Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 98ed9c6cf2 Migrated kernel_netlink_ipsec to METHOD/INIT macros Martin Willi 2010-02-23 15:59:25 +00:00
• 2d49f74e28 Migrated kernel_interface wrapper to METHOD/INIT macros Martin Willi 2010-02-23 16:34:34 +01:00
• 667b73721a Added left-/rightikeport ipsec.conf options to use custom IKE ports Martin Willi 2010-02-22 19:26:25 +01:00
• cc2eaddee4 Use src/dst ports as configured in ike_cfg Martin Willi 2010-02-22 18:34:11 +01:00
• 4e18490ea8 Store custom IKE src/dst ports on ike_cfg Martin Willi 2010-02-22 18:11:42 +01:00
• deac3a0a5d Migrated ike_cfg_t to METHOD/INIT macros Martin Willi 2010-02-22 17:01:22 +00:00
• 147dd96376 Migrated packet_t to METHOD/INIT macros Martin Willi 2010-02-22 10:26:13 +01:00
• dab0560497 Moved socket and socket-raw implementations to plugins Martin Willi 2010-02-22 14:56:35 +01:00
• c711687c00 Force libdl if the android plugin is enabled. AC_SEARCH_LIBS thinks it's not required, but on Android 2.0 it is. Tobias Brunner 2010-02-25 11:03:54 +01:00
• eba28948a5 Link all plugins to libstrongswan. Tobias Brunner 2010-02-24 10:34:29 +01:00
• 608af0a445 Avoid a race condition that could lead to a segmentation fault. Tobias Brunner 2010-02-25 08:56:05 +01:00
• 3e35a6e7a1 Use side-channel secured mpz_powm_sec of libgmp 5, if available Martin Willi 2010-02-18 17:38:59 +01:00
• 7d3a830a71 Updated debian package for NetworkManager-strongswan-1.1.2 Martin Willi 2010-02-18 09:45:56 +01:00
• e159cd1d1a Version bump and NEWS for NetworkManager-strongswan-1.1.2 release Martin Willi 2010-02-18 09:45:29 +01:00
• 0209179a30 Updated german translation Martin Willi 2010-02-18 09:20:33 +01:00
• 7613a68f33 Tooltips are translatable Martin Willi 2010-02-18 09:20:13 +01:00
• d178eee895 Newer glade requires explicit vertical vboxes Martin Willi 2010-02-18 09:03:17 +01:00
• 71070c88b7 Fixed lost renaimings in android plugin Martin Willi 2010-02-18 08:31:10 +01:00
• 55699f037f Added Android plugin, currently provides DNS handling on Android Martin Willi 2010-02-17 09:41:55 +00:00
• 63b0bc9c2d Invoke missing message() hook for incoming responses Martin Willi 2010-02-17 18:22:31 +01:00
• b65d7f8a15 version bump to 4.4.0 Andreas Steffen 2010-02-15 20:58:41 +01:00
• 38da64fe12 Detect windows hosts to add specific workarounds. Tobias Brunner 2009-12-01 18:18:49 +01:00
• 71baf5a8f0 Adding support for AES GMAC (RFC4543). Tobias Brunner 2009-12-01 18:17:37 +01:00
• 2aa553d773 Do not build own authentication data before we've verified others, we need the other identity in EAP Martin Willi 2010-02-09 16:11:07 +01:00
• 2d07095e01 hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6 Andreas Steffen 2010-02-06 12:34:41 +01:00
• dd0b1b9a16 generated hash-and-url files for rfc3779 certs Andreas Steffen 2010-02-06 11:41:44 +01:00
• 76fe5500c4 hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6 Andreas Steffen 2010-02-06 11:39:33 +01:00
• 5094bfd85f hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6 Andreas Steffen 2010-02-05 20:39:13 +01:00
• 61d7ff0c19 IPv6 fragment and http access are not needed in PSK scenario Andreas Steffen 2010-02-05 20:27:03 +01:00
• 699c47a9be hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6 Andreas Steffen 2010-02-05 20:15:00 +01:00
• 3cc0cc4332 Increased the buffer for netlink responses. Tobias Brunner 2010-02-05 20:02:39 +01:00
• 1f2da75069 IPv6 frag netfilter rule not needed anymore Andreas Steffen 2010-02-05 20:04:01 +01:00
• 563a177830 hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6 Andreas Steffen 2010-02-05 19:58:42 +01:00
• b917f49684 initialize variables to avoid compiler warning Andreas Steffen 2010-02-05 12:34:37 +01:00
• 313a53d4fc Use destination address of ppp interfaces as nexthop in starters default route lookup Martin Willi 2010-02-05 08:25:00 +00:00
• 6c9c0baee9 init_fetch() changed to fetch_initialize() Andreas Steffen 2010-02-05 06:17:02 +01:00
• 52719d719c use static IPsec policy netfilter rules in MOBIKE scenarios Andreas Steffen 2010-02-04 10:05:44 +01:00
• 8501181925 remove any charon.pid files remaining at the end of each scenario Andreas Steffen 2010-02-04 08:53:52 +01:00
• 00eb9267ad IPSEC_ROUTING_TABLE is now called routing_table Andreas Steffen 2010-02-03 19:32:50 +01:00
• ec37b04732 differentiate between executed and displayed iptables commands Andreas Steffen 2010-02-03 19:21:55 +01:00
• 7481f964ae Use child_updown hook in updown plugin, fixes doubled invocation of down script Martin Willi 2010-02-03 11:04:18 +01:00
• 0d8bdf24ff added ikev2/inactivity-timeout scenario Andreas Steffen 2010-02-03 10:28:30 +01:00
• 889ff9389b renamed init_fetch() to fetch_initialize() Andreas Steffen 2010-02-02 19:44:34 +01:00
• 41faec0791 Some whitespace and code cleanups concerning the mediation extension. Tobias Brunner 2009-09-15 13:13:25 +02:00
• dc5969242f Join pluto's fetching thread instead of detaching it in order to avoid that the leak-detective reports a memleak. Tobias Brunner 2010-02-02 15:17:09 +01:00
• b7fd2ea76c corrected captions Andreas Steffen 2010-02-01 12:44:44 +01:00
• bf1e0df7c5 warn if loaded local certificate is invalid Andreas Steffen 2010-02-01 12:29:32 +01:00
• 909c0c3d63 Updated NEWS about per-connection inactivity timeout Martin Willi 2010-01-27 16:08:06 +01:00
• 8015c91cb9 Added a ipsec.conf "inactivity" option to configure inactivity timeout for CHILD_SAs Martin Willi 2010-01-27 16:05:11 +01:00
• 71da001753 Made inactivity_timeout a per CHILD_SA config option Martin Willi 2010-01-27 15:47:08 +01:00
• db05341916 Refactored EAP payload, avoid unaligned word access Martin Willi 2010-01-21 14:43:07 +01:00
• 23d2bf84a3 Added a METHOD2() macro that implements a method for two different interfaces Martin Willi 2010-01-21 14:42:08 +01:00
• 47498044c3 Support RADIUS messages up to 4096 bytes, RADIUS EAP-Message fragmentation Martin Willi 2010-01-19 16:47:21 +01:00
• 7eab4a1be6 Support TLS client authentication Extended Key Usage in x509 generation Martin Willi 2010-01-14 12:00:43 +01:00
• 776f59f7be Block the signals before the call to sigwait. Tobias Brunner 2010-01-12 11:52:03 +01:00
• aa9eeb5deb Support for closing CHILD/IKE_SA if a CHILD_SA is inactive. Martin Willi 2010-01-12 10:16:34 +01:00
• bc6ff2fc99 Added strongswan.conf options to configure retransmission timeouts Martin Willi 2010-01-11 16:42:12 +01:00
• 527f7f9b1c Added a "double" getter to libstrongswan settings Martin Willi 2010-01-11 16:39:28 +01:00
• dbee988e28 Cast unaligned memcpy() args to char*, avoids over-optimization on ARM Martin Willi 2010-01-11 15:18:50 +01:00
• 8fb389b299 added ikev2/rw-eap-sim-only-radius scenario Andreas Steffen 2010-01-11 11:20:45 +01:00
• b979032088 log EAP-only authentication proposal Andreas Steffen 2010-01-11 11:17:40 +01:00
• 87eb27681a send strongSwan Vendor ID in ikev2/alg-sha256-96 scenario Andreas Steffen 2010-01-11 00:54:33 +01:00
• dd37fa8620 pluto and charon are using the same strongSwan Vendor ID Andreas Steffen 2010-01-11 00:43:46 +01:00
• aca9f9ab5a Added NEWS about mutual EAP-only authentication Martin Willi 2010-01-07 16:16:22 +01:00
• 34948b9971 EAP-MSCHAPv2 is indeed mutual, but is prone to MITM dictionary attacks Martin Willi 2010-01-07 15:56:11 +01:00
• f34702ff3f Support EAP-only authentication for mutual and key deriving EAP methods Martin Willi 2010-01-07 15:51:30 +01:00
• 12fca6cc9f Indicate and dected support for EAP-only authentication Martin Willi 2010-01-07 14:30:28 +01:00
• cdad91de49 Added NEWS for the new Vendor ID requirement for private use allocations Martin Willi 2010-01-07 11:14:33 +01:00
• 023fd8f135 Match to private use algorithms only if we know we are talking to strongSwan Martin Willi 2010-01-07 11:07:53 +01:00
• b3349c5694 Interpret private use BEET mode notify only if we know we are talking to strongSwan Martin Willi 2010-01-07 09:37:38 +00:00
• a5a0bcaa04 Add an option to send a vendor ID, allows us to properly support private extensions Martin Willi 2010-01-07 10:26:58 +01:00
• 580063971b added some recent new attributes registered with IANA Andreas Steffen 2010-01-07 07:49:16 +01:00
• 3e33ae1004 ipsec pki --self|issue supports --pathlen option setting a path length constraint Andreas Steffen 2009-12-31 15:13:35 +01:00
• 7eaec999ca make error message about missing MD4 hasher more explicit Andreas Steffen 2009-12-30 23:32:03 +01:00
• 83c282ebb4 differentiate EAP method initialization errors Andreas Steffen 2009-12-30 21:34:59 +01:00
• a2847740d2 removed charon-specific load statement in pluto scenario Andreas Steffen 2009-12-26 17:13:53 +01:00
• e9a1852aac Pluto's fetcher thread is now created via libstrongswan. Tobias Brunner 2009-12-26 15:49:15 +01:00
• c5454eaf61 added RFC 3779 CA Andreas Steffen 2009-12-25 11:01:30 +01:00
• 7c697964d3 added three RFC 3779 scenarios Andreas Steffen 2009-12-25 10:58:06 +01:00
• e98a4d8028 Added RFC 3779 support to NEWS Andreas Steffen 2009-12-25 09:10:44 +01:00
• d002c62347 enforce RFC 3779 address constraints on traffic selectors Andreas Steffen 2009-12-25 01:58:20 +01:00
• ff4d4aa99a Adapted the load_tester kernel-interface to the changes introduced in 6ec949e02. Tobias Brunner 2009-12-23 17:15:28 +01:00
• cb186f9922 Added some IPv6 tweaks for Android. Tobias Brunner 2009-12-23 11:30:41 +01:00
• a37cf4580a Semicolon removed. Tobias Brunner 2009-12-22 13:59:32 +01:00
• 3f490ff978 According to the man page (and the header files in Android) prctl takes a total of 5 arguments. Tobias Brunner 2009-12-22 13:36:46 +01:00
• 85202e8795 Added a workaround for the missing pthread_cancel on Android. Tobias Brunner 2009-12-22 10:51:11 +01:00
• b2944d71ca Use pthread_cond_timedwait_monotonic on Android. Tobias Brunner 2009-12-21 17:03:33 +01:00
• 01e606546c Cache queue locking in credential manager corrected. Tobias Brunner 2009-12-21 14:09:09 +01:00
• 47e98cda5f Join worker threads when destroying the processor. Tobias Brunner 2009-12-21 13:42:48 +01:00
• b97cc0ab3f Callback job refactored and fixed. Tobias Brunner 2009-12-17 18:30:15 +01:00
• 89ec5bef08 Whitespace cleanup. Tobias Brunner 2009-12-17 16:00:14 +01:00
• 4ec2c94b5d Readding changes that got lost during refactoring/rebasing. Tobias Brunner 2009-12-17 15:58:46 +01:00
• 4a5a5dd290 Using the thread wrapper in charon, libstrongswan and their plugins. Tobias Brunner 2009-12-17 15:58:12 +01:00
• c48eea9203 Adding an object-oriented wrapper for thread-specific values. Tobias Brunner 2009-12-17 15:28:23 +01:00
• 0d5c6a28d5 Adding an object-oriented wrapper for threads. Tobias Brunner 2009-12-17 15:25:37 +01:00
• 070ac5b0b7 Check if libpthread is required or not. Tobias Brunner 2009-12-10 11:08:01 +01:00
• 866dc0134a Check for pthread_condattr_init added to configure script. Tobias Brunner 2009-12-08 18:24:40 +01:00
• c33d4f29bc Generating the apidoc in an out-of-tree build fixed. Tobias Brunner 2009-12-08 17:06:04 +01:00
• 5fe538504e Moved implementation of condvar_t to mutex.c because it requires access to private_mutex_t. Tobias Brunner 2009-12-08 17:55:37 +01:00
• eba64cef41 Separated the public interfaces of the threading primitives. Tobias Brunner 2009-12-08 16:53:01 +01:00