA. 2010-06-24 14:30:05 +02:00
Tobias Brunner 94ec9adc10 Helper function added to notify the Android frontend about status changes. 2010-06-24 14:30:05 +02:00
Tobias Brunner 024dd37fa0 Initiate consumes a child_sa reference, so get an additional one. 2010-06-24 14:30:05 +02:00
Tobias Brunner 5eb9eeb130 Use the same error code constants as in the Java frontend. 2010-06-24 14:30:05 +02:00
Tobias Brunner 359063caf7 Flush and destroy the send queue before unloading the socket plugins. 2010-06-24 14:30:05 +02:00
Tobias Brunner 9eb7f46b3d Do not install routes in the PF_KEY kernel interface if interface lookup failed. 2010-06-23 11:43:31 +02:00
Tobias Brunner a427e98da1 The signature of keystore_get was changed with Android 2.x. 2010-06-22 16:19:55 +02:00
Tobias Brunner f283520faf Avoid a segmentation fault if opening the Android control socket failed. 2010-06-22 16:18:22 +02:00
Tobias Brunner 61c950d9aa OpenSSL in Android 2.1+ lacks Elliptic Curve and ENGINE support. 
Unfortunately, opensslconf.h was not changed accordingly.
 2010-06-22 16:15:10 +02:00
Tobias Brunner c03ed4835c Allow to enable the kernel-pfkey plugin via Android.mk. 2010-06-22 16:14:14 +02:00
Tobias Brunner b7900d3258 Fixing the PF_KEY kernel interface on Android. 
In Android's in.h IPPROTO_COMP is not #defined but just an enum member.
 2010-06-22 16:12:07 +02:00
Tobias Brunner 1e3d66f8d3 Fixing compilation of the OpenSSL plugin if ENGINE support is disabled. 
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_ENGINE.
 2010-06-22 11:55:34 +02:00
Tobias Brunner 5a367e99c3 Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled. 
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_EC.
 2010-06-22 11:55:33 +02:00
Tobias Brunner 9b6db5cd2e Fixed plugin checks in Android.mk files. 2010-06-22 10:40:34 +02:00
Tobias Brunner 4f9b82bc1d Fixed compiler warning. 2010-06-15 19:58:59 +02:00
Tobias Brunner 499af811c0 Use vpn.dns* to store DNS servers (Android manages net.dns* using these). 2010-06-15 19:58:58 +02:00
Tobias Brunner be00d219cc Adding an interface that interacts with the Android Settings frontend. 2010-06-15 19:58:58 +02:00
Tobias Brunner c373f14947 Adding an Android specific credential set. 2010-06-15 19:58:58 +02:00
Tobias Brunner 51a00fb275 Adding an Android specific logger. 2010-06-15 19:58:58 +02:00
Tobias Brunner 946be4d357 Adding support for the native Linux capabilities interface. 
Note that this interface is deprecated and mainly added to support
Android. Use libcap, if possible.
 2010-06-15 19:58:30 +02:00
Tobias Brunner b77e493bea Explicitly refer to LIBCAP in Makefiles. 2010-06-15 19:57:31 +02:00
Tobias Brunner 404960e522 Run as vpn user on Android. 2010-06-15 19:57:31 +02:00
Tobias Brunner b02a03a5dd Truncate the PID file so that even if we fail to unlink it, the daemon can be restarted properly. 2010-06-15 19:57:14 +02:00
Tobias Brunner 4e9d313ff8 Explicitly include stdint.h for UINT64_MAX. 
This is required on FreeBSD 8.
 2010-06-15 15:31:46 +02:00
Tobias Brunner ed76b21652 Check for SADB_X_NAT_T_NEW_MAPPING in PF_KEY kernel interface. 
FreeBSD 8 does not support SADB_X_NAT_T_NEW_MAPPING whereas Linux and
the previous FreeBSD NAT-T patch both do.
 2010-06-15 15:31:10 +02:00
Tobias Brunner 668e84d904 Set the ports of all hosts installed via the PF_KEY kernel interface to zero. 2010-06-15 10:11:57 +02:00
Tobias Brunner 2e8a5e12ef Adding a basic unit test for hashtable_t. 2010-06-07 16:40:32 +02:00
Tobias Brunner b2ddaf0775 Adding a remove_at method to the hash table. 
This allows to remove key-value pairs while enumerating them.
 2010-06-07 16:36:26 +02:00
Tobias Brunner 88b6f14143 Migrated hashtable_t to INIT/METHOD macros. 2010-06-07 15:53:36 +02:00
Tobias Brunner 3d829c4c0a IPSEC_CONFDIR in ipsec script fixed. 2010-05-30 13:07:32 +02:00
Tobias Brunner 8f76653a4c Adding the version number to the most relevant manual pages. 2010-05-30 13:03:04 +02:00
Tobias Brunner 1d3a48b559 Updated and corrected the ipsec.secrets(5) manual page. 2010-05-30 12:29:32 +02:00
Tobias Brunner f115838bee Updated and corrected the ipsec.conf(5) manual page. 2010-05-30 12:29:26 +02:00
Tobias Brunner 28550caaa8 Updated and corrected the ipsec(8) manual page. 2010-05-30 12:29:18 +02:00
Tobias Brunner d070e0a6d1 Do not install trap policy if remote host is %any. 2010-05-28 15:43:12 +02:00
Tobias Brunner e3dd6b1475 Only include C files that start with the plugin name when building for Android. 2010-05-20 12:01:12 +02:00
Tobias Brunner 9ffb475e5d Typo fixed. 2010-05-18 13:59:23 +02:00
Tobias Brunner 9d843ee6fa Do a proper cleanup when printing usage info. 2010-05-04 18:34:27 +02:00
Tobias Brunner 6d7f4e0653 Moved syslog.h include. 2010-05-04 18:34:20 +02:00
Tobias Brunner 6b57f5edff Compiler warning fixed. 2010-05-04 18:28:28 +02:00
Tobias Brunner 726c0ae9d3 We have to rename thread_create on Mac OS X because it conflicts with a syscall. 2010-04-29 14:52:20 +02:00
Tobias Brunner 1c31d34ed5 Initialize libstrongswan in stroke (fixes Vstr logging). 2010-04-29 14:51:44 +02:00
Tobias Brunner 26a3d7e78e Initialize libstrongswan in starter (fixes Vstr logging). 2010-04-29 14:33:29 +02:00
Tobias Brunner 361f416d2c The mutex of a thread has to be locked when destroying it. 2010-04-29 13:30:51 +02:00
Tobias Brunner 257e27df07 Fixing out-of-tree build after adding dependency to config.status. 2010-04-29 13:29:53 +02:00
Tobias Brunner 6edbe1652b Integrating libhydra into the Android build system. 2010-04-12 16:47:47 +02:00
Tobias Brunner b73b3a033f Use openssl in Android by default. 2010-04-12 15:54:48 +02:00
Tobias Brunner 355c3a66b1 When logging to the database, the IDs of an IKE SA are initially NULL. 2010-04-12 13:51:10 +02:00
Tobias Brunner 9f4b02e31d Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan. 2010-04-10 12:10:04 +02:00
Tobias Brunner 0a4dc78755 Some whitespace fixes. 2010-04-06 12:56:06 +02:00
Tobias Brunner e41932320c Explicitly unload plugins before deinitializing libhydra and libstrongswan in pluto. 2010-04-06 12:47:41 +02:00
Tobias Brunner 894936ce9e Replaced some DBG_LIB with more specific groups. 2010-04-06 12:47:40 +02:00
Tobias Brunner 8b0e09103b Adding DBG_LIB to all calls of libstrongswan's version of DBG*. 2010-04-06 12:47:40 +02:00
Tobias Brunner 9ed6341d3f Adding support for debug groups in libstrongswan's logger. 2010-04-06 12:47:40 +02:00
Tobias Brunner 3fdee23f18 Move debug groups from charon's bus.h to libstrongswan's debug.h. 2010-04-06 12:47:40 +02:00
Tobias Brunner 9f3df622e4 Manually loading the pluto.(n)dns* settings is not needed anymore. 2010-04-06 12:47:40 +02:00
Tobias Brunner 7ac6060e8d Use daemon-specific config for the attr plugin. 2010-04-06 12:47:40 +02:00
Tobias Brunner a5ec302547 Moved attr plugin from libcharon to libhydra. 2010-04-06 12:47:40 +02:00
Tobias Brunner facf887253 Store the name of the daemon that initialized libhydra to load daemon-specific settings. 2010-04-06 12:47:40 +02:00
Tobias Brunner e82b5755be Added pluto/whack output to 'ipsec leases'. 2010-04-06 12:47:40 +02:00
Tobias Brunner 6bfa8e907c Added options to whack to query in-memory leases. 2010-04-06 12:47:39 +02:00
Tobias Brunner 4db0af9080 Added function to list the leases of the in-memory pools. 2010-04-06 12:47:39 +02:00
Tobias Brunner 4e06abe0fa Delete the in-memory IP address pools if a connection gets deleted. 
This fixes ipsec reload.
 2010-04-06 12:47:39 +02:00
Tobias Brunner bd22823358 Use whack_attribute in pluto to provide in-memory IP address pools. 
The pools are configured by setting rightsourceip in ipsec.conf to a
network in CIDR notation.
 2010-04-06 12:47:39 +02:00
Tobias Brunner 89715bd790 Adding a whack_attribute class which manages in-memory pools in pluto and is very similar to stroke_attribute. 2010-04-06 12:47:39 +02:00
Tobias Brunner c9235353f8 Use a read-write lock in stroke_attribute to increase concurrency. 2010-04-06 12:47:39 +02:00
Tobias Brunner fb111e5507 Make in-memory pool thread-safe. 2010-04-06 12:47:39 +02:00
Tobias Brunner 8c9f5bad8b Migrated stroke_attribute_t to METHOD/INIT macros. 2010-04-06 12:47:38 +02:00
Tobias Brunner ac5fb545c5 Extracted in-memory IP address pool from stroke plugin to libhydra. 2010-04-06 12:47:38 +02:00
Tobias Brunner 18c68f22c7 Revert "Use the same formatting as in the Makefiles of the other plugins. Makes refactorings easier." 
This reverts commit e91b116a62. Missed to
notice commit 89bf11d204.
 2010-03-26 10:47:09 +01:00
Tobias Brunner e91b116a62 Use the same formatting as in the Makefiles of the other plugins. Makes refactorings easier. 2010-03-26 10:40:14 +01:00
Tobias Brunner 70d70c8a2e Link libhydra to checksum_builder so the hydra object is defined. 2010-03-24 18:54:26 +01:00