tteras/strongswan/src/libcharon/plugins/unity, branch 5.2.1rc1 tteras' strongSwan tree unity: Do not bump TS to 0.0.0.0/0 as initiator when no Split-Include received 2014-08-25T08:02:44+00:00 Martin Willi martin@revosec.ch 2014-08-04T08:38:08+00:00 cfdc620a3f1a924158369b959ed9061f6aa4bb70 When having the unity plugin enabled and both peers send the Unity Vendor ID, we proposed 0.0.0.0/0 as traffic selector, even if no Split-Include has been received on the SA. This can break compatibility with some responders, as they don't narrow the TS themselves, but expect the configured TS. 
When having the unity plugin enabled and both peers send the Unity Vendor ID,
we proposed 0.0.0.0/0 as traffic selector, even if no Split-Include has been
received on the SA. This can break compatibility with some responders, as
they don't narrow the TS themselves, but expect the configured TS.
unity: Handle narrowing according to roles in the IKE_SA 2014-08-25T07:59:43+00:00 Tobias Brunner tobias@strongswan.org 2014-07-17T15:24:43+00:00 a45ba880c856be885e3a7accdb164b8842284ca2 Since the narrow hook types reflect the roles in the Quick Mode exchange the plugin behaved incorrectly if the server initiated the CHILD_SA rekeying. 
Since the narrow hook types reflect the roles in the Quick Mode exchange
the plugin behaved incorrectly if the server initiated the CHILD_SA
rekeying.
plugins: Don't link with -rdynamic on Windows 2014-06-04T13:53:02+00:00 Martin Willi martin@revosec.ch 2013-10-25T14:03:47+00:00 4163421f918d830585bfdccde0973d8801aad258 






unity: Send all traffic selectors in a single UNITY_SPLIT_INCLUDE attribute
2014-01-23T09:35:21+00:00

Tobias Brunner
tobias@strongswan.org

2013-11-15T15:45:59+00:00

21c18f536d97448ce5036707d421b14ba8040877

Cisco clients only handle the first such attribute.





Cisco clients only handle the first such attribute.







unity: Change local TS to 0.0.0.0/0 as responder
2014-01-23T09:35:21+00:00

Tobias Brunner
tobias@strongswan.org

2013-11-15T14:15:19+00:00

f8262aa1a624d2dcdc79cc6e1229ab9c31189f46

Cisco clients and Shrew expect a remote TS of 0.0.0.0/0 if Unity is
used, otherwise Quick Mode fails.





Cisco clients and Shrew expect a remote TS of 0.0.0.0/0 if Unity is
used, otherwise Quick Mode fails.







unity: Send UNITY_SPLIT_INCLUDE attributes with proper padding
2014-01-23T09:35:21+00:00

Tobias Brunner
tobias@strongswan.org

2013-11-15T13:54:42+00:00

685579d6d870230afd2cdde90c5d95adf816b811

The additional 6 bytes are not actually padding but are parsed by the
Cisco client as protocol and src and dst ports (each two bytes but
strangely only the first two in network order).





The additional 6 bytes are not actually padding but are parsed by the
Cisco client as protocol and src and dst ports (each two bytes but
strangely only the first two in network order).







unity: Handle multi-valued UNITY_SPLIT_INCLUDE/UNITY_LOCAL_LAN attributes
2013-07-29T19:44:27+00:00

Tobias Brunner
tobias@strongswan.org

2013-07-26T07:36:54+00:00

1cf8022839f585e7845c5ba4099e15503d15effa

Cisco devices seem to add 6 bytes of padding between each address/mask
pair.

Fixes #366.





Cisco devices seem to add 6 bytes of padding between each address/mask
pair.

Fixes #366.







automake: replace INCLUDES by AM_CPPFLAGS
2013-07-18T12:59:19+00:00

Martin Willi
martin@revosec.ch

2013-07-17T12:45:39+00:00

19cb07b89050c0e3ea6a11e1914318c4ff1284b5

INCLUDES are now deprecated and throw warnings when using automake 1.13.
We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and
defines are passed to AM_CPPFLAGS only.





INCLUDES are now deprecated and throw warnings when using automake 1.13.
We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and
defines are passed to AM_CPPFLAGS only.







unity: Replicate default behavior if no UNITY_SPLIT_INCLUDE attributes were received
2013-07-17T16:23:57+00:00

Tobias Brunner
tobias@strongswan.org

2013-07-15T13:17:06+00:00

79b6ead1e494853f41c5845d55d4a6dd6ec71588












unity: Allow UNITY_LOCAL_LAN to be longer than 8 bytes
2013-07-17T16:23:57+00:00

Tobias Brunner
tobias@strongswan.org

2013-07-15T13:15:59+00:00

56b0fac8c9239a563d80df09d2f1a239d84d03f0