denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 35fe41f7d0 kernel-libipsec: Add a feature to request UDP encapsulation of ESP packets Tobias Brunner 2013-06-17 10:13:56 +02:00
  • 66aaabf342 tun-device: Packets sent over utun devices on Mac OS X have the protocol family prepended Tobias Brunner 2013-06-16 20:05:08 +02:00
  • 34b0ad0653 kernel-pfroute: Use DST as nexthop for host routes Tobias Brunner 2013-06-16 18:59:13 +02:00
  • d6c17e96b2 kernel-pfroute: Implement get_source_addr() Tobias Brunner 2013-06-16 11:40:16 +02:00
  • f58f8bf409 kernel-pfroute: Properly install routes with interface and gateway Tobias Brunner 2013-06-16 10:49:25 +02:00
  • 1f31a2bc2e kernel-libipsec: Install a gateway for routes on platforms other than Linux Tobias Brunner 2013-06-16 10:47:39 +02:00
  • 93e4df3761 kernel-pfroute: Activate TUN device before setting address Tobias Brunner 2013-06-15 18:56:11 +02:00
  • c8a56512a6 tun-device: Avoid opening /dev/tunX multiple times (e.g. on FreeBSD) Tobias Brunner 2013-06-15 17:46:25 +02:00
  • dcaf8d570c kernel-libipsec: Router reads packets from multiple TUN devices Tobias Brunner 2013-06-15 16:21:08 +02:00
  • 7045defbff kernel-libipsec: Use separate class to route packets between charon, libipsec and TUN device Tobias Brunner 2013-06-15 14:21:34 +02:00
  • 554c4276a5 kernel-pfroute: Raise tun event when creating/destroying TUN devices for virtual IPs Tobias Brunner 2013-06-13 17:51:16 +02:00
  • 4868d1c3bc kernel: Add an event kernel interfaces can raise if they create/destroy a TUN device Tobias Brunner 2013-06-13 17:03:17 +02:00
  • 0d2ad63fe2 printf-hook: Avoid double-free when freeing Vstr config Tobias Brunner 2013-06-12 16:13:32 +02:00
  • 587bdf8768 kernel-libipsec: Track policies and automatically install routes Tobias Brunner 2013-06-11 18:53:28 +02:00
  • 44a49681fd kernel-libipsec: Handle packets between charon socket, libipsec and TUN device Tobias Brunner 2013-06-11 18:52:23 +02:00
  • 59be6ddd08 kernel-libipsec: Create a TUN device and use it to install virtual IPs Tobias Brunner 2013-06-11 18:47:55 +02:00
  • 279e0d42bd kernel-libipsec: Add plugin that implements kernel_ipsec_t using libipsec Tobias Brunner 2013-06-11 18:43:01 +02:00
  • 3cd7ba4960 kernel-netlink: Routes don't require a gateway/nexthop Tobias Brunner 2013-06-11 16:05:40 +02:00
  • 1b3b7ba54d charon-cmd: Document auxiliary options Tobias Brunner 2013-06-21 16:58:16 +02:00
  • 4d62ad7571 charon-cmd: Link strongswan.conf(5) and charon-cmd(8) man pages Tobias Brunner 2013-06-21 16:35:19 +02:00
  • 5991f09565 charon-cmd: Use fixed number of character to align command descriptions Tobias Brunner 2013-06-20 22:01:42 +02:00
  • 5e185047e1 charon-cmd: Shortened and fixed command descriptions Tobias Brunner 2013-06-20 21:54:11 +02:00
  • 463314b55a charon-cmd: Simplify usage output for authentication profiles Tobias Brunner 2013-06-20 21:35:34 +02:00
  • e8d6b91ebd charon-cmd: Add Aggressive Mode profiles to man page Tobias Brunner 2013-06-20 21:15:56 +02:00
  • 0d60489bf8 charon-cmd: Add man page for charon-cmd(8) Tobias Brunner 2013-06-16 19:06:40 +02:00
  • 295d595b49 charon-cmd: Add --debug argument to set the default log level Tobias Brunner 2013-06-21 15:55:52 +02:00
  • 4049ec42bf charon-cmd: Handle simple command line arguments like --help before the others Tobias Brunner 2013-06-21 15:41:12 +02:00
  • 0d25c4ef87 plugin-loader: Move logging of failed features to status() Tobias Brunner 2013-06-21 14:46:17 +02:00
  • 607f8e9906 plugin-loader: Add method to print loaded plugins on a given log level Tobias Brunner 2013-06-21 14:45:38 +02:00
  • 34ee14dd28 plugin-loader: Collect statistics while loading features, print them in case features failed to load Tobias Brunner 2013-06-20 20:49:42 +02:00
  • 681e53c70c plugin-loader: Use different log level if failed feature is in critical plugin Tobias Brunner 2013-06-20 20:36:15 +02:00
  • 13d2d8f634 plugin-loader: Log message when failing to load plugin Tobias Brunner 2013-06-20 20:33:53 +02:00
  • 51b9d7513d plugin-loader: Reduce verbosity while loading plugins Tobias Brunner 2013-06-20 20:27:45 +02:00
  • 0adf165c7e Fix crash if the initiator has no suitable proposal available Tobias Brunner 2013-04-26 15:36:42 +02:00
  • 9d6a147c81 Merge branch 'unit-tests-ecdsa' Martin Willi 2013-06-21 10:39:16 +02:00
  • 092550b03a leak-detective: (re-)whitelist some OpenSSL functions Martin Willi 2013-06-20 10:06:07 +02:00
  • ef687db734 unit-tests: load plugins in test-runner from build directory Martin Willi 2013-06-20 09:34:18 +02:00
  • b950fc48da unit-tests: link test-runner against -lpthread Martin Willi 2013-06-19 15:37:49 +02:00
  • 1ffdb4f3d0 unit-tester: remove obsolete rsa_gen test, now covered in unit-tests Martin Willi 2013-06-19 15:50:04 +02:00
  • df1a1a0901 unit-tests: add RSA test cases, very similar to ECDSA Martin Willi 2013-06-19 15:33:47 +02:00
  • eabf4af0f8 unit-tests: test with /dev/urandom if random plugin is in use Martin Willi 2013-06-19 15:32:19 +02:00
  • d0c09c84a5 unit-tests: test supported ECDSA schemes only Martin Willi 2013-06-19 15:31:25 +02:00
  • 2bedb0f270 Move test-runners has_feature() function to plugin loader Martin Willi 2013-06-19 14:52:52 +02:00
  • df76881f11 unit-tests: enforce CET/CEST timezone to properly test non-UTC time formatting Martin Willi 2013-06-11 18:31:35 +02:00
  • 44886a0667 unit-tests: don't use ck_assert() to test a cleared chunk, as it allocates data Martin Willi 2013-06-11 18:29:49 +02:00
  • 52bff13848 unit-tests: define 64-bit constats with ULL, fixing compiler warning on 32-bit Martin Willi 2013-06-11 17:45:45 +02:00
  • a5b63a3e5c Limit cleanup of .gc{no,da} files to src and scripts subfolders Martin Willi 2013-06-11 17:27:40 +02:00
  • a88cab095d unit-tests: test some zeroed ECDSA signatures that never should succeed Martin Willi 2013-04-09 16:00:19 +02:00
  • 7e23f53242 unit-tests: perform signing/validation with keys ECDSA keys generated or loaded Martin Willi 2013-04-09 15:49:09 +02:00
  • eabb0befdc unit-tests: add an ECDSA test case loading keys Martin Willi 2013-04-09 15:31:43 +02:00
  • d18ff88faf unit-tests: perform a first ECDSA test case if ECDSA is supported Martin Willi 2013-04-09 15:06:28 +02:00
  • 200f38ad4c unit-tests: add a helper function checking if a plugin feature is available Martin Willi 2013-04-09 15:05:24 +02:00
  • cb1745f7a6 unit-tests: add a test case checking if all test vectors have been passed Martin Willi 2013-04-09 14:35:38 +02:00
  • e9e4759733 crypto-factory: count the number of test vector failures during registration Martin Willi 2013-04-09 14:30:13 +02:00
  • 3714979427 unit-tests: load all libstrongswan plugins in test-runner Martin Willi 2013-04-09 14:05:12 +02:00
  • 8c88ca0fcf stroke: Add statusall-nb as alias for statusallnb Tobias Brunner 2013-06-21 10:43:46 +02:00
  • 4182c86aed stroke: Add non-blocking versions of up and down Tobias Brunner 2013-06-16 16:30:21 +02:00
  • 9afc6e6a70 starter: Make ipsec.conf path configurable via command line Tobias Brunner 2013-06-13 19:07:55 +02:00
  • c0d0391a51 pubkey: Improve comparison of raw public key certificate objects Tobias Brunner 2013-06-05 11:30:05 +02:00
  • 888dbac50e ikev2: use protocol of selected proposal to delete a failed CHILD_SA Martin Willi 2013-06-20 12:05:13 +02:00
  • 47ec2e407b charon-cmd: use a copy of pid in initiate callback Martin Willi 2013-06-20 11:02:28 +02:00
  • e044a1a9e5 charon-cmd: add IKEv1 aggressive mode profiles Martin Willi 2013-06-20 11:01:37 +02:00
  • 40b0a15cb5 NEWS: Add first bunch of 5.1.0 highlights Martin Willi 2013-06-20 10:29:25 +02:00
  • 4e8142e8e9 Merge branch 'nat-transport' Martin Willi 2013-06-19 16:36:27 +02:00
  • 24df067810 man: update ipsec.conf.5, describing new proto/port definition within leftsubnet Martin Willi 2013-06-05 12:03:22 +02:00
  • 483a258ad8 stroke: support %dynamic in left/rightsubnet for dynamic selectors Martin Willi 2013-06-05 11:43:19 +02:00
  • 3d1af879d2 kernel-netlink: install selectors on SA for transport/BEET mode without proto/port Martin Willi 2013-06-05 11:39:35 +02:00
  • 4a7c29bf02 stroke: support a specific proto/port for each net defined in left/rightsubnet Martin Willi 2013-06-05 11:38:51 +02:00
  • ad5ad02ade ikev2: properly fall back to tunnel mode if transport/BEET mode not configured Martin Willi 2013-06-05 10:48:57 +02:00
  • 975457c4d8 ikev2: support transport mode over NAT Martin Willi 2013-06-05 09:46:02 +02:00
  • 4f88ad669a Merge branch 'consistent-reqid' Martin Willi 2013-06-19 16:31:06 +02:00
  • a7bc0bf4a6 ike: reuse the reqid of an installed trap having the same config Martin Willi 2013-06-11 16:11:14 +02:00
  • 2dcfc6983b trap-manager: add a method to find reqid for installed traps by config Martin Willi 2013-06-05 14:20:44 +02:00
  • f4e822c1b4 trap-manager: don't check-in nonexisting IKE_SA if acquire fails Martin Willi 2013-06-06 10:54:06 +02:00
  • ae131e6bac trap-manager: fix a memleak when installing a trap to %any Martin Willi 2013-06-05 14:36:44 +02:00
  • 1551d8b13d kernel-netlink: reject policy refcount if the reqid differs Martin Willi 2013-06-03 18:13:27 +02:00
  • de2debf8e0 stroke: add exportconn{cert,chain} commands in addition to exportx509 Martin Willi 2013-06-14 11:22:14 +02:00
  • a485320393 Raise an alert if the responding peer narrowed traffic selectors Martin Willi 2013-06-13 15:03:17 +02:00
  • ad58246f53 backtrace: use backtrace_symbols() only if we have backtrace() and dladdr() fails Martin Willi 2013-06-19 16:00:14 +02:00
  • 4d04e2c63b utils: Remove volatile qualifier from refcount_t typedef Tobias Brunner 2013-06-19 09:20:35 +02:00
  • 24303f99f7 dhcp: search for transactions only for connections having a poolname "dhcp" Martin Willi 2013-06-18 09:50:29 +02:00
  • 9a00d9aa2f starter: ignore return value of sete[gu]id(), now having warn_unused_result Martin Willi 2013-06-18 08:54:10 +02:00
  • c6f1929a45 socket-default: Make sure sockets are open when checking with FD_ISSET Tobias Brunner 2013-06-14 17:25:16 +02:00
  • 1889837767 socket-default: Properly initialize NAT-T port if opening regular socket failed Tobias Brunner 2013-06-14 16:41:33 +02:00
  • 92f102c21b android: Forward initiator flag to libipsec when adding IPsec SA Tobias Brunner 2013-06-13 13:55:58 +02:00
  • 52d7c530e9 libipsec: Add initiator flag to definition of ipsec_sa_mgr_t.add_sa() Tobias Brunner 2013-06-13 13:53:16 +02:00
  • 246e2bed1d Use subset matching instead of is_contained_in() to select a child_cfg Martin Willi 2013-06-13 13:34:12 +02:00
  • 44fb978169 ha: Fix CHILD_SA installation in ha_dispatcher after adding initiator flag Tobias Brunner 2013-06-13 13:17:55 +02:00
  • a8c9454423 kernel-interface: add an exchange initiator parameter to add_sa() Martin Willi 2013-05-08 10:31:06 +02:00
  • d024a4652c Merge branch 'unique-sas' Martin Willi 2013-06-11 15:51:50 +02:00
  • 3568abe7be Use ref_get() to make sure IKE_SA unique IDs are unique Martin Willi 2013-05-08 15:19:52 +02:00
  • d64f6ef6ae Use ref_get() to make sure CHILD_SA reqids are unique Martin Willi 2013-05-08 15:18:50 +02:00
  • 3160b92adb utils: ref_get() returns the new value of the reference counter Martin Willi 2013-05-08 15:07:09 +02:00
  • 37a60cad3c ikev1: keep vendor ID task alive during full Main/Aggressive Mode Martin Willi 2013-06-06 15:38:38 +02:00
  • 61345afb22 Merge branch 'init-auth-fail' Martin Willi 2013-06-11 15:46:04 +02:00
  • e196c41bd2 ikev2: if installing a CHILD_SA as initiator fails, notify the responder Martin Willi 2013-06-07 11:35:43 +02:00
  • ff3fff4dc9 ikev2: raise LOCAL_AUTH_FAILED when receiving INFORMATIONAL with AUTH_FAILED Martin Willi 2013-05-17 10:36:40 +02:00
  • ca74bf7a06 ikev2: close an established IKE_SA when receiving AUTHENTICATION_FAILED Martin Willi 2013-05-17 10:30:13 +02:00
  • eaafcec190 ikev2: if responder authentication fails, send AUTHENTICATION_FAILED Martin Willi 2013-05-17 10:22:00 +02:00
  • 2788634c8c Merge branch 'scep-bind' Martin Willi 2013-06-11 15:42:23 +02:00