Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• e4ae891983 updated tnc-pdp plugin for 5.0.0 Andreas Steffen 2012-05-02 22:53:45 +02:00
• 6c5873d448 updated testing.conf for 5.0.0 Andreas Steffen 2012-05-02 22:53:11 +02:00
• 9fc69a0c81 two new options for 5.0.0 UML testing Andreas Steffen 2012-05-02 21:13:14 +02:00
• ed7186cbe1 NEWS about route reinstallation added. Tobias Brunner 2012-02-01 16:02:33 +01:00
• bc798c9ce8 Route reinstallation in kernel_ipsec_t implementations is not needed anymore. Tobias Brunner 2011-12-20 15:01:06 +01:00
• f834249c59 Reinstall routes in kernel-netlink plugin, if interfaces get reactivated or IPs reappear. Tobias Brunner 2011-12-20 14:59:21 +01:00
• 74ba22c992 Keep track of installed source routes in kernel-netlink plugin. Tobias Brunner 2011-12-20 14:30:10 +01:00
• d55c240474 NEWS about bus_t refactorings added. Tobias Brunner 2012-02-01 16:23:47 +01:00
• ead92870b8 Loggers specify what log messages they want to receive during registration. Tobias Brunner 2012-01-23 13:51:21 +01:00
• d724fcd624 Ensure that multi-line log messages are not torn apart. Tobias Brunner 2012-01-23 13:38:48 +01:00
• 4d21000cf7 Added recursive read_lock support to our own implementation of rwlock_t. Tobias Brunner 2012-01-21 16:11:28 +01:00
• 0e474f9148 Use a separate interface for loggers. Tobias Brunner 2012-01-21 14:47:13 +01:00
• f9f867899a Use a separate list and mutex for loggers. Tobias Brunner 2011-12-29 19:13:08 +01:00
• ecb5abd7fa Fixed return value of controller_t functions if callback returns FALSE. Tobias Brunner 2011-12-22 13:54:30 +01:00
• 052e0a17b8 Use wrapped semaphore in callback_job_t. Tobias Brunner 2011-12-22 10:59:47 +01:00
• aac20ec784 Removed remaining parts of controller_t.listen() implementation. Tobias Brunner 2011-12-22 10:47:44 +01:00
• a629513961 Remove obsolete bus_t.listen() method. Tobias Brunner 2011-12-21 18:27:10 +01:00
• 5a073784e2 Implement wait_for_listener in controller_t with semaphores. Tobias Brunner 2011-12-21 18:23:56 +01:00
• 8f6c13271c Added a wrapper class around POSIX semaphores. Tobias Brunner 2011-12-21 18:22:23 +01:00
• b6e9c41861 Implement bus_t.listen() directly in controller_t (the only user). Tobias Brunner 2011-12-21 17:15:33 +01:00
• daab152afa Add plugin features support to stroke plugin Martin Willi 2012-03-01 17:07:08 +01:00
• 0c7af2ce27 Certificate decoding soft-depends on public key decoding of specific types Martin Willi 2012-02-29 16:09:11 +01:00
• 4b5e637472 PEM loading plugin features depend on the same feature, they are helpers only Martin Willi 2012-02-29 16:08:07 +01:00
• f14bf6345f Don't depend on a feature that has a dependency to the same feauture during unload Martin Willi 2012-02-29 16:07:16 +01:00
• b24be29646 Merge branch 'ikev1' Martin Willi 2012-05-02 11:12:31 +02:00
• f99d8b10c9 Added a dedicated sender flush method, delay sender destruction until users gone Martin Willi 2012-05-02 09:03:23 +02:00
• 13de38e354 Documented strongswan.conf options for radattr plugin. Tobias Brunner 2012-05-01 13:32:43 +02:00
• 552557a65d add AUTH_RULE_SUBJECT_CERT for raw public keys Andreas Steffen 2012-04-30 13:40:48 +02:00
• 6704d69f91 added missing whitespace Andreas Steffen 2012-04-30 11:42:09 +02:00
• 88206458ce Properly initialize optional subject in PEM builder. Tobias Brunner 2012-04-30 10:48:57 +02:00
• 00d79edc20 Typo fixed. Tobias Brunner 2012-04-30 10:47:42 +02:00
• 501c163859 version bump to 4.6.3 Andreas Steffen 2012-04-30 09:48:21 +02:00
• 3577ec76a5 output validity of raw public key if available Andreas Steffen 2012-04-30 09:47:34 +02:00
• fe23d9aaa4 ikev2/net2net-pubkey scenario does not need dnskey plugin Andreas Steffen 2012-04-30 07:02:08 +02:00
• 86b79a5f6d added ikev2/net2net-pubkey scenario Andreas Steffen 2012-04-30 00:33:18 +02:00
• 7ea31a17ea added ikev2/net2net-rsa scenario Andreas Steffen 2012-04-30 00:32:58 +02:00
• 5f1931ada1 added support for raw RSA public keys to stroke Andreas Steffen 2012-04-30 00:31:42 +02:00
• 2338b9f019 added ikev2/rw-eap-md5-id-prompt scenario Andreas Steffen 2012-04-29 19:10:25 +02:00
• 8c35f5d460 Fixed Android null terminated password fixup in xauth-eap Martin Willi 2012-04-26 14:35:27 +02:00
• 23cb8ba72b Fixed null-pointer dereference in smp plugin. Tobias Brunner 2012-04-26 08:50:39 +02:00
• d2976167af CERT_TRUSTED_PUBKEY stores notBefore, notAfter and subject information Andreas Steffen 2012-04-25 20:53:08 +02:00
• 7d85bebc49 pluto: Fix for null-terminated XAuth secrets (as sent by Android 4). Tobias Brunner 2012-04-24 09:25:38 +02:00
• 5ff8fe5d48 activated cmac plugin in UML test suites Andreas Steffen 2012-04-22 22:22:25 +02:00
• 86e50bd614 isolate a TNC client if an error occurs Andreas Steffen 2012-04-22 20:24:59 +02:00
• 6c97b16333 version bump to 4.6.3rc2 Andreas Steffen 2012-04-22 17:41:20 +02:00
• 3092bf1090 exit if TBOOT dummy measurements are not defined Andreas Steffen 2012-04-22 17:40:59 +02:00
• 5895c2e948 Option added to set identifier for syslog(3) logging. Tobias Brunner 2012-04-20 09:21:03 +02:00
• 7e84c4275c Removed auth_cfg_t.replace_value() and replaced usages with add(). Tobias Brunner 2012-04-17 17:44:10 +02:00
• ebc1ffe451 Changed the order and semantics of rules we expect only once in auth_cfg_t. Tobias Brunner 2012-04-17 17:37:30 +02:00
• 80067cf9e6 Store password with remote ID to tie it stronger to a specific connection. Tobias Brunner 2012-04-17 13:58:18 +02:00
• 9f1b303afc Added stroke user-creds command, to set username/password for a connection. Tobias Brunner 2012-04-17 11:18:37 +02:00
• 7b00fdeb84 Added method to add additional shared secrets to stroke_cred_t. Tobias Brunner 2012-04-17 11:14:38 +02:00
• ff5cb888f6 Additional prompt keyword added to stroke. Tobias Brunner 2012-04-17 11:13:44 +02:00
• 4c31657d2c Typo fixed. Tobias Brunner 2012-04-17 11:11:24 +02:00
• 1b7debcc04 Keep COOKIEs enabled once threshold is hit, until we see no COOKIEs for a few secs Martin Willi 2012-04-17 09:36:39 +02:00
• d0d600e1ef Added a note about DH/keymat lifecycle for custom implementations Martin Willi 2012-04-16 16:57:18 +02:00
• a59a03670b Reuse existing DH value when retrying IKE_SA_INIT with a COOKIE Martin Willi 2012-04-16 16:55:14 +02:00
• 4837d2a981 Fix iteration through half-open IKE_SA table Martin Willi 2012-04-16 16:47:17 +02:00
• 7fd6c078b6 Use IP address as ID as responder if not configured or no IDr received. Tobias Brunner 2012-04-16 11:55:07 +02:00
• b241a37411 Fall back on IP address as IDi if none is configured at all. Tobias Brunner 2012-04-16 11:53:06 +02:00
• b447af658c Use auth_cfg_t.replace_value where appropriate. Tobias Brunner 2012-04-13 15:47:25 +02:00
• 68cca941cf Added a simple method to replace the value of a rule in auth_cfg_t. Tobias Brunner 2012-04-13 15:46:23 +02:00
• 4b32bde48e Fixed IDi in case neither left nor leftid is configured. Tobias Brunner 2012-04-04 11:46:59 +02:00
• 7b910ce274 fixed parsing of port ranges in Scanner IMV Andreas Steffen 2012-04-15 23:39:27 +02:00
• 4e2e77d540 Typo fixed in NEWS. Tobias Brunner 2012-04-14 08:40:27 +02:00
• 10f24e6599 Don't invoke child_updown hook twice as responder Martin Willi 2012-04-11 17:43:30 +02:00
• 4ef867f578 Accept zero-length certificate request payloads Martin Willi 2012-04-03 08:35:25 +02:00
• ae9ce83511 Properly initialize src in ike_sa_t.is_any_path_valid(). Tobias Brunner 2012-04-06 10:53:47 +02:00
• 367e1e22b8 checksum need a libradius_init() symbol Andreas Steffen 2012-04-05 16:52:37 +02:00
• e90e106117 version bump to 4.6.3rc1 Andreas Steffen 2012-04-05 09:11:47 +02:00
• 4626e49ad9 remove leading zero in ASN.1 encoded serial numbers Andreas Steffen 2012-04-05 09:04:11 +02:00
• 5ff99529e6 ASN.1 two's complement encoding prevents overflow in CRL serial number Andreas Steffen 2012-04-04 11:29:00 +02:00
• bad192069f Make AES-CMAC actually usable for IKEv2. Tobias Brunner 2012-04-04 10:51:46 +02:00
• 89a5881c63 Added another bunch of commonly used IKEv1 NATT vendor IDs Martin Willi 2012-04-04 10:31:57 +02:00
• 4670661d6d represent 0 as a single byte Andreas Steffen 2012-04-03 14:19:37 +02:00
• 320fd5fe62 moved chunk_skip_zero to chunk.h Andreas Steffen 2012-04-03 14:12:50 +02:00
• 4e5b7e09ee added IKEv2 Generic Secure Password Authentication Method Andreas Steffen 2012-04-03 12:49:05 +02:00
• 5893d1b156 added IKEv2 Generic Secure Password Authentication Method Andreas Steffen 2012-04-03 12:48:48 +02:00
• f54c4ed8d6 added GSPM IKEv2 payload Andreas Steffen 2012-04-03 12:21:39 +02:00
• d1391b8fdb fixed typo Andreas Steffen 2012-04-03 12:07:13 +02:00
• 37d43ebbde Doxygen fixes. Tobias Brunner 2012-04-03 10:56:47 +02:00
• d7590217c3 Added NEWS about cmac plugin. Tobias Brunner 2012-04-03 10:48:03 +02:00
• 811e7490f6 Added test vectors for AES-CMAC. Tobias Brunner 2012-04-03 10:45:09 +02:00
• c0d39c205c Implemented AES-CMAC based PRF and signer. Tobias Brunner 2012-04-03 10:40:47 +02:00
• 9a6b1cb412 Fixed GNU license header in hmac and xcbc plugins. Tobias Brunner 2012-04-03 10:33:59 +02:00
• 4bc7577db2 More detailed NEWS about RADIUS extensions Martin Willi 2012-04-02 13:58:21 +02:00
• 0293f09597 updated supported EAP methods Andreas Steffen 2012-03-30 11:15:10 +02:00
• ef511fc03d Add support for dnQualifier in DNs. Tobias Brunner 2012-03-29 10:01:55 +02:00
• e464894e8b remove leading zeros in ASN.1 encoded serial numbers Andreas Steffen 2012-03-27 15:05:36 +02:00
• a281494abd Added NEWS about resolvconf support. Tobias Brunner 2012-03-27 09:47:38 +02:00
• ed2cab08d2 Make resolvconf interface prefix configurable. Tobias Brunner 2012-03-26 15:09:21 +02:00
• caae5a5c0f Added support for the resolvconf framework in resolve plugin. Tobias Brunner 2012-03-26 15:00:14 +02:00
• 6e921f2017 Use single DBG2 statements in kernel_netlink plugin (i.e. ignore mark.value). Tobias Brunner 2012-03-27 10:37:56 +02:00
• 817ab8a8d4 Don't cast second argument of mem_printf_hook (%b) to size_t. Tobias Brunner 2012-03-22 16:13:15 +01:00
• adfd3b992f smp: Use proper signed type to get return value of read(2). Tobias Brunner 2012-03-22 16:11:39 +01:00
• 008e2df477 pluto: Use time_monotonic() instead of a custom implementation. Tobias Brunner 2012-03-22 14:10:59 +01:00
• 8e066237a7 Don't include individual glib headers in nm plugin. Tobias Brunner 2012-03-26 15:23:17 +02:00
• 3110744a6b Fix null-terminated XAuth passwords, as sent by Android 4 Martin Willi 2012-03-22 15:01:35 +01:00
• 83d77866f4 Store authentication info of a XAUTH round on IKE_SA Martin Willi 2012-03-21 16:57:06 +01:00
• 79f39ecf5d Added a getter for CHILD_SA marks Martin Willi 2012-03-21 16:54:24 +01:00