Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• e8a512f800 protection against insane IMCs and IMVs Andreas Steffen 2011-05-11 19:34:01 +02:00
• 61e3819d04 Do not use deprecated vte_terminal_fork_command() Martin Willi 2011-05-11 12:12:02 +02:00
• 38865eced3 Return correct status code in kernel_netlink_ipsec_t.query_sa. Tobias Brunner 2011-05-10 15:45:42 +02:00
• 70f918ec1d chunk_clear not clear_chunk. Tobias Brunner 2011-05-10 15:40:46 +02:00
• 59965aaf96 pluto: Securely wipe quick mode keys from memory. Thomas Egerer 2011-05-10 15:39:00 +02:00
• 9e6bb93ab9 pluto: Securely wipe sensitive data from memory. Thomas Egerer 2011-05-10 15:19:46 +02:00
• 261d5f22db terminate imc/imv that couldn't be initialized properly Andreas Steffen 2011-05-10 07:03:37 +02:00
• bb6b2fbb81 lock the set_message_types() method for imvs Andreas Steffen 2011-05-09 07:55:59 +02:00
• 375ac27609 cosmetics Andreas Steffen 2011-05-09 07:47:20 +02:00
• f7812f6492 Wipe memory after using key material (incomplete, to be continued) Martin Willi 2011-05-09 14:33:22 +02:00
• 7dc48bab1b Use memwipe() in chunk_clear() Martin Willi 2011-05-09 13:20:24 +02:00
• ed678b52e2 Added a memwipe() function to safely overwrite sensitive memory Martin Willi 2011-05-09 13:16:27 +02:00
• 52cab8874b fixed debug output Andreas Steffen 2011-05-09 00:49:59 +02:00
• d6eec513f1 adapted state_machine for retry batches Andreas Steffen 2011-05-09 00:49:36 +02:00
• 82b43847f5 version bump to 4.5.2rc2 Andreas Steffen 2011-05-08 17:56:05 +02:00
• ff30e06bf0 lock the set_message_types() method Andreas Steffen 2011-05-07 17:51:43 +02:00
• 2c3464af46 added missing comma Andreas Steffen 2011-05-07 10:22:57 +02:00
• 50a43c79a6 refactored tnccs->remove_connection() Andreas Steffen 2011-05-06 15:13:05 +02:00
• 51f259a82d id of non-registered threads defaults to 0 Andreas Steffen 2011-05-06 06:22:19 +02:00
• e7643c92d3 Migrated scheduler_t to INIT/METHOD macros Martin Willi 2011-05-05 11:11:30 +02:00
• cda46be72a Migrated callback_job to INIT/METHOD macros Martin Willi 2011-05-02 10:36:10 +02:00
• 3316742969 Migrated processor to INIT/METHOD macros Martin Willi 2011-05-02 10:25:02 +02:00
• 5832d5058b Typo in NEWS fixed. Tobias Brunner 2011-05-05 10:31:33 +02:00
• bf3c371531 Note about certificates added to CA section in ipsec.conf man page. Tobias Brunner 2011-05-04 18:23:00 +02:00
• a855af9544 testing: Properly align numbers of succeeded and failed tests in overview page. Tobias Brunner 2011-05-04 17:12:33 +02:00
• e296fc2d26 testing: Add crumbtrail to overview page which lists all tests. Tobias Brunner 2011-05-04 16:59:34 +02:00
• ca25eb9eb3 testing: Directly link to index.html of tests to allow browsing via file://. Tobias Brunner 2011-05-04 16:21:59 +02:00
• e8ae55f64b testing: Avoid adding additional spacing around testresults. Tobias Brunner 2011-05-04 16:19:34 +02:00
• 074919dcc5 testing: Replace back link in results with crumbtrail to improve navigation. Tobias Brunner 2011-05-04 15:50:16 +02:00
• 92ebb7c5b2 Added NEWS about duplicheck and coupling plugins Martin Willi 2011-05-05 09:38:48 +02:00
• e35727c14d Fix algorithm type for signers, fixes warning with gcc 4.5 Martin Willi 2011-05-03 11:32:40 +02:00
• b4c9ab9c79 Cache group name in sys_logger_t to avoid problems with Vstr. Tobias Brunner 2011-05-03 10:50:28 +02:00
• b7cb8100c4 Migrated sys_logger_t to INIT/METHOD macros. Tobias Brunner 2011-05-03 10:21:58 +02:00
• 5bbe0ee18c Migrated file_logger_t to INIT/METHOD macros. Tobias Brunner 2011-05-03 10:21:03 +02:00
• b58e9783d7 version bump to 4.5.2rc1 Andreas Steffen 2011-05-02 22:15:43 +02:00
• 7b12521679 Removed superfluous parameter missed in e5e5bcc92f. Tobias Brunner 2011-05-02 17:13:14 +02:00
• aca6434ba9 Fix a potential memleak if two threads fingerprint a credential simultaneously Martin Willi 2011-05-02 15:03:56 +02:00
• 33bad71ce9 Accept name fields in EAP-MD5 messages Martin Willi 2011-05-02 09:25:28 +02:00
• ca0341bf85 added missing tab Andreas Steffen 2011-04-28 13:30:40 +02:00
• 083fe967e5 adapted debug output Andreas Steffen 2011-04-28 13:27:44 +02:00
• 02472e3417 do not send messages of type TNC_VENDORID_ANY or subtye TNC_SUBTYPE_ANY Andreas Steffen 2011-04-28 13:27:17 +02:00
• 68447302d6 Typo fixed. Tobias Brunner 2011-04-28 12:50:30 +02:00
• 7d39f3e1b9 log unsupported IMC_IMV message types Andreas Steffen 2011-04-28 02:27:08 +02:00
• e7f21e33b1 list registered TNCCS message types Andreas Steffen 2011-04-28 01:34:03 +02:00
• 67ec2be665 IKEv2 was only partially the default for connections with auto=route and auto=start. Tobias Brunner 2011-04-27 11:33:06 +02:00
• cce8f65232 Fixed two typos in kernel-pfroute plugin. Tobias Brunner 2011-04-26 17:28:11 +02:00
• 8af1e3606b fixed loop error in parsing of OCSP basic responses Andreas Steffen 2011-04-26 12:32:19 +02:00
• 6ab1a83059 Migrated eap_sim_file to INIT/METHOD macros Andreas Steffen 2011-04-22 11:30:42 +02:00
• 406051ea4e fixed segmentation fault due to null pointer Andreas Steffen 2011-04-22 10:11:16 +02:00
• 4b06f9f265 debug type is EAP_TLS Andreas Steffen 2011-04-21 21:04:11 +02:00
• 2778b6644b do not include length field in non-fragmented EAP-PEAP packets Andreas Steffen 2011-04-21 19:50:36 +02:00
• c223ccd174 Win 7 accepts compressed EAP Identity request Andreas Steffen 2011-04-21 19:17:18 +02:00
• 20c428b670 added level 3 debug output of forwarded EAP payloads Andreas Steffen 2011-04-21 13:24:26 +02:00
• f9a552f011 Resolve and connect to RADIUS servers not before required Martin Willi 2011-04-21 11:40:25 +02:00
• 5b0bcfb1fc Revert alloc_str changes Martin Willi 2011-04-21 13:21:26 +02:00
• fdead26ffe If key not found, strdup default value, too Martin Willi 2011-04-21 10:57:17 +02:00
• 3e2419ebe3 Use thread save settings alloc_str function where appropriate Martin Willi 2011-04-21 10:48:16 +02:00
• 17ce69b47a Added a thread save, allocating settings get_str variant called alloc_str Martin Willi 2011-04-21 10:10:26 +02:00
• 6d41218ced Be a little more liberal in checking maximum payload count Martin Willi 2011-04-20 15:15:00 +02:00
• f7aca91603 Accept IKE_SA_INIT responses without CERTIFICATE_REQUESTs Martin Willi 2011-04-20 15:04:02 +02:00
• 4778655726 Cast size_t len arguments to %.*s to int Martin Willi 2011-04-20 13:08:32 +02:00
• 52846ec820 Remove superfluous test for peer_cfg on established IKE_SAs Martin Willi 2011-04-20 12:31:29 +02:00
• 94c0e8346a Added charon.replay window to strongswan.conf.5 Martin Willi 2011-04-19 14:45:52 +02:00
• 378219546c Updated ipsec.conf.5 with new ESN options Martin Willi 2011-04-18 16:11:40 +02:00
• d3d21c29db Add NEWS for ESN/custom replay window support Martin Willi 2011-04-18 16:00:38 +02:00
• 98788537be Synchronize ESN support in HA plugin Martin Willi 2011-04-18 15:46:25 +02:00
• 390b38b8c9 Add NO_EXT_SEQ_NUMBER to proposal only if it has not been specified in string Martin Willi 2011-04-18 15:43:59 +02:00
• f8b26c452a Added proposal keywords for ESN support Martin Willi 2011-04-18 15:43:20 +02:00
• bd01b9d8b2 Install ESN SAs if such a proposal has been negotiated Martin Willi 2011-04-18 15:41:23 +02:00
• 05e9589783 Copy ESN enabled replay state during update_sa, if supported Martin Willi 2011-04-18 17:57:59 +02:00
• ee8c89e2ee Add ESN support to kernel netlink plugin, including custom replay windows Martin Willi 2011-04-18 15:16:54 +02:00
• 4876d4f3b3 Added an esn parameter to the kernel interface add_sa functions Martin Willi 2011-04-18 15:16:23 +02:00
• f7925cad04 Updated copy of linux/xfrm.h to 2.6.39, featuring ESN support Martin Willi 2011-04-18 14:51:05 +02:00
• dd0696ec8e Use strncpy when reading smartcard keyids from ipsec.secrets. Tobias Brunner 2011-04-19 18:00:16 +02:00
• 6e0c82141f pluto: Replaced some strcpy usages with strncpy. Tobias Brunner 2011-04-19 16:13:28 +02:00
• 81b598ca5f openac: --out is a mandatory argument. Tobias Brunner 2011-04-19 17:26:19 +02:00
• 2bf1d44f7b openac: Fixed potential overflow while reading passphrase. Tobias Brunner 2011-04-19 13:34:18 +02:00
• 68e9275134 openac: Make sure path is null-terminated. Tobias Brunner 2011-04-19 13:22:32 +02:00
• 2653c08513 pluto: Make sure connection name is null-terminated during DPD restart. Tobias Brunner 2011-04-19 13:20:35 +02:00
• f36a6ebd30 starter: Make sure interface name is null-terminated. Tobias Brunner 2011-04-19 13:18:42 +02:00
• e0d388f2e3 Use proper return value for ietf_attr_t.compare. Tobias Brunner 2011-04-19 13:10:18 +02:00
• e78c915241 scepclient: Proper handling of multiple received certificates. Tobias Brunner 2011-04-19 13:06:25 +02:00
• 00b9f755f8 pool: Proper cleanup in error cases when adding addresses from a file. Tobias Brunner 2011-04-19 12:55:58 +02:00
• e5143952f0 pool: Proper handling of address family when adding addresses. Tobias Brunner 2011-04-19 12:43:00 +02:00
• a5543f99e4 Added missing return in iterator_t.insert_before of linked_list_t. Tobias Brunner 2011-04-19 12:30:23 +02:00
• 75cf0cc012 pluto: Clarified parsing of long durations. Tobias Brunner 2011-04-19 12:20:50 +02:00
• 1c004bebd8 Clearly mark switch cases that fall through. Tobias Brunner 2011-04-19 12:07:48 +02:00
• 119fc2d3d7 Added missing break statement. Tobias Brunner 2011-04-19 12:07:32 +02:00
• 73ac1f2040 pluto: Avoid potential null-pointer dereference when checking CRLs. Tobias Brunner 2011-04-18 16:35:04 +02:00
• a61b696380 pluto: Added missing PF_KEY debug messages. Tobias Brunner 2011-04-18 16:26:11 +02:00
• f526b35c45 Properly copy interface name if unknown. Tobias Brunner 2011-04-18 16:10:36 +02:00
• 82017bf417 pluto: from_state is strictly lower than STATE_IKE_ROOF. Tobias Brunner 2011-04-18 15:46:00 +02:00
• c8bb9a2ec6 Fixed typo in unit-tester plugin. Tobias Brunner 2011-04-18 15:21:10 +02:00
• a30e025901 support unstructuredAddress in left|rightid Andreas Steffen 2011-04-18 23:40:31 +02:00
• 733813c7fb send an empty EAP Ack client message if TLS was successful and handle it on the server Andreas Steffen 2011-04-15 15:02:08 +02:00
• ad5033a67c Windows 7 expects an uncompressed EAP Identity request Andreas Steffen 2011-04-15 15:00:37 +02:00
• cf6ca6d729 Add plugin reloading NEWS Martin Willi 2011-04-15 13:05:02 +02:00
• 2b3c87b49a Set broadcast flag in DHCP requests when sending broadcasts Martin Willi 2011-04-14 16:01:47 +02:00
• 96409be320 Add reload support to attr plugin Martin Willi 2011-04-15 09:48:17 +02:00
• 00b4b4b0d1 Migrated attr plugin to INIT/METHOD macros Martin Willi 2011-04-15 09:28:27 +02:00