Andreas Steffen
|
241d2ff3bc
|
support of ldap-based crl fetching
|
2007-04-06 09:44:06 +00:00 |
|
Andreas Steffen
|
4c56bd64e5
|
removed list_crls() and list_ocsp() methods
|
2007-04-06 09:43:20 +00:00 |
|
Andreas Steffen
|
3c5c3431b3
|
removed list_crls() and list_ocsp() methods
|
2007-04-06 09:42:45 +00:00 |
|
Andreas Steffen
|
8883eef7b8
|
support cachecrls=yes
|
2007-04-05 17:07:14 +00:00 |
|
Andreas Steffen
|
e58afb1a0a
|
support of crlcheckinterval=0 to disable IKEv2 CRL fetching
|
2007-04-04 07:49:05 +00:00 |
|
Martin Willi
|
80b7162531
|
improved log output for checkout_by_message()
|
2007-04-04 07:11:12 +00:00 |
|
Andreas Steffen
|
d15d1cc4f3
|
recognize strongSwan 2.8.4 VID
|
2007-04-04 05:25:06 +00:00 |
|
Andreas Steffen
|
3d62a7d225
|
fixed crl fetching bug
|
2007-04-03 22:02:17 +00:00 |
|
Andreas Steffen
|
a0eaa59b50
|
implemented dynamic http-based CRL fetching
|
2007-04-03 21:11:23 +00:00 |
|
Andreas Steffen
|
5d6dc162f2
|
send VID_NATT_IETF_02_N for Windows 2003 server support
|
2007-04-03 21:10:08 +00:00 |
|
Andreas Steffen
|
a8f02ad5f5
|
implemented dynamic http-based CRL fetching
|
2007-04-03 21:09:11 +00:00 |
|
Andreas Steffen
|
f166af2c0a
|
implemented http get method
|
2007-04-03 19:46:50 +00:00 |
|
Andreas Steffen
|
b0f9f02ca4
|
added --enable-nat-transport and --disable-vendor-id configuration options
|
2007-04-03 07:58:34 +00:00 |
|
Andreas Steffen
|
a0c15611a4
|
bug fix: check existence of encryption key before sending encrypted notification
|
2007-04-02 19:04:51 +00:00 |
|
Martin Willi
|
73390cce24
|
removed unneded includes
|
2007-03-30 12:24:31 +00:00 |
|
Martin Willi
|
3374c8b1c8
|
using IFA_LOCAL for interface enumeration to support ppp links
|
2007-03-30 09:21:48 +00:00 |
|
Martin Willi
|
b9e363f86f
|
added IKE_SA_INIT retransmission detection
fixed thread exhaustion when IKE_SA is blocked for a longer time
|
2007-03-29 14:20:10 +00:00 |
|
Martin Willi
|
891e69944f
|
implemented DoS protection with cookies and IP filter
|
2007-03-29 11:26:55 +00:00 |
|
Martin Willi
|
361e6df8c1
|
fixed task manager message id bug for cookies
|
2007-03-29 11:08:30 +00:00 |
|
Martin Willi
|
a6bdc731b1
|
added retry limit for IKE_SA_INIT (give up after 5 cookie failures)
|
2007-03-29 11:07:49 +00:00 |
|
Martin Willi
|
25eaae17db
|
added chunk_from_thing() macro
|
2007-03-29 11:06:59 +00:00 |
|
Andreas Steffen
|
6819e4d754
|
implemented ipsec purgeocsp
|
2007-03-28 20:43:38 +00:00 |
|
Andreas Steffen
|
6af6c0bfc3
|
cosmetics
|
2007-03-28 20:43:25 +00:00 |
|
Andreas Steffen
|
2bfadf7f3b
|
implemented ipsec purgeocsp
|
2007-03-28 20:43:11 +00:00 |
|
Martin Willi
|
4deb89485c
|
removed send_queue, handled internally in sender_t know
do header parsing in receiver, ready for cookie integration
|
2007-03-28 13:34:02 +00:00 |
|
Martin Willi
|
077a6fff95
|
implemented a simple IP blocking filter in receiver thread
|
2007-03-28 09:23:03 +00:00 |
|
Martin Willi
|
9179ac9667
|
merged changes from eap-aka trunk
|
2007-03-28 07:32:54 +00:00 |
|
Andreas Steffen
|
9d9c72e317
|
is_trusted() adds cert_status to cert_to_be_trusted
|
2007-03-28 05:38:42 +00:00 |
|
Andreas Steffen
|
203e15fe03
|
fixed delta time format: 2 seconds, 1 second, 0 seconds
|
2007-03-28 05:37:20 +00:00 |
|
Andreas Steffen
|
7a89380eca
|
replaced expired since %V by expired %V ago
|
2007-03-28 05:36:27 +00:00 |
|
Martin Willi
|
c00840478e
|
fixed state and logging of IKE_SA when using EAP authentication
|
2007-03-27 16:11:29 +00:00 |
|
Martin Willi
|
e23a59f635
|
fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progress
|
2007-03-27 13:32:12 +00:00 |
|
Martin Willi
|
b34f86f545
|
giving up EAP-SIM authentication after 3 failed challenges
|
2007-03-27 06:24:17 +00:00 |
|
Andreas Steffen
|
1bf8530507
|
implemented ipsec listocsp function
|
2007-03-27 04:40:25 +00:00 |
|
Andreas Steffen
|
469e9686ae
|
cmp_chunk returns int argument
|
2007-03-27 04:39:44 +00:00 |
|
Andreas Steffen
|
0953f2a65f
|
registered PRINT_CERTINFO function with symbol Y
|
2007-03-27 04:38:22 +00:00 |
|
Andreas Steffen
|
ef49c3486a
|
added chunk_compare() which compares orders chunks
|
2007-03-27 04:37:15 +00:00 |
|
Andreas Steffen
|
0f7995b11e
|
added CERT_ROOF
|
2007-03-23 22:01:59 +00:00 |
|
Andreas Steffen
|
387c29c62d
|
added CERT_ROOF
|
2007-03-23 22:01:40 +00:00 |
|
Andreas Steffen
|
d7eee6e1ca
|
added certificate encoding OCSP content
|
2007-03-23 21:53:12 +00:00 |
|
Andreas Steffen
|
e92b363955
|
strongSwan version bumps and Windows Vista VIDs
|
2007-03-23 17:19:57 +00:00 |
|
Martin Willi
|
92275b0981
|
added CHILD_SA compare check for rekeying collisions
|
2007-03-22 07:34:42 +00:00 |
|
Martin Willi
|
ddd1b31595
|
adjusted rekey-retry delay and jitter
|
2007-03-21 16:12:16 +00:00 |
|
Martin Willi
|
4315f5c88b
|
fixed some rekey collision issues
added retry with jitter when rekeying fails
|
2007-03-21 16:11:14 +00:00 |
|
Martin Willi
|
6de7cf4e2f
|
fixed SPI byte order
|
2007-03-21 16:09:27 +00:00 |
|
Martin Willi
|
eef0859043
|
fixed child rekey collision
implemented ike rekey collision
|
2007-03-21 14:42:49 +00:00 |
|
Martin Willi
|
195ada0b4b
|
handling of CHILD_SA rekeying collisions
|
2007-03-21 09:25:36 +00:00 |
|
Martin Willi
|
403f8fd300
|
fixed inproper delete of CHILD_SA
|
2007-03-21 07:01:14 +00:00 |
|
Martin Willi
|
128ca073d2
|
prevent from initiating to %any
|
2007-03-21 07:00:04 +00:00 |
|
Martin Willi
|
0f33e8264a
|
fixed some exchange collisions (except IKE/CHILD rekeying)
|
2007-03-20 16:13:21 +00:00 |
|