]>
git.ipfire.org Git - thirdparty/strongswan.git/log
Thomas Egerer [Fri, 3 Dec 2010 08:23:06 +0000 (09:23 +0100)]
Guarantee entry->other is set when calling put_connected_peers
Given the original intent of entry->host, the check for DoS attacks, it
can happen that this value remains NULL when an entry is created. This
is particularly awkward if put_connected_peers is called to check if a
connection to a given peer already exists, since it takes the address
family into consideration (git commit
b74219d0 ) which is gleaned from
entry->host.
This patch guarantees that entry->other is a clone of host before
put_connected_peers is called.
Andreas Steffen [Sun, 5 Dec 2010 20:53:43 +0000 (21:53 +0100)]
added sql/multi-level-ca scenario
Andreas Steffen [Sun, 5 Dec 2010 14:48:22 +0000 (15:48 +0100)]
stupid typo
Andreas Steffen [Sun, 5 Dec 2010 14:23:18 +0000 (15:23 +0100)]
cosmetics
Andreas Steffen [Sun, 5 Dec 2010 14:16:15 +0000 (15:16 +0100)]
cosmetics
Andreas Steffen [Sun, 5 Dec 2010 14:01:01 +0000 (15:01 +0100)]
added parsing checks
Andreas Steffen [Sun, 5 Dec 2010 13:55:18 +0000 (14:55 +0100)]
output TLS-independent error messages
Andreas Steffen [Sun, 5 Dec 2010 10:30:06 +0000 (11:30 +0100)]
added certificate_authorities and certificate_distribution_points tables
Andreas Steffen [Sun, 5 Dec 2010 10:21:40 +0000 (11:21 +0100)]
support of reqid field in SQL database
Andreas Steffen [Sun, 5 Dec 2010 10:20:18 +0000 (11:20 +0100)]
fixed pb_reason_string_message_t class
Andreas Steffen [Sat, 4 Dec 2010 19:56:21 +0000 (20:56 +0100)]
Migrated fips_prf plugin to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 19:45:49 +0000 (20:45 +0100)]
Migrated md4_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 19:43:41 +0000 (20:43 +0100)]
Migrated md5_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 19:15:59 +0000 (20:15 +0100)]
Migrated ldap plugin to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 14:43:04 +0000 (15:43 +0100)]
Migrated pubkey_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 10:43:06 +0000 (11:43 +0100)]
Migrated pkcs1_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 10:40:40 +0000 (11:40 +0100)]
Migrated curl_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 10:37:03 +0000 (11:37 +0100)]
Migrated random plugin to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 10:26:02 +0000 (11:26 +0100)]
Migrated sha1_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 09:48:42 +0000 (10:48 +0100)]
Migrated sha2_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 09:38:35 +0000 (10:38 +0100)]
Migrated mysql plugin to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 09:28:30 +0000 (10:28 +0100)]
use private destroy() function
Andreas Steffen [Sat, 4 Dec 2010 09:20:33 +0000 (10:20 +0100)]
Migrated sqlite plugin to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 09:10:37 +0000 (10:10 +0100)]
Migrated test_vectors_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 09:07:56 +0000 (10:07 +0100)]
Migrated x509_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 08:30:25 +0000 (09:30 +0100)]
Migrated pgp_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 08:25:22 +0000 (09:25 +0100)]
Migrated pem_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 08:20:53 +0000 (09:20 +0100)]
Migrated dnskey_plugin_t to INIT/METHOD macros
Andreas Steffen [Sat, 4 Dec 2010 07:21:21 +0000 (08:21 +0100)]
Migrated options_t to INIT/METHOD macros
Tobias Brunner [Tue, 30 Nov 2010 17:44:55 +0000 (18:44 +0100)]
CDP enumerator added to SQL plugin.
Tobias Brunner [Tue, 30 Nov 2010 17:43:50 +0000 (18:43 +0100)]
Tables added for CAs and CDPs.
Tobias Brunner [Tue, 30 Nov 2010 15:12:08 +0000 (16:12 +0100)]
Migrated sql_cred_t to INIT/METHOD macros.
Tobias Brunner [Mon, 22 Nov 2010 12:31:07 +0000 (13:31 +0100)]
Insert certificates and secrets at the front of the lists.
As the lookup is also from front to back, certificates added later are
now found first, which is useful in case of e.g. "reread cacerts".
Tobias Brunner [Fri, 19 Nov 2010 16:37:11 +0000 (17:37 +0100)]
Refactored stroke_cred_t to use mem_cred_t.
Tobias Brunner [Fri, 19 Nov 2010 16:28:46 +0000 (17:28 +0100)]
Function add_crl added to mem_cred_t.
Tobias Brunner [Fri, 19 Nov 2010 16:28:12 +0000 (17:28 +0100)]
Function added to clear secrets (but not certs) from mem_cred_t.
Tobias Brunner [Fri, 19 Nov 2010 16:26:33 +0000 (17:26 +0100)]
Alternative to mem_cred_t.add_cert added, which returns the certificate.
If the certificate is already cached, the cached version is returned.
Tobias Brunner [Fri, 19 Nov 2010 16:21:00 +0000 (17:21 +0100)]
Function added to mem_cred_t to add shared secret with a linked list of owners.
Tobias Brunner [Thu, 18 Nov 2010 12:59:29 +0000 (13:59 +0100)]
Added functions to modify/create settings in settings_t.
Tobias Brunner [Thu, 18 Nov 2010 12:55:44 +0000 (13:55 +0100)]
Added an option to create non-existing key/value pairs during search.
Tobias Brunner [Thu, 18 Nov 2010 12:47:43 +0000 (13:47 +0100)]
Compare shorter "boolean" values first.
Tobias Brunner [Mon, 15 Nov 2010 12:07:10 +0000 (13:07 +0100)]
Helper functions added to easily convert enumerated values.
Tobias Brunner [Fri, 12 Nov 2010 16:35:04 +0000 (17:35 +0100)]
Ensure that sections exist when using load_files_section.
Tobias Brunner [Fri, 12 Nov 2010 14:34:33 +0000 (15:34 +0100)]
Skip values and sections without key.
Tobias Brunner [Fri, 12 Nov 2010 13:29:09 +0000 (14:29 +0100)]
Some refactorings in lookup code in settings_t.
Tobias Brunner [Fri, 12 Nov 2010 12:51:28 +0000 (13:51 +0100)]
Added documentation about new features of settings_t.
Tobias Brunner [Fri, 12 Nov 2010 10:55:21 +0000 (11:55 +0100)]
Made settings_t thread-safe.
Tobias Brunner [Fri, 12 Nov 2010 10:20:29 +0000 (11:20 +0100)]
Added functions to settings_t to load files dynamically at runtime.
Tobias Brunner [Thu, 11 Nov 2010 15:43:09 +0000 (16:43 +0100)]
Allow inclusion of other files in strongswan.conf.
Tobias Brunner [Thu, 11 Nov 2010 15:15:38 +0000 (16:15 +0100)]
Loading of strongswan.conf refactored to a separate function.
Tobias Brunner [Thu, 11 Nov 2010 15:02:30 +0000 (16:02 +0100)]
Allow to replace/extend previously defined values/sections in strongswan.conf.
Tobias Brunner [Thu, 11 Nov 2010 14:21:25 +0000 (15:21 +0100)]
Don't create a section in parse_section.
Just add subsections and values to the passed section.
Tobias Brunner [Thu, 11 Nov 2010 12:04:25 +0000 (13:04 +0100)]
Removed unused static variable "lev".
Tobias Brunner [Thu, 11 Nov 2010 11:52:48 +0000 (12:52 +0100)]
Avoid calling globfree twice on failure.
Andreas Steffen [Fri, 3 Dec 2010 10:26:13 +0000 (11:26 +0100)]
removed superfluous whitespace
Sansar Choinyambuu [Fri, 3 Dec 2010 09:22:51 +0000 (10:22 +0100)]
PB-TNC messages implemented
Andreas Steffen [Thu, 2 Dec 2010 21:12:02 +0000 (22:12 +0100)]
Migrated asn1_parser_t to INIT/METHOD macros
Andreas Steffen [Thu, 2 Dec 2010 05:25:59 +0000 (06:25 +0100)]
Migrated settings_t to INIT/METHOD macros
Andreas Steffen [Thu, 2 Dec 2010 05:17:24 +0000 (06:17 +0100)]
Migrated printf_hook_t to INIT/METHOD macros
Andreas Steffen [Thu, 2 Dec 2010 05:10:50 +0000 (06:10 +0100)]
Migrated integrity_checker_t to INIT/METHOD macros
Andreas Steffen [Wed, 1 Dec 2010 09:09:21 +0000 (10:09 +0100)]
added SQL database extensions to NEWS
Andreas Steffen [Wed, 1 Dec 2010 09:08:49 +0000 (10:08 +0100)]
version bump to 4.5.1dr2
Andreas Steffen [Wed, 1 Dec 2010 09:05:28 +0000 (10:05 +0100)]
use a composite test proposal
Andreas Steffen [Wed, 1 Dec 2010 08:50:30 +0000 (09:50 +0100)]
check for malformed IKE and ESP proposals
Andreas Steffen [Tue, 30 Nov 2010 22:31:24 +0000 (23:31 +0100)]
Migrated sql_plugin_t to INIT/METHOD macros
Andreas Steffen [Tue, 30 Nov 2010 22:27:51 +0000 (23:27 +0100)]
Migrated sql_config_t to INIT/METHOD macros
Andreas Steffen [Tue, 30 Nov 2010 16:38:49 +0000 (17:38 +0100)]
renamed algorithm to proposal
Andreas Steffen [Tue, 30 Nov 2010 16:03:21 +0000 (17:03 +0100)]
store IKE and ESP proposals in SQL database
Andreas Steffen [Sun, 28 Nov 2010 16:41:27 +0000 (17:41 +0100)]
configured various DPD modes in sql scenarios
Andreas Steffen [Sun, 28 Nov 2010 11:00:44 +0000 (12:00 +0100)]
added sql/net2net-route-pem scenario
Andreas Steffen [Sun, 28 Nov 2010 11:00:19 +0000 (12:00 +0100)]
added sql/net2net-start-pem scenario
Andreas Steffen [Sun, 28 Nov 2010 10:57:49 +0000 (11:57 +0100)]
start and route connections defined in an SQL database via start_action field and ipsec up %startall command
Andreas Steffen [Sun, 28 Nov 2010 10:55:40 +0000 (11:55 +0100)]
version bump to 4.5.1dr1
Andreas Steffen [Sat, 27 Nov 2010 00:12:58 +0000 (01:12 +0100)]
Migrated stroke_config_t to INIT/METHOD macros
Andreas Steffen [Fri, 26 Nov 2010 23:49:15 +0000 (00:49 +0100)]
Migrated stroke_cat_t to INIT/METHOD macros
Andreas Steffen [Fri, 26 Nov 2010 15:32:15 +0000 (16:32 +0100)]
Migrated child_cfg_t to INIT/METHOD macros
Andreas Steffen [Fri, 26 Nov 2010 13:07:18 +0000 (14:07 +0100)]
Merge branch 'master' of git.strongswan.org:strongswan
Andreas Steffen [Fri, 26 Nov 2010 12:46:16 +0000 (13:46 +0100)]
support PEM-encoded certificates stored in SQL databases
Andreas Steffen [Thu, 25 Nov 2010 22:25:01 +0000 (23:25 +0100)]
commas, commas, ..
Andreas Steffen [Thu, 25 Nov 2010 22:19:33 +0000 (23:19 +0100)]
Migrated resolve_plugin_t to INIT/METHOD macros
Andreas Steffen [Thu, 25 Nov 2010 22:17:18 +0000 (23:17 +0100)]
Migrated kernel_pfroute_plugin_t to INIT/METHOD macros
Andreas Steffen [Thu, 25 Nov 2010 22:14:29 +0000 (23:14 +0100)]
Migrated kernel_pfkey_plugin_t to INIT/METHOD macros
Andreas Steffen [Thu, 25 Nov 2010 22:12:12 +0000 (23:12 +0100)]
Migrated kernel_netlink_plugin_t to INIT/METHOD macros
Andreas Steffen [Thu, 25 Nov 2010 22:09:12 +0000 (23:09 +0100)]
INIT allocates memory
Andreas Steffen [Thu, 25 Nov 2010 22:08:00 +0000 (23:08 +0100)]
INIT allocates memory
Andreas Steffen [Thu, 25 Nov 2010 22:06:20 +0000 (23:06 +0100)]
Migrated kernel_klips_plugin_t to INIT/METHOD macros
Andreas Steffen [Thu, 25 Nov 2010 21:52:32 +0000 (22:52 +0100)]
Migrated attr_plugin_t to INIT/METHOD macros
Andreas Steffen [Thu, 25 Nov 2010 21:49:44 +0000 (22:49 +0100)]
Migrated attr_sql_plugin_t to INIT/METHOD macros
Andreas Steffen [Thu, 25 Nov 2010 21:43:19 +0000 (22:43 +0100)]
Migrated backend_manager_t to INIT/METHOD macros
Andreas Steffen [Tue, 23 Nov 2010 15:33:23 +0000 (16:33 +0100)]
fixed a couple of bugs in the prototype
Andreas Steffen [Tue, 23 Nov 2010 15:32:09 +0000 (16:32 +0100)]
set PB_MSG_PA message type
Andreas Steffen [Tue, 23 Nov 2010 13:44:16 +0000 (14:44 +0100)]
prototype implementation using the pb_tnc_message_t class
Andreas Steffen [Tue, 23 Nov 2010 13:27:57 +0000 (14:27 +0100)]
defined a pb_tnc_message_t interface
Andreas Steffen [Sat, 20 Nov 2010 20:52:40 +0000 (21:52 +0100)]
enabled ha plugin in UML scenarios
Andreas Steffen [Sat, 20 Nov 2010 20:01:54 +0000 (21:01 +0100)]
fixed iptables script of gateway alice
Andreas Steffen [Sat, 20 Nov 2010 19:34:21 +0000 (20:34 +0100)]
removed copy of strongswancCert.pem
Andreas Steffen [Sat, 20 Nov 2010 19:16:26 +0000 (20:16 +0100)]
added ha/both-active scenario
Andreas Steffen [Sat, 20 Nov 2010 17:20:23 +0000 (18:20 +0100)]
created certificate and /etc/hosts entry for virtual gateway mars
Andreas Steffen [Fri, 19 Nov 2010 16:23:06 +0000 (17:23 +0100)]
implemented create_reason_enumerator() function
Andreas Steffen [Fri, 19 Nov 2010 07:51:56 +0000 (08:51 +0100)]
implemented request_handshake_retry() function