Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 9181784fb1 Fixed check for rng in session ID creation of libfast Tobias Brunner 2012-09-28 19:07:53 +02:00
• 6c10cecebf Completed state handling in isakmp_cert_pre Tobias Brunner 2012-09-28 19:01:09 +02:00
• 9ff9c3d11b Added missing break statements in NAT-T mapping handling in PF_KEY plugin Tobias Brunner 2012-09-28 18:57:56 +02:00
• 1407a0026f Added missing break when building TLS cipher suites Tobias Brunner 2012-09-28 18:55:40 +02:00
• a37ac3a47a Make sure we successfully opened xfrm_acq_expires Tobias Brunner 2012-09-28 18:54:28 +02:00
• a13c6a900e Added missing continue statement in ha socket error handling Tobias Brunner 2012-09-28 18:52:00 +02:00
• 0273245877 Fixed snprintf check in tnc-ifmap plugin Tobias Brunner 2012-09-28 18:49:16 +02:00
• 1b1d1d938f Make static analyzers happy when parsing hosts from sockaddr_t Tobias Brunner 2012-09-28 18:35:26 +02:00
• 6ffb8f8634 Clarified code when hashing/comparing cached policies in kernel-netlink Tobias Brunner 2012-09-28 18:30:16 +02:00
• 8b0dce08f2 Avoid overrunning array when registering pki command line options Tobias Brunner 2012-09-28 18:22:54 +02:00
• 911e3156a0 Use %x to print uint32 as long ints are 64-bit long on x64 Linux Tobias Brunner 2012-09-28 18:09:08 +02:00
• a05f3b2021 Make sure first argument is an int when using %.*s to print e.g. chunks Tobias Brunner 2012-09-28 18:01:49 +02:00
• 4bc24ba794 Avoid memory leak when sending RADIUS accounting start message failed Tobias Brunner 2012-09-28 17:43:02 +02:00
• 53ab3c27cd Ensure that pipe is closed when calling resolvconf(8) Tobias Brunner 2012-09-28 17:33:24 +02:00
• a067dfbb2c Avoid memory leak when failing to read file metadata Tobias Brunner 2012-09-28 17:10:19 +02:00
• 3dcffed682 The this->data member is never NULL Tobias Brunner 2012-09-28 17:08:16 +02:00
• 9a1ba213f4 Use proper argument for sizeof when copying replay state Tobias Brunner 2012-09-28 17:00:20 +02:00
• bef21bd330 Algorithm names are not always static anymore, avoid string overflows Tobias Brunner 2012-09-28 16:42:50 +02:00
• f3d98a6b78 Correctly initialize payload length of encrypted payload Tobias Brunner 2012-09-28 16:30:26 +02:00
• 9f22002706 The eap argument of send_response is never NULL Tobias Brunner 2012-09-28 16:16:33 +02:00
• 9d5b688a11 Properly initialize sockaddr_in struct in fast and dhcp plugins Tobias Brunner 2012-09-28 16:03:09 +02:00
• 0031bf3eaf Properly initialize ima flag when adding file measurements Tobias Brunner 2012-09-28 15:51:39 +02:00
• 3f0eb04a04 Properly initialize chunk for PCR value in case of errors Tobias Brunner 2012-09-28 15:49:19 +02:00
• 24aa55867e Initialize g and p in create_dh factory method Tobias Brunner 2012-09-28 15:48:09 +02:00
• 10b116aa13 Properly initialize chunk for extension OID when parsing CRLs Tobias Brunner 2012-09-28 15:39:37 +02:00
• 43e0cb6519 Fix parsing of IPv6 headers in ip_packet_t Tobias Brunner 2012-09-28 15:15:07 +02:00
• 9fa335cb1b Properly cleanup varargs in LDAP fetcher's set_option() Tobias Brunner 2012-09-28 15:13:17 +02:00
• b5835ee530 Properly cleanup varargs in enumerators of both SQL backends Tobias Brunner 2012-09-28 15:10:29 +02:00
• a79af394a0 Allow replay windows smaller than the default of 32 Tobias Brunner 2012-09-27 12:25:43 +02:00
• 9845391a95 Properly initialize cached address map in kernel-pfroute plugin Tobias Brunner 2012-09-27 12:42:48 +02:00
• 45178362c8 Clarified error message if enabling UDP decapsulation fails Tobias Brunner 2012-09-27 10:49:17 +02:00
• bfd2cc1cd7 Fixed compilation of kernel-pfroute plugin Tobias Brunner 2012-09-27 09:03:04 +02:00
• 358104a47f Added description for flush_auth_cfg and acct_port plus some minor editorial changes Tobias Brunner 2012-09-25 12:22:05 +02:00
• 2d39f79b9b IKE_AUTH_LIFETIME task is not defined if IKEv2 is disabled Tobias Brunner 2012-09-25 09:31:47 +02:00
• 012d7382b0 New Android release after fixing private key issues on Jelly Bean Tobias Brunner 2012-09-24 17:13:23 +02:00
• 94106ddc85 android: Leak the private key reference on Jelly Bean to avoid a bug in the framework Tobias Brunner 2012-09-24 16:56:37 +02:00
• dfefa2f6dc android: Added a global variable to check the current SDK version Tobias Brunner 2012-09-24 16:54:38 +02:00
• 2e2feffb67 Don't check interface of inbound message if interfaces are not filtered Tobias Brunner 2012-09-23 09:14:26 +02:00
• 64595464b2 android: Load the private key and certificates separately in android_creds_t Tobias Brunner 2012-09-23 09:02:58 +02:00
• 406d680e45 android: Added a method to get the user's private key via JNI Tobias Brunner 2012-09-23 09:00:34 +02:00
• c35d468fb1 android: Added a JNI backed private key implementation Tobias Brunner 2012-09-23 08:58:37 +02:00
• 31990a19cc Documentation about some time values clarified Tobias Brunner 2012-09-24 16:02:03 +02:00
• e97602151a removed ikev2/dynamic-responder scenario Andreas Steffen 2012-09-22 17:50:50 +02:00
• f65ec0aa90 Make sure the if_name member of cached route entries is initialized to NULL Tobias Brunner 2012-09-22 08:23:56 +02:00
• 04bb739578 do not enable integrity and crypto tests in ikev1/rw-cert-unity scenario Andreas Steffen 2012-09-21 21:25:56 +02:00
• 4a025539ef NEWS about kernel interface changes Tobias Brunner 2012-09-21 08:41:41 +02:00
• e811cf152a Properly handle thread cancelation in rwlock_condvar_t Tobias Brunner 2012-09-21 07:58:37 +02:00
• bdf36dac71 Use an rwlock in kernel-pfroute too Tobias Brunner 2012-09-21 08:06:40 +02:00
• a25d536eea Use rwlock and rwlock_condvar to increase concurrency in kernel-netlink plugin Tobias Brunner 2012-09-20 18:21:42 +02:00
• 16d62305c2 Use a separate mutex for cached routes in kernel-netlink plugin Tobias Brunner 2012-09-20 18:06:01 +02:00
• 60dc44648f Added a condvar implementation that works with rwlock_t Tobias Brunner 2012-09-20 17:56:20 +02:00
• 4134108c77 Use a lock to safely check and update the time for the next roam event Tobias Brunner 2012-09-20 11:58:52 +02:00
• e8e9048fee Added an option to configure the interface on which virtual IP addresses are installed Tobias Brunner 2012-09-20 11:07:15 +02:00
• c6b401581a Changed how kernel-netlink handles virtual IP addresses Tobias Brunner 2012-09-19 19:10:23 +02:00
• 4106aea8e4 Made IP address enumeration more flexible Tobias Brunner 2012-09-17 19:04:51 +02:00
• 308ec0b7df Avoid calculating the hash if hashtable is empty Tobias Brunner 2012-09-21 08:49:59 +02:00
• 1f97e1aaca Use a hashtable to quickly check for usable IP addresses/interfaces Tobias Brunner 2012-09-17 18:09:51 +02:00
• 090c556ce8 Drop packets received on ignored interfaces Tobias Brunner 2012-09-14 16:43:54 +02:00
• 940e1b0f66 Filter ignored interfaces in kernel interfaces (for events, address enumeration, etc.) Tobias Brunner 2012-09-14 16:43:08 +02:00
• 645d7a5ef3 %any is never on a local interface Tobias Brunner 2012-09-14 16:30:06 +02:00
• e9a7779003 Avoid memset in is_anyaddr() Tobias Brunner 2012-09-14 16:14:57 +02:00
• 9ba36c0f7f Make it easy to check if an address is locally usable via changed get_interface() method Tobias Brunner 2012-09-14 16:27:33 +02:00
• aed33805ce Don't ignore loopback devices and allow addresses on them being enumerated Tobias Brunner 2012-09-14 15:03:09 +02:00
• 9513225e6b Added options and a lookup function that will allow filtering of network interfaces Tobias Brunner 2012-09-14 14:43:17 +02:00
• a2a28d90ac Make streq() and strcaseeq() static inline functions so they can be used as callbacks Tobias Brunner 2012-09-14 12:06:02 +02:00
• dad6d904ee Use source address in get_nexthop() call Tobias Brunner 2012-09-18 17:55:38 +02:00
• 662534657f Source address lookup refactored Tobias Brunner 2011-10-12 15:52:18 +02:00
• cef0a8118e Check routes with equal prefix if preferred source is specified Tobias Brunner 2011-09-30 17:41:01 +02:00
• 9d6b02d6c1 Try to find preferred source on interface if returned source does not match Tobias Brunner 2011-09-09 16:07:40 +02:00
• da6d86dd94 Try to keep the given source address when looking up routes Tobias Brunner 2011-09-01 11:33:13 +02:00
• 6676769e8c Make sure we propose a dynamic TS if we don't have hosts to derive a TS from Tobias Brunner 2012-09-21 18:13:42 +02:00
• 0d33f428d1 Move rw-eap-dynamic scenario to its proper location Tobias Brunner 2012-09-21 09:34:10 +02:00
• f0a2fef8a5 In mem_pool, check for an existing ID entry before creating a new one Martin Willi 2012-09-20 11:04:55 +02:00
• a69bc12a3a Merge branch 'unity' Martin Willi 2012-09-18 17:22:30 +02:00
• 995a9c8a0a Add a simple test case for the unity plugin, featuring both includes and excludes Martin Willi 2012-09-17 16:23:10 +02:00
• f728ae590b Build unity plugin in strongSwan test suite Martin Willi 2012-09-17 15:39:29 +02:00
• cc48f36084 Add unity plugin NEWS Martin Willi 2012-09-17 11:48:31 +02:00
• 55f126fd55 Update ipsec.conf.5, leftsubnet can handle multiple subnets in IKEv1 with Unity Martin Willi 2012-09-17 11:43:11 +02:00
• 77c37ea5e0 As Unity responder, don't change the proposed TS at all, racoon doesn't like that Martin Willi 2012-09-17 14:30:35 +02:00
• 336dd7a9c7 Don't complain about multiple TS in IKEv1, as it supported with Unity Martin Willi 2012-09-13 15:57:39 +02:00
• 7a7deec283 As initiator, narrow received Unity attributes to configured TS Martin Willi 2012-09-13 15:57:06 +02:00
• b8db3775f3 When using Unity, bump up remote TS as initiator to 0.0.0.0/0, too Martin Willi 2012-09-13 15:38:04 +02:00
• 284ed1b352 Enable Cisco Unity only if Unity vendor id received Martin Willi 2012-09-13 15:09:21 +02:00
• 6e60807637 Exchange 0.0.0.0/0 traffic selectors with Unity, narrowing after exchange Martin Willi 2012-07-24 13:23:48 +02:00
• f2463f1bd6 Add a Unity attribute provider that adds Split-Includes for TS Martin Willi 2012-07-24 12:21:25 +02:00
• e39e697429 Check if subset calculation actually yields a TS in Unity narrowing Martin Willi 2012-07-24 12:20:32 +02:00
• 92b5066705 Request Unity configuration attributes for IKEv1 only Martin Willi 2012-07-24 10:55:46 +02:00
• 5ff012f717 Add Cisco Unity client support for Split-Include and Local-LAN Martin Willi 2012-07-23 17:14:47 +02:00
• 56ea95195a Add a road-warrior test case requesting both an IPv4 and an IPv6 virtual address Martin Willi 2012-09-18 16:31:15 +02:00
• 7ee37114c9 Derive a dynamic TS to multiple virtual IPs Martin Willi 2012-09-18 12:46:36 +02:00
• abdb82fcc5 Use the vararg list constructor in quick mode task Martin Willi 2012-09-18 12:44:59 +02:00
• 5f9d62fb91 Add a linked list constructor taking items from a vararg list Martin Willi 2012-09-18 12:43:31 +02:00
• 8c19323c37 Make stroke user-creds work with XAuth configs Tobias Brunner 2012-09-18 16:56:17 +02:00
• 4e16d2e864 Fix Doxygen comment for proposal_keywords_t Tobias Brunner 2012-09-18 16:11:53 +02:00
• 4157a40b45 New Android release after fixing IDr problems Tobias Brunner 2012-09-18 15:29:29 +02:00
• af16b5afb0 Use random ports in NetworkManager backend Tobias Brunner 2012-09-18 14:57:05 +02:00
• 35e2afd459 Fix equality comparison of auth_cfg_t Tobias Brunner 2012-09-18 12:47:17 +02:00
• b7a500e985 Set AUTH_RULE_IDENTITY_LOOSE for rightid=%<identity> Tobias Brunner 2012-09-18 11:45:12 +02:00
• e6fcc172f8 Use AUTH_RULE_IDENTITY_LOOSE in NetworkManager backend Tobias Brunner 2012-09-18 14:39:45 +02:00
• e596d0ef1e android: Use AUTH_RULE_IDENTITY_LOOSE Tobias Brunner 2012-09-18 11:21:49 +02:00