Andreas Steffen
4b15ee8cd9
shortened file loading debug output
2009-09-22 12:33:13 +02:00
Martin Willi
cb64b21217
Do not assign SIM version to a volatile buffer on stack
2009-09-22 09:11:35 +02:00
Martin Willi
c84b139a87
Credential backends use has_fingerprint() methods to select keys/certificates
2009-09-21 17:03:00 +02:00
Martin Willi
fde7f5abf8
Correctly serve certificates if CERT_ANY requested
2009-09-21 15:34:29 +02:00
Martin Willi
c331bce51d
Return certificates of requested kind only
2009-09-21 14:43:57 +02:00
Andreas Steffen
399ce164ad
delete resolv_conf_* files
2009-09-20 21:59:36 +02:00
Andreas Steffen
4819ec6a71
resolv_conf plugin renamed to resolve
2009-09-20 19:06:58 +02:00
Martin Willi
c7a64d6f41
Use helper functions to handle (non-)skippable attributes
2009-09-18 15:08:43 +02:00
Martin Willi
e466139c91
Clients can handle AKA-Identity requests by sending the full identity
2009-09-18 14:51:35 +02:00
Martin Willi
85af7a89c6
nm uses the distributions trusted root CAs if none is explicitly specified
2009-09-18 14:34:27 +02:00
Martin Willi
7aa495d9d0
get_private() in listcacerts requires a valid auth cfg
2009-09-17 12:47:03 +02:00
Martin Willi
4a03e85b37
Fixed nexthop lookup, used by source route installation
2009-09-16 13:55:32 +02:00
Martin Willi
36b7ba5ee3
Use continue to advance to next iteration
2009-09-16 13:32:47 +02:00
Martin Willi
b538b606da
Use the default debug hook if possible
2009-09-16 13:16:00 +02:00
Martin Willi
79c6f16212
Implemented support for preinstalled PGP certificates in charon
2009-09-15 08:23:48 +02:00
Martin Willi
3b878dae7e
Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro
2009-09-11 15:39:35 +02:00
Martin Willi
356b2b2780
pass NULL to library_init() to load settings from default file
2009-09-10 18:52:42 +02:00
Martin Willi
5b03a350fc
use NULL to load plugins from default plugin directory
2009-09-10 18:52:42 +02:00
Martin Willi
faa4bd49fb
use sysconfdir, no need for an additional confdir variable
2009-09-07 15:10:30 +02:00
Martin Willi
b7b5653386
Use macros to define --with options
2009-09-07 15:00:45 +02:00
Martin Willi
8b3b4a244e
Removed trailing whitespaces in configure.in/Makefile.am
2009-09-07 11:48:03 +02:00
Martin Willi
7b3814f75d
remove spaces before tabs at the beginning of lines (^( )+\t)
2009-09-04 15:02:11 +02:00
Martin Willi
b9b8a98f47
remove spaces within tabs (\t( )+\t)
2009-09-04 15:00:19 +02:00
Martin Willi
323f9f990f
replaces four spaces by tabs, where appropriate
2009-09-04 14:50:23 +02:00
Martin Willi
7daf5226b7
removed trailing spaces ([[:space:]]+$)
2009-09-04 13:46:09 +02:00
Marius Tomaschewski
7d1b030446
fixed open failure debug message in load_secrets
2009-09-04 11:52:28 +02:00
Martin Willi
d176994235
Use recursive source address lookup if we get a gateway only
2009-09-03 14:46:39 +02:00
Marius Tomaschewski
dece3d8efc
Fixed load_secrets to acquire/release lock in level 0 only
...
The write_lock call fails with EDEADLK and unlocks in the
next recursion level.
2009-09-03 14:46:36 +02:00
Tobias Brunner
484a06bce7
Fixed some typos; whitespace cleanup.
2009-09-02 17:30:46 +02:00
Tobias Brunner
5293b02945
Missing commas added.
2009-09-02 17:29:44 +02:00
Martin Willi
8fb4edc4ff
handle plugin loading failures
2009-09-01 16:20:45 +02:00
Tobias Brunner
e75f423753
Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static.
2009-09-01 12:54:33 +02:00
Tobias Brunner
abff49a7ff
Handling of new lifetime limits added to stroke.
2009-09-01 12:53:44 +02:00
Tobias Brunner
1087b9cebb
Set the packet and byte limits in the netlink and pfkey kernel interfaces.
2009-09-01 12:53:44 +02:00
Tobias Brunner
888af96343
Adapted the kernel interfaces to the new lifetime configuration.
2009-09-01 12:53:13 +02:00
Tobias Brunner
e0a8a8c3ec
Adapted the config backends to the new lifetime configuration.
2009-09-01 12:50:50 +02:00
Martin Willi
6180a55852
use time_monotonic() instead of time() for statistics and time difference calculations
2009-08-31 18:00:28 +02:00
Martin Willi
de5784452b
use time_monotonic() instead of gettimeofday() for time difference calculations
2009-08-31 15:25:03 +02:00
Martin Willi
8365f7cd81
fixed crash in crl listing
2009-08-31 10:21:38 +02:00
Martin Willi
500f515a64
moved chunk_increment() function to libstrongswan
2009-08-26 14:07:26 +02:00
Martin Willi
9c3d2b3d60
updated medsrv and test to new fingerprint/encoding API
2009-08-26 11:23:55 +02:00
Martin Willi
1cd0d7969a
updated load-tester plugin to new fingerprinting API
2009-08-26 11:23:53 +02:00
Martin Willi
8eefe4617f
use only KEY_ID_PUBKEY_SHA1 fingerprint charon internally
2009-08-26 11:23:53 +02:00
Martin Willi
87d2026341
updated nm plugin to new fingerprinting API
2009-08-26 11:23:53 +02:00
Martin Willi
c5cd195c6c
updated stroke plugin to fingerprinting API
2009-08-26 11:23:53 +02:00
Martin Willi
750bbcf9a8
added support for %prompt-ing private key passhprases in strokes "ipsec secrets"
2009-08-26 11:23:50 +02:00
Martin Willi
280469923d
make use of the pem helper plugin to load credentials
2009-08-26 11:23:49 +02:00
Martin Willi
469083cc7d
disable lifetimes of allocated SPIs
...
The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine.
2009-08-25 18:15:25 +02:00
Andreas Steffen
8a17c1f907
check integrity of pool code file
2009-08-17 15:46:56 +02:00
Andreas Steffen
2f5b1e0eb7
check success of library_init()
2009-08-14 22:13:51 +02:00
Andreas Steffen