Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 4d15129160 pass along X509 flags when loading PEM encoded data Martin Willi 2009-08-12 15:34:14 +02:00
• 280469923d make use of the pem helper plugin to load credentials Martin Willi 2009-08-12 14:40:16 +02:00
• c9db16b7dd added file loading support to pem plugin, using mmap() Martin Willi 2009-08-12 13:26:02 +02:00
• 160f4c225d moved PEM parsing functionality to its own plugin Martin Willi 2009-08-11 16:24:01 +02:00
• 5672eae131 make boolean expression less enigmatic Andreas Steffen 2009-08-25 21:09:54 +02:00
• eb641993d4 set stroke connection flags to a clear TRUE/FALSE Martin Willi 2009-08-25 19:57:36 +02:00
• 469083cc7d disable lifetimes of allocated SPIs Martin Willi 2009-08-25 18:15:25 +02:00
• 1bc0b4f795 remove incomplete SAs with PROTO_ESP Martin Willi 2009-08-25 18:12:55 +02:00
• 625b48b558 added URL for git repository served over git:// protocol Martin Willi 2009-08-21 10:52:39 +02:00
• 8bc2a8086c version bump to 4.3.5 Andreas Steffen 2009-08-18 18:35:37 +02:00
• fc0ed07c1f pruned OID tree Andreas Steffen 2009-08-18 18:24:26 +02:00
• c8b543a6fc fixed wrong emailAddress OID introduced by revision c31687da Andreas Steffen 2009-08-18 17:52:00 +02:00
• 333b461aa6 Fixing address resolution via getaddrinfo in libfreeswan. Tobias Brunner 2009-08-18 12:30:11 +02:00
• 8a17c1f907 check integrity of pool code file Andreas Steffen 2009-08-17 15:46:56 +02:00
• bde541acf8 integrity test of openac and scepclient code files Andreas Steffen 2009-08-17 14:25:18 +02:00
• 430dd08a2b NEWS for 4.3.4 Andreas Steffen 2009-08-17 13:47:28 +02:00
• 51dfa7f592 reinitialize print arguments Andreas Steffen 2009-08-17 10:54:34 +02:00
• 2f5b1e0eb7 check success of library_init() Andreas Steffen 2009-08-14 22:13:51 +02:00
• f1777dff59 Replacing gethostbyname, gethostbyname2 and their _r variants with getaddrinfo to increase portability. Tobias Brunner 2009-08-14 15:47:04 +02:00
• 26965b4ef3 OpenSolaris needs libsocket and libnsl for socket(). Tobias Brunner 2009-08-14 14:42:03 +02:00
• 932fdc38de Enable CMSG headers and macros on OpenSolaris. Tobias Brunner 2009-08-14 14:32:18 +02:00
• 8c3627c5ae Added define to get sigwait with two parameters on OpenSolaris. Tobias Brunner 2009-08-14 14:31:18 +02:00
• e580e0a9a2 sockio.h is required on OpenSolaris for SIOCGIFADDR. Tobias Brunner 2009-08-14 14:02:27 +02:00
• 647bd246e4 Replaced the strange definitions of IN6ADDR_ANY_INIT and IN6ADDR_LOOPBACK_INIT on OpenSolaris. Tobias Brunner 2009-08-14 13:57:07 +02:00
• cc396286e8 Defined some missing fixed-width int types on OpenSolaris. Tobias Brunner 2009-08-14 13:54:53 +02:00
• a3ccf95f3f LOG_AUTHPRIV is not defined on OpenSolaris. Tobias Brunner 2009-08-14 13:37:07 +02:00
• 3901937d14 OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t. Tobias Brunner 2009-08-14 13:30:59 +02:00
• 8b6a5ce5ba We need to include alloca.h on OpenSolaris. Tobias Brunner 2009-08-14 13:25:22 +02:00
• 12a699c58d fixed 4.3 refactoring error Andreas Steffen 2009-08-11 08:51:16 +02:00
• 87079f58e1 added -module -avoid-version LDFLAGS Andreas Steffen 2009-08-11 01:06:45 +02:00
• 8ddcac4c48 prepare CAMELLIA_CCM ESP encryption Andreas Steffen 2009-08-10 16:30:42 +02:00
• 20af53fe33 add ikev1/esp-alg-aes-ctr scenario Andreas Steffen 2009-08-08 19:20:53 +02:00
• 453c6aea16 added ikev2/esp-alg-aes-ctr scenario Andreas Steffen 2009-08-08 19:08:17 +02:00
• 3974b2fb07 FreeBSD's libc does not support backtrace(), but libexecinfo optionally replicates this function (and the other defined in execinfo.h). Tobias Brunner 2009-08-07 18:30:40 +02:00
• dd4c14f37c set protocol to ESP for policies installed as a trap Martin Willi 2009-08-07 16:05:32 +02:00
• d9796a4311 fixed printf fromat for length limited string Martin Willi 2009-08-06 17:56:45 +02:00
• 4b5b92bfee %llu correctly prints u_int64_t Andreas Steffen 2009-08-07 09:50:36 +02:00
• 4a02deb088 printing u_int64_t caused segfault on 32-bit platforms Andreas Steffen 2009-08-07 08:47:07 +02:00
• 99dd42918e do not set usetime if query_policy() fails Andreas Steffen 2009-08-07 05:59:09 +02:00
• 79ff614144 Use LONG_MAX instead of a hard-coded value. Tobias Brunner 2009-08-06 18:22:01 +02:00
• bfca7aa5ed FreeBSD returns the current policy use time only after specifying a hard lifetime when installing the policy. Tobias Brunner 2009-08-06 18:14:44 +02:00
• f53088c657 added openssl-ikev2/alg-camellia scenario Andreas Steffen 2009-08-06 16:48:24 +02:00
• c3a78360a8 Fixed a race condition when querying stats of a child_sa in different order. Tobias Brunner 2009-08-06 16:46:02 +02:00
• 5d8306de68 use SS_RC_FIRST and SS_RC_LAST Andreas Steffen 2009-08-06 16:42:44 +02:00
• 3646c8a159 abort pluto or charon if initialization fails Andreas Steffen 2009-08-06 16:32:42 +02:00
• dd83c6d490 Don't query the policy usetime if there was no traffic on the SA. Tobias Brunner 2009-08-06 15:14:54 +02:00
• b3f8ea8346 Reverted the interface changes introduced in 3f720dc7. Tobias Brunner 2009-08-06 13:30:16 +02:00
• 51c037cc71 added support for ipsec.secrets "include" directive Martin Willi 2009-08-06 11:29:55 +02:00
• 1e7b4b0028 Reversed the check for udp.h, fixes compilation on Linux. Tobias Brunner 2009-08-06 10:01:59 +02:00
• 994b80b513 activated CAMELLIA_CBC cipher in openssl plugin Andreas Steffen 2009-08-05 22:46:53 +02:00
• b6f739c13b support of SHA224-based certificate signatures Andreas Steffen 2009-08-05 22:01:13 +02:00
• 7da1f4a0ff Enabling UDP encapsulation via setsockopt fails on Mac OS X (it is also not required as this is done using sysctl). Tobias Brunner 2009-08-05 12:31:10 +02:00
• fcdf491a21 output number of transmitted bytes in closing CHILD_SA statement Andreas Steffen 2009-08-04 23:08:42 +02:00
• 524f9ac470 FreeBSD only reports a policy's usetime if a lifetime has been specified when the policy was added (we only specify a lifetime on the SA, not on the policy). Tobias Brunner 2009-08-04 11:03:39 +02:00
• 56ee8fcc96 FreeBSD and Mac OS X both set the sequence number of an SADB_X_SPDGET response to zero, we accept that for now. Tobias Brunner 2009-07-31 18:10:39 +02:00
• e8c3cdb25b Missing check for udp.h added. Tobias Brunner 2009-07-31 17:02:53 +02:00
• 3d2f73b92f parse RDNs in multiple SEQUENCEs in all SETs of a DN Martin Willi 2009-08-03 15:24:48 +02:00
• 5cb300e795 compare IKE config when reusing an existing IKE_SA to initiate a CHILD_SA Martin Willi 2009-08-03 14:37:24 +02:00
• 10c13ed264 fixed dereferencing bug caused by bool type redefinition Andreas Steffen 2009-08-02 16:58:32 +02:00
• f35f229fd6 implemented query_sa() for PFKEYv2 Andreas Steffen 2009-08-02 11:46:33 +02:00
• 47eb87d437 corrected interface definition Andreas Steffen 2009-07-31 08:57:55 +02:00
• 3f720dc7c3 update usetime only if usebytes increase Andreas Steffen 2009-07-30 23:19:42 +02:00
• 2ad51539f6 display transmitted bytes per SA Andreas Steffen 2009-07-30 21:33:19 +02:00
• eab05274f4 Handling of unsupported policy directions (FWD) fixed. Tobias Brunner 2009-07-30 14:04:17 +02:00
• e20bd8b6ea Enabling NAT-T on Mac OS X using the private SADB_X_EXT_NATT flag and sadb_sa_2 struct. Tobias Brunner 2009-07-30 13:52:08 +02:00
• 789ba17024 Configure the NAT-T port via sysctl on Mac OS X to enable handling of incoming UDP encapsulated ESP packets in the kernel. Tobias Brunner 2009-07-29 11:34:47 +02:00
• b2117eee20 Make accept(2) and recvfrom(2) cancellation points on Mac OS X. Tobias Brunner 2009-07-24 10:58:27 +02:00
• ecff28c5c5 fixe KW_END_FIRST..KW_END_LAST keyword range Andreas Steffen 2009-07-28 15:44:24 +02:00
• acb34739e4 improved DPD error message Andreas Steffen 2009-07-22 22:30:21 +02:00
• e1089f5906 added file and segment lengths to checksum.c Andreas Steffen 2009-07-21 22:23:51 +02:00
• 8ce8e19068 version bump to 4.3.4 Andreas Steffen 2009-07-21 22:21:52 +02:00
• 144b433402 version bump of Linux UML kernel to 2.6.30.2 Andreas Steffen 2009-07-21 15:51:04 +02:00
• fcac8f6571 filter objects for segment checksumming by dlpi_name, excludes rare false positives Martin Willi 2009-07-21 15:10:24 +02:00
• 7655843ab5 enumerate executable sections only to build checksum Martin Willi 2009-07-21 15:00:18 +02:00
• acd4afc997 announce integrity testing only once Martin Willi 2009-07-21 14:58:14 +02:00
• 6ff7ab850b Fixed GID lookup in cases where the configured group is a prefix of another group. Tobias Brunner 2009-07-20 21:20:03 +02:00
• 9af7715c3d Fixed installation of config files in out-of-tree builds. Tobias Brunner 2009-07-20 21:13:45 +02:00
• 7cdf712d3e Use the numerical UID/GID to install the config files and create the ipsec.d directories. Tobias Brunner 2009-07-20 21:03:05 +02:00
• 7d2b06da6a Translate the configured user and group to a numerical UID and GID. Tobias Brunner 2009-07-20 21:01:13 +02:00
• def1777eca streamlined integrity test output some more Andreas Steffen 2009-07-18 11:23:27 +02:00
• 1d941f12ad advertise activated integrity tests Andreas Steffen 2009-07-18 00:37:35 +02:00
• aa74d70595 added latest NEWS Andreas Steffen 2009-07-17 22:54:23 +02:00
• d9b67a9fc0 added ikev1/net2net-pgp-v4 scenario Andreas Steffen 2009-07-17 22:36:12 +02:00
• 542471e3fe adapted scenario description for OpenPGP V3 keys Andreas Steffen 2009-07-17 22:33:22 +02:00
• 03b704fd55 enable crypt debugging in ikev1/esp-alg-camellia scenario Andreas Steffen 2009-07-17 21:27:54 +02:00
• 2e4a94ec26 added strongswan-2.8.11 and strongswan-4.2.17 VIDs Andreas Steffen 2009-07-17 21:19:32 +02:00
• f179ba474e enable integrity test in all rw-cert scenarios Andreas Steffen 2009-07-17 20:52:14 +02:00
• e3f3b004e2 fix test vector error output Andreas Steffen 2009-07-17 20:36:21 +02:00
• eab241fb56 stop strongswan if integrity check of libstrongswan or daemon fails Andreas Steffen 2009-07-17 20:33:19 +02:00
• 6b04ba288d streamlined debug output of integrity tests Andreas Steffen 2009-07-17 17:00:17 +02:00
• ca366aeea0 enforce strongSwan coding rules Andreas Steffen 2009-07-17 16:57:07 +02:00
• 521aa00fb1 shortened cypto test output Andreas Steffen 2009-07-17 16:36:01 +02:00
• 848133ff1c accelerate lookup in non-concatenated pools Andreas Steffen 2009-07-17 13:58:29 +02:00
• dfd8ddfb33 added scenario ikev2/ip-split-pools-db Andreas Steffen 2009-07-17 13:38:57 +02:00
• ec54df1762 added sql/ip-split-pools-db and sql/ip-split-pools-db-restart scenarios Andreas Steffen 2009-07-17 11:50:59 +02:00
• 7f522b5fd8 check for an existing lease over all assigned pools first Andreas Steffen 2009-07-17 11:48:35 +02:00
• 07be083b7f fixed problem with static leases over multiple pools Andreas Steffen 2009-07-16 21:53:46 +02:00
• 375a91bb9b Fixing distribution build (checksum.c is created on the user's system). Tobias Brunner 2009-07-16 16:50:55 +02:00
• e0964e2e26 fixed memleak in SQL config lookup Martin Willi 2009-07-16 15:59:56 +02:00
• 69fc782000 Check for gperf version added to configure script. Tobias Brunner 2009-07-16 14:59:30 +02:00