Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• a3527c39dd add revocation plugin to ikev2/rw-cert scenario Andreas Steffen 2010-07-15 20:03:04 +02:00
• 3de510ca43 Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option Andreas Steffen 2010-07-15 06:29:26 +02:00
• 83b957107f Revert "Warn about manual plugin load directives for pluto/charon" Martin Willi 2010-07-14 07:15:56 +02:00
• fccf00576f activate --enable-addrblock configure option in UML scenarios Andreas Steffen 2010-07-13 21:04:20 +02:00
• 5c46726d0d Warn about manual plugin load directives for pluto/charon Martin Willi 2010-07-13 14:43:45 +02:00
• 15d9904406 Remove plugin load directives from default strongswan.conf Martin Willi 2010-07-13 14:28:11 +02:00
• 7f3a946874 Added NEWS about --signcrl and PEM support in pki utility Martin Willi 2010-07-13 14:18:19 +02:00
• b5b95c75de Added pki PEM encoding support for certificates, CRLs and PKCS10 requests Martin Willi 2010-07-13 14:14:39 +02:00
• e3b987f79b Added support for Certificate, CRL and PKCS10 encoding to PEM plugin Martin Willi 2010-07-13 13:53:33 +02:00
• 0406eeaacb Support different encoding types in certificate.get_encoding() Martin Willi 2010-07-13 13:34:04 +02:00
• da9724e6d0 Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding Martin Willi 2010-07-13 11:28:04 +02:00
• 24d327ab4d Moved keys/key_encoding.[ch] to cred_encoding.[ch] Martin Willi 2010-07-13 11:01:08 +02:00
• e1c51fd859 Fixed doxygen group of cert_validator interface Martin Willi 2010-07-13 10:42:02 +02:00
• e9448cfc2f Added NEWS for revocation/addrblock plugin Martin Willi 2010-07-13 09:34:57 +02:00
• f90d465ce2 Added addrblock plugin to RFC3779 test cases Martin Willi 2010-07-13 09:29:57 +02:00
• 1f457546c1 Added revocation plugin to ikev2 crl/ocsp test cases Martin Willi 2010-07-13 09:28:44 +02:00
• e57a29c731 Moved X509 ipAddrBlock checking to the addrblock plugin Martin Willi 2010-07-13 09:19:39 +02:00
• be715344c2 Added a hook to narrow traffic selectors for CHILD_SAs Martin Willi 2010-07-13 08:39:19 +02:00
• 88fa56b1ad Moved bus_t to METHOD/INIT macros Martin Willi 2010-07-12 16:25:56 +02:00
• 1c8c924610 Moved addrblock plugin to libcharon Martin Willi 2010-07-12 15:57:25 +02:00
• c2e5cee413 Moved CRL/OCSP checking to a dedicated plugin called revocation Martin Willi 2010-07-05 15:26:35 +02:00
• c1f9dad672 Made some useful methods in the credential manager public Martin Willi 2010-07-05 15:24:19 +02:00
• 5f9e62c54f Moved X509 addrBlock validation to a separate addrblock plugin Martin Willi 2010-07-05 14:36:05 +02:00
• 2feb16f5dd Added a certificate validation hook to the credential manager Martin Willi 2010-07-05 14:21:09 +02:00
• c3a9bef08e Migrated credential manager to INIT/METHOD macros Martin Willi 2010-07-05 12:51:17 +02:00
• 2ccc02a4fd Moved credential manager to libstrongswan Martin Willi 2010-07-05 11:54:25 +02:00
• 2ca7db1337 Move pathlen constraint checking to X509 specific checks Martin Willi 2010-07-05 09:36:30 +02:00
• 5db798c8e0 Charon uses a generic trunstchain length limit, not only for X509 certificates Martin Willi 2010-07-02 10:29:36 +02:00
• 01bb70e4ad Combined the OCSP/CRL options to a signle Online check option Martin Willi 2010-07-02 09:58:59 +02:00
• d5f29da3d2 added mark, mark_in, and mark_out to the ipsec.conf.5 man page Andreas Steffen 2010-07-13 09:15:53 +02:00
• c1918dc28f we need some ordering Andreas Steffen 2010-07-12 22:44:27 +02:00
• c13a4b4030 changed ordering of statusattr output Andreas Steffen 2010-07-12 22:38:18 +02:00
• bb021fbbc9 updated ikev2/ip-two-pools-db scenario to support pool and identity based dns attributes Andreas Steffen 2010-07-12 20:54:40 +02:00
• 1cecc6a6ef fixed alignment of caption Andreas Steffen 2010-07-12 20:48:14 +02:00
• ab635e029e updated SQL templates to support attribute pool and identity parameters Andreas Steffen 2010-07-12 20:28:24 +02:00
• cb0a9d58a3 output identities correctly Andreas Steffen 2010-07-12 20:26:17 +02:00
• 5047fe7ad3 added second example scenario Andreas Steffen 2010-07-12 14:22:32 +02:00
• dcb4651d8c apidoc is actually a directory not a file. Tobias Brunner 2010-07-12 15:28:55 +02:00
• af7b34b13b Added missing pool parameter in DHCP attribute provider. Tobias Brunner 2010-07-12 12:27:49 +02:00
• 52f97c3893 Do not interpret long class attributes (such as from NPS) as group Martin Willi 2010-07-09 13:53:43 +02:00
• cfa1c07604 Group membership constraint is fulfilled if subject is member in one of the groups Martin Willi 2010-07-09 13:51:58 +02:00
• ec7adea007 Added support for named attribute groups Heiko Hund 2010-07-07 16:45:36 +02:00
• db4ad736be transport reqid, mark_in and mark_out in whack message Andreas Steffen 2010-07-09 12:19:39 +02:00
• f65e0dc80f added ikev2/net2net-psk-dscp2 DiffServ scenario Andreas Steffen 2010-07-09 11:55:01 +02:00
• 9f94906815 added ikev2/nat-two-rw-mark-in-out scenario Andreas Steffen 2010-07-09 09:36:03 +02:00
• bcf608c848 some changes to the ikev2/nat-two-rw-mark scenario Andreas Steffen 2010-07-09 09:35:02 +02:00
• 26c4d0102a configuration of different marks for inbound and outbound direction Andreas Steffen 2010-07-09 09:06:02 +02:00
• 6f07f5e3d4 The file logger supports a time prefix using a strftime() format specifier Martin Willi 2010-07-08 16:11:55 +02:00
• 4cc9afe35f Print identity to a lease address on the same line for simpler greping Martin Willi 2010-07-08 15:46:44 +02:00
• 6c4cd8fa15 Implemented missing bypass_socket() method in load-testers faked kernel interface Martin Willi 2010-07-07 10:00:39 +02:00
• a729d17afa added req parameter to ipsec.conf man page Andreas Steffen 2010-07-06 20:32:15 +02:00
• 4f99093235 Show mallinfo() data in statusall, if available Martin Willi 2010-07-06 16:26:59 +02:00
• 380106ab0d Avoid relocking while enumerator is alive Martin Willi 2010-07-06 15:44:37 +02:00
• f395f28e44 Added missing markt_t in load tester, also migrated to INIT/METHOD macros. Tobias Brunner 2010-07-06 09:29:18 +02:00
• 83b23011de Some Doxygen fixes. Tobias Brunner 2010-07-05 15:04:30 +02:00
• 8f7e8e075a Fixed typo. Tobias Brunner 2010-07-05 14:53:56 +02:00
• a4c0da1669 Added support for group membership information containted in the RADIUS class attribute Martin Willi 2010-06-28 16:12:06 +02:00
• 4172574bfb Use the group constraint in a more generic fashion, not only for attribute certificates Martin Willi 2010-06-28 15:46:13 +02:00
• 53913d764e Use the responder side configured EAP-Identity directly, if given Martin Willi 2010-06-28 15:45:07 +02:00
• ec6caa1367 Copy EAP specific attributes to auth config only Martin Willi 2010-06-28 15:41:48 +02:00
• 43ab542b66 Disable EAP-GTC on Android. Tobias Brunner 2010-07-05 09:37:49 +02:00
• ec40c02ad2 added IKEv2 xfrm marks support to NEWS Andreas Steffen 2010-07-03 22:14:45 +02:00
• 36b3c0a8dd regenerated loop intermediate CA certificates Andreas Steffen 2010-07-03 18:18:30 +02:00
• 342fc85e9e added ikev2/nat-two-rw-mark scenario Andreas Steffen 2010-07-03 13:25:09 +02:00
• ee26c537d7 support of xfrm marks for IKEv2 Andreas Steffen 2010-07-02 23:45:57 +02:00
• 02571374c4 Recreate IKE_SA_INIT related tasks only if they have completed Martin Willi 2010-06-30 13:48:47 +02:00
• 31d0efd7e9 Use enumerator for queued_tasks migration to avoid infinite loop Thomas Egerer 2010-06-30 13:10:56 +02:00
• c177076b50 Enabling some EAP plugins on Android. Tobias Brunner 2010-06-30 10:02:15 +02:00
• 5430d6ab3c The x509 plugin is not needed anymore on Android, using OpenSSL. Tobias Brunner 2010-06-30 10:01:16 +02:00
• 6d61e334f7 Correct check of traffic selectors before destruction Thomas Egerer 2010-06-28 22:18:25 +02:00
• 7f1eb89517 Migrate queued_tasks tasks, to avoid dangling pointers Thomas Egerer 2010-06-29 08:53:05 +02:00
• 0f21ebc81d The signature of keystore_get changed again. Tobias Brunner 2010-06-28 17:18:53 +02:00
• 6f52d3b077 Compiler warning fixed. Tobias Brunner 2010-06-24 16:23:54 +02:00
• b3f65304ba check for installed aead algorithms in kernel Andreas Steffen 2010-06-27 22:26:00 +02:00
• f031e41bea upgraded xfrm.h to linux-2.6.34 Andreas Steffen 2010-06-27 11:23:35 +02:00
• 6a4a47511f Show contents of the CP payload in message_t stringification Martin Willi 2010-06-24 15:45:38 +02:00
• 1e723d739c Support the subnet attribute in the attr plugin Martin Willi 2010-06-24 15:44:28 +02:00
• c0914c457b Increased the loglevel for the arguments received via Android control socket. Tobias Brunner 2010-06-24 14:44:45 +02:00
• e9e2a4fecf Terminate charon from the Android plugin if the tunnel goes down after it was initiated successfully. Tobias Brunner 2010-06-24 14:05:53 +02:00
• 7913a74c36 Initiate the tunnel in the Android plugin asynchronously. Tobias Brunner 2010-06-24 14:02:52 +02:00
• 8b775e99ea Implement the listener_t interface in the Android plugin to track the status of an SA. Tobias Brunner 2010-06-24 14:00:39 +02:00
• 94ec9adc10 Helper function added to notify the Android frontend about status changes. Tobias Brunner 2010-06-24 13:57:03 +02:00
• 024dd37fa0 Initiate consumes a child_sa reference, so get an additional one. Tobias Brunner 2010-06-24 13:42:57 +02:00
• 5eb9eeb130 Use the same error code constants as in the Java frontend. Tobias Brunner 2010-06-24 13:41:07 +02:00
• 359063caf7 Flush and destroy the send queue before unloading the socket plugins. Tobias Brunner 2010-06-24 10:34:48 +02:00
• 07c5aacce8 Select subjectAltName address family using address length in openssl plugin Martin Willi 2010-06-24 12:00:56 +02:00
• 7a74295e42 Select subjectAltName address family using address length in x509 plugin Martin Willi 2010-06-24 11:59:20 +02:00
• 9eb7f46b3d Do not install routes in the PF_KEY kernel interface if interface lookup failed. Tobias Brunner 2010-06-23 11:19:37 +02:00
• a427e98da1 The signature of keystore_get was changed with Android 2.x. Tobias Brunner 2010-06-22 16:19:55 +02:00
• f283520faf Avoid a segmentation fault if opening the Android control socket failed. Tobias Brunner 2010-06-22 16:18:22 +02:00
• 61c950d9aa OpenSSL in Android 2.1+ lacks Elliptic Curve and ENGINE support. Tobias Brunner 2010-06-22 16:15:10 +02:00
• c03ed4835c Allow to enable the kernel-pfkey plugin via Android.mk. Tobias Brunner 2010-06-22 16:14:14 +02:00
• b7900d3258 Fixing the PF_KEY kernel interface on Android. Tobias Brunner 2010-06-22 16:04:13 +02:00
• 1e3d66f8d3 Fixing compilation of the OpenSSL plugin if ENGINE support is disabled. Tobias Brunner 2010-06-22 11:33:21 +02:00
• 5a367e99c3 Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled. Tobias Brunner 2010-06-22 11:28:50 +02:00
• 5d31217232 Ignore IKEv2 packets in pluto with any minor version Martin Willi 2010-06-22 09:16:04 +02:00
• 169eae5229 Accept IKE packets with any minor version in RAW socket Martin Willi 2010-06-22 09:03:41 +02:00
• 9b6db5cd2e Fixed plugin checks in Android.mk files. Tobias Brunner 2010-06-17 18:09:34 +02:00
• 341372d525 Don't fail with an error if an attribute that is to be deleted does not exist Heiko Hund 2010-06-18 05:01:06 +02:00
• 4f9b82bc1d Fixed compiler warning. Tobias Brunner 2010-06-07 15:33:25 +02:00