Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• b019c38fa2 Implemented base32 encoding of chunks. Martin Willi 2010-05-05 10:40:52 +02:00
• 9a0333fa62 moved resolve plugin from libcharon to libhydra Andreas Steffen 2010-05-04 23:52:44 +02:00
• 9d843ee6fa Do a proper cleanup when printing usage info. Tobias Brunner 2010-05-04 17:33:35 +02:00
• 6d7f4e0653 Moved syslog.h include. Tobias Brunner 2010-05-04 17:40:10 +02:00
• 6b57f5edff Compiler warning fixed. Tobias Brunner 2010-05-04 17:00:43 +02:00
• 0465d2c0b7 fixed typo Andreas Steffen 2010-05-04 06:18:10 +02:00
• 17a02ff1b0 Add 'flush_line' option to filelog section. Adrian-Ken Rueegsegger 2010-05-02 14:37:16 +02:00
• 71a66a623e Use reqid from connection config if present. Reto Buerki 2010-04-22 17:03:30 +02:00
• 277fcf9f86 Add reqid field and getter function to child_cfg_t. Reto Buerki 2010-04-22 17:03:29 +02:00
• 1f83541d7b Include reqid in stroke add connection message. Reto Buerki 2010-04-22 17:03:28 +02:00
• 2b26a9c30d Add reqid keyword to config connection section. Reto Buerki 2010-04-22 17:03:27 +02:00
• 93be4ac44d delete release files Andreas Steffen 2010-05-03 09:31:22 +02:00
• a784c540e5 version bump to 4.4.1 Andreas Steffen 2010-05-03 09:09:43 +02:00
• 0ffedbfb46 added getprotobyname to whitelist Andreas Steffen 2010-05-02 21:13:10 +02:00
• fc753c1d3e remove subnet from sourceip Andreas Steffen 2010-05-02 17:58:36 +02:00
• 61e48488d9 final fix for cloning and deleting sourceip strings Andreas Steffen 2010-05-02 15:55:46 +02:00
• a48484322e fixed end->sourceip memory leak in ipsec starter Andreas Steffen 2010-05-02 14:56:35 +02:00
• 4c9b5e742a updated options in testing.conf Andreas Steffen 2010-05-02 11:47:24 +02:00
• 34f92dcfba fixed flex parser memory leaks in ipsec starter Andreas Steffen 2010-05-02 11:40:46 +02:00
• 2724ae521e free config before exiting since library_deinit() calls leak detective Andreas Steffen 2010-05-02 11:00:21 +02:00
• 726c0ae9d3 We have to rename thread_create on Mac OS X because it conflicts with a syscall. Tobias Brunner 2010-04-29 14:44:31 +02:00
• 1c31d34ed5 Initialize libstrongswan in stroke (fixes Vstr logging). Tobias Brunner 2010-04-29 14:51:44 +02:00
• 26a3d7e78e Initialize libstrongswan in starter (fixes Vstr logging). Tobias Brunner 2010-04-29 14:33:29 +02:00
• 361f416d2c The mutex of a thread has to be locked when destroying it. Tobias Brunner 2010-04-29 13:30:51 +02:00
• 257e27df07 Fixing out-of-tree build after adding dependency to config.status. Tobias Brunner 2010-04-29 13:29:53 +02:00
• b0e789035c Users of PLUGINS depend on config.status, rebuilding them if plugin configuration is updated Martin Willi 2010-04-29 11:28:27 +02:00
• eadbc3da2f Fixed RSA key generation with gcrypt Martin Willi 2010-04-29 09:51:37 +02:00
• dd04a68f22 PEM encoder supports encoding from RSA components directly, allowing gcrypt plugin to encode in PEM Martin Willi 2010-04-29 09:36:45 +02:00
• dd8cb2b089 added AES-GMAC support to NEWS Andreas Steffen 2010-04-29 07:41:30 +02:00
• 916fd45709 do not destroy whack_attr if it hasn't been initialized Andreas Steffen 2010-04-29 07:28:51 +02:00
• e20a494013 added debug output argument Andreas Steffen 2010-04-28 12:27:45 +02:00
• 40fb7165a9 Reintroduce to_referer(), redirect() does not work with get_referer() Martin Willi 2010-04-28 09:03:08 +02:00
• 69e492f2e2 Use a 301 permanent redirect if no controller given Martin Willi 2010-04-26 09:41:10 +02:00
• cb9c497a86 added ikev1/alg-esp-aes-gmac scenario Andreas Steffen 2010-04-27 13:48:37 +02:00
• af3be116cb added AES_GMAC output string Andreas Steffen 2010-04-27 13:47:11 +02:00
• 6f7dac0d72 added ikev2/alg-esp-aes-gmac scenario Andreas Steffen 2010-04-27 13:13:10 +02:00
• 6207b63d76 added ikev1/alg-modp-subgroup scenario Andreas Steffen 2010-04-23 15:23:54 +02:00
• 9239fc4a15 added ikev2/alg-modp-subgroup scenario Andreas Steffen 2010-04-23 15:03:16 +02:00
• 12821bd674 include dhcp-client-identifier in the DHCP request Andreas Steffen 2010-04-23 12:57:43 +02:00
• 2dbff1bf53 added ikev2/dhcp-static-client-id scenario Andreas Steffen 2010-04-23 12:56:59 +02:00
• 55fe05d489 fixed optional dnsmasq.conf in the ikev2/dhcp-static-mac scenario Andreas Steffen 2010-04-23 12:38:30 +02:00
• 837e9fda57 added ikev2/dhcp-static-mac scenario Andreas Steffen 2010-04-23 12:33:11 +02:00
• bcd20cc987 added ikev2/dhcp-dynamic scenario Andreas Steffen 2010-04-23 11:52:37 +02:00
• 19d49af539 make DHCP debug messages consistent Andreas Steffen 2010-04-23 07:37:16 +02:00
• 500a6d38ee fixed typo Andreas Steffen 2010-04-23 00:02:13 +02:00
• 1f6a707d10 Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no DH group Martin Willi 2010-04-21 08:40:55 +02:00
• d0f1b3b96f fixed segfault in pluto with multiple ISAKMP SAs in delete payload Heiko Hund 2010-04-20 21:22:50 +02:00
• 4590260b2d Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten Martin Willi 2010-04-19 14:41:20 +02:00
• f0212e8837 Accept DHCP replies on bootps port, as we act as a relay agent if server address configured Martin Willi 2010-04-19 11:16:36 +02:00
• 6edbe1652b Integrating libhydra into the Android build system. Tobias Brunner 2010-04-12 16:47:47 +02:00
• b73b3a033f Use openssl in Android by default. Tobias Brunner 2010-04-12 15:54:48 +02:00
• 355c3a66b1 When logging to the database, the IDs of an IKE SA are initially NULL. Tobias Brunner 2010-04-12 13:51:10 +02:00
• 054fd74658 fixed silly bug Andreas Steffen 2010-04-12 11:25:46 +02:00
• 9391b485f7 updated DER versions of research and sales CAs Andreas Steffen 2010-04-11 22:00:01 +02:00
• d3d2b7390f implemented inheritance of virtual IP assigned by Mode Config on the responder side Andreas Steffen 2010-04-11 19:19:20 +02:00
• 6e939d2f94 added ikev1/ip-two-pools-mixed scenario Andreas Steffen 2010-04-11 17:05:42 +02:00
• 9235edc276 added support of RAM-based pools to NEWS Andreas Steffen 2010-04-11 16:29:39 +02:00
• 2544e08ec7 IKEv1 uses Mode Config payload Andreas Steffen 2010-04-11 16:09:09 +02:00
• b87edeaade added ikev1/ip-two-pools scenario Andreas Steffen 2010-04-11 16:05:54 +02:00
• a4b2332fd2 remove virtual interfaces after scenario Andreas Steffen 2010-04-11 16:05:04 +02:00
• b516382cc9 added ikev1/ip-pool scenario Andreas Steffen 2010-04-11 14:40:04 +02:00
• ec96692c38 show in-memory pools in ipsec statusall Andreas Steffen 2010-04-11 11:46:47 +02:00
• b1701d097c added missing curly brackets Andreas Steffen 2010-04-11 00:49:04 +02:00
• b3127b42f9 support in-memory pools in swapped connection definitions Andreas Steffen 2010-04-11 00:26:49 +02:00
• 9f4b02e31d Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan. Tobias Brunner 2010-04-10 12:10:04 +02:00
• b74cd9573d pluto now requires attr plugin for dns and nbns server loading from strongswan.conf Andreas Steffen 2010-04-09 21:03:32 +02:00
• b34b93dbf7 Store DH generator in a chunk, hide non-public data in a private struct Martin Willi 2010-04-08 15:08:35 +02:00
• 6c1dc87551 recovered private keys of no CDP certificates Andreas Steffen 2010-04-07 19:37:53 +02:00
• 589d175a05 recovered lost Duck CA certificates Andreas Steffen 2010-04-07 19:30:33 +02:00
• 613ceca96c Migrated scepclient/openac logging hooks to new signature Martin Willi 2010-04-07 15:51:55 +02:00
• 54e354f2d6 Remove to_referer() method, as it fails if no referer was given Martin Willi 2010-04-07 15:36:22 +02:00
• f7c32feec0 Renamed clone function to avoid name clash with uclibc Martin Willi 2010-04-07 14:54:22 +02:00
• d101a61f87 NEWS about HA plugin Martin Willi 2010-04-07 14:16:52 +02:00
• 140418453a Updated HA plugin to new APIs Martin Willi 2010-03-22 10:25:27 +00:00
• 647008c8a7 Updated location of traffic selector header Martin Willi 2010-03-19 19:06:53 +01:00
• 29a46aacad Moved ha plugin to libcharon Martin Willi 2010-03-19 19:03:46 +01:00
• 3e8caf6af6 Make resync/monitoring functionality optional Martin Willi 2009-09-30 16:23:58 +02:00
• f24ca1dd55 Listen to ike_updown/rekey hook instead of ike_state_change Martin Willi 2009-09-30 11:48:15 +02:00
• c866a42737 Request a complete resync after daemon startup Martin Willi 2009-09-30 11:04:22 +02:00
• 1466af8556 Do not automatically take over segments, as we need to resync first Martin Willi 2009-09-30 10:36:27 +02:00
• ea249cc6f0 Drop overlapping segments only if we have no active SAs on it Martin Willi 2009-09-29 16:40:58 +02:00
• a05e388540 Do not install iptables rules, they should stay active after shutdown Martin Willi 2009-09-29 16:05:46 +02:00
• e262f4e543 Take over all segments if heartbeat becomes silent Martin Willi 2009-09-29 16:04:51 +02:00
• d87489661c Renamed ha-sync plugin to ha Martin Willi 2009-09-29 12:56:10 +02:00
• 3c82381296 Try to send HA sync messages synchronously Martin Willi 2009-09-29 11:31:24 +02:00
• f4f394e67c Do not sync a delete for a child in a destroying IKE_SA Martin Willi 2009-09-29 11:30:44 +02:00
• 5a0a359b88 Include ICMP traffic in sync tunnel Martin Willi 2009-09-29 10:43:47 +02:00
• 874c0bd8b8 Refactored segment enabling/disabling Martin Willi 2009-09-29 10:34:04 +02:00
• 5d67259042 Use a connected UDP socket Martin Willi 2009-09-29 08:53:58 +02:00
• 06308d9ede Removed obsolete socket subclasses Martin Willi 2009-09-28 14:49:16 +02:00
• 3912fdb1ec Automatically segment cluster using periodically sent status messages Martin Willi 2009-09-28 14:31:39 +02:00
• b7f15be136 Do not enable/disable our own sync tunnel Martin Willi 2009-09-23 14:04:32 +02:00
• 9fdf5f712e Enable/disable inactive/active segments only Martin Willi 2009-09-23 10:42:05 +02:00
• 310498f3de Deactivate all active segments before shutting down Martin Willi 2009-09-22 17:10:25 +02:00
• 4e248733a8 HA kernel interface can mangle netfilter rules, currently with iptables invocation Martin Willi 2009-09-22 16:51:47 +02:00
• dbc91f7c84 Added support for kernel segment manipulation Martin Willi 2009-09-22 15:19:43 +02:00
• 6921e8d5a9 Moved segment configuration parsing to ha_sync_plugin Martin Willi 2009-09-22 14:53:03 +02:00
• 37459ea928 Propagate segment manipulation to cluster node Martin Willi 2009-09-22 14:33:38 +02:00
• 3d672d4b0a Segment manipulation in HA sync is thread save Martin Willi 2009-09-22 14:32:52 +02:00
• c573b11c55 Passing 0 to segments->(de-)activate enables/disables all segments Martin Willi 2009-09-15 16:19:39 +02:00