 Martin Willi
|
91b9bc3e0f
|
Load af-alg with higher priority
|
2011-06-01 12:03:44 +02:00 |
|
|
Martin Willi
|
ea90042233
|
Provide recursive mutex' just in case the PKCS#11 library requires it
|
2011-06-01 12:03:44 +02:00 |
|
|
Martin Willi
|
3c0630a797
|
libfast does not depend on zlib directly, clearsilver can be built without compression support
|
2011-06-01 12:03:44 +02:00 |
|
|
Martin Willi
|
60d4a323a0
|
Include m4/config directory in git, supporting autoregen -i of a fresh clone
|
2011-06-01 12:03:44 +02:00 |
|
|
Martin Willi
|
c140757221
|
Fix initialization of NM plugin
|
2011-05-31 18:12:56 +02:00 |
|
|
Martin Willi
|
35c9347921
|
Use better packing of leak-detective memory_header to align pointers
|
2011-05-25 19:56:47 +02:00 |
|
|
Martin Willi
|
eb4f4551a1
|
Summarize leaks with identical backtraces, as we do it with memusage
|
2011-05-25 19:56:43 +02:00 |
|
|
Martin Willi
|
0eef27074d
|
Don't use a strongswan.conf in checksum_builder, disables checksumming
|
2011-05-25 11:06:25 +02:00 |
|
|
Martin Willi
|
f147b731e0
|
Force link of checksum builder against libhydra/libcharon
|
2011-05-25 10:40:30 +02:00 |
|
|
Martin Willi
|
3dbc5dfeda
|
Checksum plugins only for components we actually build
|
2011-05-25 10:33:14 +02:00 |
|
|
Martin Willi
|
628f285778
|
Fix strict aliasing warning
|
2011-05-25 10:09:16 +02:00 |
|
|
Martin Willi
|
8ed3c9fba5
|
Enable strict-aliasing warnings, we should really get rid of them
|
2011-05-24 12:04:35 +02:00 |
|
|
Martin Willi
|
d45b242b60
|
Fix memwipe() of leading unaligned bytes
|
2011-05-24 11:49:20 +02:00 |
|
|
Martin Willi
|
8c1bfe6545
|
Link libstrongswan against libdumm, fixes build of ruby extension
|
2011-05-20 14:59:17 +02:00 |
|
|
Martin Willi
|
4ae7f7d13e
|
Use spaces in Makefile.am identation, autotools don't like tabs
|
2011-05-20 10:09:09 +02:00 |
|
|
Martin Willi
|
afd53de627
|
Add md5 to script plugins
|
2011-05-20 10:08:57 +02:00 |
|
|
Martin Willi
|
b8509b7164
|
Link libstrongswan directly to dumm/irdumm, fixes build with newer binutils
|
2011-05-19 15:47:40 +02:00 |
|
|
Martin Willi
|
513701f41b
|
Fix some warnings triggered by gcc 4.6 -Wunused-but-set-variable
|
2011-05-19 15:47:40 +02:00 |
|
|
Martin Willi
|
4baf1f3bfe
|
Migrated controller_t to INIT/METHOD macros
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
83245de0ac
|
Provide get_priority() method in controller jobs
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
c8972da757
|
Added a load tester strongswan.conf option to throttle initiation
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
8606725676
|
Migrated load_tester_listern to INIT/METHOD macros
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
a4c040d536
|
Added strongswan.conf option to override half open IKE_SA timeout
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
14bf2f689d
|
Use CRITICAL job priority class for long running dispatcher jobs
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
1c8f58adb9
|
Introduce a highest priority job for critical thread services
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
4cf6f101d8
|
Show total and half-open SA count in statusall
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
9a96ba4b6e
|
Added a get_count() method to IKE_SA manager
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
a836cf8085
|
Fixed identiation in private_ike_sa_manager
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
c6089e252d
|
Added a callback_job constructor supporting custom priorities
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
0b04bdde30
|
Added a DPD option for load-tester
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
015c15688c
|
Don't simulate traffic on load-tester kernel interface
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
c726b1a6a5
|
Show how many threads are active in each class in statusall
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
877fdcf0b8
|
Count number of threads active in each class, and reserve threads only if none active
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
a694b481ee
|
Added a statusallnb stroke command to show status non-blocking
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
a2302d2322
|
Added init_limit_half_open and a init_limit_job_load (replacing job_threshold) options, some refactorings
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
a1bf879a43
|
Added preshared_key/eap_password load_tester options to set custom credentials
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
ac96ca80eb
|
Added initiator/responder_id load tester options to enforce different identities
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
187bf24e4d
|
Migrated load_tester_config to INIT/METHOD macros
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
8e67b5413c
|
Migrated load_tester_creds to INIT/METHOD macros
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
e13819507e
|
Fix load tester shared key enumerator, provide dedicated EAP password
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
69c3eca0e9
|
Added a non-blocking, skipping variant of IKE_SA enumerator
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
3f06403705
|
Added a job_threshold option to drop IKE_SA_INITs if a certain job load reached
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
06f0ede759
|
Use high priority for retransmit/dpd/keepalive jobs
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
ea69c70d0e
|
Use job priorities in process_message job based on exchange types
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
68f56418cd
|
Reserve threads for job priority classes based on strongswan.conf options
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
2959ea6f84
|
Added job priority enum names
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
c73d4f53f5
|
Processor job scheduling respects job priority classes
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
f77203bbfb
|
Introduce priority classes for jobs
|
2011-05-16 15:24:12 +02:00 |
|
|
Martin Willi
|
dfe9bad981
|
Added a stroke memusage command to show memory usage
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
fce3b5c3ba
|
Added a leak detective method to report current memory usage with backtraces
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
f37e8252a3
|
Make leak detective public
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
42e0f26e53
|
Migrated leak_detective to INIT/METHOD macros
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
61a141d01c
|
Added a frame enumerator to backtrace_t
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
c238e8ea86
|
Added an equals function to backtrace_t
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
79edee7422
|
Migrated backtrace_t to METHOD macro
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
6fd23444ea
|
Disable whitelist plugin by default
|
2011-05-12 09:07:14 +02:00 |
|
|
Martin Willi
|
61e3819d04
|
Do not use deprecated vte_terminal_fork_command()
|
2011-05-11 12:12:02 +02:00 |
|
|
Martin Willi
|
f7812f6492
|
Wipe memory after using key material (incomplete, to be continued)
|
2011-05-09 14:36:15 +02:00 |
|
|
Martin Willi
|
7dc48bab1b
|
Use memwipe() in chunk_clear()
|
2011-05-09 14:36:14 +02:00 |
|
|
Martin Willi
|
ed678b52e2
|
Added a memwipe() function to safely overwrite sensitive memory
|
2011-05-09 14:36:14 +02:00 |
|
|
Martin Willi
|
e7643c92d3
|
Migrated scheduler_t to INIT/METHOD macros
|
2011-05-05 11:14:51 +02:00 |
|
|
Martin Willi
|
cda46be72a
|
Migrated callback_job to INIT/METHOD macros
|
2011-05-05 11:14:51 +02:00 |
|
|
Martin Willi
|
3316742969
|
Migrated processor to INIT/METHOD macros
|
2011-05-05 11:14:50 +02:00 |
|
|
Martin Willi
|
92ebb7c5b2
|
Added NEWS about duplicheck and coupling plugins
|
2011-05-05 09:38:48 +02:00 |
|
|
Martin Willi
|
e35727c14d
|
Fix algorithm type for signers, fixes warning with gcc 4.5
|
2011-05-03 11:33:40 +02:00 |
|
|
Martin Willi
|
aca6434ba9
|
Fix a potential memleak if two threads fingerprint a credential simultaneously
|
2011-05-02 15:05:41 +02:00 |
|
|
Martin Willi
|
33bad71ce9
|
Accept name fields in EAP-MD5 messages
|
2011-05-02 09:57:58 +02:00 |
|
|
Martin Willi
|
f9a552f011
|
Resolve and connect to RADIUS servers not before required
|
2011-04-21 14:01:25 +02:00 |
|
|
Martin Willi
|
5b0bcfb1fc
|
Revert alloc_str changes
This reverts commit fdead26ffe.
This reverts commit 3e2419ebe3.
This reverts commit 17ce69b47a.
|
2011-04-21 13:35:31 +02:00 |
|
|
Martin Willi
|
fdead26ffe
|
If key not found, strdup default value, too
|
2011-04-21 10:57:17 +02:00 |
|
|
Martin Willi
|
3e2419ebe3
|
Use thread save settings alloc_str function where appropriate
|
2011-04-21 10:48:16 +02:00 |
|
|
Martin Willi
|
17ce69b47a
|
Added a thread save, allocating settings get_str variant called alloc_str
|
2011-04-21 10:10:26 +02:00 |
|
|
Martin Willi
|
6d41218ced
|
Be a little more liberal in checking maximum payload count
|
2011-04-20 15:15:00 +02:00 |
|
|
Martin Willi
|
f7aca91603
|
Accept IKE_SA_INIT responses without CERTIFICATE_REQUESTs
|
2011-04-20 15:04:02 +02:00 |
|
|
Martin Willi
|
4778655726
|
Cast size_t len arguments to %.*s to int
|
2011-04-20 13:08:32 +02:00 |
|
|
Martin Willi
|
52846ec820
|
Remove superfluous test for peer_cfg on established IKE_SAs
|
2011-04-20 12:31:29 +02:00 |
|
|
Martin Willi
|
94c0e8346a
|
Added charon.replay window to strongswan.conf.5
|
2011-04-20 12:26:58 +02:00 |
|
|
Martin Willi
|
378219546c
|
Updated ipsec.conf.5 with new ESN options
|
2011-04-20 12:26:58 +02:00 |
|
|
Martin Willi
|
d3d21c29db
|
Add NEWS for ESN/custom replay window support
|
2011-04-20 12:26:58 +02:00 |
|
|
Martin Willi
|
98788537be
|
Synchronize ESN support in HA plugin
|
2011-04-20 12:26:58 +02:00 |
|
|
Martin Willi
|
390b38b8c9
|
Add NO_EXT_SEQ_NUMBER to proposal only if it has not been specified in string
|
2011-04-20 12:26:58 +02:00 |
|
|
Martin Willi
|
f8b26c452a
|
Added proposal keywords for ESN support
|
2011-04-20 12:26:58 +02:00 |
|
|
Martin Willi
|
bd01b9d8b2
|
Install ESN SAs if such a proposal has been negotiated
|
2011-04-20 12:26:58 +02:00 |
|
|
Martin Willi
|
05e9589783
|
Copy ESN enabled replay state during update_sa, if supported
|
2011-04-20 12:26:58 +02:00 |
|
|
Martin Willi
|
ee8c89e2ee
|
Add ESN support to kernel netlink plugin, including custom replay windows
|
2011-04-20 12:26:58 +02:00 |
|
|
Martin Willi
|
4876d4f3b3
|
Added an esn parameter to the kernel interface add_sa functions
|
2011-04-20 12:26:57 +02:00 |
|
|
Martin Willi
|
f7925cad04
|
Updated copy of linux/xfrm.h to 2.6.39, featuring ESN support
|
2011-04-20 12:26:57 +02:00 |
|
|
Martin Willi
|
cf6ca6d729
|
Add plugin reloading NEWS
|
2011-04-15 13:05:02 +02:00 |
|
|
Martin Willi
|
2b3c87b49a
|
Set broadcast flag in DHCP requests when sending broadcasts
|
2011-04-15 13:00:23 +02:00 |
|
|
Martin Willi
|
96409be320
|
Add reload support to attr plugin
|
2011-04-15 10:07:13 +02:00 |
|
|
Martin Willi
|
00b4b4b0d1
|
Migrated attr plugin to INIT/METHOD macros
|
2011-04-15 10:07:13 +02:00 |
|
|
Martin Willi
|
f0331baf1a
|
Added reload support to eap-radius plugin
|
2011-04-15 10:07:13 +02:00 |
|
|
Martin Willi
|
3b71d3d033
|
Reload strongswan.conf and plugins supporting reloading on SIGHUP
|
2011-04-15 10:07:13 +02:00 |
|
|
Martin Willi
|
fd3c12bf06
|
Accept NULL files in load_files[_section] as we do in constructor
|
2011-04-15 10:07:13 +02:00 |
|
|
Martin Willi
|
32973044b0
|
Added a merge option to optionally reload files instead of merging them
|
2011-04-15 10:07:13 +02:00 |
|
|
Martin Willi
|
ed49e9a303
|
Added plugin_loader method to reload plugin configurations
|
2011-04-15 10:07:13 +02:00 |
|
|
Martin Willi
|
c55818ebb0
|
Added a (not yet implemented) plugin_t method to reload plugin configuration
|
2011-04-15 10:07:13 +02:00 |
|
|
Martin Willi
|
787b5884aa
|
Added a get_name() function to plugin_t, create_plugin_enumerator enumerates over plugin_t
|
2011-04-15 10:07:12 +02:00 |
|
|
Martin Willi
|
6e2791715b
|
Migrated remaining plugin_t implementations to INIT/METHOD macros
|
2011-04-15 10:07:12 +02:00 |
|
|
Martin Willi
|
2b36342551
|
Migrated plugin_loader to INIT/METHOD macros
|
2011-04-15 10:07:12 +02:00 |
|