Martin Willi
0592212f23
fixed builder_cancel macro to return NULL on failed build
2008-10-06 13:08:49 +00:00
Martin Willi
aa1b90a5b2
do not run CHILD_SA delete action if rekeying
2008-10-03 16:01:14 +00:00
Andreas Steffen
09d7ef2614
added --disable-kernel-netlink configure option
2008-10-03 03:27:42 +00:00
Martin Willi
9c0aa46b64
use dpd_action also for remotely closed tunnels
2008-10-02 13:47:19 +00:00
Martin Willi
7827997346
also respect the mobike=no setting as responder
2008-09-30 12:36:58 +00:00
Martin Willi
ceff3064fe
using signed return value for read()
2008-09-30 06:27:50 +00:00
Tobias Brunner
a341a68fac
merging renaming of mode_t to ipsec_mode_t back to trunk
2008-09-25 13:56:23 +00:00
Tobias Brunner
507f26f685
merging modularized kernel interface back to trunk
2008-09-25 07:56:58 +00:00
Tobias Brunner
80fc5bd95c
missing '_' added
2008-09-19 13:20:09 +00:00
Andreas Steffen
414caff027
version bump to 4.2.8
2008-09-18 00:42:22 +00:00
Andreas Steffen
b37cda8211
completed NEWS for 4.2.7 release
2008-09-18 00:34:31 +00:00
Martin Willi
cdaf57ec34
fixed DH value range testing
2008-09-17 09:02:30 +00:00
Martin Willi
73f6886a50
checking mpz_export return value properly
...
fixes a potential DoS attack if a DH value of zero gets processed
2008-09-17 08:10:48 +00:00
Andreas Steffen
b33c11b6c7
stroke parses and lists AC groups
2008-09-17 02:17:01 +00:00
Martin Willi
bb34d2611f
updated ubuntu packages for release compatible with NM svn20080908
2008-09-12 13:48:11 +00:00
Martin Willi
f061d83358
ported NM plugin to upstream NetworkManager changes
...
splitted secrets (4031)
using uuid in auth-dialog (4053)
2008-09-12 13:28:31 +00:00
Martin Willi
346bb576a2
allow multiple DELETE payloads in an informational message
2008-09-11 11:14:09 +00:00
Martin Willi
b1f4785428
updated NEWS
2008-09-05 15:10:56 +00:00
Martin Willi
07447ea597
fixed ubuntu distribution/typos
2008-09-05 14:44:21 +00:00
Martin Willi
f494dbd494
new ubuntu package release
2008-09-05 14:01:47 +00:00
Martin Willi
1d03954aad
NM plugin supports (encrypted) private key files
2008-09-05 13:26:58 +00:00
Andreas Steffen
07d7f9a402
time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s)
2008-09-04 16:19:46 +00:00
Martin Willi
e376d75f96
some NEWS
2008-09-04 14:52:33 +00:00
Martin Willi
0c6a489046
fixed some translations/encoding
2008-09-04 13:51:35 +00:00
Martin Willi
f0e8a8f7f3
an initial German translation for NM plugin
2008-09-04 13:39:37 +00:00
Martin Willi
3876c44175
updated debian build to extended nm plugin
2008-09-04 11:55:31 +00:00
Martin Willi
82840e6c92
reduced nm verbosity
2008-09-04 10:35:20 +00:00
Martin Willi
aff26a62c3
implemented NetworkManager certificate/private key authentication using ssh-agent
2008-09-04 08:40:37 +00:00
Martin Willi
994ed35312
added a configure option to select charon binary
2008-09-04 08:37:31 +00:00
Martin Willi
6af6f88a79
agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific private key from the agent
2008-09-04 08:35:11 +00:00
Andreas Steffen
60055b7e1c
charon.keep_alive = 0 disables the sending of NAT keep alives
2008-09-03 19:00:08 +00:00
Andreas Steffen
3dfecde4c0
configure NAT keep alive interval using the charon.keep_alive key
2008-09-03 18:49:06 +00:00
Tobias Brunner
6283b1f1f8
typos
2008-09-03 07:44:46 +00:00
Martin Willi
703791715b
handle INFORMATIONAL exchanges with NATD payloads in mobike task
2008-09-02 14:02:40 +00:00
Martin Willi
21c9546321
libstrongswan agent plugin to use ssh-agent for RSA signatures
2008-09-02 11:04:26 +00:00
Martin Willi
46eb41644d
ported openac to credential factory changes
2008-09-02 11:01:05 +00:00
Martin Willi
f7c17aa15c
refactored credential builder
...
allow enumeration of matching builders
try a second builder if the first one fails
builder clones resources internally on demand
caller frees added resources on failure and success
stricter handling of non-supported build parts
2008-09-02 11:00:13 +00:00
Andreas Steffen
4da0116d78
OIDs used by strongSwan
2008-09-01 11:38:03 +00:00
Andreas Steffen
1a4d27c854
added thread_analysis tool
2008-09-01 11:19:07 +00:00
Martin Willi
eb3e27059b
use libcap for capability dropping
...
optional, must be enabled --with-capabilities=libcap
will be extended to support --with-capabilities=libcap2
2008-08-29 09:24:14 +00:00
Andreas Steffen
8fa6f2dc66
streamlined ipsec listalgs output
2008-08-29 05:35:09 +00:00
Martin Willi
e609b1cda2
capability API to allow plugin-controlled capability set
2008-08-28 16:27:48 +00:00
Martin Willi
dc98e50153
cosmetics
2008-08-28 11:15:01 +00:00
Martin Willi
e577ad3985
creating default IKE proposals dynamically using algorithm enumeration API
2008-08-28 11:07:57 +00:00
Martin Willi
f1b014b9a3
separated sha1_prf implementation from sha1_hasher
2008-08-28 10:57:24 +00:00
Martin Willi
9482208633
crypto_factory algorithm enumeration API
...
implementation of "ipsec listalgs"
2008-08-28 09:24:42 +00:00
Tobias Brunner
8bbc7ca710
* allow to load templates from arbitrary places
...
* changed implementation of guest?/iface?
2008-08-28 08:05:07 +00:00
Tobias Brunner
6c20579a43
mkdir_p: utility function to create a directory and all required parent directories
2008-08-28 07:47:55 +00:00
Martin Willi
018ae7c1aa
build scripts for ubuntu NetworkManager packages
2008-08-27 13:51:05 +00:00
Martin Willi
ee210ca353
check user account validity after PAM authentication
2008-08-27 13:48:54 +00:00