 Martin Willi
|
98e7317daa
|
fixed OID encoding
|
2009-04-17 08:28:53 +00:00 |
|
|
Martin Willi
|
5cac9e4c34
|
fixed some newline encodings
|
2009-04-16 14:00:14 +00:00 |
|
|
Martin Willi
|
0bd7ad6cff
|
added create_part_enumerator() to indentity, allows to enumerate RDNs etc.
|
2009-04-14 14:32:22 +00:00 |
|
|
Martin Willi
|
c31687daa7
|
moved RDN OIDs to oid.txt, use asn1_get_known_oid() for lookup
|
2009-04-14 13:53:06 +00:00 |
|
|
Martin Willi
|
56807f35b9
|
implemented asn1_get_known_oid(), mapping OID index to ASN1 OID
|
2009-04-14 13:50:23 +00:00 |
|
|
Martin Willi
|
b63f4c75e2
|
added missing string.h include
|
2009-04-14 10:50:29 +00:00 |
|
|
Martin Willi
|
e8a0be4895
|
fixed proposal_keywords.c generation in out-of-tree builds
|
2009-04-14 10:49:12 +00:00 |
|
|
Martin Willi
|
a44bb9345f
|
merged multi-auth branch back into trunk
|
2009-04-14 10:34:24 +00:00 |
|
|
Martin Willi
|
6e5c8d9413
|
do not load guests starting with a ".", such as ".svn"
|
2009-04-09 13:43:26 +00:00 |
|
|
Martin Willi
|
d848b951fc
|
simplified statfs
|
2009-04-09 12:06:01 +00:00 |
|
|
Martin Willi
|
79f81838bc
|
added template() shortcut
|
2009-04-07 17:58:23 +00:00 |
|
|
Martin Willi
|
8a7d32452c
|
added Dumm.method_missing, allows direct invocation of guests/bridges
|
2009-04-07 17:54:15 +00:00 |
|
|
Martin Willi
|
cf61575dc3
|
added booted?/boot methods
|
2009-04-07 17:13:44 +00:00 |
|
|
Martin Willi
|
801548155c
|
use safe each() implementations, allowing delete() in block
implement Client.reset() in ruby
|
2009-04-07 14:56:19 +00:00 |
|
|
Martin Willi
|
c4087a8e70
|
added a reset() method to Dumm and each client
identation cleanups
|
2009-04-07 14:22:02 +00:00 |
|
|
Martin Willi
|
28970d5967
|
fixed template loading/unloading
identation cleanups
|
2009-04-07 13:07:13 +00:00 |
|
|
Martin Willi
|
58da11911b
|
store all templates in a subdirectory
|
2009-04-07 13:06:33 +00:00 |
|
|
Martin Willi
|
5ec7ff5675
|
do not purge interfaces on template load
|
2009-04-07 12:59:54 +00:00 |
|
|
Martin Willi
|
15e247922d
|
moved AUTH_HMAC_MD5_128 to IANA defined number
|
2009-04-02 13:53:20 +00:00 |
|
|
Martin Willi
|
9d1bd18243
|
require Message-Authenticator attribute only if we have a EAP-Message
|
2009-03-27 13:25:34 +00:00 |
|
|
Martin Willi
|
510be1a32a
|
reserve a socket only during request(), avoids thread pool starvation
reduced thread pool default to 1
|
2009-03-27 10:52:22 +00:00 |
|
|
Martin Willi
|
e82c369519
|
implementation of contains_wildcards() for ID_DER_ASN1_DN identities
|
2009-03-26 13:25:46 +00:00 |
|
|
Martin Willi
|
d3fbc75e85
|
set port for NATD hash calculation in the "include-all" case
|
2009-03-26 11:49:07 +00:00 |
|
|
Martin Willi
|
04eb746442
|
updated NetworkManager applet copyright
|
2009-03-25 12:03:29 +00:00 |
|
|
Martin Willi
|
5a5654ed1e
|
added a NEWS file
release NetworkManager-strongswan-1.1.0
|
2009-03-25 07:49:11 +00:00 |
|
|
Martin Willi
|
1490ff4d9b
|
updated Doxyfile
properly close all doxygen groups
fixed remaining doxygen warnings
|
2009-03-24 17:43:01 +00:00 |
|
|
Martin Willi
|
e4838d02b3
|
set the default of plutostart/charonstart according to ./configure options
|
2009-03-24 15:02:12 +00:00 |
|
|
Martin Willi
|
4a6b84a934
|
reintegrated eap-radius branch into trunk
|
2009-03-24 10:24:58 +00:00 |
|
|
Martin Willi
|
bff28074b9
|
fixed NetworkManager applet debian dependencies
|
2009-03-20 08:33:02 +00:00 |
|
|
Martin Willi
|
03991bc1f8
|
added NEWS
|
2009-03-19 12:25:15 +00:00 |
|
|
Martin Willi
|
f18e2a15ac
|
new debian packages for NetworkManager 7.1
|
2009-03-19 10:20:28 +00:00 |
|
|
Martin Willi
|
c3340cf8da
|
respect port in create_dns/create_from_string when passing %any
|
2009-03-19 09:16:03 +00:00 |
|
|
Martin Willi
|
ce67ab162d
|
print IPv6 %any hosts as %any6
|
2009-03-19 09:04:20 +00:00 |
|
|
Martin Willi
|
c5c969639c
|
fixed compiler warning
|
2009-03-19 08:54:39 +00:00 |
|
|
Martin Willi
|
d7625f0990
|
ported nm plugin and gnome applet to NetworkManager 7.1
|
2009-03-18 19:48:06 +00:00 |
|
|
Martin Willi
|
9717826f10
|
fallback to family specific %any(6) if kernel lookup fails
|
2009-03-16 14:23:36 +00:00 |
|
|
Martin Willi
|
c587052624
|
added updated mconsole-exec patch for 2.6.28
|
2009-03-05 14:32:15 +00:00 |
|
|
Martin Willi
|
d9ad73d867
|
fixed format string argument error, resulting in crash
fixed memleak if pool not found
|
2009-03-03 14:56:17 +00:00 |
|
|
Martin Willi
|
7b2a032d28
|
stop searching other pools if lease successfully released
|
2009-03-03 14:43:53 +00:00 |
|
|
Martin Willi
|
b654daf561
|
fixed MSCHAPv2 password lookup when used with NetworkManager
|
2009-02-24 13:39:50 +00:00 |
|
|
Martin Willi
|
3cad46da79
|
added EAP-Identity package
|
2009-02-24 11:50:24 +00:00 |
|
|
Martin Willi
|
8c30041336
|
updated debian packages to 4.2.12, supporting EAP-MSCHAPv2
|
2009-02-23 16:33:17 +00:00 |
|
|
Martin Willi
|
d2ac1443d3
|
always encode EAP usernames as ID_KEY_ID
|
2009-02-18 15:03:33 +00:00 |
|
|
Martin Willi
|
2d887e8e08
|
removed unused extract_last_token() and the required memrchr implementation
|
2009-02-18 09:45:54 +00:00 |
|
|
Martin Willi
|
6ce32d8719
|
do not operate on strongswan-padlock on non-x86
|
2009-02-17 18:30:02 +00:00 |
|
|
Martin Willi
|
160fdc9d17
|
added missing kernel-netlink plugin
|
2009-02-17 09:38:42 +00:00 |
|
|
Martin Willi
|
bd29dab446
|
fixed build on non-i386 architectures
|
2009-02-17 09:34:52 +00:00 |
|
|
Martin Willi
|
b08e64a912
|
build strongswan-padlock on i386 only
|
2009-02-16 16:49:43 +00:00 |
|
|
Martin Willi
|
69eb1461ba
|
use separate distribution tarballs for NetworkManager applet
|
2009-02-16 16:11:16 +00:00 |
|
|
Martin Willi
|
842e05d5de
|
use a slightly adopted package versioning scheme
NM applet uses strongSwan independent versions
|
2009-02-16 16:05:30 +00:00 |
|
|
Martin Willi
|
0f9a47a880
|
added Makefile to build ubuntu PPA source packages
|
2009-02-16 16:03:09 +00:00 |
|
|
Martin Willi
|
f4cb848eef
|
initial version of new modular strongswan debian packages
"strongswan" metapackage adds similar functionality as old debian packages
"network-manager-strongswan" depends on required strongSwan packages
|
2009-02-16 12:48:35 +00:00 |
|
|
Martin Willi
|
b81d8cd3cc
|
changed [4856] to dynamically choose traffic selector family
|
2009-02-11 13:09:52 +00:00 |
|
|
Martin Willi
|
8837080353
|
respect family when assigning pool addresses
|
2009-02-11 12:50:04 +00:00 |
|
|
Martin Willi
|
95f1735f87
|
send proper AUTHENTICATION_FAILED if EAP method is successful, but AUTH mismatches
|
2009-02-10 17:21:44 +00:00 |
|
|
Martin Willi
|
04a7a1c309
|
free unneeded retransmission packet when exchange completes
|
2009-02-09 10:45:51 +00:00 |
|
|
Martin Willi
|
d34030a810
|
increase nonce size to 32 bytes, required when using SHA384/512 PRFs
|
2008-12-31 08:58:49 +00:00 |
|
|
Martin Willi
|
4856241c1e
|
added some NEWS for 4.2.10
|
2008-12-22 12:48:50 +00:00 |
|
|
Martin Willi
|
12d4186f5c
|
fixed a potential memory leak when reusing mobike task
|
2008-12-19 14:34:40 +00:00 |
|
|
Martin Willi
|
f6035833fa
|
RNG tests based on FIPS 140-1
|
2008-12-18 16:24:22 +00:00 |
|
|
Martin Willi
|
2241a29571
|
support for Padlock RNG
|
2008-12-18 16:21:05 +00:00 |
|
|
Martin Willi
|
5045eeba7b
|
proper feature probing for padlock
|
2008-12-17 15:40:01 +00:00 |
|
|
Martin Willi
|
9bcc9bb60e
|
updated documentation
some minor cleanups
calloc does not need an additional memset(0)
|
2008-12-17 09:00:22 +00:00 |
|
|
Martin Willi
|
097e4b8ff9
|
purge certificates after IKE_AUTH response has been built
|
2008-12-16 15:48:36 +00:00 |
|
|
Martin Willi
|
764e8b2211
|
reimplemented certificate cache:
fixes unsafe certificate caching
use fixed array instead of a list
fine grained per-slot locking
use cache hits for housekeeping
|
2008-12-15 15:41:48 +00:00 |
|
|
Martin Willi
|
482218f075
|
signal each entry condvar after enumeration, required if wait_for_entry is called
|
2008-12-15 09:19:04 +00:00 |
|
|
Martin Willi
|
abfde23ae9
|
added an additional frame to lock profiling backtraces
|
2008-12-15 09:13:43 +00:00 |
|
|
Martin Willi
|
50901d2550
|
do not respawn cancelled threads if we are shutting down
|
2008-12-12 15:57:12 +00:00 |
|
|
Martin Willi
|
248a1f57bb
|
fixed possible deadlock in checkin_and_destroy
|
2008-12-12 10:40:45 +00:00 |
|
|
Martin Willi
|
d183adbc9d
|
avoid DNS lookup if possible
|
2008-12-12 10:38:53 +00:00 |
|
|
Martin Willi
|
3993b91334
|
execute events if difference is 0, prevents a busywait
|
2008-12-12 09:16:31 +00:00 |
|
|
Martin Willi
|
8006835ec1
|
load tester got a "shutdown_when_complete" option, allows performance test using "time"
|
2008-12-12 09:14:37 +00:00 |
|
|
Martin Willi
|
30841a0305
|
daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill
|
2008-12-12 09:13:06 +00:00 |
|
|
Martin Willi
|
7a485e90bd
|
leak detective binds execution to a signle core, avoids corruption on SMP machines
|
2008-12-12 09:10:52 +00:00 |
|
|
Martin Willi
|
f2bd424c89
|
wait until all IKE_SAs are in-house before destroying them
|
2008-12-12 08:33:48 +00:00 |
|
|
Martin Willi
|
c636092c94
|
fixed usage of "leases" command
|
2008-12-11 12:49:41 +00:00 |
|
|
Martin Willi
|
6b83549d1a
|
list assigned leases using "ipsec leases"
|
2008-12-10 13:00:02 +00:00 |
|
|
Martin Willi
|
ed2bcd0315
|
added IKE_SA established timer to "ipsec statusall"
|
2008-12-10 09:59:35 +00:00 |
|
|
Martin Willi
|
d5d5bc0f16
|
using rwlock to parallel build credentials
|
2008-12-09 15:57:51 +00:00 |
|
|
Martin Willi
|
5e5b2dc105
|
use thread-safe variant of gmtime
|
2008-12-09 15:00:30 +00:00 |
|
|
Martin Willi
|
6144daba9d
|
fixed load-tester shared key lookup
|
2008-12-09 14:45:56 +00:00 |
|
|
Martin Willi
|
7023d49ee1
|
purge auth_info when IKE_SA is established, releases cert memory
|
2008-12-09 14:34:15 +00:00 |
|
|
Martin Willi
|
a1466a3ec2
|
limit number of ADDITIONAL_IPV*_ADDR notifies
|
2008-12-09 14:32:57 +00:00 |
|
|
Martin Willi
|
2e03196551
|
list pools and usage in ipsec statusall
|
2008-12-09 13:24:12 +00:00 |
|
|
Martin Willi
|
adf9965272
|
extended stroke in-memory pool to use hash-tables
supports online/offline leases
properly reassign addresses to identities
|
2008-12-09 13:23:42 +00:00 |
|
|
Martin Willi
|
20fbc4277e
|
fixed hashtable->get_count() after doubling table size
|
2008-12-09 11:13:52 +00:00 |
|
|
Martin Willi
|
15ed045c87
|
require explicit enabling of load-testing plugin
|
2008-12-09 09:11:37 +00:00 |
|
|
Martin Willi
|
5bdc8fc794
|
generating different initiator identities, configs and certificates on the fly
|
2008-12-08 19:18:28 +00:00 |
|
|
Martin Willi
|
aa5c5d3fde
|
removed debugging leftovers
|
2008-12-08 19:15:38 +00:00 |
|
|
Martin Willi
|
474998099f
|
fixed out-of-tree build of scepclient
|
2008-12-08 16:00:33 +00:00 |
|
|
Martin Willi
|
df68b54f4e
|
basic x509 certificate generation
|
2008-12-08 15:29:36 +00:00 |
|
|
Martin Willi
|
9eb85cffe1
|
whitelisted another pthread_setspecific implementation
|
2008-12-08 15:27:24 +00:00 |
|
|
Martin Willi
|
d21b3549f7
|
accept NULL values in hashtable enumerator
|
2008-12-05 12:34:17 +00:00 |
|
|
Martin Willi
|
19e0010f51
|
hashtable enumerator enumerates over both, key and values
|
2008-12-05 10:01:52 +00:00 |
|
|
Martin Willi
|
a6d7a6107c
|
added actual ikev2bis draft
|
2008-12-05 09:41:20 +00:00 |
|
|
Martin Willi
|
876d5c63a3
|
pass identity to release_address(), allows providers to do a lookup by id
|
2008-12-05 09:40:50 +00:00 |
|
|
Martin Willi
|
7710a286ca
|
fixed copy-paste bug (double-free)
|
2008-12-04 10:10:37 +00:00 |
|
|
Martin Willi
|
d0eee69822
|
reset pointer for a clean destruction
|
2008-12-04 10:09:21 +00:00 |
|
|
Martin Willi
|
3bfd0fe3f2
|
handling peer_match with higher priority tan ike_match to select correct config if IPs are equal
|
2008-12-04 10:00:03 +00:00 |
|
|
Martin Willi
|
0442562516
|
leak whitelisting of OPENSSL_config()
|
2008-12-04 09:23:53 +00:00 |
|