Martin Willi
f0331baf1a
Added reload support to eap-radius plugin
2011-04-15 10:07:13 +02:00
Martin Willi
3b71d3d033
Reload strongswan.conf and plugins supporting reloading on SIGHUP
2011-04-15 10:07:13 +02:00
Martin Willi
fd3c12bf06
Accept NULL files in load_files[_section] as we do in constructor
2011-04-15 10:07:13 +02:00
Martin Willi
32973044b0
Added a merge option to optionally reload files instead of merging them
2011-04-15 10:07:13 +02:00
Martin Willi
ed49e9a303
Added plugin_loader method to reload plugin configurations
2011-04-15 10:07:13 +02:00
Martin Willi
c55818ebb0
Added a (not yet implemented) plugin_t method to reload plugin configuration
2011-04-15 10:07:13 +02:00
Martin Willi
787b5884aa
Added a get_name() function to plugin_t, create_plugin_enumerator enumerates over plugin_t
2011-04-15 10:07:12 +02:00
Martin Willi
6e2791715b
Migrated remaining plugin_t implementations to INIT/METHOD macros
2011-04-15 10:07:12 +02:00
Martin Willi
2b36342551
Migrated plugin_loader to INIT/METHOD macros
2011-04-15 10:07:12 +02:00
Martin Willi
2db8b58f62
Continue without client authentication if no matching certificate found
2011-04-14 20:02:12 +02:00
Martin Willi
6a8f1a578f
Ignore TLS certificate requests as peer if peer authentication disabled
2011-04-14 20:02:12 +02:00
Martin Willi
1c21f47a06
Send TLS Server Name Indication as peer if server identity is a FQDN
2011-04-14 20:02:12 +02:00
Martin Willi
eea2bdb203
Fix tls_writer wrap functions
2011-04-14 20:02:11 +02:00
Tobias Brunner
823d2f5035
pluto: Fixed check for NAT-T keepalives.
2011-04-14 18:11:47 +02:00
Tobias Brunner
3bec23d88c
pluto: Properly initialize constants.
2011-04-14 18:11:46 +02:00
Tobias Brunner
7223229924
pluto: Avoid hiding outer parameter.
2011-04-14 18:11:46 +02:00
Tobias Brunner
33c9e8b28d
pluto: Use %zu to print values of type size_t.
2011-04-14 18:11:46 +02:00
Tobias Brunner
8e4da8f2e8
Use %tx to print a value of type ptrdiff_t.
2011-04-14 18:11:46 +02:00
Tobias Brunner
e5e5bcc92f
Removed superfluous parameter to printf.
2011-04-14 18:11:46 +02:00
Tobias Brunner
b0fd7d1482
Proper cleanup if IDs in ipsec.secrets cannot be parsed.
2011-04-14 18:11:45 +02:00
Tobias Brunner
3c3c832a10
Fixed potential memory leak in host_create_any.
2011-04-14 18:11:45 +02:00
Tobias Brunner
6045eaa54a
pluto: Fixed potential memory leak in atoaddr.
2011-04-14 18:11:45 +02:00
Tobias Brunner
862ef49f85
Fixed potential memory leak when processing routes from the kernel.
2011-04-14 18:11:45 +02:00
Tobias Brunner
29388829fa
Do proper cleanup in error case in pki req.
2011-04-14 18:11:45 +02:00
Tobias Brunner
3fe6c0b27e
Do proper cleanup in some error cases in pki signcrl.
2011-04-14 18:11:44 +02:00
Tobias Brunner
809750d72b
pluto: Fixed potential memory leak when processing requested virtual IPs.
2011-04-14 18:10:52 +02:00
Tobias Brunner
267d47d6f2
pluto: Properly free buffer in error cases in read_packet.
2011-04-14 18:10:27 +02:00
Tobias Brunner
3c0c321776
Neither rekey nor del can be NULL.
2011-04-14 18:10:27 +02:00
Tobias Brunner
cc2429d9a2
In scanf the maxmium length of %s does not include the null-terminator.
2011-04-14 18:10:27 +02:00
Tobias Brunner
bac28c73ed
starter_conn_t.id is an unsigned long.
2011-04-14 18:10:27 +02:00
Tobias Brunner
e51cae33a9
Fix compiler warnings at creation of CRL cache filenames.
...
This was not really a problem because ptr is the first member of a chunk_t
and it contains a null-terminated string at that point. But it's clearer
this way.
2011-04-14 18:10:27 +02:00
Tobias Brunner
1f02bdc8d3
Fixed output in ietf_attributes_t.get_string.
2011-04-14 18:10:26 +02:00
Tobias Brunner
64f4237b1e
Fix "set nexthop to him when instantiating rightallowyes template with leftnexthop == right"
...
This fixes commit 280f6b1ab2
2011-04-14 18:10:26 +02:00
Andreas Steffen
a9ee43e96a
added TLS renegotiation_info extension
2011-04-14 16:54:46 +02:00
Martin Willi
2a277867be
Show full blown traffic selector in log_ts hook
2011-04-14 09:21:58 +02:00
Tobias Brunner
aee071ed8b
Fixed check for member of stroke_msg_t in pop_string.
...
Because of the cast to char** the length of the message was multiplied
by sizeof(char*), i.e. 4 or 8 bytes (depending on the architecture) instead
of by 1 (sizeof(char)).
2011-04-13 18:18:03 +02:00
Tobias Brunner
e54a2bd20e
pluto: Properly initialize a.continuation.
2011-04-12 17:39:11 +02:00
Tobias Brunner
2cec32e8eb
pluto: Properly initialize ta.encrypter.
2011-04-12 17:22:50 +02:00
Tobias Brunner
7f1fb6b69d
pluto: Fixed off by one error when reading private keys.
2011-04-12 15:54:29 +02:00
Tobias Brunner
24e0595437
Removed unused variables.
2011-04-12 14:44:49 +02:00
Martin Willi
f486bf2666
Fix compiler warning after fetcher_t.fetch signature change
2011-04-12 09:29:24 +02:00
Andreas Steffen
7bc718ff3b
version bump to 4.5.2dr5
2011-04-11 06:24:31 +02:00
Andreas Steffen
1ee7440bce
updated NEWS
2011-04-11 06:23:52 +02:00
Martin Willi
8dad3072c6
Use an IV size of zero for DES in ECB mode
2011-04-08 14:55:46 +02:00
Martin Willi
6dc36a73e2
Fixed debug statement if algorithm benchmarking enabled
2011-04-08 14:55:10 +02:00
Andreas Steffen
1ef7a2ef94
with the 2.6.38 kernel alice is preferred for handling the IKE connections
2011-04-08 07:50:20 +02:00
Duncan Salerno
be4caf7d3e
fixed bit mask
2011-04-07 21:41:41 +02:00
Andreas Steffen
01b39fe900
added EAP-PEAP options to strongswan.conf
2011-04-06 20:08:56 +02:00
Andreas Steffen
e4444c7b4a
define MSCHAPv2 as default phase2 algorithm for EAP-PEAP
2011-04-06 20:07:59 +02:00
Andreas Steffen
7346114e9c
added ikev2/rw-eap-peap-mschapv2 scenario
2011-04-06 19:44:58 +02:00
Martin Willi