Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Set ownership/permissions of HA control socket | Martin Willi | 2010-10-20 | 1 | -1/+9 | |
| | ||||||
* | Prefer the 'server identifier' attribute address to send DHCP requests to | Martin Willi | 2010-10-18 | 1 | -5/+13 | |
| | ||||||
* | Some Doxygen fixes. | Tobias Brunner | 2010-10-15 | 4 | -5/+5 | |
| | ||||||
* | Missed one unneeded destructor. | Tobias Brunner | 2010-10-15 | 1 | -4/+0 | |
| | ||||||
* | Deferred instantiation of socket implmentations until registration. | Tobias Brunner | 2010-10-15 | 11 | -78/+104 | |
| | | | | | | Instantiating the implementations on plugin load was problematic in case multiple socket plugins were loaded. Now, the first one registered is instantiated. | |||||
* | Added some generated files to .gitignore. | Tobias Brunner | 2010-10-15 | 1 | -1/+0 | |
| | ||||||
* | suport certificate-based client authentication with EAP-TTLS | Andreas Steffen | 2010-10-14 | 1 | -40/+70 | |
| | ||||||
* | Moved sources of the NetworkManager plugin to src/frontends. | Tobias Brunner | 2010-10-14 | 29 | -1815/+0 | |
| | ||||||
* | Avoid recursive loop if no socket implementations are loaded. | Tobias Brunner | 2010-10-14 | 1 | -2/+13 | |
| | ||||||
* | Maemo: Load CA certificates from system directories. | Tobias Brunner | 2010-10-14 | 1 | -6/+58 | |
| | ||||||
* | Maemo: Track the status of the current SA and send changes to the frontend. | Tobias Brunner | 2010-10-14 | 1 | -31/+97 | |
| | ||||||
* | Maemo: Properly unregister the RPC callbacks. | Tobias Brunner | 2010-10-14 | 1 | -0/+6 | |
| | ||||||
* | Maemo: Plugin implements the listener_t interface. | Tobias Brunner | 2010-10-14 | 2 | -0/+51 | |
| | ||||||
* | Maemo: Extracted most plugin code to a separate class, so we can use that as ↵ | Tobias Brunner | 2010-10-14 | 4 | -283/+396 | |
| | | | | listener. | |||||
* | Maemo: Initiate consumes a child_sa reference, so get an additional one. | Tobias Brunner | 2010-10-14 | 1 | -0/+2 | |
| | ||||||
* | Maemo: Basic functionality added to notify the applet about status updates. | Tobias Brunner | 2010-10-14 | 1 | -0/+16 | |
| | ||||||
* | Maemo: Clear the credentials before each connection attempt. | Tobias Brunner | 2010-10-14 | 1 | -0/+2 | |
| | ||||||
* | Maemo: Listen for a special "Start" D-BUS call. | Tobias Brunner | 2010-10-14 | 1 | -1/+5 | |
| | | | | This call is made on the system D-BUS so that charon is started as root. | |||||
* | Maemo: Added support for connection initiation and shutdown. | Tobias Brunner | 2010-10-14 | 1 | -0/+181 | |
| | ||||||
* | Maemo: Register with libosso and init Glib main loop. | Tobias Brunner | 2010-10-14 | 2 | -0/+83 | |
| | ||||||
* | Maemo: Register charon as D-BUS system service. | Tobias Brunner | 2010-10-14 | 2 | -0/+8 | |
| | | | | | | In order to be able to access this service via libosso, charon is started with the run-standalone.sh script, which sets up the required environment. | |||||
* | Stub plugin for Maemo specific extensions added. | Tobias Brunner | 2010-10-14 | 4 | -0/+121 | |
| | ||||||
* | Do not add additional addresses to MOBIKE path probing messages. | Tobias Brunner | 2010-10-12 | 1 | -10/+12 | |
| | ||||||
* | Change behavior of responder during roaming. | Tobias Brunner | 2010-10-12 | 1 | -16/+17 | |
| | | | | | | If the current source address is not available anymore, the responder uses ike_mobike_t.roam, thus, uses multiple address combinations when trying to notify the initiator. | |||||
* | Allow responder to use ike_mobike_t.roam. | Tobias Brunner | 2010-10-12 | 1 | -1/+7 | |
| | | | | After getting a response the responder updates the IPsec SAs. | |||||
* | Send list of additional addresses even if current path is still valid. | Tobias Brunner | 2010-10-12 | 1 | -0/+11 | |
| | ||||||
* | Extracted path checking in ike_sa_t.roam into separate functions. | Tobias Brunner | 2010-10-12 | 1 | -46/+68 | |
| | ||||||
* | Added support for responders to change their address via MOBIKE. | Tobias Brunner | 2010-10-12 | 1 | -0/+20 | |
| | | | | | | | If the original responder updates its list of additional addresses we check if the remote endpoint changed and update the IPsec SAs if it did, as we assume the original address became unavailable and the responder already updated the SAs on its side. | |||||
* | Explicitly configure MOBIKE tasks to update the list of additional addresses. | Tobias Brunner | 2010-10-12 | 3 | -2/+15 | |
| | ||||||
* | Improved check for first IKE_AUTH message in ike_mobike task. | Tobias Brunner | 2010-10-12 | 1 | -3/+6 | |
| | | | | | If the original responder initiated a MOBIKE exchange, the previous check was not always correct. | |||||
* | Migrated ike_mobike task to INIT/METHOD macros. | Tobias Brunner | 2010-10-12 | 1 | -67/+46 | |
| | ||||||
* | Simplified apply_port function in mobike task. | Tobias Brunner | 2010-10-12 | 1 | -16/+9 | |
| | ||||||
* | Do not update hosts based on retransmitted messages. | Tobias Brunner | 2010-10-12 | 2 | -15/+23 | |
| | ||||||
* | Do not update remote host if we are behind a NAT. | Tobias Brunner | 2010-10-12 | 1 | -4/+2 | |
| | ||||||
* | use DBG_TNC for TNC debugging output | Andreas Steffen | 2010-10-09 | 3 | -21/+21 | |
| | ||||||
* | TNCCS debug cosmetics | Andreas Steffen | 2010-10-09 | 1 | -4/+4 | |
| | ||||||
* | revert to standard TNCC/TNCS Initialization function | Andreas Steffen | 2010-10-09 | 2 | -17/+2 | |
| | ||||||
* | implemented TNC isolation via group memberships | Andreas Steffen | 2010-10-09 | 1 | -6/+33 | |
| | ||||||
* | implemented a makeshift non-scalable send buffer | Andreas Steffen | 2010-10-08 | 1 | -25/+82 | |
| | ||||||
* | imc/imv cosmetics | Andreas Steffen | 2010-10-08 | 2 | -4/+7 | |
| | ||||||
* | created tnc-imc and tnc-imv plugins | Andreas Steffen | 2010-10-07 | 9 | -42/+340 | |
| | ||||||
* | deactivate start_phase2_tnc flag after start | Andreas Steffen | 2010-10-07 | 1 | -1/+1 | |
| | ||||||
* | added server side support for EAP-TNC | Andreas Steffen | 2010-10-07 | 1 | -2/+28 | |
| | ||||||
* | Show result of RADIUS authentication along with EAP identity | Martin Willi | 2010-10-07 | 1 | -5/+6 | |
| | ||||||
* | configure tnc_config path and preferred_language via strongswan.conf | Andreas Steffen | 2010-10-05 | 1 | -2/+8 | |
| | ||||||
* | created hull for TNCCS 2.0 plugin | Andreas Steffen | 2010-10-05 | 6 | -0/+256 | |
| | ||||||
* | use group membership to implement access/isolate redirection in filter-based ↵ | Andreas Steffen | 2010-10-05 | 1 | -4/+14 | |
| | | | | TNC scenario | |||||
* | moved CHILD_SA selection out of attribute loop | Andreas Steffen | 2010-10-05 | 1 | -5/+6 | |
| | ||||||
* | receive name of preferred CHILD_SA via RADIUS Filter-Id attribute | Andreas Steffen | 2010-10-05 | 1 | -0/+59 | |
| | ||||||
* | print XML as plaintext and process recieved TNCCS Batch | Andreas Steffen | 2010-09-30 | 1 | -11/+28 | |
| |