Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 47904e3c74 Define stroke counter types to implement Martin Willi 2012-10-08 11:03:08 +02:00
• 8554895b95 Add a stub for IKE event counters in stroke Martin Willi 2012-10-08 10:31:36 +02:00
• b2265a2738 Add a load-tester option to define the IKE version to use for testing Martin Willi 2012-10-17 16:13:17 +02:00
• e19b23e0b9 Remove peer_cfg IKE version matching, as it is done in ike_cfg matching Martin Willi 2012-10-16 15:00:32 +02:00
• 7910116384 Respect IKE version while selecting an ike_cfg as responder Martin Willi 2012-10-16 14:47:55 +02:00
• 1fdd62ffce Remove version argument on peer_cfg constructor, use ike_cfg version instead Martin Willi 2012-10-16 14:31:02 +02:00
• 9fc7cc6f9b Add IKE version information to ike_cfg_t Martin Willi 2012-10-16 14:24:35 +02:00
• cf62d073f1 Move ike_version_t definition from peer_cfg_t to ike_cfg_t Martin Willi 2012-10-16 14:21:17 +02:00
• 23ca39010e android: Enable ECC in the app as our custom built libcrypto supports it Tobias Brunner 2012-10-23 18:13:58 +02:00
• d8e62ae9b4 version bump to 5.0.2dr2 Andreas Steffen 2012-10-20 10:49:27 +02:00
• c2a5e7bcf9 updated NEWS Andreas Steffen 2012-10-19 08:52:35 +02:00
• a9c9414d58 implemented IETF Numeric Version attribute Andreas Steffen 2012-10-18 22:33:26 +02:00
• ef315c5a1c implemented IETF Remediation Instructions attribute Andreas Steffen 2012-10-18 18:24:04 +02:00
• d2c8bc4df0 Handle type of first EAP-RADIUS response more sophisticated Tobias Brunner 2012-10-16 16:39:49 +02:00
• a5436657e9 Starter ignores non-fatal errors when reloading config Tobias Brunner 2012-10-08 11:23:08 +02:00
• 9e730ef9df Starter unroutes removed or changed connections before loading and routing new ones Tobias Brunner 2012-10-04 11:22:44 +02:00
• 21037942e8 Update routed connections in trap manager Tobias Brunner 2012-10-02 16:47:43 +02:00
• 3555bacac7 Reload logger configuration on SIGHUP Tobias Brunner 2012-10-04 18:12:20 +02:00
• d35d669180 Make syslog and file loggers configurable at runtime Tobias Brunner 2012-10-04 18:07:42 +02:00
• 18a8893e8e Store loggers in conftest separately, not on charon Tobias Brunner 2012-10-02 14:49:26 +02:00
• 3c4d383443 Added an option to reload certificates from PKCS#11 tokens on SIGHUP Tobias Brunner 2012-10-01 14:22:54 +02:00
• ca1c2ee281 Copy the name of pkcs11_library_t objects Tobias Brunner 2012-10-08 11:15:35 +02:00
• c30573467b New Android release after adding MOBIKE support Tobias Brunner 2012-10-18 14:03:38 +02:00
• 8bd00205f4 Merge branch 'android-mobility' Tobias Brunner 2012-10-18 12:28:14 +02:00
• 25a413cb96 Use a shortcut to resolve numeric IP addresses (no need for separate threads) Tobias Brunner 2012-10-18 09:10:18 +02:00
• d377556863 Use native threads in host resolver so that it works even if processor has no threads Tobias Brunner 2012-10-18 10:47:51 +02:00
• b4f6c39e55 Terminate unused resolver threads after a timeout Tobias Brunner 2012-10-18 08:46:24 +02:00
• 49e2d109a3 Only create more threads if needed in host_resolver_t Tobias Brunner 2012-10-17 18:04:33 +02:00
• eecd41e349 Use a helper function to add milliseconds to timeval structs Tobias Brunner 2012-10-16 12:38:54 +02:00
• 2b6088c718 android: Ignore if peer is unreachable when reestablishing an SA Tobias Brunner 2012-10-16 13:41:02 +02:00
• 901f6ac403 android: Use a shorter timeout for retransmits Tobias Brunner 2012-10-16 12:05:50 +02:00
• 8658e87b35 android: Use keyingtries=%forever and dpd|closeaction=restart Tobias Brunner 2012-10-16 11:50:53 +02:00
• 292d8f41c3 Resolve hosts by DNS name in separate threads so we can cancel them Tobias Brunner 2012-10-16 10:57:02 +02:00
• bbf90fcc79 no need to include pa_tnc_msg.h Andreas Steffen 2012-10-18 07:00:32 +02:00
• 6a61b79583 refactored PA-TNC message handling by IMVs Andreas Steffen 2012-10-17 23:15:14 +02:00
• f8a70254a9 refactored PA-TNC message handling by IMCs Andreas Steffen 2012-10-17 09:58:00 +02:00
• 154cae09e3 increased IMC/IMV debug level to 3 Andreas Steffen 2012-10-17 09:45:19 +02:00
• c8b88ba733 removed unused variable Andreas Steffen 2012-10-16 15:17:39 +02:00
• 272ce5b580 android: Handle unreachable peers via alert Tobias Brunner 2012-10-15 14:50:22 +02:00
• 1d6dc62727 Added a new alert that is raised if peer does not respond to initial IKE message Tobias Brunner 2012-10-15 13:12:43 +02:00
• b00806cf85 android: Use 0.0.0.0/0 as local traffic selector Tobias Brunner 2012-10-15 11:02:18 +02:00
• 488b1cad13 Log IP addresses for discarded inbound IPsec packets Tobias Brunner 2012-10-15 11:19:34 +02:00
• 45885ca613 android: Bypass/protect previously bypassed sockets if connectivity changes Tobias Brunner 2012-10-11 18:48:17 +02:00
• 9167ca8b2b android: Support for IPsec SA update added Tobias Brunner 2012-10-10 15:31:24 +02:00
• 51823c1f31 Use pointers for lookups in IPsec SA manager Tobias Brunner 2012-10-10 19:17:17 +02:00
• 4785fbbc9c IPsec SA manager implements update_sa() Tobias Brunner 2012-10-10 15:31:02 +02:00
• 7622c5e97e Setter for src and destination address of ipsec_sa_t added Tobias Brunner 2012-10-10 15:29:25 +02:00
• 5b88d80f22 android: Trigger roam events in case connectivity changes Tobias Brunner 2012-10-10 14:42:12 +02:00
• ef3d1a1ba9 android: Register NetworkManager as BroadcastReceiver and relay events via JNI Tobias Brunner 2012-10-10 14:14:30 +02:00
• 38bbca587f android: Determine source address dynamically Tobias Brunner 2012-10-10 12:26:51 +02:00
• 8f092a2221 android: Added NetworkManager class which allows to retrieve a local IP address Tobias Brunner 2012-10-10 12:10:20 +02:00
• b0e0932538 android: Increase compile warnings Tobias Brunner 2012-10-10 12:11:31 +02:00
• c3bce1aa3d android: Fixed "Configure" button in Android VPN dialog Tobias Brunner 2012-10-10 11:56:34 +02:00
• e3d98f2c4c android: Don't use the default ESP proposal as it includes unsupported algorithms Tobias Brunner 2012-10-09 14:01:33 +02:00
• a70851c941 Remove unused this parameter to load_issuer_cert/key(), as it is uninitialized Martin Willi 2012-10-16 14:11:14 +02:00
• c1024a6bd6 Generate a load-tester certificate only for DN or subjectAltName identities Martin Willi 2012-10-01 15:38:20 +02:00
• db97d67825 Add a load-tester initiator_match option to match custom initiator_id Martin Willi 2012-10-01 15:14:35 +02:00
• 5359c7a437 Encode non-DN load-tester identities as subjectAltNames Martin Willi 2012-10-01 15:13:49 +02:00
• 562b89ccee Add a load-tester digest option for issuing peer certificates Martin Willi 2012-10-01 14:44:55 +02:00
• 3f6e13f553 Load a multiple load-tester CA certificates from a directory Martin Willi 2012-10-01 14:34:03 +02:00
• 24eb73b4fa Added load-tester options to read issuing CA certificate and key from files Martin Willi 2012-10-01 14:01:13 +02:00
• 8e2d3075aa Use proper offset when adding mark attribute in kernel-netlink plugin Tobias Brunner 2012-10-15 11:11:29 +02:00
• ac24c4d323 Also add mark when querying current replay state in kernel-netlink plugin Tobias Brunner 2012-10-12 18:34:21 +02:00
• 5f085d7e13 allow registration of multiple message type Andreas Steffen 2012-10-14 17:37:00 +02:00
• 07a3dee937 implemented IETF Operational Status attribute Andreas Steffen 2012-10-13 20:34:50 +02:00
• 4bc119afb7 corrected class description Andreas Steffen 2012-10-13 10:38:10 +02:00
• 1afcff297a implemented IETF Factory Default Password Enabled attribute Andreas Steffen 2012-10-12 22:04:51 +02:00
• 4abe404d27 added tnc/tnccs-20-os scenario Andreas Steffen 2012-10-12 09:50:15 +02:00
• ca1a64742f implemented the Forwarding Enabled attribute Andreas Steffen 2012-10-12 09:49:44 +02:00
• 230a26ed01 minor fixes in imc_attestation.c Andreas Steffen 2012-10-12 00:53:07 +02:00
• 2925aa725e Fixed update_sa in kernel-netlink plugin if marks are used Tobias Brunner 2012-10-11 19:08:47 +02:00
• 418dcf3aae Fixed compilation of android_handler_t Tobias Brunner 2012-10-11 11:12:05 +02:00
• abcc762387 version bump to 5.0.2dr1 Andreas Steffen 2012-10-11 09:21:38 +02:00
• 6ab1502519 implemented os_info_t class Andreas Steffen 2012-10-10 21:54:05 +02:00
• 7f3bf2b12f Remove outdated TODO information Martin Willi 2012-10-10 13:10:28 +02:00
• 7174a0a527 implemented IETF String Version attribute Andreas Steffen 2012-10-10 12:30:18 +02:00
• 7d202f56b9 restrict package name and package version number fields to 255 octets Andreas Steffen 2012-10-10 09:03:11 +02:00
• e9f47ee2d5 created OS IMC/IMV pair Andreas Steffen 2012-10-09 23:58:17 +02:00
• 49f0f7e7ca implemented IETF Installed Packages attribute Andreas Steffen 2012-10-09 23:28:15 +02:00
• 219d638db9 fixed PA-TNC error code to Invalid Parameter Andreas Steffen 2012-10-09 23:22:03 +02:00
• 190d6fc37a check for zero product vendor ID and non-zero product ID Andreas Steffen 2012-10-09 20:07:51 +02:00
• 7207793d57 cosmetics Andreas Steffen 2012-10-09 20:06:55 +02:00
• a9876799d2 cosmetics Andreas Steffen 2012-10-08 19:17:13 +02:00
• 82f3549fe2 Fix leak of PINs from ipsec.secrets Martin Willi 2012-10-04 14:45:10 +02:00
• f4263eaef6 list multiple files with a given basename but different path names Andreas Steffen 2012-10-08 18:56:22 +02:00
• 7f5675c8e5 check length of hex-encoded IV Andreas Steffen 2012-10-07 17:07:35 +02:00
• 41d344e8ea allow has_noskip_flag to contain TRUE_OR_FALSE Andreas Steffen 2012-10-07 16:26:02 +02:00
• 570402217c free entry in error case Andreas Steffen 2012-10-07 14:08:49 +02:00
• cd198f48f2 test first and up in the outer while loop Andreas Steffen 2012-10-07 12:46:19 +02:00
• 353938e614 fixed generation of PA-TNC error messages Andreas Steffen 2012-10-07 11:37:30 +02:00
• e6a58e5d5d added some new SHA-512 OIDs Andreas Steffen 2012-10-03 15:33:56 +02:00
• 565bfc08c6 Add a libfast sendfile() method to send files from disk Martin Willi 2012-10-02 15:37:36 +02:00
• 9564f9eb6e Include all dev headers, even if they are configuration specific Martin Willi 2012-10-02 11:38:42 +02:00
• c8697a7170 version bump to 5.0.1 Andreas Steffen 2012-10-02 10:39:43 +02:00
• 48651d8d02 Ensure UNSUPPORTED_CRITICAL_PAYLOAD notify contains correct payload type Tobias Brunner 2012-09-28 22:31:06 +02:00
• 31cc325fce Make sure hasher exists before trying to destroy it Tobias Brunner 2012-09-28 20:57:12 +02:00
• 2a43350334 Missed one in 6c10cece Tobias Brunner 2012-09-28 20:55:40 +02:00
• 6da1ada3b3 Missed one in 3dcffed6 Tobias Brunner 2012-09-28 20:50:09 +02:00
• 91a8dc2dec Fixed RNG crypto tester Tobias Brunner 2012-09-28 19:13:40 +02:00
• 3973ffa4f6 Request is never NULL when responding with an INFORMATIONAL message Tobias Brunner 2012-09-28 19:10:03 +02:00