 Martin Willi
|
18c4d010f4
|
Install and use libtls as dynamic library, as we have our private libdir now
|
2011-08-08 13:41:09 +02:00 |
|
|
Martin Willi
|
f9152a56ab
|
Migrated simaka_message to INIT/METHOD macros
|
2011-08-08 13:36:56 +02:00 |
|
|
Martin Willi
|
d1196ffe58
|
Migratd simaka_crypto to INIT/METHOD macros
|
2011-08-08 13:36:56 +02:00 |
|
|
Martin Willi
|
efee3ed80f
|
Migrated all SIM/AKA code to libsimaka, use SIM and AKA backend managers registered by name
|
2011-08-08 13:36:56 +02:00 |
|
|
Martin Willi
|
4c199e6f81
|
Add a non-clonig variant of eap_payload_create_data
|
2011-08-08 13:36:55 +02:00 |
|
|
Martin Willi
|
b4853f12f5
|
Install and link libsimaka as dynamic library
|
2011-08-08 13:19:02 +02:00 |
|
|
Martin Willi
|
2ce569cc35
|
Provide generic object registration by name on libstrongswan
|
2011-08-08 13:19:02 +02:00 |
|
|
Martin Willi
|
994fb9bcf0
|
Fixed function descriptions
|
2011-08-08 13:19:02 +02:00 |
|
|
Martin Willi
|
61e13630f8
|
Show error code of Microsoft specific error notify
|
2011-08-03 12:01:15 +02:00 |
|
|
Martin Willi
|
06912a5eb4
|
Added Microsoft specific error notify
|
2011-08-03 12:00:50 +02:00 |
|
|
Martin Willi
|
caa451557f
|
ha plugin does not need Linux headers anymore
|
2011-08-02 17:08:41 +02:00 |
|
|
Martin Willi
|
6e5118e9e3
|
Check for kernel version and use appropriate jhash version in HA plugin
|
2011-08-02 17:00:59 +02:00 |
|
|
Martin Willi
|
aaaa7bc544
|
Remove the Linux jhash.h copy, as the implementation changed for 2.6.37
There are now different version for jhash, use --with-linux-headers
targeting the headers of the kernel used with the HA plugin.
|
2011-08-02 14:14:43 +02:00 |
|
|
Martin Willi
|
5d6b981572
|
Inherit authentication information during IKE_SA rekeying
|
2011-07-25 14:19:17 +02:00 |
|
|
Martin Willi
|
b93d77ce67
|
Fix parentheses in write() to CLUSTERIP control files
|
2011-07-14 15:56:10 +02:00 |
|
|
Martin Willi
|
75fc9d3136
|
Linked list style cleanups
|
2011-07-06 09:43:46 +02:00 |
|
|
Martin Willi
|
6a5c8ee7a5
|
Initialize trap_manager listener with INIT macro, too
|
2011-06-28 17:19:20 +02:00 |
|
|
Martin Willi
|
6fe53bde24
|
We actually need to link against libz, as neo libraries are often static
This reverts commit 3c0630a797.
|
2011-06-15 12:23:21 +02:00 |
|
|
Martin Willi
|
38dc106cde
|
Set cookies for the complete domain
|
2011-06-15 12:22:41 +02:00 |
|
|
Martin Willi
|
7804b7f420
|
Migrated libfast to INIT/METHOD macros
|
2011-06-15 11:25:53 +02:00 |
|
|
Martin Willi
|
4876f896a4
|
Added documentation and NEWS for closeaction
|
2011-06-07 12:07:22 +02:00 |
|
|
Martin Willi
|
f34ebc845b
|
Add a closeaction ipsec.conf keyword to configure close action
|
2011-06-07 12:07:21 +02:00 |
|
|
Martin Willi
|
bc20bc1927
|
Check if colliding task has actually a CHILD, i.e. after a migrate
|
2011-06-03 10:49:54 +02:00 |
|
|
Martin Willi
|
ff6aab9e85
|
Fix alignement compiler warning
|
2011-06-03 10:49:54 +02:00 |
|
|
Martin Willi
|
91b9bc3e0f
|
Load af-alg with higher priority
|
2011-06-01 12:03:44 +02:00 |
|
|
Martin Willi
|
ea90042233
|
Provide recursive mutex' just in case the PKCS#11 library requires it
|
2011-06-01 12:03:44 +02:00 |
|
|
Martin Willi
|
3c0630a797
|
libfast does not depend on zlib directly, clearsilver can be built without compression support
|
2011-06-01 12:03:44 +02:00 |
|
|
Martin Willi
|
60d4a323a0
|
Include m4/config directory in git, supporting autoregen -i of a fresh clone
|
2011-06-01 12:03:44 +02:00 |
|
|
Martin Willi
|
c140757221
|
Fix initialization of NM plugin
|
2011-05-31 18:12:56 +02:00 |
|
|
Martin Willi
|
35c9347921
|
Use better packing of leak-detective memory_header to align pointers
|
2011-05-25 19:56:47 +02:00 |
|
|
Martin Willi
|
eb4f4551a1
|
Summarize leaks with identical backtraces, as we do it with memusage
|
2011-05-25 19:56:43 +02:00 |
|
|
Martin Willi
|
0eef27074d
|
Don't use a strongswan.conf in checksum_builder, disables checksumming
|
2011-05-25 11:06:25 +02:00 |
|
|
Martin Willi
|
f147b731e0
|
Force link of checksum builder against libhydra/libcharon
|
2011-05-25 10:40:30 +02:00 |
|
|
Martin Willi
|
3dbc5dfeda
|
Checksum plugins only for components we actually build
|
2011-05-25 10:33:14 +02:00 |
|
|
Martin Willi
|
628f285778
|
Fix strict aliasing warning
|
2011-05-25 10:09:16 +02:00 |
|
|
Martin Willi
|
8ed3c9fba5
|
Enable strict-aliasing warnings, we should really get rid of them
|
2011-05-24 12:04:35 +02:00 |
|
|
Martin Willi
|
d45b242b60
|
Fix memwipe() of leading unaligned bytes
|
2011-05-24 11:49:20 +02:00 |
|
|
Martin Willi
|
8c1bfe6545
|
Link libstrongswan against libdumm, fixes build of ruby extension
|
2011-05-20 14:59:17 +02:00 |
|
|
Martin Willi
|
4ae7f7d13e
|
Use spaces in Makefile.am identation, autotools don't like tabs
|
2011-05-20 10:09:09 +02:00 |
|
|
Martin Willi
|
afd53de627
|
Add md5 to script plugins
|
2011-05-20 10:08:57 +02:00 |
|
|
Martin Willi
|
b8509b7164
|
Link libstrongswan directly to dumm/irdumm, fixes build with newer binutils
|
2011-05-19 15:47:40 +02:00 |
|
|
Martin Willi
|
513701f41b
|
Fix some warnings triggered by gcc 4.6 -Wunused-but-set-variable
|
2011-05-19 15:47:40 +02:00 |
|
|
Martin Willi
|
4baf1f3bfe
|
Migrated controller_t to INIT/METHOD macros
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
83245de0ac
|
Provide get_priority() method in controller jobs
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
c8972da757
|
Added a load tester strongswan.conf option to throttle initiation
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
8606725676
|
Migrated load_tester_listern to INIT/METHOD macros
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
a4c040d536
|
Added strongswan.conf option to override half open IKE_SA timeout
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
14bf2f689d
|
Use CRITICAL job priority class for long running dispatcher jobs
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
1c8f58adb9
|
Introduce a highest priority job for critical thread services
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
4cf6f101d8
|
Show total and half-open SA count in statusall
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
9a96ba4b6e
|
Added a get_count() method to IKE_SA manager
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
a836cf8085
|
Fixed identiation in private_ike_sa_manager
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
c6089e252d
|
Added a callback_job constructor supporting custom priorities
|
2011-05-16 15:24:15 +02:00 |
|
|
Martin Willi
|
0b04bdde30
|
Added a DPD option for load-tester
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
015c15688c
|
Don't simulate traffic on load-tester kernel interface
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
c726b1a6a5
|
Show how many threads are active in each class in statusall
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
877fdcf0b8
|
Count number of threads active in each class, and reserve threads only if none active
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
a694b481ee
|
Added a statusallnb stroke command to show status non-blocking
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
a2302d2322
|
Added init_limit_half_open and a init_limit_job_load (replacing job_threshold) options, some refactorings
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
a1bf879a43
|
Added preshared_key/eap_password load_tester options to set custom credentials
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
ac96ca80eb
|
Added initiator/responder_id load tester options to enforce different identities
|
2011-05-16 15:24:14 +02:00 |
|
|
Martin Willi
|
187bf24e4d
|
Migrated load_tester_config to INIT/METHOD macros
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
8e67b5413c
|
Migrated load_tester_creds to INIT/METHOD macros
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
e13819507e
|
Fix load tester shared key enumerator, provide dedicated EAP password
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
69c3eca0e9
|
Added a non-blocking, skipping variant of IKE_SA enumerator
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
3f06403705
|
Added a job_threshold option to drop IKE_SA_INITs if a certain job load reached
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
06f0ede759
|
Use high priority for retransmit/dpd/keepalive jobs
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
ea69c70d0e
|
Use job priorities in process_message job based on exchange types
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
68f56418cd
|
Reserve threads for job priority classes based on strongswan.conf options
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
2959ea6f84
|
Added job priority enum names
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
c73d4f53f5
|
Processor job scheduling respects job priority classes
|
2011-05-16 15:24:13 +02:00 |
|
|
Martin Willi
|
f77203bbfb
|
Introduce priority classes for jobs
|
2011-05-16 15:24:12 +02:00 |
|
|
Martin Willi
|
dfe9bad981
|
Added a stroke memusage command to show memory usage
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
fce3b5c3ba
|
Added a leak detective method to report current memory usage with backtraces
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
f37e8252a3
|
Make leak detective public
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
42e0f26e53
|
Migrated leak_detective to INIT/METHOD macros
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
61a141d01c
|
Added a frame enumerator to backtrace_t
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
c238e8ea86
|
Added an equals function to backtrace_t
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
79edee7422
|
Migrated backtrace_t to METHOD macro
|
2011-05-16 15:22:21 +02:00 |
|
|
Martin Willi
|
6fd23444ea
|
Disable whitelist plugin by default
|
2011-05-12 09:07:14 +02:00 |
|
|
Martin Willi
|
61e3819d04
|
Do not use deprecated vte_terminal_fork_command()
|
2011-05-11 12:12:02 +02:00 |
|
|
Martin Willi
|
f7812f6492
|
Wipe memory after using key material (incomplete, to be continued)
|
2011-05-09 14:36:15 +02:00 |
|
|
Martin Willi
|
7dc48bab1b
|
Use memwipe() in chunk_clear()
|
2011-05-09 14:36:14 +02:00 |
|
|
Martin Willi
|
ed678b52e2
|
Added a memwipe() function to safely overwrite sensitive memory
|
2011-05-09 14:36:14 +02:00 |
|
|
Martin Willi
|
e7643c92d3
|
Migrated scheduler_t to INIT/METHOD macros
|
2011-05-05 11:14:51 +02:00 |
|
|
Martin Willi
|
cda46be72a
|
Migrated callback_job to INIT/METHOD macros
|
2011-05-05 11:14:51 +02:00 |
|
|
Martin Willi
|
3316742969
|
Migrated processor to INIT/METHOD macros
|
2011-05-05 11:14:50 +02:00 |
|
|
Martin Willi
|
92ebb7c5b2
|
Added NEWS about duplicheck and coupling plugins
|
2011-05-05 09:38:48 +02:00 |
|
|
Martin Willi
|
e35727c14d
|
Fix algorithm type for signers, fixes warning with gcc 4.5
|
2011-05-03 11:33:40 +02:00 |
|
|
Martin Willi
|
aca6434ba9
|
Fix a potential memleak if two threads fingerprint a credential simultaneously
|
2011-05-02 15:05:41 +02:00 |
|
|
Martin Willi
|
33bad71ce9
|
Accept name fields in EAP-MD5 messages
|
2011-05-02 09:57:58 +02:00 |
|
|
Martin Willi
|
f9a552f011
|
Resolve and connect to RADIUS servers not before required
|
2011-04-21 14:01:25 +02:00 |
|
|
Martin Willi
|
5b0bcfb1fc
|
Revert alloc_str changes
This reverts commit fdead26ffe.
This reverts commit 3e2419ebe3.
This reverts commit 17ce69b47a.
|
2011-04-21 13:35:31 +02:00 |
|
|
Martin Willi
|
fdead26ffe
|
If key not found, strdup default value, too
|
2011-04-21 10:57:17 +02:00 |
|
|
Martin Willi
|
3e2419ebe3
|
Use thread save settings alloc_str function where appropriate
|
2011-04-21 10:48:16 +02:00 |
|
|
Martin Willi
|
17ce69b47a
|
Added a thread save, allocating settings get_str variant called alloc_str
|
2011-04-21 10:10:26 +02:00 |
|
|
Martin Willi
|
6d41218ced
|
Be a little more liberal in checking maximum payload count
|
2011-04-20 15:15:00 +02:00 |
|
|
Martin Willi
|
f7aca91603
|
Accept IKE_SA_INIT responses without CERTIFICATE_REQUESTs
|
2011-04-20 15:04:02 +02:00 |
|
|
Martin Willi
|
4778655726
|
Cast size_t len arguments to %.*s to int
|
2011-04-20 13:08:32 +02:00 |
|
|
Martin Willi
|
52846ec820
|
Remove superfluous test for peer_cfg on established IKE_SAs
|
2011-04-20 12:31:29 +02:00 |
|