Andreas Steffen
5672eae131
make boolean expression less enigmatic
2009-08-25 21:09:54 +02:00
Martin Willi
eb641993d4
set stroke connection flags to a clear TRUE/FALSE
2009-08-25 19:57:36 +02:00
Martin Willi
469083cc7d
disable lifetimes of allocated SPIs
...
The default lifetime of 30 seconds is too short, as a tunnel
setup may need several minutes if we have high packet loss. Instead
of increasing the value, we disable lifetimes completely, as we handle
the removal of such SAs from userland just fine.
2009-08-25 18:15:25 +02:00
Martin Willi
1bc0b4f795
remove incomplete SAs with PROTO_ESP
2009-08-25 18:12:55 +02:00
Martin Willi
625b48b558
added URL for git repository served over git:// protocol
2009-08-21 10:52:39 +02:00
Andreas Steffen
8bc2a8086c
version bump to 4.3.5
2009-08-18 18:35:37 +02:00
Andreas Steffen
fc0ed07c1f
pruned OID tree
2009-08-18 18:24:26 +02:00
Andreas Steffen
c8b543a6fc
fixed wrong emailAddress OID introduced by revision c31687da
2009-08-18 17:52:00 +02:00
Tobias Brunner
333b461aa6
Fixing address resolution via getaddrinfo in libfreeswan.
2009-08-18 12:30:11 +02:00
Andreas Steffen
8a17c1f907
check integrity of pool code file
2009-08-17 15:46:56 +02:00
Andreas Steffen
bde541acf8
integrity test of openac and scepclient code files
2009-08-17 14:25:18 +02:00
Andreas Steffen
430dd08a2b
NEWS for 4.3.4
2009-08-17 13:47:28 +02:00
Andreas Steffen
51dfa7f592
reinitialize print arguments
2009-08-17 10:54:34 +02:00
Andreas Steffen
2f5b1e0eb7
check success of library_init()
2009-08-14 22:13:51 +02:00
Tobias Brunner
f1777dff59
Replacing gethostbyname, gethostbyname2 and their _r variants with getaddrinfo to increase portability.
2009-08-14 16:14:32 +02:00
Tobias Brunner
26965b4ef3
OpenSolaris needs libsocket and libnsl for socket().
2009-08-14 14:50:53 +02:00
Tobias Brunner
932fdc38de
Enable CMSG headers and macros on OpenSolaris.
2009-08-14 14:50:52 +02:00
Tobias Brunner
8c3627c5ae
Added define to get sigwait with two parameters on OpenSolaris.
2009-08-14 14:50:51 +02:00
Tobias Brunner
e580e0a9a2
sockio.h is required on OpenSolaris for SIOCGIFADDR.
2009-08-14 14:50:50 +02:00
Tobias Brunner
647bd246e4
Replaced the strange definitions of IN6ADDR_ANY_INIT and IN6ADDR_LOOPBACK_INIT on OpenSolaris.
2009-08-14 14:50:49 +02:00
Tobias Brunner
cc396286e8
Defined some missing fixed-width int types on OpenSolaris.
2009-08-14 14:50:22 +02:00
Tobias Brunner
a3ccf95f3f
LOG_AUTHPRIV is not defined on OpenSolaris.
2009-08-14 13:37:07 +02:00
Tobias Brunner
3901937d14
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
2009-08-14 13:30:59 +02:00
Tobias Brunner
8b6a5ce5ba
We need to include alloca.h on OpenSolaris.
2009-08-14 13:25:22 +02:00
Andreas Steffen
12a699c58d
fixed 4.3 refactoring error
2009-08-11 08:51:16 +02:00
Andreas Steffen
87079f58e1
added -module -avoid-version LDFLAGS
2009-08-11 01:06:45 +02:00
Andreas Steffen
8ddcac4c48
prepare CAMELLIA_CCM ESP encryption
2009-08-10 16:30:42 +02:00
Andreas Steffen
20af53fe33
add ikev1/esp-alg-aes-ctr scenario
2009-08-08 19:20:53 +02:00
Andreas Steffen
453c6aea16
added ikev2/esp-alg-aes-ctr scenario
2009-08-08 19:08:17 +02:00
Tobias Brunner
3974b2fb07
FreeBSD's libc does not support backtrace(), but libexecinfo optionally replicates this function (and the other defined in execinfo.h).
2009-08-07 18:46:25 +02:00
Martin Willi
dd4c14f37c
set protocol to ESP for policies installed as a trap
2009-08-07 16:05:32 +02:00
Martin Willi
d9796a4311
fixed printf fromat for length limited string
2009-08-07 10:31:21 +02:00
Andreas Steffen
4b5b92bfee
%llu correctly prints u_int64_t
2009-08-07 09:50:36 +02:00
Andreas Steffen
4a02deb088
printing u_int64_t caused segfault on 32-bit platforms
2009-08-07 08:47:29 +02:00
Andreas Steffen
99dd42918e
do not set usetime if query_policy() fails
2009-08-07 05:59:09 +02:00
Tobias Brunner
79ff614144
Use LONG_MAX instead of a hard-coded value.
2009-08-06 18:22:01 +02:00
Tobias Brunner
bfca7aa5ed
FreeBSD returns the current policy use time only after specifying a hard lifetime when installing the policy.
2009-08-06 18:14:44 +02:00
Andreas Steffen
f53088c657
added openssl-ikev2/alg-camellia scenario
2009-08-06 16:48:41 +02:00
Tobias Brunner
c3a78360a8
Fixed a race condition when querying stats of a child_sa in different order.
2009-08-06 16:47:32 +02:00
Andreas Steffen
5d8306de68
use SS_RC_FIRST and SS_RC_LAST
2009-08-06 16:42:44 +02:00
Andreas Steffen
3646c8a159
abort pluto or charon if initialization fails
2009-08-06 16:32:52 +02:00
Tobias Brunner
dd83c6d490
Don't query the policy usetime if there was no traffic on the SA.
...
This helps in cases where a policy is assigned to more than one SA. That
is, SAs now should have different usetimes even if they use the same policy.
2009-08-06 15:14:54 +02:00
Tobias Brunner
b3f8ea8346
Reverted the interface changes introduced in 3f720dc7.
2009-08-06 13:31:54 +02:00
Martin Willi
51c037cc71
added support for ipsec.secrets "include" directive
2009-08-06 11:48:19 +02:00
Tobias Brunner
1e7b4b0028
Reversed the check for udp.h, fixes compilation on Linux.
2009-08-06 10:01:59 +02:00
Andreas Steffen
994b80b513
activated CAMELLIA_CBC cipher in openssl plugin
2009-08-05 22:46:53 +02:00
Andreas Steffen
b6f739c13b
support of SHA224-based certificate signatures
2009-08-05 22:01:44 +02:00
Tobias Brunner
7da1f4a0ff
Enabling UDP encapsulation via setsockopt fails on Mac OS X (it is also not required as this is done using sysctl).
2009-08-05 12:31:10 +02:00
Andreas Steffen
fcdf491a21
output number of transmitted bytes in closing CHILD_SA statement
2009-08-04 23:08:42 +02:00
Tobias Brunner
524f9ac470
FreeBSD only reports a policy's usetime if a lifetime has been specified when the policy was added (we only specify a lifetime on the SA, not on the policy).
2009-08-04 11:08:58 +02:00
Andreas Steffen