strongswan.git
11 years agoUsing the thread wrapper in charon, libstrongswan and their plugins.
Tobias Brunner [Thu, 17 Dec 2009 14:58:12 +0000 (15:58 +0100)]
Using the thread wrapper in charon, libstrongswan and their plugins.

11 years agoAdding an object-oriented wrapper for thread-specific values.
Tobias Brunner [Thu, 17 Dec 2009 14:28:23 +0000 (15:28 +0100)]
Adding an object-oriented wrapper for thread-specific values.

11 years agoAdding an object-oriented wrapper for threads.
Tobias Brunner [Thu, 17 Dec 2009 14:25:37 +0000 (15:25 +0100)]
Adding an object-oriented wrapper for threads.

11 years agoCheck if libpthread is required or not.
Tobias Brunner [Thu, 10 Dec 2009 10:08:01 +0000 (11:08 +0100)]
Check if libpthread is required or not.

11 years agoCheck for pthread_condattr_init added to configure script.
Tobias Brunner [Tue, 8 Dec 2009 17:24:40 +0000 (18:24 +0100)]
Check for pthread_condattr_init added to configure script.

11 years agoGenerating the apidoc in an out-of-tree build fixed.
Tobias Brunner [Tue, 8 Dec 2009 16:06:04 +0000 (17:06 +0100)]
Generating the apidoc in an out-of-tree build fixed.

11 years agoMoved implementation of condvar_t to mutex.c because it requires access to private_mu...
Tobias Brunner [Tue, 8 Dec 2009 16:55:37 +0000 (17:55 +0100)]
Moved implementation of condvar_t to mutex.c because it requires access to private_mutex_t.

11 years agoSeparated the public interfaces of the threading primitives.
Tobias Brunner [Tue, 8 Dec 2009 15:53:01 +0000 (16:53 +0100)]
Separated the public interfaces of the threading primitives.

11 years agoImplemented a read-write lock using only mutex_t and condvar_t (in case the pthread_r...
Tobias Brunner [Tue, 8 Dec 2009 13:06:11 +0000 (14:06 +0100)]
Implemented a read-write lock using only mutex_t and condvar_t (in case the pthread_rwlock_* group of functions is not available).

11 years agoThreading primitives separated.
Tobias Brunner [Mon, 7 Dec 2009 16:26:39 +0000 (17:26 +0100)]
Threading primitives separated.

11 years agoMoved mutex.c to a separate folder in order to cleanly wrap other threading primitive...
Tobias Brunner [Mon, 7 Dec 2009 14:56:04 +0000 (15:56 +0100)]
Moved mutex.c to a separate folder in order to cleanly wrap other threading primitives (and utils/mutex.h is now threading.h).

11 years agoverify RFC3779 IP address blocks along X.509 certificate trust chain
Andreas Steffen [Wed, 23 Dec 2009 13:17:28 +0000 (14:17 +0100)]
verify RFC3779 IP address blocks along X.509 certificate trust chain

11 years agoFixed untoh32 function
Martin Willi [Wed, 23 Dec 2009 12:08:42 +0000 (13:08 +0100)]
Fixed untoh32 function

11 years agodo not recalculate netbits for true subnets
Andreas Steffen [Tue, 22 Dec 2009 16:07:08 +0000 (17:07 +0100)]
do not recalculate netbits for true subnets

11 years agoX509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension
Andreas Steffen [Tue, 22 Dec 2009 12:18:27 +0000 (13:18 +0100)]
X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension

11 years agoadded create_ipAddrBlock_enumerator() method to x509_t
Andreas Steffen [Tue, 22 Dec 2009 10:58:30 +0000 (11:58 +0100)]
added create_ipAddrBlock_enumerator() method to x509_t

11 years agocosmetics
Andreas Steffen [Tue, 22 Dec 2009 08:53:53 +0000 (09:53 +0100)]
cosmetics

11 years agofixed IPv6 bug in calc_range()
Andreas Steffen [Mon, 21 Dec 2009 23:49:23 +0000 (00:49 +0100)]
fixed IPv6 bug in calc_range()

11 years agofixed initialization of netbits
Andreas Steffen [Mon, 21 Dec 2009 22:03:14 +0000 (23:03 +0100)]
fixed initialization of netbits

11 years agofixed distribution list
Andreas Steffen [Mon, 21 Dec 2009 21:28:08 +0000 (22:28 +0100)]
fixed distribution list

11 years agotraffic_selector supports RFC 3779 address range format
Andreas Steffen [Mon, 21 Dec 2009 20:28:45 +0000 (21:28 +0100)]
traffic_selector supports RFC 3779 address range format

11 years agoMigrated identification_t to INIT/METHOD macros
Martin Willi [Mon, 21 Dec 2009 14:23:34 +0000 (15:23 +0100)]
Migrated identification_t to INIT/METHOD macros

11 years agothis->type is set by traffic_selector_create()
Andreas Steffen [Sun, 20 Dec 2009 19:01:18 +0000 (20:01 +0100)]
this->type is set by traffic_selector_create()

11 years agoparse RFC 3779 addressFamily
Andreas Steffen [Sun, 20 Dec 2009 18:26:28 +0000 (19:26 +0100)]
parse RFC 3779 addressFamily

11 years agoplugin name is x509
Andreas Steffen [Sun, 20 Dec 2009 15:01:35 +0000 (16:01 +0100)]
plugin name is x509

11 years agodiscard certificate with unknown critical extensions
Andreas Steffen [Sun, 20 Dec 2009 14:53:39 +0000 (15:53 +0100)]
discard certificate with unknown critical extensions

11 years agouse traffic_selector_t object to represent ipAddrBlocks
Andreas Steffen [Sun, 20 Dec 2009 14:15:02 +0000 (15:15 +0100)]
use traffic_selector_t object to represent ipAddrBlocks

11 years agomoved traffic_selectors from charon to libstrongswan
Andreas Steffen [Sun, 20 Dec 2009 13:57:38 +0000 (14:57 +0100)]
moved traffic_selectors from charon to libstrongswan

11 years agofirewall-enabled ipv6/net2net-ip6-in-ip4-ikev2 scenario
Andreas Steffen [Thu, 17 Dec 2009 18:43:33 +0000 (19:43 +0100)]
firewall-enabled ipv6/net2net-ip6-in-ip4-ikev2 scenario

11 years agofirewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario
Andreas Steffen [Thu, 17 Dec 2009 17:50:45 +0000 (18:50 +0100)]
firewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario

11 years agoparse ipAddrBlocks
Andreas Steffen [Thu, 17 Dec 2009 16:32:26 +0000 (17:32 +0100)]
parse ipAddrBlocks

11 years agofixed updown plugin for mixed IPv4/IPv6 tunnels
Andreas Steffen [Thu, 17 Dec 2009 16:28:11 +0000 (17:28 +0100)]
fixed updown plugin for mixed IPv4/IPv6 tunnels

11 years agoMigrated curl_fetcher to INIT/METHOD macros
Martin Willi [Tue, 8 Dec 2009 15:21:08 +0000 (16:21 +0100)]
Migrated curl_fetcher to INIT/METHOD macros

11 years agoAdded a METHOD() macro to define methods with both public and private signatures
Martin Willi [Tue, 8 Dec 2009 15:12:16 +0000 (16:12 +0100)]
Added a METHOD() macro to define methods with both public and private signatures

11 years agoAdded a INIT() macro to initialize class instances
Martin Willi [Tue, 8 Dec 2009 15:11:37 +0000 (16:11 +0100)]
Added a INIT() macro to initialize class instances

11 years agoFixed BEET mode by installing SAs with negotiated address in traffic selector
Martin Willi [Thu, 17 Dec 2009 09:50:37 +0000 (10:50 +0100)]
Fixed BEET mode by installing SAs with negotiated address in traffic selector

11 years agoadded IKEv1 Camellia support to NEWS
Andreas Steffen [Wed, 16 Dec 2009 20:52:32 +0000 (21:52 +0100)]
added IKEv1 Camellia support to NEWS

11 years agoikev1/ip-pool-db-push scenario tests DNS and NBNS server support
Andreas Steffen [Wed, 16 Dec 2009 20:50:39 +0000 (21:50 +0100)]
ikev1/ip-pool-db-push scenario tests DNS and NBNS server support

11 years agoIKEv1 daemon supports DNS and NBNS server assignment from database
Andreas Steffen [Wed, 16 Dec 2009 20:49:51 +0000 (21:49 +0100)]
IKEv1 daemon supports DNS and NBNS server assignment from database

11 years agoikev1/ip-pool-db scenario tests DNS and NBNS server support
Andreas Steffen [Wed, 16 Dec 2009 20:22:13 +0000 (21:22 +0100)]
ikev1/ip-pool-db scenario tests DNS and NBNS server support

11 years agosql/ip-pool-db scenario tests DNS and NBNS server support
Andreas Steffen [Wed, 16 Dec 2009 18:02:23 +0000 (19:02 +0100)]
sql/ip-pool-db scenario tests DNS and NBNS server support

11 years agoikev2/ip-pool-db scenario tests DNS and NBNS server support
Andreas Steffen [Wed, 16 Dec 2009 17:45:29 +0000 (18:45 +0100)]
ikev2/ip-pool-db scenario tests DNS and NBNS server support

11 years agoadded ipsec pool DNS and NBNS support to NEWS
Andreas Steffen [Wed, 16 Dec 2009 17:20:07 +0000 (18:20 +0100)]
added ipsec pool DNS and NBNS support to NEWS

11 years agoipsec pool manages dns and nbns servers
Andreas Steffen [Wed, 16 Dec 2009 17:11:57 +0000 (18:11 +0100)]
ipsec pool manages dns and nbns servers

11 years agocosmetics
Andreas Steffen [Wed, 16 Dec 2009 12:33:09 +0000 (13:33 +0100)]
cosmetics

11 years agoprovide attributes from SQL database
Andreas Steffen [Wed, 16 Dec 2009 11:31:41 +0000 (12:31 +0100)]
provide attributes from SQL database

11 years agoadded openssl-ikev1/alg-camellia scenario
Andreas Steffen [Tue, 15 Dec 2009 18:55:58 +0000 (19:55 +0100)]
added openssl-ikev1/alg-camellia scenario

11 years agoremoved superfluous ikev1/esp-alg-camellia scenario
Andreas Steffen [Tue, 15 Dec 2009 18:16:28 +0000 (19:16 +0100)]
removed superfluous ikev1/esp-alg-camellia scenario

11 years agoadded gcrypt-ikev1/alg-camellia scenario
Andreas Steffen [Tue, 15 Dec 2009 18:15:44 +0000 (19:15 +0100)]
added gcrypt-ikev1/alg-camellia scenario

11 years agoadd IKEv1 support for the Camellia cipher
Andreas Steffen [Tue, 15 Dec 2009 18:13:06 +0000 (19:13 +0100)]
add IKEv1 support for the Camellia cipher

11 years agoAdded htoun16/32 and untoh16/32 to read/write unaligned network order integers
Martin Willi [Tue, 15 Dec 2009 12:39:01 +0000 (13:39 +0100)]
Added htoun16/32 and untoh16/32 to read/write unaligned network order integers

11 years agoInstall v6 routes via outgoing interface for now
Martin Willi [Mon, 14 Dec 2009 13:44:24 +0000 (14:44 +0100)]
Install v6 routes via outgoing interface for now

11 years agoactivate tcpdump in ikev1/esp-alg-des scenario
Andreas Steffen [Thu, 10 Dec 2009 21:37:43 +0000 (22:37 +0100)]
activate tcpdump in ikev1/esp-alg-des scenario

11 years agoshuffled output order to achieve consistence
Andreas Steffen [Wed, 9 Dec 2009 16:26:35 +0000 (17:26 +0100)]
shuffled output order to achieve consistence

11 years agoadded pfkey/alg-sha384 and pfkey/alg-sha512 scenarios
Andreas Steffen [Wed, 9 Dec 2009 16:25:12 +0000 (17:25 +0100)]
added pfkey/alg-sha384 and pfkey/alg-sha512 scenarios

11 years agoadapted openssl-ikev2/alg scenarios
Andreas Steffen [Wed, 9 Dec 2009 14:51:43 +0000 (15:51 +0100)]
adapted openssl-ikev2/alg scenarios

11 years agoadapted gcrypt-ikev2/alg-camellia scenario
Andreas Steffen [Wed, 9 Dec 2009 14:48:03 +0000 (15:48 +0100)]
adapted gcrypt-ikev2/alg-camellia scenario

11 years agoadapted gcrypt-ikev1 alg scenarios
Andreas Steffen [Wed, 9 Dec 2009 14:45:45 +0000 (15:45 +0100)]
adapted gcrypt-ikev1 alg scenarios

11 years agoadapted ikev1 alg and esp scenarios
Andreas Steffen [Wed, 9 Dec 2009 14:41:54 +0000 (15:41 +0100)]
adapted ikev1 alg and esp scenarios

11 years agoadapted pfkey alg and esp scenarios
Andreas Steffen [Wed, 9 Dec 2009 14:38:17 +0000 (15:38 +0100)]
adapted pfkey alg and esp scenarios

11 years agoremove again the ikev2/esp-alg-camellia scenario
Andreas Steffen [Wed, 9 Dec 2009 14:26:43 +0000 (15:26 +0100)]
remove again the ikev2/esp-alg-camellia scenario

11 years agoadapted ikev2 alg and esp scenarios
Andreas Steffen [Wed, 9 Dec 2009 14:19:10 +0000 (15:19 +0100)]
adapted ikev2 alg and esp scenarios

11 years agoremoved redundant ikev1/ike-alg-sha2 scenarios
Andreas Steffen [Wed, 9 Dec 2009 09:11:03 +0000 (10:11 +0100)]
removed redundant ikev1/ike-alg-sha2 scenarios

11 years agoadded ikev1/alg-sha512 scenario
Andreas Steffen [Wed, 9 Dec 2009 08:51:54 +0000 (09:51 +0100)]
added ikev1/alg-sha512 scenario

11 years agoadded ikev1/alg-sha384 scenario
Andreas Steffen [Wed, 9 Dec 2009 08:46:40 +0000 (09:46 +0100)]
added ikev1/alg-sha384 scenario

11 years agorenamed ikev1/alg-sha2_256 scenario to ikev1/alg-sha256
Andreas Steffen [Wed, 9 Dec 2009 08:36:16 +0000 (09:36 +0100)]
renamed ikev1/alg-sha2_256 scenario to ikev1/alg-sha256

11 years agoadded ikev1/alg-sha256-96 scenario
Andreas Steffen [Wed, 9 Dec 2009 08:35:17 +0000 (09:35 +0100)]
added ikev1/alg-sha256-96 scenario

11 years agofixed IKEv1 support of HMAC_SHA2_256_96
Andreas Steffen [Wed, 9 Dec 2009 08:33:32 +0000 (09:33 +0100)]
fixed IKEv1 support of HMAC_SHA2_256_96

11 years agoadded Juniper SRX support to NEWS
Andreas Steffen [Wed, 9 Dec 2009 07:00:19 +0000 (08:00 +0100)]
added Juniper SRX support to NEWS

11 years agoif end id is missing assign IP address to raw public key
Andreas Steffen [Wed, 9 Dec 2009 06:24:43 +0000 (07:24 +0100)]
if end id is missing assign IP address to raw public key

11 years agoIKEv1 support of ESP SHA2_HMAC with correct truncation
Andreas Steffen [Tue, 8 Dec 2009 23:24:22 +0000 (00:24 +0100)]
IKEv1 support of ESP SHA2_HMAC with correct truncation

11 years agosome code optimizations
Andreas Steffen [Tue, 8 Dec 2009 23:19:03 +0000 (00:19 +0100)]
some code optimizations

11 years agoadded ipAddrBlocks OID
Andreas Steffen [Tue, 8 Dec 2009 22:48:56 +0000 (23:48 +0100)]
added ipAddrBlocks OID

11 years agoremoved redundant ikev2/esp-alg-camellia scenario
Andreas Steffen [Tue, 8 Dec 2009 20:43:03 +0000 (21:43 +0100)]
removed redundant ikev2/esp-alg-camellia scenario

11 years agoImproved libfast session management, using a hashtable
Martin Willi [Sat, 5 Dec 2009 16:56:44 +0000 (17:56 +0100)]
Improved libfast session management, using a hashtable

11 years agoRemoved obsolete curl interface specific destructor
Martin Willi [Tue, 8 Dec 2009 15:21:58 +0000 (16:21 +0100)]
Removed obsolete curl interface specific destructor

11 years agoSupport "_" and "-" variants of NetworkManager pkg-config packages
Martin Willi [Tue, 8 Dec 2009 13:35:16 +0000 (14:35 +0100)]
Support "_" and "-" variants of NetworkManager pkg-config packages

11 years agoUndef PACKAGE_BUG/URL of strongSwan before including ruby variants
Martin Willi [Tue, 8 Dec 2009 13:34:14 +0000 (14:34 +0100)]
Undef PACKAGE_BUG/URL of strongSwan before including ruby variants

11 years agoRemove generated config.h.in from source tree
Martin Willi [Tue, 8 Dec 2009 13:29:48 +0000 (14:29 +0100)]
Remove generated config.h.in from source tree

11 years agoadded ikev2/alg-3des-md5 scenario
Andreas Steffen [Tue, 8 Dec 2009 11:54:42 +0000 (12:54 +0100)]
added ikev2/alg-3des-md5 scenario

11 years agoThe attribute manager was moved from daemon_t to libstrongswan.
Tobias Brunner [Mon, 7 Dec 2009 15:00:27 +0000 (16:00 +0100)]
The attribute manager was moved from daemon_t to libstrongswan.

11 years agoDo not execute the callback job if it has been cancelled since registration
Martin Willi [Thu, 3 Dec 2009 07:00:04 +0000 (08:00 +0100)]
Do not execute the callback job if it has been cancelled since registration

11 years agoCleanup library if daemon initialization fails
Martin Willi [Thu, 3 Dec 2009 06:56:19 +0000 (07:56 +0100)]
Cleanup library if daemon initialization fails

11 years agoTo build strongSwan from git sources, gettext is required
Martin Willi [Wed, 2 Dec 2009 10:49:11 +0000 (11:49 +0100)]
To build strongSwan from git sources, gettext is required

11 years agoDo not install invalid 0.0.0.0 DNS servers
Martin Willi [Tue, 1 Dec 2009 14:46:56 +0000 (15:46 +0100)]
Do not install invalid 0.0.0.0 DNS servers

11 years agoPrefer EAP-Identity for provider attribute/address lookup
Martin Willi [Tue, 1 Dec 2009 13:01:56 +0000 (13:01 +0000)]
Prefer EAP-Identity for provider attribute/address lookup

11 years agoSave EAP-Identity on auth config
Martin Willi [Tue, 1 Dec 2009 13:23:37 +0000 (14:23 +0100)]
Save EAP-Identity on auth config

11 years agoStore completed authentication rounds permanently on IKE_SA, with flush option
Martin Willi [Tue, 1 Dec 2009 10:35:30 +0000 (11:35 +0100)]
Store completed authentication rounds permanently on IKE_SA, with flush option

11 years agoRemoved obsolete and unused [gs]et_eap_identity() methods
Martin Willi [Mon, 30 Nov 2009 15:59:23 +0000 (16:59 +0100)]
Removed obsolete and unused [gs]et_eap_identity() methods

11 years agoDo not propose transport mode as initiator if connection is NATed
Martin Willi [Mon, 30 Nov 2009 10:32:26 +0000 (11:32 +0100)]
Do not propose transport mode as initiator if connection is NATed

11 years agoVerify EAP-SIM/AKA AT_MAC before processing any attributes
Martin Willi [Mon, 30 Nov 2009 08:58:54 +0000 (09:58 +0100)]
Verify EAP-SIM/AKA AT_MAC before processing any attributes

11 years agoSIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the response
Martin Willi [Fri, 27 Nov 2009 14:40:40 +0000 (15:40 +0100)]
SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the response

11 years agoInvoke attribute/key hooks from libsimaka
Martin Willi [Fri, 27 Nov 2009 10:16:20 +0000 (11:16 +0100)]
Invoke attribute/key hooks from libsimaka

11 years agoExtended SIM manager by hooks, currently featuring attribute and key hooks
Martin Willi [Fri, 27 Nov 2009 10:14:40 +0000 (11:14 +0100)]
Extended SIM manager by hooks, currently featuring attribute and key hooks

11 years agoAdded a get_sa() method to the bus, allowing a thread to lookup its IKE_SA
Martin Willi [Fri, 27 Nov 2009 08:34:38 +0000 (09:34 +0100)]
Added a get_sa() method to the bus, allowing a thread to lookup its IKE_SA

11 years agoHandle NOT_SUPPORTED or other errors properly in get_quintuplet
Martin Willi [Fri, 27 Nov 2009 13:55:20 +0000 (14:55 +0100)]
Handle NOT_SUPPORTED or other errors properly in get_quintuplet

11 years agoadded RFC-conforming ikev2/sha2 scenarios
Andreas Steffen [Thu, 26 Nov 2009 22:48:29 +0000 (23:48 +0100)]
added RFC-conforming ikev2/sha2 scenarios

11 years agoadapted ikev2/alg-aes-xcbc scenario
Andreas Steffen [Thu, 26 Nov 2009 22:46:27 +0000 (23:46 +0100)]
adapted ikev2/alg-aes-xcbc scenario

11 years agoUse transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP header
Martin Willi [Thu, 26 Nov 2009 14:58:55 +0000 (15:58 +0100)]
Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP header

11 years agoAdded NEWS about SHA2 changes
Martin Willi [Thu, 26 Nov 2009 09:27:35 +0000 (10:27 +0100)]
Added NEWS about SHA2 changes