Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• ea2f2c4b90 Fixing a bug on platforms where size_t is unsigned. Tobias Brunner 2010-03-03 17:35:19 +01:00
• 465ccdc8cf The parsed timeval is unsigned. Tobias Brunner 2010-03-03 17:34:49 +01:00
• fc1afcc89e The return value of snprintf is int not size_t. Tobias Brunner 2010-03-03 17:34:06 +01:00
• d02308502f Add braces around empty body in if statement Martin Willi 2010-03-03 16:53:42 +01:00
• a5a4b6c9d1 Added charon.send/receive_delay options to simulate different RTTs Martin Willi 2010-03-03 15:57:06 +01:00
• 24f058ac74 Migrated receiver_t to METHOD/INIT macros Martin Willi 2010-03-03 15:51:32 +01:00
• eb1aa4c537 Migrated sender_t to METHOD/INIT macros Martin Willi 2010-03-03 15:46:53 +01:00
• aa59a7f241 Check if we are not using a vendor EAP method in EAP_IDENTITY comparison. Martin Willi 2010-03-03 12:25:27 +01:00
• 1abab9ec4f Use "static const", some GCCs don't like "const static" Martin Willi 2010-03-03 10:44:01 +01:00
• 1be3298807 Adding Android.mk files to build charon and libstrongswan with the Android build system. Tobias Brunner 2010-03-03 10:18:46 +01:00
• afb364fff9 Reverting eba28948a5 which was only necessary when cross-compiling the plugins for Android 2.0. Tobias Brunner 2010-03-02 12:03:44 +01:00
• 4e657051f7 Streamlined the source file list formatting in plugin makefiles. Tobias Brunner 2010-03-02 10:32:09 +01:00
• fac3bfa5cd Fixing some includes by replacing <> with "". Tobias Brunner 2010-03-01 16:03:18 +01:00
• 6ec60bb92b Link all enabled libstrongswan plugins into the library, link all enabled charon plugins into libcharon. Tobias Brunner 2010-03-01 16:15:08 +01:00
• 3724668b3d Enabling the plugin loader to be able to load plugins without explicitly loading a shared object file first. Tobias Brunner 2010-03-01 16:07:07 +01:00
• 3372ad144b Adding an option to build libstrongswan and charon monolithically. Tobias Brunner 2010-03-01 16:16:55 +01:00
• 9ce567f895 Changed plugin constructors from plugin_create to plugin_name_plugin_create. Tobias Brunner 2010-02-23 16:20:38 +01:00
• 6cc13cd9c5 Removing the plugin constructor declarations from the header files. Tobias Brunner 2010-02-23 16:17:48 +01:00
• 3cfbc91a98 renewed Authorization Authority certificate Andreas Steffen 2010-02-27 22:16:36 +01:00
• 3e6b50ed4a NEWS about the android plugin Martin Willi 2010-02-26 11:57:59 +01:00
• 00c60592f2 NEWS about the dynamic socket implementation Martin Willi 2010-02-26 11:52:54 +01:00
• 5acb97cebb Link libstrongswan to the new plugins, too Martin Willi 2010-02-26 11:49:04 +01:00
• f16ca9e89c Add support for dynamic ports in load tester Martin Willi 2010-02-26 10:21:01 +00:00
• 347488bd67 Process ike_vendor task before ike_init, fixes support for private algs in IKE Martin Willi 2010-02-26 11:07:56 +01:00
• ed5fc4cafe Use message instead of attributes in hook Martin Willi 2009-11-27 11:14:40 +01:00
• b3b74e479b Set UDP encapsulation option on all sockets Martin Willi 2010-02-24 14:11:58 +00:00
• da2303ca69 Fixed starter left-/rightikeport keyword Martin Willi 2010-02-24 13:49:55 +00:00
• 9cb2360e4f Added locking to dynamic socket list Martin Willi 2010-02-24 11:45:18 +01:00
• af2c43fdc7 Include ports in ike_cfg equality check Martin Willi 2010-02-24 10:07:47 +00:00
• 9ed1bb4842 Added an initiator-only socket implementation which binds ports on demand Martin Willi 2010-02-24 10:58:23 +01:00
• 40706b6027 Removed obsolete daemon kill Martin Willi 2010-02-23 17:59:52 +01:00
• d6a27ec64e Do not kill daemon, just not use pluggable kernel interface if initialization failed Martin Willi 2010-02-23 16:49:34 +00:00
• 54f818590e Pass sockets to bypass to kernel interface, allowing us to register them dynamically Martin Willi 2010-02-23 16:28:23 +00:00
• 3e631491a0 Migrated kernel_klips_ipsec to METHOD/INIT macros Martin Willi 2010-02-23 16:10:29 +00:00
• 44791b75f5 Migrated kernel_pfkey_ipsec to METHOD/INIT macros Martin Willi 2010-02-23 16:04:46 +00:00
• 98ed9c6cf2 Migrated kernel_netlink_ipsec to METHOD/INIT macros Martin Willi 2010-02-23 15:59:25 +00:00
• 2d49f74e28 Migrated kernel_interface wrapper to METHOD/INIT macros Martin Willi 2010-02-23 16:34:34 +01:00
• 667b73721a Added left-/rightikeport ipsec.conf options to use custom IKE ports Martin Willi 2010-02-22 19:26:25 +01:00
• cc2eaddee4 Use src/dst ports as configured in ike_cfg Martin Willi 2010-02-22 18:34:11 +01:00
• 4e18490ea8 Store custom IKE src/dst ports on ike_cfg Martin Willi 2010-02-22 18:11:42 +01:00
• deac3a0a5d Migrated ike_cfg_t to METHOD/INIT macros Martin Willi 2010-02-22 17:01:22 +00:00
• 147dd96376 Migrated packet_t to METHOD/INIT macros Martin Willi 2010-02-22 10:26:13 +01:00
• dab0560497 Moved socket and socket-raw implementations to plugins Martin Willi 2010-02-22 14:56:35 +01:00
• c711687c00 Force libdl if the android plugin is enabled. AC_SEARCH_LIBS thinks it's not required, but on Android 2.0 it is. Tobias Brunner 2010-02-25 11:03:54 +01:00
• eba28948a5 Link all plugins to libstrongswan. Tobias Brunner 2010-02-24 10:34:29 +01:00
• 608af0a445 Avoid a race condition that could lead to a segmentation fault. Tobias Brunner 2010-02-25 08:56:05 +01:00
• 3e35a6e7a1 Use side-channel secured mpz_powm_sec of libgmp 5, if available Martin Willi 2010-02-18 17:38:59 +01:00
• 7d3a830a71 Updated debian package for NetworkManager-strongswan-1.1.2 Martin Willi 2010-02-18 09:45:56 +01:00
• e159cd1d1a Version bump and NEWS for NetworkManager-strongswan-1.1.2 release Martin Willi 2010-02-18 09:45:29 +01:00
• 0209179a30 Updated german translation Martin Willi 2010-02-18 09:20:33 +01:00
• 7613a68f33 Tooltips are translatable Martin Willi 2010-02-18 09:20:13 +01:00
• d178eee895 Newer glade requires explicit vertical vboxes Martin Willi 2010-02-18 09:03:17 +01:00
• 71070c88b7 Fixed lost renaimings in android plugin Martin Willi 2010-02-18 08:31:10 +01:00
• 55699f037f Added Android plugin, currently provides DNS handling on Android Martin Willi 2010-02-17 09:41:55 +00:00
• 63b0bc9c2d Invoke missing message() hook for incoming responses Martin Willi 2010-02-17 18:22:31 +01:00
• b65d7f8a15 version bump to 4.4.0 Andreas Steffen 2010-02-15 20:58:41 +01:00
• 38da64fe12 Detect windows hosts to add specific workarounds. Tobias Brunner 2009-12-01 18:18:49 +01:00
• 71baf5a8f0 Adding support for AES GMAC (RFC4543). Tobias Brunner 2009-12-01 18:17:37 +01:00
• 2aa553d773 Do not build own authentication data before we've verified others, we need the other identity in EAP Martin Willi 2010-02-09 16:11:07 +01:00
• 2d07095e01 hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6 Andreas Steffen 2010-02-06 12:34:41 +01:00
• dd0b1b9a16 generated hash-and-url files for rfc3779 certs Andreas Steffen 2010-02-06 11:41:44 +01:00
• 76fe5500c4 hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6 Andreas Steffen 2010-02-06 11:39:33 +01:00
• 5094bfd85f hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6 Andreas Steffen 2010-02-05 20:39:13 +01:00
• 61d7ff0c19 IPv6 fragment and http access are not needed in PSK scenario Andreas Steffen 2010-02-05 20:27:03 +01:00
• 699c47a9be hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6 Andreas Steffen 2010-02-05 20:15:00 +01:00
• 3cc0cc4332 Increased the buffer for netlink responses. Tobias Brunner 2010-02-05 20:02:39 +01:00
• 1f2da75069 IPv6 frag netfilter rule not needed anymore Andreas Steffen 2010-02-05 20:04:01 +01:00
• 563a177830 hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6 Andreas Steffen 2010-02-05 19:58:42 +01:00
• b917f49684 initialize variables to avoid compiler warning Andreas Steffen 2010-02-05 12:34:37 +01:00
• 313a53d4fc Use destination address of ppp interfaces as nexthop in starters default route lookup Martin Willi 2010-02-05 08:25:00 +00:00
• 6c9c0baee9 init_fetch() changed to fetch_initialize() Andreas Steffen 2010-02-05 06:17:02 +01:00
• 52719d719c use static IPsec policy netfilter rules in MOBIKE scenarios Andreas Steffen 2010-02-04 10:05:44 +01:00
• 8501181925 remove any charon.pid files remaining at the end of each scenario Andreas Steffen 2010-02-04 08:53:52 +01:00
• 00eb9267ad IPSEC_ROUTING_TABLE is now called routing_table Andreas Steffen 2010-02-03 19:32:50 +01:00
• ec37b04732 differentiate between executed and displayed iptables commands Andreas Steffen 2010-02-03 19:21:55 +01:00
• 7481f964ae Use child_updown hook in updown plugin, fixes doubled invocation of down script Martin Willi 2010-02-03 11:04:18 +01:00
• 0d8bdf24ff added ikev2/inactivity-timeout scenario Andreas Steffen 2010-02-03 10:28:30 +01:00
• 889ff9389b renamed init_fetch() to fetch_initialize() Andreas Steffen 2010-02-02 19:44:34 +01:00
• 41faec0791 Some whitespace and code cleanups concerning the mediation extension. Tobias Brunner 2009-09-15 13:13:25 +02:00
• dc5969242f Join pluto's fetching thread instead of detaching it in order to avoid that the leak-detective reports a memleak. Tobias Brunner 2010-02-02 15:17:09 +01:00
• b7fd2ea76c corrected captions Andreas Steffen 2010-02-01 12:44:44 +01:00
• bf1e0df7c5 warn if loaded local certificate is invalid Andreas Steffen 2010-02-01 12:29:32 +01:00
• 909c0c3d63 Updated NEWS about per-connection inactivity timeout Martin Willi 2010-01-27 16:08:06 +01:00
• 8015c91cb9 Added a ipsec.conf "inactivity" option to configure inactivity timeout for CHILD_SAs Martin Willi 2010-01-27 16:05:11 +01:00
• 71da001753 Made inactivity_timeout a per CHILD_SA config option Martin Willi 2010-01-27 15:47:08 +01:00
• db05341916 Refactored EAP payload, avoid unaligned word access Martin Willi 2010-01-21 14:43:07 +01:00
• 23d2bf84a3 Added a METHOD2() macro that implements a method for two different interfaces Martin Willi 2010-01-21 14:42:08 +01:00
• 47498044c3 Support RADIUS messages up to 4096 bytes, RADIUS EAP-Message fragmentation Martin Willi 2010-01-19 16:47:21 +01:00
• 7eab4a1be6 Support TLS client authentication Extended Key Usage in x509 generation Martin Willi 2010-01-14 12:00:43 +01:00
• 776f59f7be Block the signals before the call to sigwait. Tobias Brunner 2010-01-12 11:52:03 +01:00
• aa9eeb5deb Support for closing CHILD/IKE_SA if a CHILD_SA is inactive. Martin Willi 2010-01-12 10:16:34 +01:00
• bc6ff2fc99 Added strongswan.conf options to configure retransmission timeouts Martin Willi 2010-01-11 16:42:12 +01:00
• 527f7f9b1c Added a "double" getter to libstrongswan settings Martin Willi 2010-01-11 16:39:28 +01:00
• dbee988e28 Cast unaligned memcpy() args to char*, avoids over-optimization on ARM Martin Willi 2010-01-11 15:18:50 +01:00
• 8fb389b299 added ikev2/rw-eap-sim-only-radius scenario Andreas Steffen 2010-01-11 11:20:45 +01:00
• b979032088 log EAP-only authentication proposal Andreas Steffen 2010-01-11 11:17:40 +01:00
• 87eb27681a send strongSwan Vendor ID in ikev2/alg-sha256-96 scenario Andreas Steffen 2010-01-11 00:54:33 +01:00
• dd37fa8620 pluto and charon are using the same strongSwan Vendor ID Andreas Steffen 2010-01-11 00:43:46 +01:00
• aca9f9ab5a Added NEWS about mutual EAP-only authentication Martin Willi 2010-01-07 16:16:22 +01:00
• 34948b9971 EAP-MSCHAPv2 is indeed mutual, but is prone to MITM dictionary attacks Martin Willi 2010-01-07 15:56:11 +01:00