Andreas Steffen
bcf071d9d5
Migrated send_dpd_job_t to INIT/METHOD macros
2011-02-10 08:25:41 +01:00
Andreas Steffen
e76d12bb9e
Migrated roam_job_t to INIT/METHOD macros
2011-02-10 08:22:57 +01:00
Andreas Steffen
ac226a1a60
Migrated retransmit_job_t to INIT/METHOD macros
2011-02-10 08:19:47 +01:00
Andreas Steffen
84e8fa47dc
Migrated rekey_ike_sa_job_t to INIT/METHOD macros
2011-02-10 08:16:23 +01:00
Andreas Steffen
44836c50ff
Migrated rekey_child_sa_job_t to INIT/METHOD macros
2011-02-10 08:13:01 +01:00
Andreas Steffen
76331a6493
Migrated process_message_job_t to INIT/METHOD macros
2011-02-10 08:09:36 +01:00
Andreas Steffen
8125dcca59
Migrated migrate_job_t to INIT/METHOD macros
2011-02-10 08:06:06 +01:00
Andreas Steffen
43c4a21bd9
_ prefix not required
2011-02-10 07:59:43 +01:00
Andreas Steffen
fc83263403
Migrated delete_ike_sa_job_t to INIT/METHOD macros
2011-02-10 07:56:53 +01:00
Andreas Steffen
1328423985
Migrated delete_child_sa_job_t to INIT/METHOD macros
2011-02-10 07:53:34 +01:00
Andreas Steffen
be02b8a094
Migrated acquire_job_t to INIT/METHOD macros
2011-02-10 07:49:05 +01:00
Andreas Steffen
f04d1c2dfe
replaced ipsec up %startall command by start_action job
2011-02-09 22:27:04 +01:00
Tobias Brunner
feb8ada613
maemo: Create DBUS service file with correct path to charon.
2011-02-08 15:17:36 +01:00
Martin Willi
caf20266e0
Fixed tnc-imc/imv library names when building monolithic
2011-02-08 11:22:02 +01:00
Martin Willi
234955d1ea
Check for libxml when building tnccs_11, use autoconf libxml CFLAGS/LIBS
2011-02-08 11:11:01 +01:00
Martin Willi
91f8ce562d
tnccs_11 does not link against libtls, just uses its headers
2011-02-08 11:09:27 +01:00
Martin Willi
6ccb23e80b
Whitespace cleanups in tnc code
2011-02-08 11:03:10 +01:00
Martin Willi
c6c7c7001c
Add a prefix to the global visible tnc names to avoid name clashes, move to tncifimv
2011-02-08 11:03:10 +01:00
Martin Willi
3683c0424f
Fixed compiler warning
2011-02-08 11:03:10 +01:00
Martin Willi
3af88e4657
tnccs_11 does not link to libtnc anymore
2011-02-08 11:03:10 +01:00
Martin Willi
10a6019ec6
Implement correct signature for pb_tnc_msg->process()
2011-02-08 10:57:41 +01:00
Martin Willi
11a6f29944
Fixed doxygen groups in libcharon tnc subtree
2011-02-08 10:57:41 +01:00
Martin Willi
6cc11bccd1
Fixed various doxygen errors in tnc plugins
2011-02-08 10:57:40 +01:00
Martin Willi
0700c153e7
Fixed function parameter description
2011-02-08 10:14:56 +01:00
Martin Willi
94030a670b
Report correct key size if a cipher is not supported
2011-02-07 16:39:33 +01:00
Tobias Brunner
84545f6e7c
Some typos fixed.
2011-02-07 11:39:41 +01:00
Tobias Brunner
56f57e5814
maemo: Listen for IKE_SA state changes insted of CHILD_SA state changes.
...
If the IKE_SA_INIT request fails, there is not yet a CHILD_SA that could
trigger state changes.
2011-02-04 18:02:48 +01:00
Martin Willi
b49d047bfc
Invoke the per-round authorize() hook before purging current auth info on IKE_SA
2011-02-03 17:08:39 +01:00
Martin Willi
4536e669a8
Filter out non-matching ike_cfg in backend manager, so backends don't have to
2011-02-03 10:12:16 +01:00
Martin Willi
2b7686b5d8
Migrated ike_auth to INIT/METHOD macros, fixes missing initial_contact initialization
2011-02-02 15:13:39 +01:00
Martin Willi
fe79cd4257
Accept non-encrypted INFORMATIONALs for ME connectivity checks
2011-02-01 09:47:36 +01:00
Martin Willi
1d34612f07
Do not use destroyed rng/hasher if IKE_SA has been flush()ed
2011-02-01 09:25:55 +01:00
Andreas Steffen
88e15afc8c
added comment to determine_tnccs_protocol() function
2011-01-31 05:31:22 +01:00
Andreas Steffen
f652995b21
implemented dynamic detection of TNCCS protocol
2011-01-31 00:59:17 +01:00
Martin Willi
5c89a00f05
Do not log potentially hundreds of cert requests for unknown CAs at level 1
2011-01-28 08:29:23 +01:00
Martin Willi
60b71def1a
Use wrapped threading functions in ha plugin
2011-01-20 15:52:29 +01:00
Thomas Egerer
f2e2a40550
Fix potential use after free
2011-01-19 09:59:01 +01:00
Martin Willi
ff5538e5c0
Use newer Linux capability native API, if available
2011-01-17 18:18:21 +01:00
Martin Willi
983a5e88d3
Revert "Send INITIAL_CONTACT even if we have a unique policy"
...
It makes sense to omit INITIAL_CONTACT if don't have a unique policy,
as a client might want to connect from different devices to the same
account.
This reverts commit 719c33b41a
2011-01-13 10:50:46 +01:00
Martin Willi
9bac426bf3
Fixed memory cleanup if no DHCP transaction found for an OFFER
2011-01-13 10:36:16 +01:00
Martin Willi
2082417df3
Force port update as responder when initiator switches to 4500 in IKE_AUTH
2011-01-12 14:37:15 +01:00
Martin Willi
8ba805f4db
Avoid variable name overloading
2011-01-12 14:37:09 +01:00
Andreas Steffen
213281de04
terminate TNCCS 1.1 connection after sending recommendation
2011-01-11 01:17:40 +01:00
Andreas Steffen
4c8e9708ca
fixed XML syntax for TNCCS-Recommendation messages
2011-01-11 01:17:40 +01:00
Andreas Steffen
59d1b15aea
implemented check_and_build_recommendation()
2011-01-11 01:17:40 +01:00
Andreas Steffen
21d96f44f7
correct numbering of batches
2011-01-11 01:17:40 +01:00
Andreas Steffen
8d0d0f0fe9
initialize the reference count correctly
2011-01-11 01:17:40 +01:00
Andreas Steffen
f33966fe8f
handle zero size Base64 conversions
2011-01-11 01:17:40 +01:00
Andreas Steffen
8a284e0454
communicate DELETE state to IMCs and IMVs
2011-01-11 01:17:40 +01:00
Martin Willi
719c33b41a
Send INITIAL_CONTACT even if we have a unique policy
2011-01-10 11:54:10 +01:00
Andreas Steffen