Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 5045eeba7b proper feature probing for padlock Martin Willi 2008-12-17 15:40:01 +00:00
• f30150d3da correct use of calloc in hashtable_t Tobias Brunner 2008-12-17 09:56:05 +00:00
• 9bcc9bb60e updated documentation some minor cleanups calloc does not need an additional memset(0) Martin Willi 2008-12-17 09:00:22 +00:00
• 58464dd737 improved IKE_SA uniqueness check Tobias Brunner 2008-12-16 17:21:28 +00:00
• 097e4b8ff9 purge certificates after IKE_AUTH response has been built Martin Willi 2008-12-16 15:48:36 +00:00
• 764e8b2211 reimplemented certificate cache: fixes unsafe certificate caching use fixed array instead of a list fine grained per-slot locking use cache hits for housekeeping Martin Willi 2008-12-15 15:41:48 +00:00
• 482218f075 signal each entry condvar after enumeration, required if wait_for_entry is called Martin Willi 2008-12-15 09:19:04 +00:00
• abfde23ae9 added an additional frame to lock profiling backtraces Martin Willi 2008-12-15 09:13:43 +00:00
• 50901d2550 do not respawn cancelled threads if we are shutting down Martin Willi 2008-12-12 15:57:12 +00:00
• 248a1f57bb fixed possible deadlock in checkin_and_destroy Martin Willi 2008-12-12 10:40:45 +00:00
• d183adbc9d avoid DNS lookup if possible Martin Willi 2008-12-12 10:38:53 +00:00
• 3993b91334 execute events if difference is 0, prevents a busywait Martin Willi 2008-12-12 09:16:31 +00:00
• 8006835ec1 load tester got a "shutdown_when_complete" option, allows performance test using "time" Martin Willi 2008-12-12 09:14:37 +00:00
• 30841a0305 daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill Martin Willi 2008-12-12 09:13:06 +00:00
• 7a485e90bd leak detective binds execution to a signle core, avoids corruption on SMP machines Martin Willi 2008-12-12 09:10:52 +00:00
• f2bd424c89 wait until all IKE_SAs are in-house before destroying them Martin Willi 2008-12-12 08:33:48 +00:00
• f55a7a76dd address extensions refactored Tobias Brunner 2008-12-11 13:39:30 +00:00
• c636092c94 fixed usage of "leases" command Martin Willi 2008-12-11 12:49:41 +00:00
• a46173dfb4 nat_traversal in manpage corrected Tobias Brunner 2008-12-10 17:45:44 +00:00
• 2475560c82 fixing checkout of IKE SAs with only the initiator SPI Tobias Brunner 2008-12-10 15:58:39 +00:00
• 97016769fd increasing the performance of checkout_duplicate by using a hash table. Tobias Brunner 2008-12-10 13:51:21 +00:00
• 0dbd9788e5 initial size of 1 is nonsense Tobias Brunner 2008-12-10 13:45:05 +00:00
• d6dc0a21fb incremental version of chunk_hash Tobias Brunner 2008-12-10 13:43:51 +00:00
• 6b83549d1a list assigned leases using "ipsec leases" Martin Willi 2008-12-10 13:00:02 +00:00
• ed2bcd0315 added IKE_SA established timer to "ipsec statusall" Martin Willi 2008-12-10 09:59:35 +00:00
• d5d5bc0f16 using rwlock to parallel build credentials Martin Willi 2008-12-09 15:57:51 +00:00
• 5e5b2dc105 use thread-safe variant of gmtime Martin Willi 2008-12-09 15:00:30 +00:00
• 6144daba9d fixed load-tester shared key lookup Martin Willi 2008-12-09 14:45:56 +00:00
• 7023d49ee1 purge auth_info when IKE_SA is established, releases cert memory Martin Willi 2008-12-09 14:34:15 +00:00
• a1466a3ec2 limit number of ADDITIONAL_IPV*_ADDR notifies Martin Willi 2008-12-09 14:32:57 +00:00
• 2e03196551 list pools and usage in ipsec statusall Martin Willi 2008-12-09 13:24:12 +00:00
• adf9965272 extended stroke in-memory pool to use hash-tables supports online/offline leases properly reassign addresses to identities Martin Willi 2008-12-09 13:23:42 +00:00
• 20fbc4277e fixed hashtable->get_count() after doubling table size Martin Willi 2008-12-09 11:13:52 +00:00
• 15ed045c87 require explicit enabling of load-testing plugin Martin Willi 2008-12-09 09:11:37 +00:00
• 5bdc8fc794 generating different initiator identities, configs and certificates on the fly Martin Willi 2008-12-08 19:18:28 +00:00
• aa5c5d3fde removed debugging leftovers Martin Willi 2008-12-08 19:15:38 +00:00
• 474998099f fixed out-of-tree build of scepclient Martin Willi 2008-12-08 16:00:33 +00:00
• df68b54f4e basic x509 certificate generation Martin Willi 2008-12-08 15:29:36 +00:00
• 9eb85cffe1 whitelisted another pthread_setspecific implementation Martin Willi 2008-12-08 15:27:24 +00:00
• d21b3549f7 accept NULL values in hashtable enumerator Martin Willi 2008-12-05 12:34:17 +00:00
• 19e0010f51 hashtable enumerator enumerates over both, key and values Martin Willi 2008-12-05 10:01:52 +00:00
• a6d7a6107c added actual ikev2bis draft Martin Willi 2008-12-05 09:41:20 +00:00
• 876d5c63a3 pass identity to release_address(), allows providers to do a lookup by id Martin Willi 2008-12-05 09:40:50 +00:00
• c333bb4678 extended changeset [4753] Andreas Steffen 2008-12-04 23:16:10 +00:00
• 3fb404d8da implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead of a linked list. Tobias Brunner 2008-12-04 16:46:08 +00:00
• ffa6450695 fixed off by one error Tobias Brunner 2008-12-04 16:33:39 +00:00
• 7710a286ca fixed copy-paste bug (double-free) Martin Willi 2008-12-04 10:10:37 +00:00
• d0eee69822 reset pointer for a clean destruction Martin Willi 2008-12-04 10:09:21 +00:00
• 3bfd0fe3f2 handling peer_match with higher priority tan ike_match to select correct config if IPs are equal Martin Willi 2008-12-04 10:00:03 +00:00
• 0442562516 leak whitelisting of OPENSSL_config() Martin Willi 2008-12-04 09:23:53 +00:00
• c165d32d9e suppress output from leak-detective in openac Andreas Steffen 2008-12-04 04:51:05 +00:00
• cf62817286 load openac plugins explicitly Andreas Steffen 2008-12-04 04:36:39 +00:00
• 9c674e7214 fixed refactoring error in openac Andreas Steffen 2008-12-04 04:34:49 +00:00
• 04409bbb74 suppress leak-detective stderr output in ipsec pool Andreas Steffen 2008-12-04 03:31:53 +00:00
• 9b6f9d14ab fixed double free of host in sadb_address2ts Andreas Steffen 2008-12-04 01:08:19 +00:00
• 17a1045906 enable leak-detective and integrity-test in UML tests by default Andreas Steffen 2008-12-04 00:34:59 +00:00
• 83c42156a2 add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg. Tobias Brunner 2008-12-03 10:12:20 +00:00
• c3bdc3cd7f enable quoted tokens in the token enumerator Tobias Brunner 2008-12-03 10:03:59 +00:00
• f4bcf49bcb fixed compiler warning Tobias Brunner 2008-12-03 10:03:02 +00:00
• 81736d7d24 added memstr and extract_token_str helper functions Tobias Brunner 2008-12-03 09:45:58 +00:00
• 0948edbbff adding general purpose hash table Tobias Brunner 2008-12-03 09:32:16 +00:00
• 70691c31b2 fixed double free of host in selector2ts Martin Willi 2008-12-03 09:15:29 +00:00
• efd0fe21e4 ref_get()/ref_put() use atomic gcc operations if supported, thanks to Thomas Jarosch for the patch Martin Willi 2008-12-02 12:14:32 +00:00
• 6905f794bb added a --disable-threads ./configure option for pluto Martin Willi 2008-12-02 09:01:57 +00:00
• 2671a8fcee use DBG_ANY to set all loglevels Martin Willi 2008-12-02 08:52:46 +00:00
• f464d75070 added time.h include for struct tm Martin Willi 2008-12-02 08:46:15 +00:00
• 394eb35b0c some task queueing improvements: - do not pass CHILD_SAs to task constructor, might not be valid anymore during execution (late lookup) - use sub-tasks to delete CHILD/IKE_SA after rekeying, as we want to execute the delete before additional queued tasks Martin Willi 2008-12-01 18:38:28 +00:00
• 9a96ccd485 re-established lost default auth sys_logger Andreas Steffen 2008-12-01 01:24:55 +00:00
• 405cc1d924 schedule rekeying when activating passive IKE_SAs Martin Willi 2008-11-28 16:19:19 +00:00
• dd6b7af3f7 do not delete passive IKE_SAs Martin Willi 2008-11-28 15:44:25 +00:00
• c610f42430 added a PASSIVE IKE_SA state to manage it externally Martin Willi 2008-11-28 10:49:14 +00:00
• ddef455219 pass SKd to derive_ike_keys() to have a more interoperable API Martin Willi 2008-11-28 09:51:44 +00:00
• 9a1263c3c1 fixed a double-unlock bug, showed up when using rwlocks in backend manager Martin Willi 2008-11-28 08:22:55 +00:00
• ced41695dc use rwlocks in backend manager to allow simultaneous access Martin Willi 2008-11-27 15:34:17 +00:00
• 96eb7b44a0 use a rwlock in attribute manager to allow simultaneous access Martin Willi 2008-11-27 15:22:41 +00:00
• c50ad6f613 remove attribute provider in SQL plugin destruction Martin Willi 2008-11-27 14:33:41 +00:00
• ac812491aa added an include hack to build starter without gmp.h Martin Willi 2008-11-27 10:20:25 +00:00
• 140d0081bf fixed pluto out-of-tree builds Martin Willi 2008-11-27 10:18:38 +00:00
• 9413628b87 token enumerator missed the last token if it contains only a single char Martin Willi 2008-11-27 09:21:52 +00:00
• d2de674b9a checkin of non-existing IKE_SAs removed unneeded checkin() return values Martin Willi 2008-11-26 14:32:55 +00:00
• 09f407a14f removed private parser function pointers, allows compiler to inline Martin Willi 2008-11-26 10:54:08 +00:00
• 98bcdfe2c9 removed private generator function pointers, allows compiler to inline Martin Willi 2008-11-26 10:42:54 +00:00
• e2cb07d713 inlined some short chunk functions, showed up in the profiler Martin Willi 2008-11-26 10:08:36 +00:00
• 4fd233a73e memxor() tweaks, as it is heavily used in xcbc Martin Willi 2008-11-26 10:06:59 +00:00
• 69e9698b17 allow to globally disable DOS protection by setting charon.dos_protection to no. Tobias Brunner 2008-11-26 09:22:19 +00:00
• 999072ea02 optimized the scheduler for performance by replacing the linked list with a heap. Tobias Brunner 2008-11-25 19:56:05 +00:00
• 6df2731e78 replacing the pthread_mutex in scheduler_t with the wrapped implementation. added a method to condvar_t which allows to wait for an absolute timeout. Tobias Brunner 2008-11-25 19:30:02 +00:00
• ed6146ffbe performance optimization for the DOS protection. * half-open SAs per peer are tracked in a hash table * charon.dos_protection setting replaced with charon.cookie_threshold and charon.block_threshold * chunk_hash function added Tobias Brunner 2008-11-25 13:16:05 +00:00
• 28dd27be64 fixed crash due to missing function call parameter Andreas Steffen 2008-11-25 08:11:57 +00:00
• 895a1156d5 use static IPsec policy iptables rule for alice in mobike scenario Andreas Steffen 2008-11-25 08:11:14 +00:00
• f1f09810fb fixed set_message_id() on IKE_SA added missing bus->message() hook invocation whitespace cleanups Martin Willi 2008-11-24 13:59:30 +00:00
• b09ca74720 set message IDs on IKE_SAs Martin Willi 2008-11-24 12:46:06 +00:00
• addfea95df moved the IPV6_IPSEC_POLICY definition to the ipsec plugins, fixes uClibc build Martin Willi 2008-11-24 08:22:05 +00:00
• 18e2788fbe added a "load_tester.auth" option: "pubkey" (default) or "psk" Martin Willi 2008-11-23 11:58:41 +00:00
• 88d4acd4de proper cancellation of load-testing initiators Martin Willi 2008-11-23 11:17:30 +00:00
• a20abb81e9 added a MODP_NULL Diffie Hellman group to avoid calculation overhead in load-testing Martin Willi 2008-11-22 16:14:55 +00:00
• 8f45ece098 expecting int sized length arguments to chunk_split, as vararg functions use integers Martin Willi 2008-11-21 08:11:24 +00:00
• cdee592e38 fixing Makefile of the nm plugin (avoids including a .svn directory in the distribution) Tobias Brunner 2008-11-20 14:46:03 +00:00
• ba2ecf6831 optimized ike_sa_manager for concurrent access (default behavior is still as before, needs configuration in strongswan.conf). Tobias Brunner 2008-11-20 13:30:23 +00:00
• fc3ef71fa7 fixed lock-profiler help message Martin Willi 2008-11-19 15:37:46 +00:00