Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | - import of strongswan-2.7.0 | Martin Willi | 2006-04-28 | 13 | -2976/+0 |
| | | | | | - applied patch for charon | ||||
* | - reworked usage of IDs in various states | Martin Willi | 2006-04-27 | 1 | -1/+1 |
| | | | | | | - using ID_ANY for any, not NULL as before - initiator sends IDr payload in IKE_AUTH when ID unique | ||||
* | - add connection names to connections | Martin Willi | 2006-04-27 | 1 | -101/+17 |
| | | | | | | | | - stroke status / ipsec status shows them - added statusall for stroke - added status by connection name - some tests repaired, more to come | ||||
* | - improved "stroke status" output | Martin Willi | 2006-04-26 | 1 | -27/+4 |
| | |||||
* | - added separate implementation for connection_store, credential_store, ↵ | Martin Willi | 2006-04-25 | 2 | -488/+88 |
| | | | | | | | | policy_store - added folder structure to config - credentials are fetched solely on IDs now | ||||
* | - identification_t supports now almost all id types | Martin Willi | 2006-04-24 | 1 | -6/+6 |
| | | | | | | - x509 certificates work with identification_t now - fixes here, fixes there | ||||
* | - x509 certificate loading with pluto asn1 code | Martin Willi | 2006-04-19 | 1 | -4/+4 |
| | | | | | - x509 needs a lot more attention! | ||||
* | - fixed bad bugs in kernel interface | Martin Willi | 2006-04-12 | 2 | -15/+58 |
| | | | | | | - added some logging info - works now much more stable | ||||
* | - split up in libstrong, charon, stroke, testing done | Martin Willi | 2006-04-10 | 6 | -65/+76 |
| | | | | | | | | | - new leak detective with malloc hook in library - useable, but needs improvements - logger_manager has now a single instance per library - allows use of loggers from any linking prog - a LOT of other things | ||||
* | ../svn-commit.tmp | Martin Willi | 2006-04-05 | 3 | -9/+9 |
| | |||||
* | - added misssing stroke.h | Martin Willi | 2006-04-05 | 1 | -3/+3 |
| | |||||
* | - improved strokeing | Martin Willi | 2006-04-04 | 3 | -256/+463 |
| | | | | | | | - down connection - status - some other tweaks | ||||
* | - rewrote a lot of RSA stuff | Martin Willi | 2006-03-30 | 2 | -28/+194 |
| | | | | | | | | | | - done major work for ASN1/decoder - allow loading of ASN1 der encoded private keys, public keys and certificates - extracting public key from certificates - passing certificates from stroke to charon => basic authentication with RSA certificates works! | ||||
* | - rewrite of logger_manager, uses now one instance per context | Martin Willi | 2006-03-23 | 6 | -54/+68 |
| | | | | | | | - cleanups for logger here and there - removed critical flag check in payload verification (conformance to IKEv2) - so thats and theres everywere... ;-) | ||||
* | - works quite well now with ipsec.conf & ipsec starter | Martin Willi | 2006-03-20 | 2 | -64/+161 |
| | |||||
* | - belongs to previous commit ;-) | Martin Willi | 2006-03-16 | 2 | -0/+743 |
| | |||||
* | - reworked configuration framework completly | Martin Willi | 2006-03-16 | 2 | -5/+6 |
| | | | | | | - configuration is now split up in: connections, policies, credentials and daemon config - further alloc/free fixes needed! | ||||
* | - first attempt for connection loading and starting via "stroke" | Martin Willi | 2006-03-14 | 1 | -19/+14 |
| | | | | | - some improvements here and there | ||||
* | - configuration_manager replaced by configuration_t interface | Martin Willi | 2006-03-07 | 2 | -7/+7 |
| | | | | | | | | - current configuration_manager is now static_configuration (testing) - first draft of starter_configuration, which should once interact with ipsec starter (via whack?) - some cleanups - socket_t uses RAW socket, which allows parallel service of pluto/charon | ||||
* | - comments and cleanups | Martin Willi | 2006-03-02 | 2 | -41/+149 |
| | |||||
* | - working policy installation and removal | Martin Willi | 2006-03-01 | 2 | -13/+109 |
| | |||||
* | - proposal setup implementation begun | Martin Willi | 2006-02-22 | 2 | -56/+193 |
| | |||||
* | - installing of child sa works | Martin Willi | 2006-02-16 | 2 | -137/+143 |
| | | | | | - need correct IP adresses to actually use IPsec | ||||
* | (no commit message) | Martin Willi | 2006-02-10 | 2 | -20/+16 |
| | |||||
* | - some fixes here and there | Martin Willi | 2006-02-09 | 1 | -1/+1 |
| | |||||
* | - dead end implementation | Martin Willi | 2006-02-06 | 1 | -12/+12 |
| | |||||
* | - added copyright from pluto | Martin Willi | 2005-12-13 | 1 | -4/+7 |
| | |||||
* | - added deletion of IKE_SA | Jan Hutter | 2005-12-12 | 1 | -3/+2 |
| | |||||
* | - comment cleanups | Martin Willi | 2005-12-11 | 2 | -29/+29 |
| | |||||
* | - removed prime pool | Martin Willi | 2005-12-07 | 3 | -505/+0 |
| | |||||
* | ../svn-commit.tmp | Martin Willi | 2005-12-07 | 6 | -36/+36 |
| | |||||
* | - log changed | Jan Hutter | 2005-12-06 | 1 | -1/+1 |
| | |||||
* | - code cleaned up | Jan Hutter | 2005-12-06 | 11 | -131/+164 |
| | |||||
* | - code cleaned up | Jan Hutter | 2005-12-06 | 3 | -14/+19 |
| | |||||
* | - implemented jobs DELETE_HALF_OPEN_IKE_SA and DELETE_ESTABLISHED_IKE_SA | Jan Hutter | 2005-12-06 | 1 | -22/+142 |
| | |||||
* | - cancelling of busy prime thread allowed | Martin Willi | 2005-12-06 | 1 | -0/+4 |
| | |||||
* | - kernel interface hacks, works partially | Martin Willi | 2005-12-05 | 5 | -172/+362 |
| | | | | | - interface must be redefined | ||||
* | - added payload CERT | Jan Hutter | 2005-12-05 | 1 | -6/+43 |
| | | | | | | - cleaned code of different states - added additional notify handling | ||||
* | - started implementation of netlink kernel interface | Martin Willi | 2005-12-04 | 3 | -0/+337 |
| | |||||
* | - logging cleanup | Martin Willi | 2005-12-04 | 4 | -8/+4 |
| | | | | | - pid re-replaced with thread_ids, since nptl does not distinguish pids between threads | ||||
* | - logger added | Martin Willi | 2005-12-04 | 2 | -21/+70 |
| | |||||
* | - implemented RSA, only signing and verifying esma_pkcs1 padded | Martin Willi | 2005-12-04 | 3 | -0/+446 |
| | | | | | | | | | | | - removed gmp-helper: chunk_to_mpz is now done with gmp functions, prime generation in prime-pool - added prime-pool (needs priority fix) - proof of concept RSA authentication - mpz uses LEAK_DETECTIVE - configuration-manager supports rsa keys | ||||
* | fixed different bugs when checking out ike sa and retransmitting | Jan Hutter | 2005-12-02 | 1 | -0/+1 |
| | | | | requests | ||||
* | - retransmitting of requests implemented | Jan Hutter | 2005-12-02 | 1 | -7/+24 |
| | |||||
* | - added new job type retransmit_request_job_t | Jan Hutter | 2005-12-02 | 1 | -17/+86 |
| | | | | - fixed memory leaks | ||||
* | - added notify message handling to ike_sa_init_requested_t and | Jan Hutter | 2005-12-02 | 1 | -3/+11 |
| | | | | responder_init_t | ||||
* | cleaned code | Jan Hutter | 2005-12-02 | 1 | -4/+12 |
| | |||||
* | - globals packed in a daemon | Martin Willi | 2005-11-29 | 4 | -31/+31 |
| | |||||
* | - changed allocation behavior | Martin Willi | 2005-11-29 | 1 | -18/+3 |
| | |||||
* | - return value cleanup | Martin Willi | 2005-11-28 | 8 | -118/+52 |
| |