8923 Commits

Author SHA1 Message Date
Adrian-Ken Rueegsegger
e2fc09c186 Add nonce generator interface
Nonce generators (nonce_gen_t) can be used to get or allocate nonces.

Users can request nonce generators from the crypto factory while nonce
plugins register/remove themselves to/from the crypto factory.
2012-05-18 08:15:40 +02:00
Andreas Steffen
80c5b17d1a make IKEv1 DPD timeout configurable in charon 2012-05-17 19:49:22 +02:00
Martin Willi
24742c0f83 Moved IKEv1 DPD processing to task manager, fix sequence issues 2012-05-15 17:00:12 +02:00
Martin Willi
b7dafb3f5b Consider inbound ESP as a sign of liveness for DPD timeout 2012-05-15 14:58:28 +02:00
Martin Willi
4b38c22c00 Schedule a DPD timeout job that enforces the IKE message timeout policy 2012-05-15 14:46:02 +02:00
Martin Willi
ebf829f2eb Send unanswered follow up R_U_THERE messages with the same DPD seq 2012-05-15 14:46:02 +02:00
Martin Willi
57a8418c88 Do not send IKEv1 DPD retransmit, but create a new INFORMATIONAL 2012-05-15 14:46:02 +02:00
Tobias Brunner
b3089ab74c Free name of application using libcharon. 2012-05-15 11:37:07 +02:00
Tobias Brunner
d3590016e9 starter: Initialize thread pool so kernel events are consumed. 2012-05-15 08:55:19 +02:00
Martin Willi
9e25007646 Explicitly cast from strict_t to crl_policy_t 2012-05-14 14:11:54 +02:00
Martin Willi
1b82fdb2e5 Use correct integrity_algorithm_t enum type in bench_signer() 2012-05-14 14:11:22 +02:00
Martin Willi
d185b6acee Make function pointer defined with METHOD() macro non-const
clang complains about it being const, and the object code
generated from gcc is the same.
2012-05-14 14:10:00 +02:00
Martin Willi
2e1f4a4631 Remove unused return value of INIT(), making clang happy 2012-05-14 14:07:00 +02:00
Martin Willi
29b56078ea Register load-tester faked kernel interface before other kernel interfaces 2012-05-14 13:21:35 +02:00
Martin Willi
d4078ca796 Load tester can enforce a local IP to use 2012-05-14 10:03:05 +02:00
Martin Willi
d684242510 Add plugin features support to load-tester plugin 2012-05-14 09:52:53 +02:00
Andreas Steffen
5cc6dc8b39 check for ESP in UDP encapsulation 2012-05-12 12:15:58 +02:00
Andreas Steffen
a56fdff194 upgraded ikev2 scenarios to 5.0.0 2012-05-11 11:00:32 +02:00
Andreas Steffen
0e1c6fa2a9 suppress leak detective output 2012-05-11 05:48:11 +02:00
Tobias Brunner
c732e22019 Fix route reinstallation if preferred source IP is not on outgoing interface. 2012-05-07 19:00:47 +02:00
Tobias Brunner
5de5b04ce4 Fixed #include in tnc-ifmap plugin. 2012-05-07 11:22:51 +02:00
Andreas Steffen
86aab92248 upgraded ha scenario for 5.0.0 2012-05-06 15:03:26 +02:00
Andreas Steffen
922e0d0975 added gcrypt-ikev1 pluto interoperability tests 2012-05-06 09:51:19 +02:00
Andreas Steffen
949d08dfca upgraded gcrypt-ikev1 scenarios to 5.0.0 2012-05-06 09:25:31 +02:00
Andreas Steffen
04d7b1725d upgraded gcrypt-ikev2 scenarios to 5.0.0 2012-05-06 09:23:09 +02:00
Andreas Steffen
44bd9b48c8 allow private algorithms 2012-05-05 23:25:51 +02:00
Andreas Steffen
4b797f464e fixed mapping of IKEv1 algorithms 2012-05-05 23:25:34 +02:00
Andreas Steffen
f7cd1cde70 vendor ID cosmetics 2012-05-05 18:13:05 +02:00
Andreas Steffen
f66a14818e inserted space 2012-05-05 15:51:24 +02:00
Andreas Steffen
8f834c16ae upgraded pfkey scenarios to 5.0.0 2012-05-05 11:55:48 +02:00
Andreas Steffen
5f540fd39c missing references to daemon.h 2012-05-05 11:36:38 +02:00
Andreas Steffen
6624b8be24 removed leftover ipsec.conf parameters 2012-05-05 09:20:42 +02:00
Andreas Steffen
84b291e668 upgraded sql scenarios to 5.0.0 2012-05-05 09:16:15 +02:00
Andreas Steffen
1e26235a0d fixed feature dependencies for CERT_TRUSTED_PUBKEY 2012-05-05 08:54:36 +02:00
Andreas Steffen
8a5a33b52e upgrade p2pnat scenarios to 5.0.0 2012-05-04 14:56:09 +02:00
Andreas Steffen
e5502cd2b5 updated af-alg scenarios to 5.0.0 2012-05-04 12:15:30 +02:00
Andreas Steffen
680609b972 added openssl-ikev1 pluto interoperability tests 2012-05-04 12:12:39 +02:00
Andreas Steffen
1e9b62ad50 deleted unneeded openssl-ikev1 files 2012-05-04 12:11:57 +02:00
Andreas Steffen
90e941fb97 upgraded openssl-ikev1 scenarios to 5.0.0 2012-05-04 12:06:45 +02:00
Andreas Steffen
3805e569f6 upgraded openssl-ikev2 scenarios to 5.0.0 2012-05-04 12:03:05 +02:00
Andreas Steffen
22bec9d4ae upgraded tnc scenarios to 5.0.0 2012-05-04 11:57:31 +02:00
Andreas Steffen
a71f0f3bdc charon is now an IKE daemon 2012-05-03 20:48:01 +02:00
Tobias Brunner
0aa90701f6 It seems charon-nm has to be linked against libnm-util.
That's at least the case for NetworkManager 0.9.4 in Ubuntu 12.04.
2012-05-03 15:17:57 +02:00
Tobias Brunner
983c667481 Use proper getter for settings in sender and receiver. 2012-05-03 13:57:04 +02:00
Tobias Brunner
42500c274a Use name from initialization to access settings in libcharon.
Also fixes several whitespace errors.
2012-05-03 13:57:04 +02:00
Tobias Brunner
18758e3d2e Store the name of the binary using libcharon to enable specific settings. 2012-05-03 13:57:04 +02:00
Tobias Brunner
37d9334366 Changed default path to charon for NM frontend. 2012-05-03 13:57:04 +02:00
Tobias Brunner
b64f333612 Integrate nm plugin directly in charon-nm. 2012-05-03 13:57:03 +02:00
Tobias Brunner
1c7a733e36 Added a small libcharon wrapper intended to directly host the nm plugin.
For this reason it reclaims the --enable-nm configure option.
2012-05-03 13:38:14 +02:00
Tobias Brunner
94b48e071a Provide plugin list from charon, not internally in libcharon. 2012-05-03 13:14:07 +02:00