Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 9f7e1899a9 Add methods to easily compare IPsec SAs Tobias Brunner 2012-07-13 11:21:25 +02:00
• f9b0c05475 Class representing an IPsec SA added Tobias Brunner 2012-07-13 11:06:35 +02:00
• 156f7e9b85 Moved types used by kernel_ipsec_t interface (and libipsec) to libstrongswan Tobias Brunner 2012-07-13 11:02:08 +02:00
• 053276e69a Use a CALLBACK feature to create charon's sender and receiver Tobias Brunner 2012-07-12 16:56:35 +02:00
• 2dde79aca6 Added a simple blocking queue around linked_list_t Tobias Brunner 2012-07-10 10:17:21 +02:00
• 05a2a7950c esp_packet_t implements packet_t interface Tobias Brunner 2012-07-07 13:31:07 +02:00
• ec486e9433 Extended constructor for packet_t added (takes src, dst and data) Tobias Brunner 2012-07-07 12:46:28 +02:00
• 5764a9b355 Moved packet_t to libstrongswan Tobias Brunner 2012-07-06 16:40:46 +02:00
• 3320b87a62 Headers from libhydra (kernel interface related) are required in libipsec Tobias Brunner 2012-07-05 15:46:54 +02:00
• 47eb8943b2 ESP packet wrapper added, handles encryption/decryption/verification etc. Tobias Brunner 2012-07-05 13:56:24 +02:00
• 64004973e3 Adding class to manage ESP context (crypto, sequence numbers) Tobias Brunner 2012-07-05 13:44:57 +02:00
• 6dfdcf420f Added a method to bio_writer_t that allows to skip a number of bytes Tobias Brunner 2012-06-29 10:47:20 +02:00
• 59a15a7475 Added a method to bio_writer_t that allows to extract the internal buffer Tobias Brunner 2012-06-29 10:12:27 +02:00
• c1830d2670 Added methods to bio_reader_t to read data from end of buffer Tobias Brunner 2012-06-28 18:06:31 +02:00
• f3fefb1847 Increase log verbosity when sending NAT keep-alives Tobias Brunner 2012-06-28 14:32:52 +02:00
• 6d11dd5770 Only log the sending of regular packets in sender_t Tobias Brunner 2012-06-27 13:43:37 +02:00
• 6fbf4472ea Added option to prevent socket-default from setting the source address on outbound packets Tobias Brunner 2012-08-08 15:39:07 +02:00
• 95dacbbc70 Allocate UDP ports randomly in Android NDK build. Tobias Brunner 2012-04-20 15:16:51 +02:00
• 224ab4c59b socket-default plugin allocates random ports if configured to 0. Tobias Brunner 2012-04-20 14:58:02 +02:00
• b223d517c8 Replaced usages of CHARON_*_PORT with calls to get_port(). Tobias Brunner 2012-04-20 10:59:14 +02:00
• a7babe25ee Added get_port() method to socket_t to learn the listening port. Tobias Brunner 2012-04-20 10:38:31 +02:00
• 56d07af3be Added ESP log group for libipsec log messages. Tobias Brunner 2012-03-28 15:41:31 +02:00
• 75f8316332 Use send_no_marker to send NAT keepalives. Tobias Brunner 2012-02-24 13:09:09 +01:00
• 30dc7dff4d Avoid double-free when prepending Non-ESP marker. Tobias Brunner 2012-02-24 13:04:16 +01:00
• fb6c52adcd Function added to send packets without Non-ESP marker. Tobias Brunner 2012-02-24 13:01:51 +01:00
• fe4a152b85 Avoid unnecessary copy of packet data when removing Non-ESP marker. Tobias Brunner 2012-02-24 11:44:05 +01:00
• 73470cfe57 Added packet_t.skip_bytes method to skip bytes at the start of a packet. Tobias Brunner 2012-02-24 11:42:32 +01:00
• 896941d365 Improved how NAT-T keepalives are handled in sockets/receiver. Tobias Brunner 2012-02-24 11:19:53 +01:00
• e49abcede0 Let kernel interfaces decide how to enable UDP decapsulation of ESP packets. Tobias Brunner 2012-02-24 11:07:34 +01:00
• 08b2ce7aa7 Callback for ESP packets added to receiver. Tobias Brunner 2012-02-23 15:36:02 +01:00
• 064da8b96b Add Non-ESP marker in sender and not individual socket plugins. Tobias Brunner 2012-02-23 11:51:53 +01:00
• 65da43e2fc Handle Non-ESP marker in receiver and not individual socket plugins. Tobias Brunner 2012-02-23 11:35:16 +01:00
• a405760395 Java code style fixed (analogous to C code). Tobias Brunner 2012-02-22 15:36:51 +01:00
• 06ed785e5a Load libipsec in Android app. Tobias Brunner 2012-02-22 15:36:33 +01:00
• b70139fbfd Stub library for user space IPsec implementation added. Tobias Brunner 2012-02-22 15:32:37 +01:00
• 48f2c4b69b Some NDK build info updated. Tobias Brunner 2012-02-22 12:05:38 +01:00
• 9ddc7cbfff Changed minimal SDK/API level to 14. Tobias Brunner 2012-02-22 11:40:43 +01:00
• 4a20814300 Added android.net.VpnService wrapper around charon (loaded via JNI). Tobias Brunner 2012-02-17 17:16:07 +01:00
• da848ab894 Added Android shell app created with Android SDK. Tobias Brunner 2012-02-17 16:59:23 +01:00
• 2f203aee0e Android.mk for NDK build added. Tobias Brunner 2012-02-17 15:40:57 +01:00
• 3fa8d7738e Extracted some parts from Android.mk.in which can be used for NDK builds. Tobias Brunner 2012-02-17 15:39:25 +01:00
• 80b267f9e3 Use filter instead of findstring to check for enabled plugins in Android.mk. Tobias Brunner 2012-02-16 18:41:10 +01:00
• 162621ed57 Moved Android specific logger to separate plugin. Tobias Brunner 2012-02-16 18:17:09 +01:00
• 657a3ba609 Link android plugin against liblog in the NDK. Tobias Brunner 2012-02-16 17:13:37 +01:00
• e7ea057fd2 Make the UDP ports charon listens for packets on (and uses as source ports) configurable. Tobias Brunner 2012-02-13 18:04:04 +01:00
• 73940eb712 Make path to Android OpenSSL headers configurable. Tobias Brunner 2012-02-10 14:51:18 +01:00
• 4528e74a5c Don't require STRONGSWAN_CONF to be defined. Tobias Brunner 2012-02-10 14:16:54 +01:00
• a9f169f699 Don't require PLUGINDIR to be defined. Tobias Brunner 2012-02-10 14:11:19 +01:00
• 4e98ca1800 Remove queued IKEv1 message before processing it Martin Willi 2012-08-08 14:54:03 +02:00
• 6204c1182d Include src address in hash of initial message for Main Mode Tobias Brunner 2012-08-02 16:16:58 +02:00
• fa1baac315 implemented deletion of product_file database entries Andreas Steffen 2012-08-07 15:05:59 +02:00
• 9c2f08860d Add DH group 15 (MODP-3072) to IKE proposal Adrian-Ken Rueegsegger 2012-08-06 11:12:25 +02:00
• 7c6d6b0d89 PEM loading soft-depends on MD5 only, as unencrypted files don't need MD5 Martin Willi 2012-08-03 15:25:17 +02:00
• bd28543512 Rebuild charon after running ./configure to reflect plugin changes Martin Willi 2012-08-03 13:11:45 +02:00
• 764035d515 Block XAuth transaction on established IKE_SAs, but allow Mode Config Martin Willi 2012-08-03 13:07:19 +02:00
• decc467a4f Implemented recursive mutex without thread-specific counter Tobias Brunner 2012-08-03 11:23:17 +02:00
• 920f29e7d5 Use a single thread-specific value for our custom rwlock_t implementation Tobias Brunner 2012-08-03 10:47:33 +02:00
• f02a305569 Fix linking of addrblock plugin when building monolithic Martin Willi 2012-08-03 10:50:21 +02:00
• 394b9f6b65 Reject initial exchange messages early once IKE_SA is established Martin Willi 2012-08-02 12:50:31 +02:00
• 804d702b0a Add some more NEWS about 5.0.1 Martin Willi 2012-08-02 12:23:59 +02:00
• 11d6bc3eb0 Move MODP_CUSTOM va_arg fetching out of loop Martin Willi 2012-08-02 12:06:51 +02:00
• ecfd714c78 updated NEWS Andreas Steffen 2012-07-31 17:25:07 +02:00
• 3e7565eee0 libimcv requires nonce plugin Andreas Steffen 2012-07-31 16:46:40 +02:00
• f701ba8389 Lookup IKEv1 PSK even if the peer identity is not known Martin Willi 2012-07-31 13:41:59 +02:00
• 6ff1d5bb32 update state before handling status Andreas Steffen 2012-07-30 23:19:25 +02:00
• af8354da1a implemented support if functional sub-components Andreas Steffen 2012-07-30 20:48:05 +02:00
• e0c66bebcf extended and documented ipsec attest Andreas Steffen 2012-07-30 20:44:15 +02:00
• 63ac6d00b0 Proper fallback if capability dropping is not available Tobias Brunner 2012-07-27 14:45:15 +02:00
• 8ff1094823 The use of $< in Makefiles is not portable Tobias Brunner 2012-07-27 13:39:18 +02:00
• d511a71daa Include stdint.h for UINTxx_MAX defines Tobias Brunner 2012-07-27 11:36:59 +02:00
• df0f88a4b3 measure all kernel modules and optimize firefox and thunderbird measurements Andreas Steffen 2012-07-27 11:47:09 +02:00
• 9e99d2c378 with --relative --file do not insert absolute filenames into database Andreas Steffen 2012-07-27 11:45:56 +02:00
• 777bcdc0d5 Don't include acquiring packet traffic selectors in IKEv1 Martin Willi 2012-07-26 15:45:49 +02:00
• 8b560a4565 Implement late peer config switching after XAuth authentication Martin Willi 2012-07-26 15:02:37 +02:00
• 40ca05cff8 Check if XAuth round complies to configured authentication round Martin Willi 2012-07-26 12:40:27 +02:00
• 6a8786b55f Show which group would be required when failing in constraint check Martin Willi 2012-07-26 12:39:53 +02:00
• 874f7c7e2c Don't add ANY identity constraint to auth config, as XAuth rounds don't use one Martin Willi 2012-07-26 12:38:34 +02:00
• 9191946a63 Merge auth config items added from XAuth backends to IKE_SA Martin Willi 2012-07-26 12:07:48 +02:00
• 46df61dff7 Add an ipsec.conf leftgroups2 parameter for the second authentication round Martin Willi 2012-07-26 11:49:46 +02:00
• 15f78beb0f IMA SHA1 file measurement is not needed any more Andreas Steffen 2012-07-23 22:19:20 +02:00
• 327dcf96db fixed typo Andreas Steffen 2012-07-23 22:17:53 +02:00
• 81419807f5 Release leaking child config after uninstalling shunt policy Martin Willi 2012-07-23 17:13:20 +02:00
• e6b01ce42d moved PA-TNC message logging to level 1 Andreas Steffen 2012-07-23 13:04:28 +02:00
• ab957aacce transport IMA file info via PTS Component Evidence Policy URI Andreas Steffen 2012-07-23 12:51:37 +02:00
• 838f683cde ipsec attest now deletes file hashes Andreas Steffen 2012-07-22 09:29:39 +02:00
• 2c9a833b7a buffer PA-TNC attributes until Generate Attestation Evidence attribute is received Andreas Steffen 2012-07-21 16:43:24 +02:00
• 6f46681a48 allow --rel as an abbreviation for --relative Andreas Steffen 2012-07-21 15:58:08 +02:00
• 4c02086241 moved all shadow PCR stuff to the pts_pcr class Andreas Steffen 2012-07-21 15:56:39 +02:00
• 3b7468b245 Support Unity split-include/exclude options in attr plugin Martin Willi 2012-07-20 16:14:29 +02:00
• 73514b3217 Don't print hexdumps on loglevel 1 if hash verification fails Martin Willi 2012-07-19 14:48:37 +02:00
• 5a6c18853e created a pts_pcr class for PCR computations Andreas Steffen 2012-07-20 14:57:28 +02:00
• cfa69fce13 renamed build_database.sh to build-database.sh Andreas Steffen 2012-07-20 14:04:16 +02:00
• f524725474 why the hell do firefox, thunderbird and acroread their own Linux libraries? Andreas Steffen 2012-07-19 18:27:08 +02:00
• eb1b380a1c Add a libstrongswan-dev debian package with development headers Martin Willi 2012-07-19 08:28:07 +02:00
• 328447acd5 Pass CC/CFLAGS to ./configure, not to make, adding -include config.h Martin Willi 2012-07-19 08:44:55 +02:00
• 5084c13f6d Upgraded our Debian package to 5.0 Martin Willi 2012-07-03 10:59:05 +02:00
• 0ffd766c0a added some multiply defined libraries Andreas Steffen 2012-07-19 13:49:20 +02:00
• 214097e804 queries with relative filenames might return multiple results Andreas Steffen 2012-07-19 13:48:32 +02:00
• 96e8ba0f78 updated build_database.sh Andreas Steffen 2012-07-18 22:00:58 +02:00
• 2f341c540d added index to files table Andreas Steffen 2012-07-18 22:00:35 +02:00