denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
670 Commits 1 Branch 0 Tags
eea353466ec86ad5fd3fc4fb7ac560ebced64f3d
Commit Graph
73 Commits
Author SHA1 Message Date
Martin Willi eea353466e - reworked usage of IDs in various states 
- using ID_ANY for any, not NULL as before
- initiator sends IDr payload in IKE_AUTH when ID unique
 2006-04-27 11:38:24 +00:00
Martin Willi e168ee1785 - add connection names to connections 
- stroke status / ipsec status shows them
- added statusall for stroke
- added status by connection name
- some tests repaired, more to come
 2006-04-27 07:24:04 +00:00
Martin Willi 13e4a62f5c - added separate implementation for connection_store, credential_store, policy_store 
- added folder structure to config
- credentials are fetched solely on IDs now
 2006-04-25 10:06:30 +00:00
Martin Willi fcfeb3220f - fixed doxygen build 
- seperates now in lib and charon
 2006-04-20 13:12:35 +00:00
Martin Willi 9d7597bb12 - leak detective is usable, but does not show static function names 
- a script which gets address via ldd and resolves address via addr2line would be nice
- fixed a leak in child_sa with new detective ;-)
 2006-04-13 13:24:45 +00:00
Martin Willi 5113680f95 - split up in libstrong, charon, stroke, testing done 
- new leak detective with malloc hook in library
  - useable, but needs improvements
- logger_manager has now a single instance per library
  - allows use of loggers from any linking prog
- a LOT of other things
 2006-04-10 08:07:38 +00:00
Martin Willi 6862128151 ../svn-commit.tmp 2006-04-05 12:10:50 +00:00
Martin Willi dec598220b - rewrite of logger_manager, uses now one instance per context 
- cleanups for logger here and there
- removed critical flag check in payload verification (conformance to IKEv2)
- so thats and theres everywere... ;-)
 2006-03-23 15:25:43 +00:00
Martin Willi 87a217f9f1 - works quite well now with ipsec.conf & ipsec starter 2006-03-20 15:43:26 +00:00
Martin Willi 16b9a73cc4 - reworked configuration framework completly 
- configuration is now split up in: connections, policies, credentials and daemon config
- further alloc/free fixes needed!
 2006-03-16 15:25:06 +00:00
Martin Willi b1953ccd05 - first attempt for connection loading and starting via "stroke" 
- some improvements here and there
 2006-03-14 13:22:48 +00:00
Martin Willi 8a49112907 - configuration_manager replaced by configuration_t interface 
- current configuration_manager is now static_configuration (testing)
- first draft of starter_configuration, which should once interact with ipsec starter (via whack?)
- some cleanups
- socket_t uses RAW socket, which allows parallel service of pluto/charon
 2006-03-07 09:42:15 +00:00
Martin Willi aa5a35a005 - comments and cleanups 2006-03-02 09:56:30 +00:00
Martin Willi 5d187bd234 - working policy installation and removal 2006-03-01 15:56:51 +00:00
Martin Willi a527a426d6 - proposal setup implementation begun 2006-02-22 16:14:40 +00:00
Martin Willi 0a373aec33 - fixed socket code, so we know on which address we receive traffic 
- AH/ESP setup in kernel is working now!!! :-)))
 2006-02-16 16:24:50 +00:00
Martin Willi 30b5b412da - installing of child sa works 
- need correct IP adresses to actually use IPsec
 2006-02-16 09:55:07 +00:00
Martin Willi ce461bbd13 - refactored ike proposal 
- uses now proposal_t, wich is also used by child proposals
- ike key derivation refactored
- crypter_t api has get_key_size now
- some other improvements here and there
 2006-02-14 14:52:00 +00:00
Martin Willi 409d010131 - config uses uml hosts alice and bob 2006-02-13 13:42:01 +00:00
Martin Willi dfa6e086a0 - fixed memleaks 2006-02-09 11:56:24 +00:00
Martin Willi 93df94acad - works with new proposal code 
- still some(!) memleaks
 2006-02-09 10:16:20 +00:00
Martin Willi c06dbbabd1 - fixed alot of bugs in child_proposal 
- near to working state ;-)
 2006-02-08 15:25:34 +00:00
Martin Willi 384efc76d5 - dead end implementation 2006-02-06 14:05:35 +00:00
Martin Willi 19f78a6fed - fixed doxygen warnings 2005-12-15 12:10:53 +00:00
Jan Hutter e9c0ca15e1 - added deletion of IKE_SA 2005-12-12 14:14:52 +00:00
Martin Willi 6db4e80b56 - fixed some BAD bugs 
- clean localhost-testcases for bad_dh, shared and rsa
 2005-12-12 12:52:59 +00:00
Jan Hutter 7fa8decb78 - added todo's 2005-12-12 08:44:35 +00:00
Jan Hutter 6329a25750 - changed config values 2005-12-12 08:38:22 +00:00
Jan Hutter f4d8999cc1 - added support for empty traffic selectors and empty sa payload in 
IKE_AUTH request and reply
 2005-12-07 10:25:32 +00:00
Martin Willi aee3eb5299 ../svn-commit.tmp 2005-12-07 07:57:18 +00:00
Martin Willi 2b54748131 - code cleanup in network and config 
- moved packet_t members to private, added getter and setters
 2005-12-06 16:00:07 +00:00
Jan Hutter e314700cb5 - implemented jobs DELETE_HALF_OPEN_IKE_SA and DELETE_ESTABLISHED_IKE_SA 2005-12-06 12:27:09 +00:00
Jan Hutter f6ba78c370 - added payload CERT 
- cleaned code of different states
- added additional notify handling
 2005-12-05 12:21:38 +00:00
Jan Hutter 6efb10ece3 - code documented 2005-12-04 15:50:19 +00:00
Jan Hutter b66cb98743 - code documented 2005-12-04 15:44:18 +00:00
Martin Willi 25c41f4df7 - logging cleanup 
- pid re-replaced with thread_ids, since nptl does not distinguish pids between threads
 2005-12-04 11:46:58 +00:00
Martin Willi 8ff8c33d1d - implemented RSA, only signing and verifying esma_pkcs1 padded 
- removed gmp-helper: chunk_to_mpz is now done with gmp functions, prime generation in prime-pool
- added prime-pool (needs priority fix)
- proof of concept RSA authentication
- mpz uses LEAK_DETECTIVE
- configuration-manager supports rsa keys
 2005-12-04 01:30:35 +00:00
Jan Hutter aebb38a093 - preshared secrets are now retrieved over configuration_manager 2005-12-03 16:02:06 +00:00
Martin Willi 01de2f3cd5 - fixes 2005-12-02 16:09:04 +00:00
Jan Hutter 94b0f906e6 fixed different bugs when checking out ike sa and retransmitting 
requests
 2005-12-02 15:40:04 +00:00
Jan Hutter 0df63d6be4 - retransmitting of requests implemented 2005-12-02 14:07:36 +00:00
Martin Willi ccf783d29d - state ike_sa_init_responded implemented (has some memleaks) 2005-12-02 12:38:55 +00:00
Jan Hutter 8c7824fb57 2005-12-02 08:05:20 +00:00
Jan Hutter 56aeee4936 cleaned code 2005-12-02 07:43:05 +00:00
Jan Hutter 1b3f92d28d - fixed bugs 2005-12-01 19:53:48 +00:00
Martin Willi 257fa50386 - added ts for both initator and responder 
- ts_payload can get now ts's
 2005-12-01 18:14:22 +00:00
Martin Willi 03283349a9 - creation of ts payloads using ts 2005-12-01 17:38:06 +00:00
Jan Hutter a9428251cd - new configuration support added to ike_sa and states 2005-12-01 17:16:10 +00:00
Martin Willi 0675d5e1a1 - commented 2005-12-01 14:54:54 +00:00
Martin Willi ed1b7b40cd - tested sa with traffic selectors 
- fixed ALOT of bugs ;-)
 2005-12-01 14:17:51 +00:00