Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 499af811c0 Use vpn.dns* to store DNS servers (Android manages net.dns* using these). Tobias Brunner 2010-05-11 18:31:24 +02:00
• be00d219cc Adding an interface that interacts with the Android Settings frontend. Tobias Brunner 2010-05-04 18:26:07 +02:00
• c373f14947 Adding an Android specific credential set. Tobias Brunner 2010-05-04 18:18:51 +02:00
• 51a00fb275 Adding an Android specific logger. Tobias Brunner 2010-05-04 18:13:27 +02:00
• 946be4d357 Adding support for the native Linux capabilities interface. Tobias Brunner 2010-06-15 19:40:44 +02:00
• b77e493bea Explicitly refer to LIBCAP in Makefiles. Tobias Brunner 2010-06-15 19:10:23 +02:00
• 404960e522 Run as vpn user on Android. Tobias Brunner 2010-05-04 17:05:12 +02:00
• b02a03a5dd Truncate the PID file so that even if we fail to unlink it, the daemon can be restarted properly. Tobias Brunner 2010-06-15 19:53:47 +02:00
• 4e9d313ff8 Explicitly include stdint.h for UINT64_MAX. Tobias Brunner 2010-06-15 10:57:12 +02:00
• ed76b21652 Check for SADB_X_NAT_T_NEW_MAPPING in PF_KEY kernel interface. Tobias Brunner 2010-06-15 10:07:43 +02:00
• 668e84d904 Set the ports of all hosts installed via the PF_KEY kernel interface to zero. Tobias Brunner 2010-05-14 15:25:59 +02:00
• 5d4c258de7 refer to correct PLUTO_XAUTH_ID variable Andreas Steffen 2010-06-09 15:21:26 +02:00
• fcfd54acde rename environment variable to PLUTO_XAUTH_ID Andreas Steffen 2010-06-08 23:18:51 +02:00
• 611368339b do not destroy xauth_id if phase2 equals phase1 connection Andreas Steffen 2010-06-08 23:18:00 +02:00
• 964f6372cc make an optional XAUTH user ID available in the updown script Andreas Steffen 2010-06-08 17:50:22 +02:00
• 52ee813156 inherit XAUTH identities in Phase 2 Heiko Hund 2010-06-08 12:15:42 +02:00
• 2e8a5e12ef Adding a basic unit test for hashtable_t. Tobias Brunner 2010-06-07 16:39:49 +02:00
• b2ddaf0775 Adding a remove_at method to the hash table. Tobias Brunner 2010-06-07 16:36:26 +02:00
• 88b6f14143 Migrated hashtable_t to INIT/METHOD macros. Tobias Brunner 2010-06-07 15:50:41 +02:00
• 03ffa88531 Add extra information in debug output for IKE_SA check{out, in} Thomas Egerer 2010-06-06 22:50:29 +02:00
• 5493ffde0b traffic_selector_t is gone into libstrongswan, migrate printf hook registration, too. Martin Willi 2010-06-07 15:06:09 +02:00
• 550d9085fa Flush auth configs, create new keymat during SA reset Martin Willi 2010-06-07 14:59:39 +02:00
• dbdb69f908 Recreate IKE_INIT/IKE_NATD/IKE_VENDOR tasks if we reset SA during IKE_AUTH Martin Willi 2010-06-07 14:58:57 +02:00
• 8b56ec20f3 Reacquire keymat from new IKE_SA during task migration Martin Willi 2010-06-07 14:56:24 +02:00
• d5ad6eb1e0 Flush certificate cache on CA delete Martin Willi 2010-06-07 13:51:18 +02:00
• a3ffa9edfd Log non-empty task queues in statusall Martin Willi 2010-06-07 11:59:37 +02:00
• ea340ee840 Wrap task enumerator in ike_sa Martin Willi 2010-06-07 11:37:55 +02:00
• 8bced61b76 Migrated ike_sa_t to INIT/METHOD macros Martin Willi 2010-06-07 09:30:27 +00:00
• 665c18bd85 Added support for task enumeration in task_manager_t Martin Willi 2010-06-07 10:45:25 +02:00
• 9560a3166f Migrated task_manager_t to INIT/METHOD macros Martin Willi 2010-06-07 10:37:00 +02:00
• 39e3b58fe4 use --addattr Andreas Steffen 2010-06-05 13:49:01 +02:00
• 88613f159d use --addattr Andreas Steffen 2010-06-05 13:47:23 +02:00
• 4321d19d1e added ikev2/nat-virtual-ip scenario Andreas Steffen 2010-06-05 13:42:28 +02:00
• b2be7dd621 remove stray carolReq.pem Andreas Steffen 2010-06-05 13:36:39 +02:00
• 5a9a255ae5 share pool in ikev1/mode-config-multiple scenario Andreas Steffen 2010-06-05 13:17:51 +02:00
• 6d989d356b use --addattr Andreas Steffen 2010-06-05 13:15:03 +02:00
• bdd28aa9c5 remove stray scenario files Andreas Steffen 2010-06-05 13:10:39 +02:00
• d43775ae58 Accept ARP requests with an ethernet trailer, but trim it Martin Willi 2010-06-02 10:05:43 +02:00
• d2c358742a Added a EAP-SIM/AKA backend reading triplets/quintuplets from a SQL database Martin Willi 2010-06-02 15:55:58 +02:00
• c77f4b305e fixed configuration attribute type determination Andreas Steffen 2010-06-02 11:51:53 +02:00
• 2f57e6da0e Disable close action for a redundant CHILD_SA resulting from a rekey collision Martin Willi 2010-06-02 11:43:39 +02:00
• fe02d99b96 Use wrapped getters for close/dpd action Martin Willi 2010-06-02 11:41:46 +02:00
• 4c401ea216 Wrap getters for dpd/close action into CHILD_SA, allows us to override them Martin Willi 2010-06-02 11:40:38 +02:00
• 616b13c7a5 ipsec pool --statusattr [--hexout] outputs attribute values in correct format if known Andreas Steffen 2010-06-01 16:47:56 +02:00
• 185d8b7335 added unity_def_domain keyword tip ipsec pool Andreas Steffen 2010-05-31 16:46:47 +02:00
• 80b5661a9b Added generated manpages to .gitignore Martin Willi 2010-05-31 13:41:25 +02:00
• a2cf26f1c1 Changed default lifetime of certificates to 3 years Martin Willi 2010-05-31 13:14:36 +02:00
• 70ac7c43a5 Support extendedKeyUsage flags in self-signed certificates Martin Willi 2010-05-31 13:12:46 +02:00
• 3d829c4c0a IPSEC_CONFDIR in ipsec script fixed. Tobias Brunner 2010-05-30 13:07:32 +02:00
• 8f76653a4c Adding the version number to the most relevant manual pages. Tobias Brunner 2010-05-30 13:03:04 +02:00
• 1d3a48b559 Updated and corrected the ipsec.secrets(5) manual page. Tobias Brunner 2010-05-30 11:51:30 +02:00
• f115838bee Updated and corrected the ipsec.conf(5) manual page. Tobias Brunner 2010-05-29 21:10:18 +02:00
• 28550caaa8 Updated and corrected the ipsec(8) manual page. Tobias Brunner 2010-05-29 17:34:00 +02:00
• d9c751daac added --leases command line option to synopsis Andreas Steffen 2010-05-29 13:29:23 +02:00
• 751379e5e8 added --showattr command line option to synopsys Andreas Steffen 2010-05-29 13:23:20 +02:00
• 3561cc4b3b added X.509 support by openssl plugin to NEWS Andreas Steffen 2010-05-29 11:22:36 +02:00
• 5b6200888b remove x509 plugin from openssl-ikev1 scenarios Andreas Steffen 2010-05-28 23:22:15 +02:00
• d070e0a6d1 Do not install trap policy if remote host is %any. Tobias Brunner 2010-05-28 15:43:12 +02:00
• e8960c2a99 be lenient towards wrong attribute encodings Andreas Steffen 2010-05-28 15:07:09 +02:00
• 2e08be79a3 Send empty SIM/AKA-NOTIFICATION response for non-success codes, too Martin Willi 2010-05-27 15:04:25 +02:00
• ddf29f5b07 Added support for reading raw PUT/POST data from HTTP request Martin Willi 2010-05-27 09:30:14 +02:00
• f00a101590 Unwrap subjectKeyIdentifier from OCTET_STRING Martin Willi 2010-05-26 16:09:50 +02:00
• bd371ccac7 remove x509 plugin from remaining openssl-ikev2 scenarios Andreas Steffen 2010-05-25 15:49:58 +02:00
• 2996cb3163 openssl-ikev2/rw-cert scenario doesn't need x509 plugin any more Andreas Steffen 2010-05-25 15:26:46 +02:00
• e2bd6b616e several subnets can be concatenated Andreas Steffen 2010-05-22 22:53:24 +02:00
• 2111dc1b84 added --showattr command to usage() Andreas Steffen 2010-05-22 10:46:15 +02:00
• 24632bc0e8 Fixed compiler warning in invocation of crl_is_newer() Martin Willi 2010-05-21 16:41:13 +02:00
• 09f38ebe54 Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier Martin Willi 2010-05-21 16:38:19 +02:00
• 0c73ceff0a Added a --signcrl command to the pki utility Martin Willi 2010-05-21 15:53:31 +02:00
• 13c593f126 Added support for CRL generation to x509 plugin Martin Willi 2010-05-21 15:52:20 +02:00
• aab861608a Removed is_newer() from certificate_t, obsoleting all implementations Martin Willi 2010-05-21 09:53:23 +02:00
• 8029e5efd2 Added generic implementations for crl_is_newer/certificate_is_newer Martin Willi 2010-05-21 09:48:23 +02:00
• 654218a31b Migrated x509_crl_t to INIT/METHOD macros Martin Willi 2010-05-21 09:18:27 +02:00
• 6d7eed9a37 Implemented X.509 CRL reading using OpenSSL Martin Willi 2010-05-20 17:33:52 +02:00
• 5728c6aa7e Implemented X.509 certificate reading using OpenSSL Martin Willi 2010-05-20 08:09:04 +00:00
• 3e3059ba7c oops, removed stray parenthesis Andreas Steffen 2010-05-20 17:38:39 +02:00
• 9806381322 Fixed doxygen group Martin Willi 2010-05-20 13:22:13 +02:00
• 40b2be16e3 Whitelist OpenSSLs ERR_put_error() in leak-detective Martin Willi 2010-05-20 09:44:59 +02:00
• 2e57b21252 Added a --print command to pki that dumps different credentials Martin Willi 2010-05-20 09:41:47 +02:00
• 091d178060 Option to skip slow addr2line resolution in leak-detective Martin Willi 2010-05-19 15:22:12 +02:00
• 36c1650b19 range check for configuration attribute types Andreas Steffen 2010-05-20 17:35:10 +02:00
• c2d10df6e7 implement ipsec pool -showattr function Andreas Steffen 2010-05-20 17:24:43 +02:00
• 05f1096cd8 removed deprecated use of ipsec pool --attr|del dns|nbns from usage() Andreas Steffen 2010-05-20 16:30:15 +02:00
• e3dd6b1475 Only include C files that start with the plugin name when building for Android. Tobias Brunner 2010-05-20 12:01:12 +02:00
• c5c6f9b6da added ipsec pool attribute support to NEWS Andreas Steffen 2010-05-19 21:53:55 +02:00
• ad6dbc41e5 management of any attribute by ipsec pool Andreas Steffen 2010-05-19 21:51:21 +02:00
• b596f4f260 updated ikev1/rw-cert scenario to support xauth integrity test Andreas Steffen 2010-05-19 08:31:39 +02:00
• f71cb4777e checksum_builder() needs the pluto symbol Andreas Steffen 2010-05-19 08:02:22 +02:00
• 73434ce9eb updated ikev1/xauth-rsa-mode-config scenario to support xauth plugin Andreas Steffen 2010-05-18 22:57:12 +02:00
• 1fe5d973cb updated ikev1/xauth-psk-mode-config scenario to support xauth plugin Andreas Steffen 2010-05-18 22:56:42 +02:00
• 17adc8d074 updated ikev1/xauth-psk-mode-config scenario to support xauth plugin Andreas Steffen 2010-05-18 22:48:37 +02:00
• ab0ecb7dd9 register virtual IPs under the XAUTH identity Andreas Steffen 2010-05-18 22:41:22 +02:00
• efde96b38e updated ikev1/xauth-rsa-nosecret scenario to support xauth plugin Andreas Steffen 2010-05-18 20:20:55 +02:00
• 4f1110ab7b created ikev1/xauth-id-psk scenario Andreas Steffen 2010-05-18 20:04:52 +02:00
• dc5d63a599 updated ikev1/xauth-psk scenario to support xauth plugin Andreas Steffen 2010-05-18 20:04:02 +02:00
• 8d7fffc942 clarified secret loading debug output Andreas Steffen 2010-05-18 16:54:20 +02:00
• 8ebc3da64c updated ikev1/xauth-rsa-fail scenario to xauth plugin Andreas Steffen 2010-05-18 16:53:34 +02:00
• 2549ff7849 created ikev1/xauth-id-rsa scenario using XAUTH identities Andreas Steffen 2010-05-18 16:53:00 +02:00
• 0a6085b13e updated ikev1/xauth-rsa scenario to xauth plugin Andreas Steffen 2010-05-18 16:52:12 +02:00
• 9ffb475e5d Typo fixed. Tobias Brunner 2010-05-18 13:59:23 +02:00