Martin Willi
d88597f0dd
Don't wait while removing external IPs used for load testing
2012-11-29 10:22:51 +01:00
Martin Willi
b185cdd16d
Install virtual IPs via interface name, and use an interface lookup where required
2012-11-29 10:22:51 +01:00
Martin Willi
0a54d3e1a1
load-tester can dynamically install a dedicated external IP for each IKE_SA
...
For consistency, the local/remote parameters have been replaced by the
initiator/responder options. As initiator, the initiator option can
be overriden by an addrs section taking key/value pairs with address
pools to use on a specific interface.
2012-11-29 10:22:51 +01:00
Martin Willi
50bd755871
Add an optional kernel-interface parameter to install IPs with a custom prefix
2012-11-29 10:22:51 +01:00
Martin Willi
fdd94fc846
Add a delay option to load-tester socket
2012-11-29 10:22:51 +01:00
Martin Willi
cf85f6b296
Indicate message retransmissions while initiating load-test batches
2012-11-29 10:22:51 +01:00
Martin Willi
3c79b7b7db
Add alerts for sent/received message retransmissions and timeout
2012-11-29 10:22:51 +01:00
Martin Willi
93ceaa7e64
Initiate each load-testing connection with a fresh peer config
2012-11-29 10:22:51 +01:00
Martin Willi
b7acd90763
Initiate IKE_SAs trigger over load-tester socket in parallel
2012-11-29 10:22:51 +01:00
Martin Willi
965f7bd54f
Add a simple load-tester utility to initiate over control socket
2012-11-29 10:22:51 +01:00
Martin Willi
d65683eef4
Add a load-tester control socket to manually trigger initiation
2012-11-29 10:22:50 +01:00
Martin Willi
2685020ace
Lookip plugin additionally reports the IKE_SA unique identifier
2012-11-29 10:00:45 +01:00
Andreas Steffen
f0d4756eb0
allow update of file hashes
2012-11-28 23:18:33 +01:00
Andreas Steffen
e8a491c01a
removed unused header include
2012-11-28 14:37:15 +01:00
Andreas Steffen
b8f0bf00b7
differentiate attestation reason strings
2012-11-28 14:14:41 +01:00
Andreas Steffen
7b6cc33eb2
store collected device information in database
2012-11-28 10:51:11 +01:00
Tobias Brunner
07f826af67
Fixed encoding of TLS extensions (elliptic_curves and signature_algorithms)
2012-11-28 10:20:14 +01:00
Andreas Steffen
ac6dd7d404
store unique device_id in database
2012-11-27 23:48:40 +01:00
Ewa Steffen
710d89f07d
completed Polish language version
2012-11-23 21:45:04 +01:00
Andreas Steffen
2810d934e5
cosmetics
2012-11-23 18:31:44 +01:00
Andreas Steffen
9cbdfdb988
implemented output of item lists in remediation instructions
2012-11-23 18:30:00 +01:00
Andreas Steffen
ee6aeca892
refactored reason string and remediation instructions framework
2012-11-23 12:30:33 +01:00
Martin Willi
b5d27839ad
Do not send 0.0.0.0/0 traffic selectors as Split-Include Unity attributes
...
It seems that iOS devices don't like them.
2012-11-22 12:13:44 +01:00
Andreas Steffen
48b23d06a8
allow the optional sharing if RSA private keys
2012-11-22 00:34:42 +01:00
Tobias Brunner
2cb9a014df
New Android release after adding shortcuts and confirmation dialog
...
Also fixed some Android 4.2 specific issues.
2012-11-21 19:07:52 +01:00
Tobias Brunner
df3e34fe86
android: Don't allow any backup for now
2012-11-21 19:05:18 +01:00
Tobias Brunner
37d42a76d3
android: Properly handle exceptions when loading keys/certificates
2012-11-21 18:57:41 +01:00
Tobias Brunner
73d0fb0a66
android: Use the same tag string for all dialogs in MainActivity
2012-11-21 18:57:41 +01:00
Tobias Brunner
8c0b32d892
android: Hide previous dialogs when handling a new connection attempt
2012-11-21 18:57:41 +01:00
Tobias Brunner
50b048983c
android: Show confirmation dialog when starting a profile while already connected
2012-11-21 18:57:41 +01:00
Tobias Brunner
ac3c6ff479
android: Add the ability to create shortcuts to specific VPN profiles
2012-11-21 18:57:41 +01:00
Tobias Brunner
127d83bb21
android: Start a specific VPN profile based on special Intents
2012-11-21 18:57:40 +01:00
Tobias Brunner
7241102ace
android: Attribute added to display the list of VPN profiles in read-only mode
2012-11-21 18:57:40 +01:00
Tobias Brunner
35ba45916c
Fixed two bugs in logging MSK during EAP-SIM/AKA
...
msk is already a pointer to a chunk_t and it was actually not set yet.
2012-11-21 11:55:55 +01:00
Andreas Steffen
ef214f2855
added ike2/rw-eap-md5-class-radius scenario
2012-11-21 06:05:34 +01:00
Tobias Brunner
2e50a8e751
android: Show an error if VPN fails due to lock down mode in Android 4.2
2012-11-19 11:43:32 +01:00
Tobias Brunner
be2e7ecc2f
android: Add error message as argument to "VPN not supported" dialog
2012-11-19 11:43:32 +01:00
Tobias Brunner
0c3b8028e7
android: Content providers are not exported by default in Android 4.2
2012-11-19 11:43:32 +01:00
Tobias Brunner
48e45153f5
android: Set target SDK to 17 (Android 4.2)
2012-11-19 11:43:31 +01:00
Tobias Brunner
277ff80a2e
android: Private key bug has been fixed with Android 4.2
2012-11-19 11:43:31 +01:00
Andreas Steffen
76bd0d7c1f
overwrite sensitive prime with zeroes
2012-11-18 22:55:22 +01:00
Andreas Steffen
bf1cecdb6b
strndup() requires string.h header file
2012-11-18 19:41:03 +01:00
Andreas Steffen
168ee460c6
implemented generation of safe primes
2012-11-18 19:22:31 +01:00
Andreas Steffen
c1c98f5f4a
generate reason strings and remediation instructions for improper OS settings
2012-11-18 11:44:03 +01:00
Andreas Steffen
602c6b6be2
precautionary measures
2012-11-17 14:53:27 +01:00
Andreas Steffen
3294cbd61e
fixed a memory leak in pacman
2012-11-17 08:16:53 +01:00
Andreas Steffen
aa3061d432
removed unused variable
2012-11-17 08:16:23 +01:00
Martin Willi
2354b10576
Add an ikesa_limit option to limit number of IKE_SAs as responder
2012-11-16 10:27:36 +01:00
Martin Willi
5b89e3b061
Pass PLUTO_XAUTH_ID to updown script
2012-11-16 09:56:05 +01:00
Andreas Steffen
d287c14436
version bump to 5.0.2dr4
2012-11-15 21:56:27 +01:00