strongswan.git
13 years agosupporting multiple comma seperated subnets in left/rightsubnet definition
Martin Willi [Fri, 25 Apr 2008 12:41:37 +0000 (12:41 -0000)]
supporting multiple comma seperated subnets in left/rightsubnet definition
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16

13 years agoadded simple Makefile to build scripts
Martin Willi [Fri, 25 Apr 2008 11:18:09 +0000 (11:18 -0000)]
added simple Makefile to build scripts

13 years agoextract_token() now handles whitespace
Andreas Steffen [Fri, 25 Apr 2008 07:04:59 +0000 (07:04 -0000)]
extract_token() now handles whitespace

13 years agochunk_to_hex() adaptations
Andreas Steffen [Fri, 25 Apr 2008 06:39:41 +0000 (06:39 -0000)]
chunk_to_hex() adaptations

13 years agoadded _GNU_SOURCE and limits.h to build against glibc-2.8
Martin Willi [Thu, 24 Apr 2008 13:49:20 +0000 (13:49 -0000)]
added _GNU_SOURCE and limits.h to build against glibc-2.8

13 years agoadded missing base64 chunk test
Martin Willi [Thu, 24 Apr 2008 13:28:18 +0000 (13:28 -0000)]
added missing base64 chunk test

13 years agoreplaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions
Martin Willi [Thu, 24 Apr 2008 13:26:22 +0000 (13:26 -0000)]
replaced freeswan ttodata by own chunk_{to|from}_{hex|base64} functions

13 years agosome c-libs require _GNU_SOURCE for pthread_rwlock
Martin Willi [Wed, 23 Apr 2008 09:45:02 +0000 (09:45 -0000)]
some c-libs require _GNU_SOURCE for pthread_rwlock

13 years ago'Hash and URL' certificates of research and sales CAs
Andreas Steffen [Tue, 22 Apr 2008 20:36:44 +0000 (20:36 -0000)]
'Hash and URL' certificates of research and sales CAs

13 years agofixed AES-128 test
Martin Willi [Tue, 22 Apr 2008 09:00:27 +0000 (09:00 -0000)]
fixed AES-128 test

13 years agoexperimental Padlock plugin supportin SHA1 and AES-128 for VIA C7 Esther
Martin Willi [Tue, 22 Apr 2008 08:44:56 +0000 (08:44 -0000)]
experimental Padlock plugin supportin SHA1 and AES-128 for VIA C7 Esther

13 years agoadded AES-128 unit test
Martin Willi [Tue, 22 Apr 2008 08:33:55 +0000 (08:33 -0000)]
added AES-128 unit test

13 years agoremoved status result from crypter interface to be consistent with other crypto inter...
Martin Willi [Tue, 22 Apr 2008 07:14:24 +0000 (07:14 -0000)]
removed status result from crypter interface to be consistent with other crypto interfaces

13 years agoproper library initialization for dumm
Martin Willi [Mon, 21 Apr 2008 13:21:21 +0000 (13:21 -0000)]
proper library initialization for dumm

13 years agoversion bump to 4.2.2
Andreas Steffen [Sat, 19 Apr 2008 10:07:32 +0000 (10:07 -0000)]
version bump to 4.2.2

13 years agoedited NEWS 4.2.1
Andreas Steffen [Sat, 19 Apr 2008 09:49:06 +0000 (09:49 -0000)]
edited NEWS

13 years agoupdated testing.conf
Andreas Steffen [Sat, 19 Apr 2008 07:57:24 +0000 (07:57 -0000)]
updated testing.conf

13 years agoadd symbolic link to hash-and-url certs
Andreas Steffen [Sat, 19 Apr 2008 07:48:53 +0000 (07:48 -0000)]
add symbolic link to hash-and-url certs

13 years agofixed iptables/ip6tables switch
Andreas Steffen [Sat, 19 Apr 2008 07:47:00 +0000 (07:47 -0000)]
fixed iptables/ip6tables switch

13 years agoadded hash-and-url certs
Andreas Steffen [Fri, 18 Apr 2008 21:46:26 +0000 (21:46 -0000)]
added hash-and-url certs

13 years agoadded ikev2/rw-hash-and-url scenario
Andreas Steffen [Fri, 18 Apr 2008 21:43:05 +0000 (21:43 -0000)]
added ikev2/rw-hash-and-url scenario

13 years agoupdated NEWS: support of AES_XCBC_MAC and CAMELLIA
Andreas Steffen [Fri, 18 Apr 2008 21:42:31 +0000 (21:42 -0000)]
updated NEWS: support of AES_XCBC_MAC and CAMELLIA

13 years agoHash and URL cosmetics
Andreas Steffen [Fri, 18 Apr 2008 21:27:08 +0000 (21:27 -0000)]
Hash and URL cosmetics

13 years agoadded ikev1/esp-alg-camellia scenario
Andreas Steffen [Fri, 18 Apr 2008 20:02:42 +0000 (20:02 -0000)]
added ikev1/esp-alg-camellia scenario

13 years agofixed cbc(camellia) netlink configuration error
Andreas Steffen [Fri, 18 Apr 2008 20:01:49 +0000 (20:01 -0000)]
fixed cbc(camellia) netlink configuration error

13 years agouse ip xfrm state in crypto evaltests
Andreas Steffen [Fri, 18 Apr 2008 19:07:46 +0000 (19:07 -0000)]
use ip xfrm state in crypto evaltests

13 years agoadded ikev1/esp-alg-aesxcbc scenario
Andreas Steffen [Fri, 18 Apr 2008 19:06:43 +0000 (19:06 -0000)]
added ikev1/esp-alg-aesxcbc scenario

13 years agofixed aes-xcbc netlink configuration error
Andreas Steffen [Fri, 18 Apr 2008 18:37:57 +0000 (18:37 -0000)]
fixed aes-xcbc netlink configuration error

13 years agosupport of AES_XCBC and CAMELLIA ESP cipher by pluto
Andreas Steffen [Fri, 18 Apr 2008 17:01:45 +0000 (17:01 -0000)]
support of AES_XCBC and CAMELLIA ESP cipher by pluto

13 years agofixed AES default key length
Andreas Steffen [Fri, 18 Apr 2008 17:00:30 +0000 (17:00 -0000)]
fixed AES default key length

13 years agoshipping a default strongswan.conf
Martin Willi [Fri, 18 Apr 2008 12:52:47 +0000 (12:52 -0000)]
shipping a default strongswan.conf

13 years agoupdated pfkeyv2.h
Andreas Steffen [Fri, 18 Apr 2008 12:27:50 +0000 (12:27 -0000)]
updated pfkeyv2.h

13 years agosql pool prototype
Martin Willi [Fri, 18 Apr 2008 11:51:58 +0000 (11:51 -0000)]
sql pool prototype

13 years agofunctions invoked on all linked list items now support up to five additional arguments
Tobias Brunner [Fri, 18 Apr 2008 11:48:53 +0000 (11:48 -0000)]
functions invoked on all linked list items now support up to five additional arguments

13 years agonews (hash and url)
Tobias Brunner [Fri, 18 Apr 2008 11:43:20 +0000 (11:43 -0000)]
news (hash and url)

13 years agoupdated list of ESP and AH algorithms
Andreas Steffen [Fri, 18 Apr 2008 11:25:37 +0000 (11:25 -0000)]
updated list of ESP and AH algorithms

13 years agosupport for hash and URL encoded certificate payloads in charon
Tobias Brunner [Fri, 18 Apr 2008 11:24:45 +0000 (11:24 -0000)]
support for hash and URL encoded certificate payloads in charon

13 years agotypo
Tobias Brunner [Fri, 18 Apr 2008 10:58:36 +0000 (10:58 -0000)]
typo

13 years agofixed peer config equality check
Martin Willi [Fri, 18 Apr 2008 10:30:52 +0000 (10:30 -0000)]
fixed peer config equality check

13 years agotype corrected
Tobias Brunner [Fri, 18 Apr 2008 10:11:41 +0000 (10:11 -0000)]
type corrected

13 years agomore NEWS
Martin Willi [Fri, 18 Apr 2008 08:09:32 +0000 (08:09 -0000)]
more NEWS

13 years agocorrected description
Andreas Steffen [Fri, 18 Apr 2008 07:44:39 +0000 (07:44 -0000)]
corrected description

13 years agofixed another transport mode evaltest
Andreas Steffen [Fri, 18 Apr 2008 07:42:57 +0000 (07:42 -0000)]
fixed another transport mode evaltest

13 years agoadded ipv6/net2net-ipv4-ikev2 scenario
Andreas Steffen [Fri, 18 Apr 2008 07:24:01 +0000 (07:24 -0000)]
added ipv6/net2net-ipv4-ikev2 scenario

13 years agofixed two evaltests
Andreas Steffen [Fri, 18 Apr 2008 07:21:49 +0000 (07:21 -0000)]
fixed two evaltests

13 years agoupdated NEWS
Andreas Steffen [Thu, 17 Apr 2008 20:38:47 +0000 (20:38 -0000)]
updated NEWS

13 years agochanged logging of crl writing to old style
Andreas Steffen [Thu, 17 Apr 2008 20:23:31 +0000 (20:23 -0000)]
changed logging of crl writing to old style

13 years agocorrected variable name
Andreas Steffen [Thu, 17 Apr 2008 18:56:55 +0000 (18:56 -0000)]
corrected variable name

13 years agofixed compiler warning
Martin Willi [Thu, 17 Apr 2008 15:08:48 +0000 (15:08 -0000)]
fixed compiler warning

13 years agorespecting ipsec.conf cachecrls= option
Martin Willi [Thu, 17 Apr 2008 15:01:57 +0000 (15:01 -0000)]
respecting ipsec.conf cachecrls= option

13 years agoadded missing bits for credential caching
Martin Willi [Thu, 17 Apr 2008 15:00:51 +0000 (15:00 -0000)]
added missing bits for credential caching

13 years agocaching of CRLs to /etc/ipsec.d/crls
Martin Willi [Thu, 17 Apr 2008 14:08:38 +0000 (14:08 -0000)]
caching of CRLs to /etc/ipsec.d/crls

13 years agocosmetics to chunk_write()
Martin Willi [Thu, 17 Apr 2008 14:06:37 +0000 (14:06 -0000)]
cosmetics to chunk_write()

13 years agoadded missing credential_set method to stroke_ca
Martin Willi [Thu, 17 Apr 2008 13:00:05 +0000 (13:00 -0000)]
added missing credential_set method to stroke_ca

13 years agoextended credential_set_t interface by a cache_cert() method
Martin Willi [Thu, 17 Apr 2008 11:22:37 +0000 (11:22 -0000)]
extended credential_set_t interface by a cache_cert() method
allows persistent or in-memory caching of fetched certificates

13 years agosplitted IKE_SA manager destroy to allow plugin interaction
Martin Willi [Thu, 17 Apr 2008 10:46:25 +0000 (10:46 -0000)]
splitted IKE_SA manager destroy to allow plugin interaction

13 years agoadding rightsourceip=%poolname properly to peer config
Martin Willi [Thu, 17 Apr 2008 08:55:32 +0000 (08:55 -0000)]
adding rightsourceip=%poolname properly to peer config

13 years agoslightly optimized IKE_SA checkin
Martin Willi [Wed, 16 Apr 2008 08:43:32 +0000 (08:43 -0000)]
slightly optimized IKE_SA checkin

13 years agoparallelized trust chain verification
Martin Willi [Wed, 16 Apr 2008 08:38:15 +0000 (08:38 -0000)]
parallelized trust chain verification
temporary imported certificates are thread-local only
read-write locking on credential manager
credential sets must be thread-save now

13 years agooptimized half-open IKE_SA lookup (no checkout)
Martin Willi [Wed, 16 Apr 2008 08:34:52 +0000 (08:34 -0000)]
optimized half-open IKE_SA lookup (no checkout)

13 years agodisable DPD if dpddelay is set but dpdaction=none
Martin Willi [Wed, 16 Apr 2008 05:50:56 +0000 (05:50 -0000)]
disable DPD if dpddelay is set but dpdaction=none

13 years agoupdated sql testcases to new table schema
Martin Willi [Tue, 15 Apr 2008 15:14:32 +0000 (15:14 -0000)]
updated sql testcases to new table schema

13 years agoupdated sql plugin to respect config changes
Martin Willi [Tue, 15 Apr 2008 15:13:53 +0000 (15:13 -0000)]
updated sql plugin to respect config changes

13 years agodisabled SQL logging by default, as tests scenarios do not have a logging table
Martin Willi [Tue, 15 Apr 2008 15:13:08 +0000 (15:13 -0000)]
disabled SQL logging by default, as tests scenarios do not have a logging table

13 years agoadded error logging to sqlite plugin
Martin Willi [Tue, 15 Apr 2008 15:12:01 +0000 (15:12 -0000)]
added error logging to sqlite plugin

13 years agofixed build of smp plugin
Martin Willi [Tue, 15 Apr 2008 11:51:46 +0000 (11:51 -0000)]
fixed build of smp plugin

13 years agoset long-forgotten DPD defaults
Andreas Steffen [Tue, 15 Apr 2008 11:27:45 +0000 (11:27 -0000)]
set long-forgotten DPD defaults

13 years agobuild plugins after daemon/libstrongswan
Martin Willi [Tue, 15 Apr 2008 07:57:01 +0000 (07:57 -0000)]
build plugins after daemon/libstrongswan

13 years agoadded API for random number generators, served through credential factory
Martin Willi [Tue, 15 Apr 2008 05:56:35 +0000 (05:56 -0000)]
added API for random number generators, served through credential factory
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)

13 years agoimplemented IKE_SA uniqueness using ipsec.conf uniqueids paramater
Martin Willi [Mon, 14 Apr 2008 13:23:24 +0000 (13:23 -0000)]
implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater
additionally supports a "keep" value to keep the old IKE_SA

13 years agoike_sa_manager enumerable, not iterable
Martin Willi [Mon, 14 Apr 2008 11:37:46 +0000 (11:37 -0000)]
ike_sa_manager enumerable, not iterable

13 years agoupdated rightsourceip parameter in man page
Martin Willi [Mon, 14 Apr 2008 08:27:05 +0000 (08:27 -0000)]
updated rightsourceip parameter in man page

13 years agoadded close_action as a seperate config option to dpd_action
Martin Willi [Mon, 14 Apr 2008 08:17:18 +0000 (08:17 -0000)]
added close_action as a seperate config option to dpd_action

13 years agofixed jumping IKE_SA unique ids
Martin Willi [Mon, 14 Apr 2008 07:55:23 +0000 (07:55 -0000)]
fixed jumping IKE_SA unique ids

13 years agofixed rightsourceip=%config scenarios
Martin Willi [Mon, 14 Apr 2008 07:18:16 +0000 (07:18 -0000)]
fixed rightsourceip=%config scenarios

13 years agouse ip6tables in sql/rw-psk-ipv6 scenario
Andreas Steffen [Mon, 14 Apr 2008 06:10:10 +0000 (06:10 -0000)]
use ip6tables in sql/rw-psk-ipv6 scenario

13 years agofixed suppression of cert requests in eap-sim and eap-aka scenarios
Andreas Steffen [Mon, 14 Apr 2008 04:33:17 +0000 (04:33 -0000)]
fixed suppression of cert requests in eap-sim and eap-aka scenarios

13 years agohost_srcip was not properly initialized in starterwhack.c
Andreas Steffen [Sun, 13 Apr 2008 21:42:44 +0000 (21:42 -0000)]
host_srcip was not properly initialized in starterwhack.c

13 years agoadded sql/rw-psk-ipv6 scenario
Andreas Steffen [Sun, 13 Apr 2008 19:50:15 +0000 (19:50 -0000)]
added sql/rw-psk-ipv6 scenario

13 years agoadded sql/rw-psk-rsa-split scenario
Andreas Steffen [Sun, 13 Apr 2008 19:49:20 +0000 (19:49 -0000)]
added sql/rw-psk-rsa-split scenario

13 years agofixed disabling the sending of cert requests
Andreas Steffen [Sun, 13 Apr 2008 17:31:07 +0000 (17:31 -0000)]
fixed disabling the sending of cert requests

13 years agousing dpd actions to enforce connection state
Martin Willi [Fri, 11 Apr 2008 08:14:48 +0000 (08:14 -0000)]
using dpd actions to enforce connection state
dpd actions a per child-, not peer ike-sa

13 years agoenabling acquire for mediated connections
Tobias Brunner [Thu, 10 Apr 2008 12:51:04 +0000 (12:51 -0000)]
enabling acquire for mediated connections

13 years agoenabling reauthentication on mediation connections
Tobias Brunner [Thu, 10 Apr 2008 08:42:27 +0000 (08:42 -0000)]
enabling reauthentication on mediation connections

13 years agofixing a problem if the mediation server initiates the rekeying
Tobias Brunner [Thu, 10 Apr 2008 07:24:30 +0000 (07:24 -0000)]
fixing a problem if the mediation server initiates the rekeying

13 years agomediation connections should now properly rekey
Tobias Brunner [Wed, 9 Apr 2008 18:12:22 +0000 (18:12 -0000)]
mediation connections should now properly rekey

13 years agoimplemented a simple attribute provider for stroke
Martin Willi [Wed, 9 Apr 2008 12:56:20 +0000 (12:56 -0000)]
implemented a simple attribute provider for stroke

13 years agoimplementation of an CFG attribute framework, currently supporting virtual IPs
Martin Willi [Wed, 9 Apr 2008 12:54:47 +0000 (12:54 -0000)]
implementation of an CFG attribute framework, currently supporting virtual IPs
updated ipsec.conf sourceip parameter to support
CIDR notatation to serve from a pool
%poolname to query a separate (database?) pool

13 years agosignature in connectivity checks is now built with the message id in network byte...
Tobias Brunner [Tue, 8 Apr 2008 13:45:30 +0000 (13:45 -0000)]
signature in connectivity checks is now built with the message id in network byte order

13 years agochanged force_encap to forceencaps
Martin Willi [Tue, 8 Apr 2008 12:53:36 +0000 (12:53 -0000)]
changed force_encap to forceencaps

13 years agoprinting the checklist, two bugfixes
Tobias Brunner [Tue, 8 Apr 2008 12:31:27 +0000 (12:31 -0000)]
printing the checklist, two bugfixes

13 years agoconnect manager: restart the sender if it is not running anymore
Tobias Brunner [Tue, 8 Apr 2008 09:21:27 +0000 (09:21 -0000)]
connect manager: restart the sender if it is not running anymore

13 years agobetter logging for chunks in connect manager
Tobias Brunner [Tue, 8 Apr 2008 08:41:23 +0000 (08:41 -0000)]
better logging for chunks in connect manager

13 years agorefactored callback data in connect manager
Tobias Brunner [Tue, 8 Apr 2008 08:33:15 +0000 (08:33 -0000)]
refactored callback data in connect manager

13 years agoremoved stale ocsp header
Martin Willi [Tue, 8 Apr 2008 06:27:04 +0000 (06:27 -0000)]
removed stale ocsp header

13 years agofast finishing connectivity checks on the initiators side
Tobias Brunner [Mon, 7 Apr 2008 15:45:37 +0000 (15:45 -0000)]
fast finishing connectivity checks on the initiators side

13 years agocorrected the logging for retransmissions of connectivity checks
Tobias Brunner [Mon, 7 Apr 2008 14:45:39 +0000 (14:45 -0000)]
corrected the logging for retransmissions of connectivity checks

13 years agochanged how retransmissions of connectivity checks are sent
Tobias Brunner [Mon, 7 Apr 2008 11:26:15 +0000 (11:26 -0000)]
changed how retransmissions of connectivity checks are sent

13 years agofixed doxygen groups to avoid recursion
Martin Willi [Mon, 7 Apr 2008 10:37:14 +0000 (10:37 -0000)]
fixed doxygen groups to avoid recursion

13 years agowildcard matching in shared secrets not implemented yet
Andreas Steffen [Mon, 7 Apr 2008 10:29:08 +0000 (10:29 -0000)]
wildcard matching in shared secrets not implemented yet