denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,489 Commits 1 Branch 0 Tags
fa3fe3c1cf8ab1e8885d8b8fc922470ca146e871
Commit Graph
68 Commits
Author SHA1 Message Date
Martin Willi fa3fe3c1cf sql pool prototype 2008-04-18 11:51:58 +00:00
Tobias Brunner 6439267a8c support for hash and URL encoded certificate payloads in charon 2008-04-18 11:24:45 +00:00
Andreas Steffen 8eeb796a51 changed logging of crl writing to old style 2008-04-17 20:23:31 +00:00
Martin Willi c4ec8c9d18 fixed compiler warning 2008-04-17 15:08:48 +00:00
Martin Willi b360e3933d respecting ipsec.conf cachecrls= option 2008-04-17 15:01:57 +00:00
Martin Willi d33fa48bc7 caching of CRLs to /etc/ipsec.d/crls 2008-04-17 14:08:38 +00:00
Martin Willi 2270b396b3 added missing credential_set method to stroke_ca 2008-04-17 13:00:05 +00:00
Martin Willi 233b853dfa extended credential_set_t interface by a cache_cert() method 
allows persistent or in-memory caching of fetched certificates
 2008-04-17 11:22:37 +00:00
Martin Willi e5617e40d1 adding rightsourceip=%poolname properly to peer config 2008-04-17 08:55:32 +00:00
Martin Willi 140ed97c0c disable DPD if dpddelay is set but dpdaction=none 2008-04-16 05:50:56 +00:00
Martin Willi 02e4180e48 updated sql plugin to respect config changes 2008-04-15 15:13:53 +00:00
Martin Willi 1822ca740b disabled SQL logging by default, as tests scenarios do not have a logging table 2008-04-15 15:13:08 +00:00
Martin Willi 0dab0f1d5d fixed build of smp plugin 2008-04-15 11:51:46 +00:00
Martin Willi 6a365f0740 added API for random number generators, served through credential factory 
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
 2008-04-15 05:56:35 +00:00
Martin Willi 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater 
additionally supports a "keep" value to keep the old IKE_SA
 2008-04-14 13:23:24 +00:00
Martin Willi a593db5d35 ike_sa_manager enumerable, not iterable 2008-04-14 11:37:46 +00:00
Martin Willi 348af092ac added close_action as a seperate config option to dpd_action 2008-04-14 08:17:18 +00:00
Martin Willi 45819d7d49 fixed rightsourceip=%config scenarios 2008-04-14 07:18:16 +00:00
Martin Willi 96926b006d using dpd actions to enforce connection state 
dpd actions a per child-, not peer ike-sa
 2008-04-11 08:14:48 +00:00
Martin Willi ad81e51afc implemented a simple attribute provider for stroke 2008-04-09 12:56:20 +00:00
Martin Willi cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs 
updated ipsec.conf sourceip parameter to support
	CIDR notatation to serve from a pool
	%poolname to query a separate (database?) pool
 2008-04-09 12:54:47 +00:00
Martin Willi 1749642b15 use cert->equals() to filter out equal certificates in seperate instances 2008-04-07 08:48:08 +00:00
Andreas Steffen 480297b883 cosmetics 2008-04-07 07:02:47 +00:00
Andreas Steffen f8ab4a8f76 log shared secret with debug level 4 2008-04-06 17:51:29 +00:00
Andreas Steffen 1b247314fd default is hostaccess=no 2008-04-06 12:15:05 +00:00
Martin Willi 6e4e27f8de updated test data to use correct encoding data 2008-04-03 06:45:17 +00:00
Martin Willi 513f20156a fixed med_db test 2008-04-02 12:27:39 +00:00
Martin Willi 489e3da0ea updated mediation database to public key authentication 
added mysql table definition, test data
testcase
 2008-04-02 12:25:14 +00:00
Martin Willi e29ebcb1af fixed compile warnings 2008-04-02 09:54:20 +00:00
Andreas Steffen 9372f44c67 workaround for parsing IPv6 PSKs requires extract_last_token() 2008-04-01 20:40:29 +00:00
Martin Willi 9d1c384b4b loading of subjectPublicKeyInfo wrapped keys using KEY_ANY (openssl format) 
testcase
 2008-04-01 14:51:31 +00:00
Andreas Steffen 392f4e17c2 minimal stroke_list_ocsp() implementation 2008-04-01 12:11:09 +00:00
Andreas Steffen 946d1ecd59 stroke_list groups certificates by issuer 2008-04-01 10:26:27 +00:00
Andreas Steffen aaa7643b73 put DN in double quotes 2008-03-31 21:08:56 +00:00
Andreas Steffen eafc0654ca ipsec list suppresses duplicates 2008-03-31 20:21:24 +00:00
Andreas Steffen 40f9006845 output uptime in status in local time 2008-03-29 08:55:09 +00:00
Martin Willi 6b9290ff12 renamed xml plugin to smp to avoid confusion 
added some dependency checks to configure
configure checks ClearSilver and fastcgi
cleanups in the build system here and there
 2008-03-28 12:44:01 +00:00
Tobias Brunner e74bc8e51d changed external interface to the mediation extension. 2008-03-27 12:31:35 +00:00
Martin Willi 52a61742e7 reusing generic shared_key_t implementation in med_db 2008-03-27 11:45:49 +00:00
Martin Willi f957f7dfb3 implemented cert cache flushing, ipsec purgeocsp 2008-03-27 06:37:29 +00:00
Andreas Steffen d61bd27a9a fixed plugin/stroke Makefile 2008-03-26 20:24:55 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Martin Willi 685232670a added uptime statistics to statusall 2008-03-26 16:13:14 +00:00
Martin Willi 391abda082 fixed compile error if --enable-p2p is set 2008-03-26 14:45:24 +00:00
Martin Willi 0b14fdb92b splitted stroke plugin to several files: 
socket: reads messages from socket, dispatching
  config: process add/del conn, serves configs through backend_t
  control: controlling of the daemon (up/down/route/...(
  cred: credential loading, serves creds through credential_set_t
  ca: ca sections from ipsec.conf, serves cdp's through credential_set_t
  list: log status information to stroke console (status/statusall/list*)
  shared_key: shared key implementation for keys read from ipsec.secrets
  plugin: registers stroke plugin and starts socket w/ thread
 2008-03-26 10:10:40 +00:00
Andreas Steffen 26930a8c3e certificate factory can load certs from file 2008-03-25 22:28:27 +00:00
Andreas Steffen 3e6ee16478 defined *_create_from_file() constructors in libstrongswan/credentials/certificates 2008-03-25 10:12:45 +00:00
Andreas Steffen 25c9637222 modified debug text 2008-03-20 15:22:26 +00:00
Martin Willi 629e55434a 2008-03-20 11:38:51 +00:00
Martin Willi cfede7f6e2 The introduced SHA1_NOFINAL hasher was not sufficient for EAP-AKA, 
as it requires to XOR the key into the hashers state.
A new SHA1 based keyed hash function, implemented as PRF, enables EAP-AKA
and the FIPS-PRF function to properly use the existing SHA1 implementation.
 2008-03-19 14:02:52 +00:00