strongswan.git
11 years agouse traffic_selector_t object to represent ipAddrBlocks
Andreas Steffen [Sun, 20 Dec 2009 14:15:02 +0000 (15:15 +0100)]
use traffic_selector_t object to represent ipAddrBlocks

11 years agomoved traffic_selectors from charon to libstrongswan
Andreas Steffen [Sun, 20 Dec 2009 13:57:38 +0000 (14:57 +0100)]
moved traffic_selectors from charon to libstrongswan

11 years agofirewall-enabled ipv6/net2net-ip6-in-ip4-ikev2 scenario
Andreas Steffen [Thu, 17 Dec 2009 18:43:33 +0000 (19:43 +0100)]
firewall-enabled ipv6/net2net-ip6-in-ip4-ikev2 scenario

11 years agofirewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario
Andreas Steffen [Thu, 17 Dec 2009 17:50:45 +0000 (18:50 +0100)]
firewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario

11 years agoparse ipAddrBlocks
Andreas Steffen [Thu, 17 Dec 2009 16:32:26 +0000 (17:32 +0100)]
parse ipAddrBlocks

11 years agofixed updown plugin for mixed IPv4/IPv6 tunnels
Andreas Steffen [Thu, 17 Dec 2009 16:28:11 +0000 (17:28 +0100)]
fixed updown plugin for mixed IPv4/IPv6 tunnels

11 years agoMigrated curl_fetcher to INIT/METHOD macros
Martin Willi [Tue, 8 Dec 2009 15:21:08 +0000 (16:21 +0100)]
Migrated curl_fetcher to INIT/METHOD macros

11 years agoAdded a METHOD() macro to define methods with both public and private signatures
Martin Willi [Tue, 8 Dec 2009 15:12:16 +0000 (16:12 +0100)]
Added a METHOD() macro to define methods with both public and private signatures

11 years agoAdded a INIT() macro to initialize class instances
Martin Willi [Tue, 8 Dec 2009 15:11:37 +0000 (16:11 +0100)]
Added a INIT() macro to initialize class instances

11 years agoFixed BEET mode by installing SAs with negotiated address in traffic selector
Martin Willi [Thu, 17 Dec 2009 09:50:37 +0000 (10:50 +0100)]
Fixed BEET mode by installing SAs with negotiated address in traffic selector

11 years agoadded IKEv1 Camellia support to NEWS
Andreas Steffen [Wed, 16 Dec 2009 20:52:32 +0000 (21:52 +0100)]
added IKEv1 Camellia support to NEWS

11 years agoikev1/ip-pool-db-push scenario tests DNS and NBNS server support
Andreas Steffen [Wed, 16 Dec 2009 20:50:39 +0000 (21:50 +0100)]
ikev1/ip-pool-db-push scenario tests DNS and NBNS server support

11 years agoIKEv1 daemon supports DNS and NBNS server assignment from database
Andreas Steffen [Wed, 16 Dec 2009 20:49:51 +0000 (21:49 +0100)]
IKEv1 daemon supports DNS and NBNS server assignment from database

11 years agoikev1/ip-pool-db scenario tests DNS and NBNS server support
Andreas Steffen [Wed, 16 Dec 2009 20:22:13 +0000 (21:22 +0100)]
ikev1/ip-pool-db scenario tests DNS and NBNS server support

11 years agosql/ip-pool-db scenario tests DNS and NBNS server support
Andreas Steffen [Wed, 16 Dec 2009 18:02:23 +0000 (19:02 +0100)]
sql/ip-pool-db scenario tests DNS and NBNS server support

11 years agoikev2/ip-pool-db scenario tests DNS and NBNS server support
Andreas Steffen [Wed, 16 Dec 2009 17:45:29 +0000 (18:45 +0100)]
ikev2/ip-pool-db scenario tests DNS and NBNS server support

11 years agoadded ipsec pool DNS and NBNS support to NEWS
Andreas Steffen [Wed, 16 Dec 2009 17:20:07 +0000 (18:20 +0100)]
added ipsec pool DNS and NBNS support to NEWS

11 years agoipsec pool manages dns and nbns servers
Andreas Steffen [Wed, 16 Dec 2009 17:11:57 +0000 (18:11 +0100)]
ipsec pool manages dns and nbns servers

11 years agocosmetics
Andreas Steffen [Wed, 16 Dec 2009 12:33:09 +0000 (13:33 +0100)]
cosmetics

11 years agoprovide attributes from SQL database
Andreas Steffen [Wed, 16 Dec 2009 11:31:41 +0000 (12:31 +0100)]
provide attributes from SQL database

11 years agoadded openssl-ikev1/alg-camellia scenario
Andreas Steffen [Tue, 15 Dec 2009 18:55:58 +0000 (19:55 +0100)]
added openssl-ikev1/alg-camellia scenario

11 years agoremoved superfluous ikev1/esp-alg-camellia scenario
Andreas Steffen [Tue, 15 Dec 2009 18:16:28 +0000 (19:16 +0100)]
removed superfluous ikev1/esp-alg-camellia scenario

11 years agoadded gcrypt-ikev1/alg-camellia scenario
Andreas Steffen [Tue, 15 Dec 2009 18:15:44 +0000 (19:15 +0100)]
added gcrypt-ikev1/alg-camellia scenario

11 years agoadd IKEv1 support for the Camellia cipher
Andreas Steffen [Tue, 15 Dec 2009 18:13:06 +0000 (19:13 +0100)]
add IKEv1 support for the Camellia cipher

11 years agoAdded htoun16/32 and untoh16/32 to read/write unaligned network order integers
Martin Willi [Tue, 15 Dec 2009 12:39:01 +0000 (13:39 +0100)]
Added htoun16/32 and untoh16/32 to read/write unaligned network order integers

11 years agoInstall v6 routes via outgoing interface for now
Martin Willi [Mon, 14 Dec 2009 13:44:24 +0000 (14:44 +0100)]
Install v6 routes via outgoing interface for now

11 years agoactivate tcpdump in ikev1/esp-alg-des scenario
Andreas Steffen [Thu, 10 Dec 2009 21:37:43 +0000 (22:37 +0100)]
activate tcpdump in ikev1/esp-alg-des scenario

11 years agoshuffled output order to achieve consistence
Andreas Steffen [Wed, 9 Dec 2009 16:26:35 +0000 (17:26 +0100)]
shuffled output order to achieve consistence

11 years agoadded pfkey/alg-sha384 and pfkey/alg-sha512 scenarios
Andreas Steffen [Wed, 9 Dec 2009 16:25:12 +0000 (17:25 +0100)]
added pfkey/alg-sha384 and pfkey/alg-sha512 scenarios

11 years agoadapted openssl-ikev2/alg scenarios
Andreas Steffen [Wed, 9 Dec 2009 14:51:43 +0000 (15:51 +0100)]
adapted openssl-ikev2/alg scenarios

11 years agoadapted gcrypt-ikev2/alg-camellia scenario
Andreas Steffen [Wed, 9 Dec 2009 14:48:03 +0000 (15:48 +0100)]
adapted gcrypt-ikev2/alg-camellia scenario

11 years agoadapted gcrypt-ikev1 alg scenarios
Andreas Steffen [Wed, 9 Dec 2009 14:45:45 +0000 (15:45 +0100)]
adapted gcrypt-ikev1 alg scenarios

11 years agoadapted ikev1 alg and esp scenarios
Andreas Steffen [Wed, 9 Dec 2009 14:41:54 +0000 (15:41 +0100)]
adapted ikev1 alg and esp scenarios

11 years agoadapted pfkey alg and esp scenarios
Andreas Steffen [Wed, 9 Dec 2009 14:38:17 +0000 (15:38 +0100)]
adapted pfkey alg and esp scenarios

11 years agoremove again the ikev2/esp-alg-camellia scenario
Andreas Steffen [Wed, 9 Dec 2009 14:26:43 +0000 (15:26 +0100)]
remove again the ikev2/esp-alg-camellia scenario

11 years agoadapted ikev2 alg and esp scenarios
Andreas Steffen [Wed, 9 Dec 2009 14:19:10 +0000 (15:19 +0100)]
adapted ikev2 alg and esp scenarios

11 years agoremoved redundant ikev1/ike-alg-sha2 scenarios
Andreas Steffen [Wed, 9 Dec 2009 09:11:03 +0000 (10:11 +0100)]
removed redundant ikev1/ike-alg-sha2 scenarios

11 years agoadded ikev1/alg-sha512 scenario
Andreas Steffen [Wed, 9 Dec 2009 08:51:54 +0000 (09:51 +0100)]
added ikev1/alg-sha512 scenario

11 years agoadded ikev1/alg-sha384 scenario
Andreas Steffen [Wed, 9 Dec 2009 08:46:40 +0000 (09:46 +0100)]
added ikev1/alg-sha384 scenario

11 years agorenamed ikev1/alg-sha2_256 scenario to ikev1/alg-sha256
Andreas Steffen [Wed, 9 Dec 2009 08:36:16 +0000 (09:36 +0100)]
renamed ikev1/alg-sha2_256 scenario to ikev1/alg-sha256

11 years agoadded ikev1/alg-sha256-96 scenario
Andreas Steffen [Wed, 9 Dec 2009 08:35:17 +0000 (09:35 +0100)]
added ikev1/alg-sha256-96 scenario

11 years agofixed IKEv1 support of HMAC_SHA2_256_96
Andreas Steffen [Wed, 9 Dec 2009 08:33:32 +0000 (09:33 +0100)]
fixed IKEv1 support of HMAC_SHA2_256_96

11 years agoadded Juniper SRX support to NEWS
Andreas Steffen [Wed, 9 Dec 2009 07:00:19 +0000 (08:00 +0100)]
added Juniper SRX support to NEWS

11 years agoif end id is missing assign IP address to raw public key
Andreas Steffen [Wed, 9 Dec 2009 06:24:43 +0000 (07:24 +0100)]
if end id is missing assign IP address to raw public key

11 years agoIKEv1 support of ESP SHA2_HMAC with correct truncation
Andreas Steffen [Tue, 8 Dec 2009 23:24:22 +0000 (00:24 +0100)]
IKEv1 support of ESP SHA2_HMAC with correct truncation

11 years agosome code optimizations
Andreas Steffen [Tue, 8 Dec 2009 23:19:03 +0000 (00:19 +0100)]
some code optimizations

11 years agoadded ipAddrBlocks OID
Andreas Steffen [Tue, 8 Dec 2009 22:48:56 +0000 (23:48 +0100)]
added ipAddrBlocks OID

11 years agoremoved redundant ikev2/esp-alg-camellia scenario
Andreas Steffen [Tue, 8 Dec 2009 20:43:03 +0000 (21:43 +0100)]
removed redundant ikev2/esp-alg-camellia scenario

11 years agoImproved libfast session management, using a hashtable
Martin Willi [Sat, 5 Dec 2009 16:56:44 +0000 (17:56 +0100)]
Improved libfast session management, using a hashtable

11 years agoRemoved obsolete curl interface specific destructor
Martin Willi [Tue, 8 Dec 2009 15:21:58 +0000 (16:21 +0100)]
Removed obsolete curl interface specific destructor

11 years agoSupport "_" and "-" variants of NetworkManager pkg-config packages
Martin Willi [Tue, 8 Dec 2009 13:35:16 +0000 (14:35 +0100)]
Support "_" and "-" variants of NetworkManager pkg-config packages

11 years agoUndef PACKAGE_BUG/URL of strongSwan before including ruby variants
Martin Willi [Tue, 8 Dec 2009 13:34:14 +0000 (14:34 +0100)]
Undef PACKAGE_BUG/URL of strongSwan before including ruby variants

11 years agoRemove generated config.h.in from source tree
Martin Willi [Tue, 8 Dec 2009 13:29:48 +0000 (14:29 +0100)]
Remove generated config.h.in from source tree

11 years agoadded ikev2/alg-3des-md5 scenario
Andreas Steffen [Tue, 8 Dec 2009 11:54:42 +0000 (12:54 +0100)]
added ikev2/alg-3des-md5 scenario

11 years agoThe attribute manager was moved from daemon_t to libstrongswan.
Tobias Brunner [Mon, 7 Dec 2009 15:00:27 +0000 (16:00 +0100)]
The attribute manager was moved from daemon_t to libstrongswan.

11 years agoDo not execute the callback job if it has been cancelled since registration
Martin Willi [Thu, 3 Dec 2009 07:00:04 +0000 (08:00 +0100)]
Do not execute the callback job if it has been cancelled since registration

11 years agoCleanup library if daemon initialization fails
Martin Willi [Thu, 3 Dec 2009 06:56:19 +0000 (07:56 +0100)]
Cleanup library if daemon initialization fails

11 years agoTo build strongSwan from git sources, gettext is required
Martin Willi [Wed, 2 Dec 2009 10:49:11 +0000 (11:49 +0100)]
To build strongSwan from git sources, gettext is required

11 years agoDo not install invalid 0.0.0.0 DNS servers
Martin Willi [Tue, 1 Dec 2009 14:46:56 +0000 (15:46 +0100)]
Do not install invalid 0.0.0.0 DNS servers

11 years agoPrefer EAP-Identity for provider attribute/address lookup
Martin Willi [Tue, 1 Dec 2009 13:01:56 +0000 (13:01 +0000)]
Prefer EAP-Identity for provider attribute/address lookup

11 years agoSave EAP-Identity on auth config
Martin Willi [Tue, 1 Dec 2009 13:23:37 +0000 (14:23 +0100)]
Save EAP-Identity on auth config

11 years agoStore completed authentication rounds permanently on IKE_SA, with flush option
Martin Willi [Tue, 1 Dec 2009 10:35:30 +0000 (11:35 +0100)]
Store completed authentication rounds permanently on IKE_SA, with flush option

11 years agoRemoved obsolete and unused [gs]et_eap_identity() methods
Martin Willi [Mon, 30 Nov 2009 15:59:23 +0000 (16:59 +0100)]
Removed obsolete and unused [gs]et_eap_identity() methods

11 years agoDo not propose transport mode as initiator if connection is NATed
Martin Willi [Mon, 30 Nov 2009 10:32:26 +0000 (11:32 +0100)]
Do not propose transport mode as initiator if connection is NATed

11 years agoVerify EAP-SIM/AKA AT_MAC before processing any attributes
Martin Willi [Mon, 30 Nov 2009 08:58:54 +0000 (09:58 +0100)]
Verify EAP-SIM/AKA AT_MAC before processing any attributes

11 years agoSIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the response
Martin Willi [Fri, 27 Nov 2009 14:40:40 +0000 (15:40 +0100)]
SIM/AKA/Request/Reauthentication AT_MAC does not include NONCE_S, only the response

11 years agoInvoke attribute/key hooks from libsimaka
Martin Willi [Fri, 27 Nov 2009 10:16:20 +0000 (11:16 +0100)]
Invoke attribute/key hooks from libsimaka

11 years agoExtended SIM manager by hooks, currently featuring attribute and key hooks
Martin Willi [Fri, 27 Nov 2009 10:14:40 +0000 (11:14 +0100)]
Extended SIM manager by hooks, currently featuring attribute and key hooks

11 years agoAdded a get_sa() method to the bus, allowing a thread to lookup its IKE_SA
Martin Willi [Fri, 27 Nov 2009 08:34:38 +0000 (09:34 +0100)]
Added a get_sa() method to the bus, allowing a thread to lookup its IKE_SA

11 years agoHandle NOT_SUPPORTED or other errors properly in get_quintuplet
Martin Willi [Fri, 27 Nov 2009 13:55:20 +0000 (14:55 +0100)]
Handle NOT_SUPPORTED or other errors properly in get_quintuplet

11 years agoadded RFC-conforming ikev2/sha2 scenarios
Andreas Steffen [Thu, 26 Nov 2009 22:48:29 +0000 (23:48 +0100)]
added RFC-conforming ikev2/sha2 scenarios

11 years agoadapted ikev2/alg-aes-xcbc scenario
Andreas Steffen [Thu, 26 Nov 2009 22:46:27 +0000 (23:46 +0100)]
adapted ikev2/alg-aes-xcbc scenario

11 years agoUse transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP header
Martin Willi [Thu, 26 Nov 2009 14:58:55 +0000 (15:58 +0100)]
Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP header

11 years agoAdded NEWS about SHA2 changes
Martin Willi [Thu, 26 Nov 2009 09:27:35 +0000 (10:27 +0100)]
Added NEWS about SHA2 changes

11 years agoUse full algorithm name for SHA384/512 HMACs
Martin Willi [Tue, 24 Nov 2009 14:21:16 +0000 (15:21 +0100)]
Use full algorithm name for SHA384/512 HMACs

11 years agoSupport the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keyword
Martin Willi [Fri, 20 Nov 2009 09:49:03 +0000 (09:49 +0000)]
Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keyword

11 years agoInstall SHA256_128 auth algorithm with specified 128 bit truncation
Martin Willi [Fri, 20 Nov 2009 09:42:29 +0000 (09:42 +0000)]
Install SHA256_128 auth algorithm with specified 128 bit truncation

11 years agoUpdated XFRM linux header, includes specified truncations for auth algos
Martin Willi [Fri, 20 Nov 2009 09:41:46 +0000 (09:41 +0000)]
Updated XFRM linux header, includes specified truncations for auth algos

11 years agoAdded support for IPv6 source route installation
Martin Willi [Tue, 24 Nov 2009 13:10:18 +0000 (14:10 +0100)]
Added support for IPv6 source route installation

11 years agoCheck existing path in mobike probing only if we still have a route
Martin Willi [Tue, 24 Nov 2009 13:09:09 +0000 (14:09 +0100)]
Check existing path in mobike probing only if we still have a route

11 years agoput identities in single quotes
Andreas Steffen [Wed, 25 Nov 2009 08:02:09 +0000 (09:02 +0100)]
put identities in single quotes

11 years agoadded more debugging in configuration attribute handling
Andreas Steffen [Tue, 24 Nov 2009 22:17:07 +0000 (23:17 +0100)]
added more debugging in configuration attribute handling

11 years agochanged error messages in the case of faulty esp and ike strings
Andreas Steffen [Tue, 24 Nov 2009 15:45:52 +0000 (16:45 +0100)]
changed error messages in the case of faulty esp and ike strings

11 years agodo not send all available kernel algorithms if esp string is faulty
Andreas Steffen [Tue, 24 Nov 2009 15:38:10 +0000 (16:38 +0100)]
do not send all available kernel algorithms if esp string is faulty

11 years agocheck if alg_info_esp exists
Elmar Vonlanthen [Tue, 24 Nov 2009 15:15:12 +0000 (16:15 +0100)]
check if alg_info_esp exists

11 years agoadded some parentheses
Andreas Steffen [Tue, 24 Nov 2009 13:36:17 +0000 (14:36 +0100)]
added some parentheses

11 years agoallow ECP DH groups in pfsgroup definition
Andreas Steffen [Tue, 24 Nov 2009 13:35:25 +0000 (14:35 +0100)]
allow ECP DH groups in pfsgroup definition

11 years agorenewed OCSP Signing certificate
Andreas Steffen [Tue, 24 Nov 2009 12:55:38 +0000 (13:55 +0100)]
renewed OCSP Signing certificate

11 years agoissue error message for expired certificates in OCSP trust chain checking
Andreas Steffen [Tue, 24 Nov 2009 11:37:38 +0000 (12:37 +0100)]
issue error message for expired certificates in OCSP trust chain checking

11 years agoupdated IKEv2 notification messages assigned by IANA
Andreas Steffen [Tue, 24 Nov 2009 08:21:00 +0000 (09:21 +0100)]
updated IKEv2 notification messages assigned by IANA

11 years agoupdated NEWS for 4.3.6dr2
Andreas Steffen [Tue, 24 Nov 2009 08:18:41 +0000 (09:18 +0100)]
updated NEWS for 4.3.6dr2

11 years agoDo not recreate existing create_child subtask when retrying with different DH group
Martin Willi [Mon, 23 Nov 2009 12:50:01 +0000 (13:50 +0100)]
Do not recreate existing create_child subtask when retrying with different DH group

11 years agoAvoid potentially unaligned half-word read
Martin Willi [Mon, 23 Nov 2009 12:49:19 +0000 (13:49 +0100)]
Avoid potentially unaligned half-word read

11 years agoCorrectly set host number to zero when computing traffic selector range
Eric Mertens [Tue, 17 Nov 2009 18:30:37 +0000 (10:30 -0800)]
Correctly set host number to zero when computing traffic selector range

11 years agoUse abort() instead of raising SIGKILL, gives us proper core dumps if enabled
Martin Willi [Fri, 20 Nov 2009 13:36:24 +0000 (14:36 +0100)]
Use abort() instead of raising SIGKILL, gives us proper core dumps if enabled

11 years agoUse status_t return value for get_quintuplet() dummy implementations
Martin Willi [Fri, 20 Nov 2009 10:02:06 +0000 (11:02 +0100)]
Use status_t return value for get_quintuplet() dummy implementations

11 years agoMove comment out of register_printf_function test
Martin Willi [Thu, 19 Nov 2009 13:37:34 +0000 (14:37 +0100)]
Move comment out of register_printf_function test

11 years agoMessage stringification supports more detailed EAP payload information
Martin Willi [Wed, 18 Nov 2009 09:37:46 +0000 (10:37 +0100)]
Message stringification supports more detailed EAP payload information

11 years agoCorrectly enumerate attributes to request as initiator with the actually requesting...
Martin Willi [Tue, 17 Nov 2009 16:51:30 +0000 (17:51 +0100)]
Correctly enumerate attributes to request as initiator with the actually requesting handler

11 years agoFixed memleak in attribute handling
Martin Willi [Tue, 17 Nov 2009 15:55:45 +0000 (15:55 +0000)]
Fixed memleak in attribute handling