This website requires JavaScript.
88957f54f2
raise an alert() if the RADIUS server is not responding
Martin Willi
2009-07-15 16:13:51 +02:00
e85b83c737
added an alert() bus hook to raise critical system errors and notifications
Martin Willi
2009-07-15 16:12:02 +02:00
c7e0f07ced
Typo fixed.
Tobias Brunner
2009-07-16 10:59:20 +02:00
cf00cffef2
Added an option to the configure script to disable building the scripts.
Tobias Brunner
2009-07-16 10:52:14 +02:00
599d2bcea8
Revert "gperf under FreeBSD does not know the -m option."
Tobias Brunner
2009-07-16 10:09:23 +02:00
233a132634
Removed an unnecessary include of a header that is not available on Mac OS X.
Tobias Brunner
2009-07-15 22:39:40 +02:00
225bb2b810
conversion from ECDSA_WITH_SHAxxx OIDs to signature schemes
Andreas Steffen
2009-07-15 18:12:40 +02:00
f5410905ac
moved the CFLAGS mangling AC_LIB_PREFIX macro behind CFLAG test
Martin Willi
2009-07-15 16:04:37 +02:00
449e90e1af
updated debian package
Martin Willi
2009-07-15 14:09:49 +02:00
0a1d168752
updated Standards-Version to 3.8.2
Martin Willi
2009-07-15 14:01:47 +02:00
e04c5d9371
added ${misc:Depends} dependency, fixes debhelper-but-no-misc-depends lintian warning
Martin Willi
2009-07-15 14:00:42 +02:00
426e1c3d0f
added copyright information, fixes copyright-without-copyright-notice lintian warning
Martin Willi
2009-07-15 13:59:25 +02:00
74b14b4008
cast pointers to uintptr_t for alignement check
Martin Willi
2009-07-15 10:07:15 +02:00
0ead254919
gperf under FreeBSD does not know the -m option.
Tobias Brunner
2009-07-14 12:03:12 +02:00
fd0df7ec75
Corrected check for valid ASN1 types in rdn_enumerate.
Tobias Brunner
2009-07-14 11:55:09 +02:00
0b5f2a81da
Added --with-lib-prefix option to the configure script.
Tobias Brunner
2009-07-14 11:50:24 +02:00
75682462fc
added SHA224_WITH_RSA and ECDSA_WITH_SHAxxx OIDs
Andreas Steffen
2009-07-14 05:35:01 +02:00
d44b03563a
double free caused strange side effects
Andreas Steffen
2009-07-13 20:28:36 +02:00
ecb32c75ce
report installation failure of inbound and/or outbound IPsec SA, separately
Andreas Steffen
2009-07-13 15:13:12 +02:00
5c49289e27
great, I got my comma back
Andreas Steffen
2009-07-12 21:08:37 +02:00
1c7f456a0b
ecp_x_coordinate_only option and IKEv1 AEAD support
Andreas Steffen
2009-07-11 20:04:38 +02:00
a7a42f92d5
addes ikev1/esp-alg-aes-ccm and ikev1/esp-alg-aes-gcm scenarios
Andreas Steffen
2009-07-11 18:44:50 +02:00
540d02f6c0
pluto supports AES_CCM and AES_GCM ESP algorithms
Andreas Steffen
2009-07-11 18:43:09 +02:00
c5ebd00517
put variable definitions up front
Andreas Steffen
2009-07-10 22:58:47 +02:00
ad92c1f6cd
cosmetics
Andreas Steffen
2009-07-10 22:18:26 +02:00
a3ee331b0c
added listener.h to charon_SOURCES
Andreas Steffen
2009-07-10 21:43:21 +02:00
69b8058925
use the configured NM connection id as configuration/IKE_SA name
Martin Willi
2009-07-10 11:01:44 +02:00
ce741aa649
fixed state check if establishing the CHILD_SA fails
Martin Willi
2009-07-10 09:40:02 +02:00
bad99d5aff
use the new updown()/rekey() hooks to track the state of NetworkManager connections
Martin Willi
2009-07-10 09:37:27 +02:00
356cdc2d72
update libfreeswan/pfkeyv2.h
Andreas Steffen
2009-07-10 07:15:08 +02:00
8e905c44c9
added AES_CTR, AES_CCM, and AES_GCM strings
Andreas Steffen
2009-07-10 06:53:54 +02:00
977ec0c316
implemented ike_down() bus hook
Martin Willi
2009-07-09 14:44:08 +02:00
fa1d3c6629
implemented ike_up() bus hook
Martin Willi
2009-07-09 13:44:06 +02:00
f5f37cc7fa
implemented child_down() bus hook
Martin Willi
2009-07-09 13:35:33 +02:00
f669f45333
implemented child_up() bus hook
Martin Willi
2009-07-09 13:11:46 +02:00
622b56a52e
implemented ike_rekey()/child_rekey() bus hooks
Martin Willi
2009-07-08 14:33:24 +02:00
7527f43c76
added new listener callbacks to track SAs
Martin Willi
2009-07-08 14:08:31 +02:00
a40cc76bc7
moved listener_t interface definition to a separate file
Martin Willi
2009-07-08 09:00:02 +02:00
9d9cb65c8e
enforced strongSwan coding rules
Andreas Steffen
2009-07-09 15:02:51 +02:00
3f67126226
added a RADIUS id_prefix option to prefix the IMSI
Martin Willi
2009-07-07 15:47:09 +02:00
2eac2578a5
updated ikev2bis draft from 03 to 04
Martin Willi
2009-07-09 11:17:43 +02:00
01e43e3183
memxor does not access unaligned words anymore, but still uses words if possible
Martin Willi
2009-07-08 17:19:49 +02:00
751a65f9da
fixed doxygen section pgp
Martin Willi
2009-07-08 10:29:12 +02:00
d7b965e931
fixed two doxygen warnings
Martin Willi
2009-07-08 10:28:54 +02:00
c99227630c
updated HACKING info
Martin Willi
2009-07-07 17:26:16 +02:00
efb4bb248f
remove obsolete child_cfg_t.equal_traffic_selectors() method
Martin Willi
2009-07-07 14:38:55 +02:00
20188fcad4
child_cfg matching code prefers a config containing the first proposed TS
Martin Willi
2009-07-07 14:38:19 +02:00
2d00984d73
added missing equals() method assignment for ID_ANY identities
Martin Willi
2009-07-07 13:42:22 +02:00
92a65c506a
use architecture specific Elf header
Martin Willi
2009-07-06 16:36:01 +02:00
0c31b9db84
centralized ID type specific method assignement in generic constructor
Martin Willi
2009-07-06 13:11:03 +02:00
bbf6a4c0ff
removed obsolete init_rdn()/get_next_rdn() functions
Martin Willi
2009-07-06 12:47:18 +02:00
8309798fae
reimplemented dnota() using RDN enumerator
Martin Willi
2009-07-06 12:42:09 +02:00
f48c3c72f4
added a chunk_printable() function (replaces sanitize_chunk)
Martin Willi
2009-07-06 12:37:26 +02:00
d692557298
replaced {same,match}_dn() by compare_dn(), using the RDN enumerator
Martin Willi
2009-07-06 11:46:26 +02:00
ed680e33c0
fixed memleak if RND parsing fails
Martin Willi
2009-07-06 11:45:26 +02:00
dca2eee92a
added unit test for identification_t.matches()
Martin Willi
2009-07-06 11:44:46 +02:00
05fe0a7d25
added unit test for identification_t.equals()
Martin Willi
2009-07-06 11:16:41 +02:00
01da687f78
contains_wildcard() for DNs uses RDN enumerator
Martin Willi
2009-07-03 17:09:17 +02:00
d35650115b
added unit test for identification_t.contains_wildcard()
Martin Willi
2009-07-03 17:07:04 +02:00
2147da40a5
simplified identification_t.clone() using memcpy
Martin Willi
2009-07-03 16:30:08 +02:00
6bdd79d86c
use an enumerator to parse RDNs, based on asn1_unwrap() function
Martin Willi
2009-07-03 16:12:17 +02:00
5dd492efff
make filter enumerator methods static
Martin Willi
2009-07-03 14:17:05 +02:00
596e0540a5
asn1_unwrap() function to parse ASN.1 objects with length/type
Martin Willi
2009-07-03 11:06:51 +02:00
eebecebead
make ecp_x_coordinate_only = yes the default
Andreas Steffen
2009-07-06 11:47:38 +02:00
21863d6361
ecp_x_coordinate only option allows ECP interoperability with MS Windows
Andreas Steffen
2009-07-06 08:47:18 +02:00
887ed734d0
support of OpenPGP V4 fingerprints
Andreas Steffen
2009-07-04 09:25:29 +02:00
876a6d737f
corrected comment
Andreas Steffen
2009-07-03 22:39:18 +02:00
6e61122727
listen for CHILD_SA state changes only until it has been installed
Martin Willi
2009-07-03 10:46:30 +02:00
7be566dc1f
updated copyright statement
Andreas Steffen
2009-07-01 15:27:58 +02:00
90855e965a
added additional sanity checks to asn1_length() parsing
Martin Willi
2009-07-03 09:26:48 +02:00
00fcc0f8f3
added -avoid-version to LDFLAGS, plugins are not versioned
Martin Willi
2009-07-03 08:57:11 +02:00
7afd9d6672
defer MOBIKE update if we have no route to the peer
Martin Willi
2009-07-02 10:56:13 +02:00
133623871d
do not abort notifying listeners if a listener unregisters
Martin Willi
2009-07-02 09:38:12 +02:00
2b7129f9b3
added mconsole exec patch based on 2.6.30
Martin Willi
2009-07-01 13:53:46 +02:00
fb64239cab
added mconsole exec patch based on 2.6.29
Martin Willi
2009-07-01 13:52:54 +02:00
4fd40cf6b0
signal tunnel breakage to NetworkManager
Martin Willi
2009-06-30 17:47:42 +02:00
7f9fab77f8
restarting dbus is insufficient, restart network-manager after installation
Martin Willi
2009-06-30 17:03:53 +02:00
a2f1bb238e
enforce correct RSA signature lenght in gcrypt
Martin Willi
2009-06-30 12:10:30 +02:00
2ba6a53414
added missing header files
Andreas Steffen
2009-06-24 00:07:36 +02:00
d860a9b924
handle --disable-pluto/charon with --enable-integrity-test
Martin Willi
2009-06-22 16:37:28 +02:00
f0f420229a
deinit() library if integrity check fails
Martin Willi
2009-06-22 16:18:53 +02:00
4f2c48cd3d
build and verify on disk file integrity of pluto and charon executables
Martin Willi
2009-06-22 14:42:04 +02:00
da2834a280
removed functions from faked symbol list, not needed anymore with RTLD_LAZY
Martin Willi
2009-06-22 12:56:28 +02:00
cfe508d911
indicate use if integrity testing at startup
Martin Willi
2009-06-22 12:49:57 +02:00
67a7bb02ef
moved checksum_builder/libchechsum to top srcdir to respect build order
Martin Willi
2009-06-22 12:47:09 +02:00
e4e6a77a80
check for dladdr() and dl_iterate_phdr() if --enable-integrity-test set
Martin Willi
2009-06-19 17:50:40 +02:00
bef508755b
build integrity_checker.c only if --enable-integrity-test set
Martin Willi
2009-06-19 17:37:08 +02:00
6a8c8815fe
check on-disk and loaded segment integrity of libstrongswan
Martin Willi
2009-06-19 17:27:57 +02:00
d88bcee079
reduced verbosity of integrity checker
Martin Willi
2009-06-19 17:16:57 +02:00
e3b7be91e1
removed obsolete INTEGRITY_TEST and fips signer code --enable-integrity-test now conditionally builds libchecksum
Martin Willi
2009-06-19 16:39:44 +02:00
f1f51395d5
build checksums for charon plugins
Martin Willi
2009-06-19 16:21:09 +02:00
a0fc89798a
library initialization fails if libstrongswan checksum is invalid
Martin Willi
2009-06-19 12:01:52 +02:00
70f59fab9b
checksum.c depends on all libraries
Martin Willi
2009-06-19 11:52:51 +02:00
12c68f1b3a
implemented a checksum_builder tool to build the checksum library
Martin Willi
2009-06-19 11:42:54 +02:00
0179d4684a
integrity checker accepts an option checksum library on construction
Martin Willi
2009-06-19 11:40:41 +02:00
059c479a2f
check integrity of libstrongswan
Martin Willi
2009-06-18 17:51:22 +02:00
960e0c1040
check integrity of plugins before loading
Martin Willi
2009-06-18 17:50:28 +02:00
20d4fc97cf
implemented an integrity checker class to build and check code integrity
Martin Willi
2009-06-18 17:48:15 +02:00
2927db377d
dist-hook to remove .svn folder not needed anymore
Martin Willi
2009-06-22 15:45:24 +02:00
31b9c10800
removed unneeded newline
Martin Willi
2009-06-22 15:35:18 +02:00