Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 0f236aacb5 ipsec attest now can measure all files in a directory Andreas Steffen 2012-07-16 09:53:32 +02:00
• 12ef9fb1b5 moved listing of file measurements to pts_file_meas Andreas Steffen 2012-07-13 22:15:13 +02:00
• d7a8333c54 moved to debug level 3 Andreas Steffen 2012-07-13 21:25:43 +02:00
• d5962b874f Compilation error fixed if dladdr is not available Tobias Brunner 2012-07-14 11:43:40 +02:00
• d19f0ae3e0 Don't modify the message string passed to logger, as it gets reused Martin Willi 2012-07-13 15:42:14 +02:00
• e0bfc4d63c transfer IMA file measurements via PA-TNC Andreas Steffen 2012-07-13 14:46:36 +02:00
• ecfdce8cb6 some more copyright updates Andreas Steffen 2012-07-13 12:13:48 +02:00
• d35e45b939 Invoke autoheader after libtool/aclocal to work on up-to-date data Martin Willi 2012-07-13 13:43:38 +02:00
• 40ae0feeb1 Silence cast warning on 32-bit platforms Martin Willi 2012-07-13 13:43:16 +02:00
• 0e3c697c05 Don't set BFD_DECOMPRESS when building against older binutils Martin Willi 2012-07-13 13:42:31 +02:00
• c6343cf0ad Log to a malloc()ed buffer if the on-stack buffer is not large enough Martin Willi 2012-07-13 13:21:07 +02:00
• 060555f082 Append directly to base string in vstr printf hooks Martin Willi 2012-07-13 12:12:24 +02:00
• 4addc415a5 Write directly to FILE stream in glibc printf hooks Martin Willi 2012-07-13 11:46:39 +02:00
• 1b40b74de0 Pass opaque data to printf hooks and print_in_hook() Martin Willi 2012-07-13 11:38:29 +02:00
• 549eba30ab Increase leak detective backtrace depth by a frame Martin Willi 2012-07-12 09:27:20 +02:00
• 6499354e4a Don't access tail magic when reallocating invalid memory, as it would crash Martin Willi 2012-07-12 09:26:33 +02:00
• 4c6c934635 With --enable-bfd-backtraces, use binutils libbfd to resolve backtraces Martin Willi 2012-07-11 17:37:09 +02:00
• b46776aea1 Add an external method to disable leak detective temporarly Martin Willi 2012-07-11 17:08:30 +02:00
• 893c3a4ead Simplify NAT-D payload creation if UDP encapsulation is forced Tobias Brunner 2012-07-13 11:13:43 +02:00
• be735f0148 added PA-TNC max_msg_len option to man page Andreas Steffen 2012-07-13 11:02:23 +02:00
• 22e97e4f1f updated Copyright info Andreas Steffen 2012-07-13 10:42:40 +02:00
• dea7d74557 wait for the finalization of the Functional Component measurements Andreas Steffen 2012-07-13 10:06:43 +02:00
• a845e4ebc5 restrict PA-TNC message siz only if upper limit is defined Andreas Steffen 2012-07-12 22:18:24 +02:00
• baa6a292cf a curly bracket got lost Andreas Steffen 2012-07-12 21:19:55 +02:00
• 4f7b2d7a6d destroy oversized attributes Andreas Steffen 2012-07-12 21:17:28 +02:00
• 8ef43d8786 prevent endless loop with oversize attributes Andreas Steffen 2012-07-12 21:14:21 +02:00
• 968c83cdeb restrict PA-TNC messages to maximum size Andreas Steffen 2012-07-12 20:01:32 +02:00
• c5d2e61802 refactored PA-TNC attribute error handling Andreas Steffen 2012-07-12 13:39:27 +02:00
• b6e23b24f3 fixed memory leak in the IETF standard error handling Andreas Steffen 2012-07-12 13:38:44 +02:00
• ea67a75b98 static upper size limit for PA-TNC messages Andreas Steffen 2012-07-12 12:49:49 +02:00
• 8d98f7fef6 Avoid that any % characters (e.g. in %any) are evaluated when logging via stroke Tobias Brunner 2012-07-12 16:58:00 +02:00
• d15975c7f2 Added PLUGIN_NOOP to separate PLUGIN_PROVIDE from previous CALLBACK/REGISTER entries Tobias Brunner 2012-07-12 16:52:01 +02:00
• c0b1fc7f8b Android.mk of libstrongswan adapted to config.h changes Tobias Brunner 2012-07-12 09:56:44 +02:00
• 2b19dd3502 Properly cleanup thread-local values for the threads destroying thread_value_t objects Tobias Brunner 2012-07-12 09:34:56 +02:00
• bbe5b50567 Set a sane default if --with-dev-headers is given without path Martin Willi 2012-07-12 08:39:54 +02:00
• 3f6392bc14 fixed a memory leak in imc|imv_agent Andreas Steffen 2012-07-12 00:03:24 +02:00
• 246c9ad831 imc/imv->send_message() uses attr_list Andreas Steffen 2012-07-11 23:34:51 +02:00
• c9c3da66a8 removed unused variables Andreas Steffen 2012-07-11 23:15:44 +02:00
• d4cf9cdf28 fixed libstrongswan/Makefile.am Andreas Steffen 2012-07-11 23:13:55 +02:00
• a24f83e97a Use "-include config.h" when building ruby dumm extension Martin Willi 2012-07-11 18:06:37 +02:00
• ccceb82662 version bump to 5.0.1dr1 Andreas Steffen 2012-07-11 17:46:45 +02:00
• c56667f1db fixed logging of unsupported TNCCS version Andreas Steffen 2012-07-11 13:13:12 +02:00
• 1de4af66d5 PB-TNC Client sends empty CLOSE batch only in DECIDED state Andreas Steffen 2012-07-11 13:06:36 +02:00
• a287a3cdcd have_recommendation() accepts NULL arguments Andreas Steffen 2012-07-11 13:02:19 +02:00
• b8b678a567 send empty SDATA batch if no recommendation is available yet, but in order to avoid loops only if no empty CDATA batch was received Andreas Steffen 2012-07-11 12:21:29 +02:00
• a5c79d0175 moved batch size calculation into pb_tnc_batch_t Andreas Steffen 2012-07-11 10:00:48 +02:00
• d7dcbc95a9 make maximum PB-TNC batch size configurable Andreas Steffen 2012-07-11 09:23:45 +02:00
• 3a16bec8f9 limit the size of a PB-TNC batch to the maximum EAP-TNC packet size Andreas Steffen 2012-07-10 22:51:49 +02:00
• 6067233193 remove pluto logging Andreas Steffen 2012-07-10 00:23:14 +02:00
• 6245edf37e eliminate message length field in EAP-TNC Andreas Steffen 2012-07-09 22:08:04 +02:00
• c8aabefd08 added charon.plugins.eap-tnc.protocol option Andreas Steffen 2012-07-09 21:04:13 +02:00
• a04c51aea9 due to single fragment, total length does not have to be included Andreas Steffen 2012-07-09 20:58:51 +02:00
• 4492ffc907 EAP-TNC does not support fragmentation Andreas Steffen 2012-07-09 20:56:19 +02:00
• c36680962c allow to transmit 64k TLS Handshake and Application messages via EAP-[T]TLS Andreas Steffen 2012-07-09 18:07:18 +02:00
• dfe82160e4 some tls_eap optimizations Andreas Steffen 2012-07-09 15:04:00 +02:00
• 87efdef35b configure size of ITA Dummy PA-TNC attribute Andreas Steffen 2012-07-09 09:53:22 +02:00
• 3bd452f8f3 max_message_count = 0 disables limit Andreas Steffen 2012-07-09 09:47:18 +02:00
• 22f9174609 defined ITA Dummy PA-TNC attribute for test purposes Andreas Steffen 2012-07-08 07:38:35 +02:00
• ee200bab61 use TSS_PCRS_STRUCT_DEFAULT Andreas Steffen 2012-07-08 07:37:04 +02:00
• da67c37d65 log invalid TLS packet length Andreas Steffen 2012-07-08 07:35:01 +02:00
• 5b35214a87 check boot_aggregate value Andreas Steffen 2012-07-05 19:15:28 +02:00
• ddafcda4d8 refactored PTS functional component measurements Andreas Steffen 2012-07-05 13:34:34 +02:00
• b188f23199 Install dev headers only if --with-dev-headers= option is set Martin Willi 2012-07-11 11:16:31 +02:00
• 2a6bcbbdee Install libtls development headers Martin Willi 2012-07-11 10:51:01 +02:00
• f1292d9d24 Install libfast development headers Martin Willi 2012-07-11 10:41:47 +02:00
• 980ca1f773 Define CONFIG_H_INCLUDED in Android build Martin Willi 2012-07-11 10:00:27 +02:00
• 4c311ffb1f Check if config.h passed correctly via gcc -include Martin Willi 2012-07-04 14:53:21 +02:00
• 7115448529 Install libstrongswan development headers Martin Willi 2012-07-03 17:27:46 +02:00
• 7300eb29d1 Use and install a config.h AC_CONFIG_HEADER that contains all AC_DEFINE results Martin Willi 2012-07-03 16:45:12 +02:00
• a4037686c7 Added a description to all AC_DEFINE macros, as required by autoheader Martin Willi 2012-07-03 16:40:26 +02:00
• 7c8b9fcbf6 Add safe_strerror() to leak detective whitelist Martin Willi 2012-07-11 08:45:15 +02:00
• 07836f559d Send cert request based on peers configured authentication class Martin Willi 2012-07-10 17:15:28 +02:00
• dfd34c5a77 Add an option to disable libstrongswan certificate caching Martin Willi 2012-07-09 19:03:10 +02:00
• ee7b7de18f getpwnam_r and getgrnam_r are not supported by the Android NDK Tobias Brunner 2012-07-09 17:49:18 +02:00
• 7399119e58 Android.mk of libstrongswan updated Tobias Brunner 2012-07-09 16:50:17 +02:00
• 3128e7fa7c Don't send CERTREQs when initiating aggressive mode PSK Martin Willi 2012-07-09 12:05:23 +02:00
• 4f07a19d10 Fixed help text for --disable-xauth-generic plugin Tobias Brunner 2012-07-02 12:49:29 +02:00
• 0619ddfaa4 Refactored heavily #ifdefd capability code to its own libstrongswan class Martin Willi 2012-07-03 13:07:24 +02:00
• 644c6c968d Use spin locks to update IKE_SAs in controller_t Tobias Brunner 2012-07-04 09:11:13 +02:00
• 12fa85c664 Added wrapper for POSIX spin locks Tobias Brunner 2012-07-04 09:07:20 +02:00
• c9355ea4a0 Fixed job handling in controller_t Tobias Brunner 2012-07-03 11:30:00 +02:00
• ce938e5cfa Add charon-nm to .gitignore Martin Willi 2012-07-03 17:41:14 +02:00
• 3e0fe9f13e Default to register_printf_specifier() if no printf hooking #defined Martin Willi 2012-07-02 18:00:33 +02:00
• 901dbc1077 openssl: Ensure the thread ID is never zero Tobias Brunner 2012-06-30 10:05:41 +02:00
• 997fdd1f02 Accept non-"/0" subnet sizes for traffic selectors starting at 0.0.0.0 Martin Willi 2012-07-02 17:25:26 +02:00
• b8d4cd294b Update our network-manager-strongswan/debian to what is actually used downstream Martin Willi 2012-07-02 10:18:59 +02:00
• 1e5634c9b3 remove virtual IP for moon's inner interface Andreas Steffen 2012-06-29 23:20:32 +02:00
• a60e92a2c8 Added GPL header to AndroidConfigLocal.h Tobias Brunner 2012-06-29 16:08:17 +02:00
• f3af4969a7 Added GPL header to scripts Tobias Brunner 2012-06-29 16:07:10 +02:00
• 1a06ba1849 Added LICENSE file to the distribution Tobias Brunner 2012-06-29 15:23:46 +02:00
• f59240e9ae Added OpenSSL/GPL exception to LICENSE file Tobias Brunner 2012-06-29 15:20:23 +02:00
• e516068965 Removed superfluous remove_hasher() call in md5 plugin Tobias Brunner 2012-06-29 16:22:41 +02:00
• d12635c77d Pass "lo" as faked tundev to NM, as it now needs a valid interface since 0.9 Martin Willi 2012-06-29 15:21:57 +02:00
• 9d2968e272 As a responder, don't start a TRANSACTION request if we expect one from the initiator Martin Willi 2012-06-29 13:40:05 +02:00
• 4271838f9c an IKE daemon needs these plugins but a PDP doesn't Andreas Steffen 2012-06-29 06:24:02 +02:00
• 36df6113fa added Ubuntu 12.04 LTS i686 measurements Andreas Steffen 2012-06-28 22:20:44 +02:00
• 5f451f2d6a IMCs and IMVs might depend on X.509 certificates or trusted public keys Andreas Steffen 2012-06-28 17:55:02 +02:00
• 1c959e4479 added ikev1/virtual-ip scenario Andreas Steffen 2012-06-28 14:52:07 +02:00
• 5a86589d0c corrected description of ikev1/ip-pool-db scenario Andreas Steffen 2012-06-28 14:44:10 +02:00
• 5c0d1bccb0 corrected description of ikev1/ip-pool scenario Andreas Steffen 2012-06-28 14:42:34 +02:00