denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,210 Commits 1 Branch 0 Tags
daccbee77ebdce3b67e8ffddd61eb720d9fe8007
Commit Graph
281 Commits
Author SHA1 Message Date
Andreas Steffen b0e40caafb NAT-T conditions were not inherited during IKE_SA rekeying 2008-01-29 01:41:47 +00:00
Martin Willi 3a36ce1164 added missing hasher include 2008-01-03 10:42:21 +00:00
Martin Willi b8461a37db fixed EAP-MD5 to accept Name attribute in challenge 2007-12-18 10:44:44 +00:00
Martin Willi 0f806802ae implemented Expanded EAP types to support vendor specific methods 2007-12-13 17:31:21 +00:00
Martin Willi 3243ac6d5e fixed actual ID length when AT_IDENTITY gets padded 2007-12-13 14:39:38 +00:00
Martin Willi 26e2467692 ported EAP-AKA branch into trunk 2007-12-13 10:54:29 +00:00
Martin Willi 4b403e7672 merged EAP-MD5 into trunk 2007-12-12 14:29:10 +00:00
Martin Willi 3895125275 removed c++ style comments 
fixed compiler warnings
 2007-12-04 10:48:27 +00:00
Martin Willi b8249ff5ed fixed mobike/auth_lifetime in conjunction with p2p-natt 2007-12-04 10:05:36 +00:00
Andreas Steffen addc4b3ce4 removed redundant server reflexive endpoint debug message 2007-12-04 00:45:00 +00:00
Andreas Steffen 3af513753a improved P2P_ENDPOINT debugging 2007-12-03 23:06:17 +00:00
Martin Willi 7805ad302d moved AUTH_LIFETIME handling in its own task (cleaner separation, proper payload order) 2007-12-03 10:52:18 +00:00
Tobias Brunner 17d6e9aa00 improving [3361]: moved one of the added return values 2007-11-22 11:22:33 +00:00
Andreas Steffen f210387a6b added two return statements comitted by Marius Tomaschewski 2007-11-21 23:42:27 +00:00
Martin Willi ee61471113 implemented RFC4478 (repeated authentication) 
changed %V printf handler to take a time delta, %#V now takes two arguments
 2007-11-20 12:06:40 +00:00
Martin Willi 91b16af0fa fixed NO_PROPOSAL_CHOSEN response on IKE_SA_INIT 2007-11-14 09:41:08 +00:00
Andreas Steffen d5da42a9e4 fixed _updown target for ipv6 2007-11-06 13:45:54 +00:00
Martin Willi 00fb758755 adding new virtual ip before deleting old one to keep IP on reauthentication 2007-10-25 07:50:23 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Tobias Brunner 56db479192 ID payload with explicit payload type 2007-10-02 11:55:10 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 011fb1b97e removed accidentally checked in debugging code 2007-10-01 12:25:26 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi f215e91999 implemented more aggressive MOBIKE path probing 
do not queue more than one MOBIKE task
 2007-09-28 08:22:37 +00:00
Tobias Brunner 278396b6da typos 2007-09-27 10:36:03 +00:00
Martin Willi d9d69536b0 improved MOBIKE roaming between interfaces 2007-09-24 12:15:25 +00:00
Andreas Steffen 703b4b0332 connection name to IKE_SA initiating 2007-09-15 20:30:04 +00:00
Andreas Steffen a2ab401c56 put IKE_SA and CHILD_SA names in single quotes 2007-09-15 16:06:58 +00:00
Andreas Steffen be682af3e8 log name of IKE_SA in state changes 2007-09-15 15:54:51 +00:00
Andreas Steffen 3f4076b7c8 log name of established IKE_SA 2007-09-15 15:54:30 +00:00
Andreas Steffen 21b3099ac4 log name of established CHILD_SA 2007-09-15 15:53:10 +00:00
Tobias Brunner eff806eb5a added missing 'break' in checkout_by_peer 2007-09-13 13:00:23 +00:00
Martin Willi dd52993068 only switch to port 4500 if we are on 500: fixed reauthentication in NAT 
scenarios
 2007-09-12 11:11:10 +00:00
Andreas Steffen 794d2526b4 removed unused chunk variable 2007-09-12 07:54:56 +00:00
Martin Willi a8827c9b63 moving virtual IP when interface changes due mobike 2007-09-12 07:36:45 +00:00
Martin Willi 12fa4387c6 fixed NAT detection with mobike 2007-09-12 07:14:05 +00:00
Andreas Steffen 1cb2cb622e overwrite shared_key with random bytes before freeing it 2007-09-11 21:06:46 +00:00
Andreas Steffen f0c156fbc9 replaced get_rsa_private_key() by rsa_signature() in order restrict the distribution of private key material 2007-09-11 10:18:25 +00:00
Martin Willi 5474dc6500 implemented routeability checks for mobike (experimental) 2007-09-03 12:37:25 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option 
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
 2007-08-29 12:11:25 +00:00
Martin Willi 98f97433af rerouting CHILD_SA if its IKE_SA gets deleted 2007-08-27 09:10:12 +00:00
Andreas Steffen c045d90a8e corrected debug output 2007-08-10 11:23:45 +00:00
Tobias Brunner c019260e01 backports from the p2p-nat-t branch: 
* double assignment of function ''destroy'' in some jobs
 * typos
 2007-07-19 14:12:19 +00:00
Martin Willi c87395908a not touching IKE_SA_INIT from ike_mobike_t anymore 2007-07-19 08:08:22 +00:00
Martin Willi cc68e173fe fixed payload order (Nonce, KE) for IKE_SA_INIT 2007-07-16 07:01:49 +00:00
Martin Willi 29100db902 changed mobike behavior to NOT use additional responder addresses until we have path discovery 2007-07-04 07:26:34 +00:00
Martin Willi 419201c15d fixed responder initiated CHILD_SA rekeying when using virtual IPs 2007-07-04 06:27:33 +00:00
Martin Willi 7b8bae9941 fixed firewall script invocation when interface is not available anymore 2007-07-03 13:49:29 +00:00
Martin Willi 3bc62fe70e improved MOBIKE: 
prefer address family already used
  do not change address implicit when mobike supported
  handle multiple simultaneous roaming requests more properly
  proper enabling/disabling of UDP encapsulation
 2007-07-03 12:32:38 +00:00
Andreas Steffen bcac22f3a6 DBG1 level for 'peer supports MOBIKE' debug message 2007-07-02 20:13:15 +00:00