Andreas Steffen
05aa206dcd
implemented get|set_identifier() for eap_gtc_t
2011-04-05 14:47:19 +02:00
Andreas Steffen
e053961dcc
Migrated eap_gtc plugin to INIT/METHOD macros
2011-04-05 14:44:26 +02:00
Andreas Steffen
4ea837d951
implemented get|set_identifier() for eap_mschapv2_t
2011-04-05 14:44:09 +02:00
Andreas Steffen
dae5a088c5
Migrated eap_mschapv2 plugin to INIT/METHOD macros
2011-04-05 14:23:59 +02:00
Andreas Steffen
689f887147
implemented get|set_identifier() for eap_identity_t and eap_md5_t
2011-04-05 14:22:58 +02:00
Andreas Steffen
adcb221f19
log the EAP identifier also for vendor specific EAP methods
2011-04-05 13:57:37 +02:00
Andreas Steffen
de93154231
log the initial value of the EAP identifier
2011-04-05 13:54:26 +02:00
Andreas Steffen
2f7c12a2f4
added get_identifier() and set_identifier() methods
2011-04-05 13:32:10 +02:00
Martin Willi
ce9352b3d7
Migrated eap_sim_pcsc plugin to INIT/METHOD macros
2011-04-04 09:31:45 +02:00
Martin Willi
13d72e90c1
Slightly reformatted SIM pcsc code
2011-04-04 09:21:54 +02:00
Duncan Salerno
80dca77a50
Added SIM card backend based on pcsc-lite
2011-04-04 08:51:50 +02:00
Martin Willi
4ceb31f941
Added alloc/stream options to fetcher test utility
2011-04-04 08:48:27 +02:00
Martin Willi
f27705cea1
Added support for FETCH_CALLBACK to soup fetcher
2011-04-04 08:48:27 +02:00
Martin Willi
c5a46f3b63
Support FETCH_CALLBACK in curl fetcher
2011-04-04 08:48:27 +02:00
Martin Willi
13eda8e903
Added a new FETCH_CALLBACK option to fetch data without allocation
2011-04-04 08:48:27 +02:00
Martin Willi
5131c62517
Migrated fetcher_manager to INIT/METHOD macros
2011-04-04 08:48:27 +02:00
Andreas Steffen
6d508e8f36
version bump to 4.5.2dr4
2011-04-02 07:46:16 +02:00
Andreas Steffen
bf2233b32d
updated ikev2/rw-eap-tnc scenarios
2011-04-01 19:44:25 +02:00
Miklos Vajna
fc16b361ef
Install systemd service file if systemd is available
2011-03-29 09:27:54 +02:00
Andreas Steffen
7aa2d1ca49
log TNC PEP decision with level 0
2011-03-25 12:49:05 +01:00
Martin Willi
952fb7b5a1
Increase whitelist message identity buffer to 128 bytes
2011-03-23 14:18:15 +01:00
Martin Willi
fc2e43eb27
Fix order of PURGE_* flags to be compatible with STROKE_PURGE_* keywords
2011-03-23 09:28:40 +01:00
Tobias Brunner
a6390879d5
Make availability of glob(3) optional in settings_t.
...
If glob(3) is not available just try to open the pattern as regular
file. The reason for this change is that glob(3) is not available on Android.
2011-03-22 19:21:26 +01:00
Tobias Brunner
913591ecb8
Make sure that files included in settings_t are regular files.
2011-03-22 19:21:15 +01:00
Tobias Brunner
f5958b6225
Define PLUGINDIR in Android.mk even though it is currently not used.
...
The combined plugin loader requires PLUGINDIR to be defined.
2011-03-22 17:41:37 +01:00
Tobias Brunner
566173366d
File lists in Android.mk files updated to those in the Makefiles.
2011-03-22 17:41:29 +01:00
Tobias Brunner
3eede76288
Fall back to _LINUX_CAPABILITY_VERSION if no explicit version is defined.
...
This is the case on Android.
2011-03-22 17:39:05 +01:00
Andreas Steffen
3f5647819b
redirect debug output of imc/imv pairs to syslog
2011-03-19 23:23:52 +01:00
Andreas Steffen
b03dd40fe6
some changes to the ikev2/rw-eap-tnc-11|20 scenarios
2011-03-19 16:48:06 +01:00
Andreas Steffen
16ee58e036
TNC server did not issue a TNC_CONNECTION_STATE_HANDSHAKE NotifyConnection message
2011-03-19 16:43:22 +01:00
Andreas Steffen
357894c692
af-alg plugin does not require hmac and xcbc plugins
2011-03-18 09:55:26 +01:00
Andreas Steffen
e236ed1e8d
added duplicheck.enable and whitelist.enable options to strongswan.conf man page
2011-03-18 08:01:09 +01:00
Andreas Steffen
ae04b73eb4
added af-alg-ikev1/alg-camellia scenario
2011-03-18 07:39:21 +01:00
Andreas Steffen
ec160f132c
added af-alg-ikev2/alg-camellia scenario
2011-03-18 07:34:48 +01:00
Andreas Steffen
efe7e863e7
added the af-alg-ikev1/rw-cert scenario
2011-03-17 23:16:41 +01:00
Andreas Steffen
d6946481ae
added the af-alg-ikev2/rw-cert scenario
2011-03-17 22:55:26 +01:00
Andreas Steffen
788fc89cc2
build the af-alg plugin in the UML test environment
2011-03-17 22:53:09 +01:00
Andreas Steffen
edd1fc71c2
include linux/if_alg.h in the strongSwan distribution
2011-03-17 22:52:04 +01:00
Andreas Steffen
d32a84fbc4
version bump to 4.5.2dr3
2011-03-17 20:24:44 +01:00
Andreas Steffen
6ca05fe2e9
added NEWS for 4.5.2dr2 release
2011-03-17 20:24:00 +01:00
Martin Willi
f8d2f903bf
Added a strongswan.conf "enabled" option for duplicheck plugin
2011-03-17 17:34:11 +01:00
Martin Willi
c236b214f2
Added strongswan.conf and runtime option to enable/disable whitelist plugin
2011-03-17 17:15:16 +01:00
Martin Willi
3ced6b51e4
Move establish/inherit of rekeyed IKE_SAs to delete messages
...
Having the inherit() function delayed to the IKE_SA establish procedure
was problematic. The task destroy function was never a good place and
results in locking/cleanup problems. After establishing the SA, it
should be really checked in ASAP to avoid any triggered DPD checks
to get lost.
2011-03-15 15:20:09 +01:00
Martin Willi
f42156a8c8
Wrap IKE delete after rekey into rekey task for responder, too
2011-03-15 11:51:53 +01:00
Martin Willi
11f89bc948
Do not invoke processor restart() if not required
...
Doing so might result in a deadlock during shutdown if a delayed
restart is locked on the bus during the debug statement.
2011-03-15 11:48:19 +01:00
Martin Willi
41080cbbd9
Migrated ike_rekey task to INIT/METHOD macros
2011-03-15 11:30:02 +01:00
Andreas Steffen
19897724d3
fixed asn1_oid_from_string(), allowing it to handle up to 32 bit node numbers
2011-03-12 13:46:14 +01:00
Andreas Steffen
4953a78a66
fixed parsing of X.509 certificatePolicies
2011-03-11 12:38:00 +01:00
Andreas Steffen
cfeb687d7f
added tcg-at-tpmIdLabel OID
2011-03-11 11:48:46 +01:00
Andreas Steffen
fc01176a7d
output unknown OIDs in dot string notation
2011-03-11 11:48:22 +01:00