Commit Graph
19030 Commits
Author SHA1 Message Date
Martin Willi 0592212f23 fixed builder_cancel macro to return NULL on failed build 2008-10-06 13:08:49 +00:00
Martin Willi aa1b90a5b2 do not run CHILD_SA delete action if rekeying 2008-10-03 16:01:14 +00:00
Andreas Steffen 09d7ef2614 added --disable-kernel-netlink configure option 2008-10-03 03:27:42 +00:00
Martin Willi 9c0aa46b64 use dpd_action also for remotely closed tunnels 2008-10-02 13:47:19 +00:00
Martin Willi 7827997346 also respect the mobike=no setting as responder 2008-09-30 12:36:58 +00:00
Martin Willi ceff3064fe using signed return value for read() 2008-09-30 06:27:50 +00:00
Tobias Brunner a341a68fac merging renaming of mode_t to ipsec_mode_t back to trunk 2008-09-25 13:56:23 +00:00
Tobias Brunner 507f26f685 merging modularized kernel interface back to trunk 2008-09-25 07:56:58 +00:00
Tobias Brunner 80fc5bd95c missing '_' added 2008-09-19 13:20:09 +00:00
Andreas Steffen 414caff027 version bump to 4.2.8 2008-09-18 00:42:22 +00:00
Andreas Steffen b37cda8211 completed NEWS for 4.2.7 release 2008-09-18 00:34:31 +00:00
Martin Willi cdaf57ec34 fixed DH value range testing 2008-09-17 09:02:30 +00:00
Martin Willi 73f6886a50 checking mpz_export return value properly
fixes a potential DoS attack if a DH value of zero gets processed
2008-09-17 08:10:48 +00:00
Andreas Steffen b33c11b6c7 stroke parses and lists AC groups 2008-09-17 02:17:01 +00:00
Martin Willi bb34d2611f updated ubuntu packages for release compatible with NM svn20080908 2008-09-12 13:48:11 +00:00
Martin Willi f061d83358 ported NM plugin to upstream NetworkManager changes
splitted secrets (4031)
	using uuid in auth-dialog (4053)
2008-09-12 13:28:31 +00:00
Martin Willi 346bb576a2 allow multiple DELETE payloads in an informational message 2008-09-11 11:14:09 +00:00
Martin Willi b1f4785428 updated NEWS 2008-09-05 15:10:56 +00:00
Martin Willi 07447ea597 fixed ubuntu distribution/typos 2008-09-05 14:44:21 +00:00
Martin Willi f494dbd494 new ubuntu package release 2008-09-05 14:01:47 +00:00
Martin Willi 1d03954aad NM plugin supports (encrypted) private key files 2008-09-05 13:26:58 +00:00
Andreas Steffen 07d7f9a402 time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s) 2008-09-04 16:19:46 +00:00
Martin Willi e376d75f96 some NEWS 2008-09-04 14:52:33 +00:00
Martin Willi 0c6a489046 fixed some translations/encoding 2008-09-04 13:51:35 +00:00
Martin Willi f0e8a8f7f3 an initial German translation for NM plugin 2008-09-04 13:39:37 +00:00
Martin Willi 3876c44175 updated debian build to extended nm plugin 2008-09-04 11:55:31 +00:00
Martin Willi 82840e6c92 reduced nm verbosity 2008-09-04 10:35:20 +00:00
Martin Willi aff26a62c3 implemented NetworkManager certificate/private key authentication using ssh-agent 2008-09-04 08:40:37 +00:00
Martin Willi 994ed35312 added a configure option to select charon binary 2008-09-04 08:37:31 +00:00
Martin Willi 6af6f88a79 agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific private key from the agent 2008-09-04 08:35:11 +00:00
Andreas Steffen 60055b7e1c charon.keep_alive = 0 disables the sending of NAT keep alives 2008-09-03 19:00:08 +00:00
Andreas Steffen 3dfecde4c0 configure NAT keep alive interval using the charon.keep_alive key 2008-09-03 18:49:06 +00:00
Tobias Brunner 6283b1f1f8 typos 2008-09-03 07:44:46 +00:00
Martin Willi 703791715b handle INFORMATIONAL exchanges with NATD payloads in mobike task 2008-09-02 14:02:40 +00:00
Martin Willi 21c9546321 libstrongswan agent plugin to use ssh-agent for RSA signatures 2008-09-02 11:04:26 +00:00
Martin Willi 46eb41644d ported openac to credential factory changes 2008-09-02 11:01:05 +00:00
Martin Willi f7c17aa15c refactored credential builder
allow enumeration of matching builders
	try a second builder if the first one fails
	builder clones resources internally on demand
	caller frees added resources on failure and success
	stricter handling of non-supported build parts
2008-09-02 11:00:13 +00:00
Andreas Steffen 4da0116d78 OIDs used by strongSwan 2008-09-01 11:38:03 +00:00
Andreas Steffen 1a4d27c854 added thread_analysis tool 2008-09-01 11:19:07 +00:00
Martin Willi eb3e27059b use libcap for capability dropping
optional, must be enabled --with-capabilities=libcap
	will be extended to support --with-capabilities=libcap2
2008-08-29 09:24:14 +00:00
Andreas Steffen 8fa6f2dc66 streamlined ipsec listalgs output 2008-08-29 05:35:09 +00:00
Martin Willi e609b1cda2 capability API to allow plugin-controlled capability set 2008-08-28 16:27:48 +00:00
Martin Willi dc98e50153 cosmetics 2008-08-28 11:15:01 +00:00
Martin Willi e577ad3985 creating default IKE proposals dynamically using algorithm enumeration API 2008-08-28 11:07:57 +00:00
Martin Willi f1b014b9a3 separated sha1_prf implementation from sha1_hasher 2008-08-28 10:57:24 +00:00
Martin Willi 9482208633 crypto_factory algorithm enumeration API
implementation of "ipsec listalgs"
2008-08-28 09:24:42 +00:00
Tobias Brunner 8bbc7ca710 * allow to load templates from arbitrary places
* changed implementation of guest?/iface?
2008-08-28 08:05:07 +00:00
Tobias Brunner 6c20579a43 mkdir_p: utility function to create a directory and all required parent directories 2008-08-28 07:47:55 +00:00
Martin Willi 018ae7c1aa build scripts for ubuntu NetworkManager packages 2008-08-27 13:51:05 +00:00
Martin Willi ee210ca353 check user account validity after PAM authentication 2008-08-27 13:48:54 +00:00