Andreas Steffen
3baf4922e2
removed stray file
2010-05-06 10:35:25 +02:00
Martin Willi
026b0058d5
Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin
2010-05-05 13:49:56 +02:00
Martin Willi
75d4322d68
Do not check pointer, but length of a chunk
2010-05-05 11:35:54 +02:00
Martin Willi
37c2aac89d
Double-check that a blob passed to is_asn1() is not empty
2010-05-05 11:35:53 +02:00
Martin Willi
c60b69e4bf
Do not print filename twice if plugin loading fails, dlerror() contains the filename
2010-05-05 11:16:32 +02:00
Martin Willi
b019c38fa2
Implemented base32 encoding of chunks.
2010-05-05 10:41:11 +02:00
Andreas Steffen
9a0333fa62
moved resolve plugin from libcharon to libhydra
2010-05-04 23:53:08 +02:00
Tobias Brunner
9d843ee6fa
Do a proper cleanup when printing usage info.
2010-05-04 18:34:27 +02:00
Tobias Brunner
6d7f4e0653
Moved syslog.h include.
2010-05-04 18:34:20 +02:00
Tobias Brunner
6b57f5edff
Compiler warning fixed.
2010-05-04 18:28:28 +02:00
Adrian-Ken Rueegsegger
17a02ff1b0
Add 'flush_line' option to filelog section.
...
The new boolean 'flush_line' option in the filelog section of
strongswan.conf specifies if log messages should be flushed to the given
file for each new line.
2010-05-04 14:47:56 +02:00
Reto Buerki
71a66a623e
Use reqid from connection config if present.
2010-05-04 14:38:34 +02:00
Reto Buerki
277fcf9f86
Add reqid field and getter function to child_cfg_t.
2010-05-04 14:38:34 +02:00
Reto Buerki
1f83541d7b
Include reqid in stroke add connection message.
2010-05-04 14:38:34 +02:00
Reto Buerki
2b26a9c30d
Add reqid keyword to config connection section.
2010-05-04 14:38:34 +02:00
Andreas Steffen
0ffedbfb46
added getprotobyname to whitelist
2010-05-02 21:13:10 +02:00
Andreas Steffen
fc753c1d3e
remove subnet from sourceip
2010-05-02 17:58:36 +02:00
Andreas Steffen
61e48488d9
final fix for cloning and deleting sourceip strings
2010-05-02 15:55:46 +02:00
Andreas Steffen
a48484322e
fixed end->sourceip memory leak in ipsec starter
2010-05-02 14:56:35 +02:00
Andreas Steffen
34f92dcfba
fixed flex parser memory leaks in ipsec starter
2010-05-02 11:40:46 +02:00
Andreas Steffen
2724ae521e
free config before exiting since library_deinit() calls leak detective
2010-05-02 11:00:21 +02:00
Tobias Brunner
726c0ae9d3
We have to rename thread_create on Mac OS X because it conflicts with a syscall.
2010-04-29 14:52:20 +02:00
Tobias Brunner
1c31d34ed5
Initialize libstrongswan in stroke (fixes Vstr logging).
2010-04-29 14:51:44 +02:00
Tobias Brunner
26a3d7e78e
Initialize libstrongswan in starter (fixes Vstr logging).
2010-04-29 14:33:29 +02:00
Tobias Brunner
361f416d2c
The mutex of a thread has to be locked when destroying it.
2010-04-29 13:30:51 +02:00
Tobias Brunner
257e27df07
Fixing out-of-tree build after adding dependency to config.status.
2010-04-29 13:29:53 +02:00
Martin Willi
b0e789035c
Users of PLUGINS depend on config.status, rebuilding them if plugin configuration is updated
2010-04-29 11:28:27 +02:00
Martin Willi
eadbc3da2f
Fixed RSA key generation with gcrypt
2010-04-29 09:51:37 +02:00
Martin Willi
dd04a68f22
PEM encoder supports encoding from RSA components directly, allowing gcrypt plugin to encode in PEM
2010-04-29 09:36:45 +02:00
Andreas Steffen
916fd45709
do not destroy whack_attr if it hasn't been initialized
2010-04-29 07:28:51 +02:00
Andreas Steffen
e20a494013
added debug output argument
2010-04-28 12:28:25 +02:00
Martin Willi
40fb7165a9
Reintroduce to_referer(), redirect() does not work with get_referer()
2010-04-28 09:03:08 +02:00
Martin Willi
69e492f2e2
Use a 301 permanent redirect if no controller given
2010-04-28 08:30:21 +02:00
Andreas Steffen
af3be116cb
added AES_GMAC output string
2010-04-27 13:47:11 +02:00
Andreas Steffen
12821bd674
include dhcp-client-identifier in the DHCP request
2010-04-23 12:57:43 +02:00
Andreas Steffen
19d49af539
make DHCP debug messages consistent
2010-04-23 07:37:16 +02:00
Andreas Steffen
500a6d38ee
fixed typo
2010-04-23 00:02:13 +02:00
Martin Willi
1f6a707d10
Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no DH group
2010-04-21 08:41:46 +02:00
Heiko Hund
d0f1b3b96f
fixed segfault in pluto with multiple ISAKMP SAs in delete payload
2010-04-20 21:23:05 +02:00
Martin Willi
4590260b2d
Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten
2010-04-19 14:41:20 +02:00
Martin Willi
f0212e8837
Accept DHCP replies on bootps port, as we act as a relay agent if server address configured
2010-04-19 11:18:58 +02:00
Tobias Brunner
6edbe1652b
Integrating libhydra into the Android build system.
2010-04-12 16:47:47 +02:00
Tobias Brunner
355c3a66b1
When logging to the database, the IDs of an IKE SA are initially NULL.
2010-04-12 13:51:10 +02:00
Andreas Steffen
054fd74658
fixed silly bug
2010-04-12 11:25:46 +02:00
Andreas Steffen
d3d2b7390f
implemented inheritance of virtual IP assigned by Mode Config on the responder side
2010-04-11 19:19:20 +02:00
Andreas Steffen
ec96692c38
show in-memory pools in ipsec statusall
2010-04-11 11:46:47 +02:00
Andreas Steffen
b1701d097c
added missing curly brackets
2010-04-11 00:49:04 +02:00
Andreas Steffen
b3127b42f9
support in-memory pools in swapped connection definitions
2010-04-11 00:27:04 +02:00
Tobias Brunner
9f4b02e31d
Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan.
2010-04-10 12:10:04 +02:00
Martin Willi
b34b93dbf7
Store DH generator in a chunk, hide non-public data in a private struct
2010-04-08 15:08:35 +02:00
Andreas Steffen