tteras/strongswan/src/libcharon/plugins, branch tteras-release tteras' strongSwan tree vici: add support for individual sa state changes 2017-11-20T08:45:02+00:00 Timo Teräs timo.teras@iki.fi 2015-09-21T10:42:11+00:00 b08bc3334aa09841438123ce3ddd7f535350cb24 Useful for monitoring and tracking full SA. Signed-off-by: Timo Teräs <timo.teras@iki.fi> 
Useful for monitoring and tracking full SA.

Signed-off-by: Timo Teräs <timo.teras@iki.fi>
vici: send certificates for ike-sa events 2017-11-20T08:45:02+00:00 Timo Teräs timo.teras@iki.fi 2015-09-21T10:42:05+00:00 40790461360e930ffda5dce9e020e15d9ccfdd7a Signed-off-by: Timo Teräs <timo.teras@iki.fi> 
Signed-off-by: Timo Teräs <timo.teras@iki.fi>
charon: add optional source and remote overrides for initiate 2017-11-20T08:45:02+00:00 Timo Teräs timo.teras@iki.fi 2015-09-21T10:41:58+00:00 ea546194df7e5d181cdfc1b236e21f973080be51 This introduces support for specifying optional IKE SA specific source and remote address for child sa initiation. This allows to initiate wildcard connection for known address via vici. In addition this allows impler implementation of trap-any patches and is a prerequisite for dmvpn support. Signed-off-by: Timo Teräs <timo.teras@iki.fi> 
This introduces support for specifying optional IKE SA specific
source and remote address for child sa initiation. This allows
to initiate wildcard connection for known address via vici.

In addition this allows impler implementation of trap-any patches
and is a prerequisite for dmvpn support.

Signed-off-by: Timo Teräs <timo.teras@iki.fi>
Fixed some typos, courtesy of codespell 2017-11-15T09:21:13+00:00 Tobias Brunner tobias@strongswan.org 2017-11-15T09:21:13+00:00 527b3f0ca5a1cc17306ebb7a5c5f3375f3d812aa 






unit-tests: Rename targets for libstrongswan and kernel-netlink
2017-11-09T08:11:42+00:00

Thomas Egerer
thomas.egerer@secunet.com

2017-11-08T17:16:52+00:00

9cc61baaf592b126cde2dfeab3fbb8961970c1d6

libstrongswan and kernel-netlink are the only two components which do
not adhere to the naming scheme used for all other tests. If the tests
are run by an external application this imposes problems due to clashing
names.

Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>





libstrongswan and kernel-netlink are the only two components which do
not adhere to the naming scheme used for all other tests. If the tests
are run by an external application this imposes problems due to clashing
names.

Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>







kernel-pfkey: Support anti-replay windows > 2k
2017-11-08T15:35:38+00:00

Tobias Brunner
tobias@strongswan.org

2017-11-07T13:26:14+00:00

88a8fba1c76eda1c39dce4d0b2038c760f6d6140

FreeBSD 11.1 supports a new extension to configure larger anti-replay
windows, now configured as number of packets.

Fixes #2461.





FreeBSD 11.1 supports a new extension to configure larger anti-replay
windows, now configured as number of packets.

Fixes #2461.







kernel-pfkey: Don't include keys in SADB_UPDATE message to update IPs on FreeBSD
2017-11-08T15:34:12+00:00

Tobias Brunner
tobias@strongswan.org

2017-11-03T08:37:44+00:00

21a500a092e4a2a0f91118846fede5f445d59d31

The FreeBSD kernel explicitly rejects messages containing keys for mature SAs.

Fixes #2457.





The FreeBSD kernel explicitly rejects messages containing keys for mature SAs.

Fixes #2457.







vici: Add 'get|reset-counters' commands
2017-11-08T15:28:28+00:00

Tobias Brunner
tobias@strongswan.org

2017-08-24T15:41:37+00:00

fdf33b0f1cf41b4b47d541411b03d60e678754aa












counters: Move IKE event counter collection from stroke to a separate plugin
2017-11-08T15:28:28+00:00

Tobias Brunner
tobias@strongswan.org

2017-08-24T15:02:37+00:00

6f74b8748a2d9835deb0779868969d52081e10e1












systime-fix: Add timeout option to stop waiting for valid system time
2017-11-08T15:20:35+00:00

Tobias Brunner
tobias@strongswan.org

2017-09-26T08:32:04+00:00

c81b87ac265eaf234e1122c424096ef56f934a7f

A certificate check is forced once the timeout is reached even if the
system time appears to be invalid.





A certificate check is forced once the timeout is reached even if the
system time appears to be invalid.