 Martin Willi
|
f2e1ff59ab
|
reset threads IKE_SA after checking other IKE_SAs
invoke updown script only if we have valid IKE_SA
|
2008-10-20 11:38:16 +00:00 |
|
|
Andreas Steffen
|
7790ab0f37
|
re-established all previous AUD level messages
|
2008-10-17 03:44:06 +00:00 |
|
|
Martin Willi
|
104c28d603
|
fixed perl oid generation
|
2008-10-16 15:38:48 +00:00 |
|
|
Martin Willi
|
ad3af574a4
|
moved updown script invocation to an optional plugin
|
2008-10-16 11:48:18 +00:00 |
|
|
Martin Willi
|
e17353fc31
|
bus uses finally recusive locking
other small fixes
|
2008-10-16 11:32:43 +00:00 |
|
|
Martin Willi
|
f868dc0ca2
|
condvar->wait() can handle recursive mutex
|
2008-10-16 11:29:42 +00:00 |
|
|
Martin Willi
|
61508be2f5
|
added a guest.mconsole() method to script mconsole (e.g. add additional conX=)
|
2008-10-15 14:47:52 +00:00 |
|
|
Martin Willi
|
1df106bf39
|
cache keys for in and outbound ESP SAs
removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t)
creating TS pairs dynamically using create_policy_enumerator()
|
2008-10-15 12:24:44 +00:00 |
|
|
Martin Willi
|
9f4e5f8c47
|
store ESP keys in CHILD_SA
|
2008-10-15 08:37:56 +00:00 |
|
|
Martin Willi
|
e517b4b174
|
passing chunks, not prf+, to kernel interface
gives us better control of keymat in CHILD_SA
|
2008-10-14 15:17:44 +00:00 |
|
|
Tobias Brunner
|
c25c8dce60
|
typos
|
2008-10-14 12:18:53 +00:00 |
|
|
Martin Willi
|
a985db3ff3
|
reintegrated bus-refactoring branch
|
2008-10-14 08:52:13 +00:00 |
|
|
Tobias Brunner
|
1adaa02bb2
|
merging kernel_pfkey plugin back from kernel-interface branch
|
2008-10-14 08:46:31 +00:00 |
|
|
Andreas Steffen
|
9257c3a287
|
version bump to 4.2.9
|
2008-10-14 01:53:37 +00:00 |
|
|
Martin Willi
|
405e8ecfe3
|
set guest-specific kernel parameters
removed memory setting, use mem= instead
|
2008-10-10 11:20:04 +00:00 |
|
|
Martin Willi
|
79a878466c
|
reintegrated two-sim branch providing SIM card plugin API
|
2008-10-10 08:36:01 +00:00 |
|
|
Martin Willi
|
88f65cd589
|
use busybox compatible kill
|
2008-10-10 06:59:03 +00:00 |
|
|
Martin Willi
|
f0974eb2c2
|
fixed MOBIKE roaming if clients address changes
|
2008-10-09 08:25:11 +00:00 |
|
|
Andreas Steffen
|
03d5f41137
|
faster implementation of addr_in_subnet()
|
2008-10-09 05:44:00 +00:00 |
|
|
Martin Willi
|
bb2059c60a
|
added proposal parsing of uncommon DH groups 3072/6144
|
2008-10-08 12:57:11 +00:00 |
|
|
Martin Willi
|
85be7e5b75
|
ignore routing events for our own routes
|
2008-10-08 08:29:49 +00:00 |
|
|
Martin Willi
|
ce5b17082d
|
mobike: try to keep existing source address before switching to another
|
2008-10-08 08:23:46 +00:00 |
|
|
Andreas Steffen
|
d1cbe55127
|
implemented ipsec listalgs as a stroke command
|
2008-10-08 07:00:13 +00:00 |
|
|
Andreas Steffen
|
51358f9f72
|
correct fix that replaces Changeset 4378
|
2008-10-08 06:57:52 +00:00 |
|
|
Andreas Steffen
|
c85862931f
|
removing fix applied by Changeset 4378
|
2008-10-08 06:15:41 +00:00 |
|
|
Andreas Steffen
|
af09048e35
|
get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 hash consistent with the IKEv2 keyid philosophy
|
2008-10-08 03:35:52 +00:00 |
|
|
Andreas Steffen
|
95fd1dedb3
|
Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype
|
2008-10-08 01:19:26 +00:00 |
|
|
Andreas Steffen
|
7a07cd1c75
|
fixed loop termination criterion in addr_in_subnet(). Thanks go to Wolfgang Steudel, TU Ilmenau
|
2008-10-07 21:41:45 +00:00 |
|
|
Martin Willi
|
c8ba5125d6
|
guest bootup waits for init, not for network stack (fixes 2.6.27 guest kernels)
|
2008-10-07 16:31:41 +00:00 |
|
|
Martin Willi
|
693a244d0f
|
ported mconsole-exec patch to 2.6.27-rc7
|
2008-10-07 09:09:34 +00:00 |
|
|
Martin Willi
|
aa9a300677
|
userland support to process notifies for new NAT mappings detected in UDP encapsulation
|
2008-10-07 07:55:28 +00:00 |
|
|
Martin Willi
|
9d9a772ee1
|
use MOBIKE enabled DPD if we are NATed
update SAs if we detect changes in NAT mappings
|
2008-10-06 13:37:04 +00:00 |
|
|
Martin Willi
|
0592212f23
|
fixed builder_cancel macro to return NULL on failed build
|
2008-10-06 13:08:49 +00:00 |
|
|
Martin Willi
|
aa1b90a5b2
|
do not run CHILD_SA delete action if rekeying
|
2008-10-03 16:01:14 +00:00 |
|
|
Andreas Steffen
|
09d7ef2614
|
added --disable-kernel-netlink configure option
|
2008-10-03 03:27:42 +00:00 |
|
|
Martin Willi
|
9c0aa46b64
|
use dpd_action also for remotely closed tunnels
|
2008-10-02 13:47:19 +00:00 |
|
|
Martin Willi
|
7827997346
|
also respect the mobike=no setting as responder
|
2008-09-30 12:36:58 +00:00 |
|
|
Martin Willi
|
ceff3064fe
|
using signed return value for read()
|
2008-09-30 06:27:50 +00:00 |
|
|
Tobias Brunner
|
a341a68fac
|
merging renaming of mode_t to ipsec_mode_t back to trunk
|
2008-09-25 13:56:23 +00:00 |
|
|
Tobias Brunner
|
507f26f685
|
merging modularized kernel interface back to trunk
|
2008-09-25 07:56:58 +00:00 |
|
|
Andreas Steffen
|
414caff027
|
version bump to 4.2.8
|
2008-09-18 00:42:22 +00:00 |
|
|
Martin Willi
|
cdaf57ec34
|
fixed DH value range testing
|
2008-09-17 09:02:30 +00:00 |
|
|
Martin Willi
|
73f6886a50
|
checking mpz_export return value properly
fixes a potential DoS attack if a DH value of zero gets processed
|
2008-09-17 08:10:48 +00:00 |
|
|
Andreas Steffen
|
b33c11b6c7
|
stroke parses and lists AC groups
|
2008-09-17 02:17:01 +00:00 |
|
|
Martin Willi
|
f061d83358
|
ported NM plugin to upstream NetworkManager changes
splitted secrets (4031)
using uuid in auth-dialog (4053)
|
2008-09-12 13:28:31 +00:00 |
|
|
Martin Willi
|
346bb576a2
|
allow multiple DELETE payloads in an informational message
|
2008-09-11 11:14:09 +00:00 |
|
|
Martin Willi
|
1d03954aad
|
NM plugin supports (encrypted) private key files
|
2008-09-05 13:26:58 +00:00 |
|
|
Andreas Steffen
|
07d7f9a402
|
time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s)
|
2008-09-04 16:19:46 +00:00 |
|
|
Martin Willi
|
0c6a489046
|
fixed some translations/encoding
|
2008-09-04 13:51:35 +00:00 |
|
|
Martin Willi
|
f0e8a8f7f3
|
an initial German translation for NM plugin
|
2008-09-04 13:39:37 +00:00 |
|