Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 3aaf7908d1 refactored and cleaned up child_sa interface replaced add/update calls by a install() call allocating SPIs always externally support installation of non-allocated CHILD_SAs some other cleanups Martin Willi 2008-11-19 15:31:27 +00:00
• 9dd1229407 fixing compilation on systems lacking linux/xfrm.h Tobias Brunner 2008-11-18 14:28:05 +00:00
• 0d1a57e496 setting default port of own address to have a proper fallback if src addr lookup fails Martin Willi 2008-11-18 10:10:36 +00:00
• 32f59c56f1 consider interfaces we do not monitor as up (e.g. lo) fixes load-testing against 127.0.0.1 Martin Willi 2008-11-18 09:52:28 +00:00
• 50ae86017c version bump to 4.2.10 Andreas Steffen 2008-11-18 00:02:59 +00:00
• 49653b6bc3 separated updown listener to its own class caching interface names to properly remove rules if interface has changed Martin Willi 2008-11-17 09:29:27 +00:00
• 08c6ed9f14 fixed virtual IP re-installation failure in MOBIKE scenarios introduced with changeset 4662 Andreas Steffen 2008-11-17 00:01:34 +00:00
• 9a095db5e8 set release number back to 4.2.9 Andreas Steffen 2008-11-16 22:25:16 +00:00
• 4dc0dce886 added migration to NEWS Andreas Steffen 2008-11-16 21:23:56 +00:00
• 7a915d627d completed migration of MIPv6 connections Andreas Steffen 2008-11-16 21:19:58 +00:00
• ad60c249b6 show TRANSPORT_PROXY mode in ipsec status Andreas Steffen 2008-11-16 21:19:17 +00:00
• 21bf86f740 using aligned buffers for netlink Martin Willi 2008-11-14 14:23:11 +00:00
• 32ec3c1a8b fallback to reauthentication if peer does not support CHILD_SA rekeying Martin Willi 2008-11-14 14:05:47 +00:00
• dad8eceea3 fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SAS Martin Willi 2008-11-14 13:58:16 +00:00
• 8d50c19833 also use correct encap parameter in PF_KEY Martin Willi 2008-11-14 13:15:26 +00:00
• fd2ebf0cf9 fixed encap enabling in xfrm (using new encap state, not the old one) Martin Willi 2008-11-14 13:12:07 +00:00
• fb6c8591a3 do not use a route if outgoing interface is down other cleanups Martin Willi 2008-11-14 13:04:22 +00:00
• a65e1c5c3a rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead! Martin Willi 2008-11-14 10:30:26 +00:00
• f5812086f8 do not use public interface for functions which are local anyway Martin Willi 2008-11-14 09:38:49 +00:00
• 65c907cd71 reset IKE_SA on bus during child_sa destruction Martin Willi 2008-11-14 08:38:53 +00:00
• 1ad0bacf5b adapted evaltest.dat to changed debug output Andreas Steffen 2008-11-13 21:38:16 +00:00
• bbbe605fe3 updated API doc for socket.h Martin Willi 2008-11-13 07:48:27 +00:00
• 8120943583 ported socket enumerator to raw-socket.c some cleanups in socket.c Martin Willi 2008-11-13 07:15:45 +00:00
• 84bec926a3 added type=transport_proxy and installpolicy=yes|no to man page Andreas Steffen 2008-11-13 06:29:53 +00:00
• 509e07c5bc added MIPv6 functionality to NEWS Andreas Steffen 2008-11-13 05:46:51 +00:00
• cd49134837 corrected unwanted deletion in comment Andreas Steffen 2008-11-12 22:57:46 +00:00
• ce42db0921 BEET mode might want forwarding policies Martin Willi 2008-11-12 16:47:19 +00:00
• e09481fb91 removed some obsolete includes Martin Willi 2008-11-12 16:10:34 +00:00
• faf9569fdb moved ike_initiator flag to IKE_SAs condition bitfield Martin Willi 2008-11-12 16:07:17 +00:00
• b8cbb6451c ported some hard-to-merge cherries back to trunk :-/ shame, svn, shame: this was ways to complicated we should consider a switch to git... Martin Willi 2008-11-12 15:09:24 +00:00
• 9fa5c75f48 fixing keylength bug at the right place: we usually don't touch output parameters if operations fails Martin Willi 2008-11-12 08:27:48 +00:00
• 137484895a improved fix Andreas Steffen 2008-11-12 04:08:30 +00:00
• dbc277d908 fixed AES-CCM/GCM authenticated encryption by eliminating generation of superfluous generation of integrity keying material Andreas Steffen 2008-11-12 04:02:10 +00:00
• 479f295049 fixed compiler warnings issued by: gcc 4.3 curl.h gcc type-checking glibc with enabled FORTIFY_SOURCE checking Martin Willi 2008-11-11 18:37:19 +00:00
• 3d2dbebd70 #defing out compress algs to avoid compiler warning Martin Willi 2008-11-11 18:35:10 +00:00
• d94cadd69a updated method signature of add_policy Martin Willi 2008-11-11 18:33:48 +00:00
• 4a537c9011 fixed compilation of medcli plugin Martin Willi 2008-11-11 15:20:25 +00:00
• b252024c3e added missing include for ULONG_MAX Martin Willi 2008-11-11 15:19:13 +00:00
• 7bdc931e6c announcing the kernel plugins Tobias Brunner 2008-11-11 13:35:51 +00:00
• f967db312d fixing mediation extension Tobias Brunner 2008-11-11 13:12:05 +00:00
• 476c61fdcd some typos Tobias Brunner 2008-11-11 13:11:44 +00:00
• 73937bd838 added some NEWS for 4.2.9 Martin Willi 2008-11-11 12:52:55 +00:00
• 4252938811 dynamic logging configuration through strongswan.conf fallback to existing ipsec.conf/stroke loglevel configuration Martin Willi 2008-11-11 10:52:37 +00:00
• dbb24102d4 fixed compiler warning Martin Willi 2008-11-11 10:29:31 +00:00
• e7c27b4f3f fixing a memory leak Tobias Brunner 2008-11-11 09:56:47 +00:00
• ea625fabf9 merging kernel_klips plugin back into trunk Tobias Brunner 2008-11-11 09:22:00 +00:00
• c117f24e61 renamed proxy to proxy_mode in stroke_msg.h Andreas Steffen 2008-11-11 07:28:52 +00:00
• e0316183f8 deleted obsolete parameter descriptions Andreas Steffen 2008-11-11 07:11:30 +00:00
• d487b4b727 preliminary support of Mobile IPv6 Andreas Steffen 2008-11-11 06:37:37 +00:00
• 91db979cdd added the MIPv6 options use_proxy_mode and install_policy Andreas Steffen 2008-11-11 06:29:25 +00:00
• 8ac4651ac3 cosmetics in debug output Andreas Steffen 2008-11-11 06:19:37 +00:00
• c198fc5548 whitelisting localtime_r Martin Willi 2008-11-10 16:44:27 +00:00
• a9f081e5ad make load_tester more strict to use it along stroke Martin Willi 2008-11-10 16:43:15 +00:00
• f821bfb2b3 fixed leak in host_create_from_string("%any") Martin Willi 2008-11-10 16:42:05 +00:00
• ae42288a81 fixed some minor issues found when using -DFORTIFY_SOURCE=2 Martin Willi 2008-11-10 15:45:19 +00:00
• e9a0d3a339 iterations = 0 for infinite iterations Martin Willi 2008-11-10 10:10:51 +00:00
• 6c3f40f9a0 added PEM version of keys Martin Willi 2008-11-10 10:09:44 +00:00
• c9ef4cee46 settings section enumeration printf style key lookup Martin Willi 2008-11-07 15:08:53 +00:00
• 89d05ab5fb fixed copy/paste error Martin Willi 2008-11-07 14:48:54 +00:00
• e2764b3937 use of host_create_any() for %any address Andreas Steffen 2008-11-07 05:15:19 +00:00
• f11a54bc89 SADB_X_EXT_KMADDRESS is not present in old kernels Andreas Steffen 2008-11-07 03:38:56 +00:00
• 2c81539395 added retrieval of remote kmaddress via PF_KEY Andreas Steffen 2008-11-07 03:23:59 +00:00
• a70df08c9b added delete_after_established option Martin Willi 2008-11-06 14:07:46 +00:00
• ebf0e20ae7 fixed leak fixed build if !HAVE_BACKTRACE Martin Willi 2008-11-06 14:05:58 +00:00
• e76078e877 use read-write locks in crypto factory for parallelization Martin Willi 2008-11-05 16:21:57 +00:00
• 27ed987ef7 wrapped all pthread_rwlock_t in profilable rwlock_t Martin Willi 2008-11-05 16:12:54 +00:00
• c1be64eaff wrapped rwlock with profiling support Martin Willi 2008-11-05 15:51:57 +00:00
• 0214012508 threshhold and ./configure option for lock profiler Martin Willi 2008-11-05 14:36:57 +00:00
• ac29400e34 added missing includes Martin Willi 2008-11-05 14:22:58 +00:00
• f7237cf37a separated backtrace functionality from leak_detective, used in leak_detective mutex profiling signal handler Martin Willi 2008-11-05 13:58:19 +00:00
• 2abc66b977 proper cleanup of openssl locking code Martin Willi 2008-11-05 12:37:37 +00:00
• 465fe85ee1 fixed sender destruction order Martin Willi 2008-11-05 12:24:36 +00:00
• a492eb2033 fixed iterator regression introduced in [4577] Martin Willi 2008-11-05 11:55:17 +00:00
• 3ac5a0db8c replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant Martin Willi 2008-11-05 11:29:56 +00:00
• 2662806b2c get rid of unused iterator hook functions Martin Willi 2008-11-05 08:37:09 +00:00
• e13389a7f7 got rid of deprecated create_iterator_locked() Martin Willi 2008-11-05 08:32:38 +00:00
• e10b0d0fc0 simple mutex profiler Martin Willi 2008-11-05 07:57:26 +00:00
• 31537fd970 do not install route if interface lookup failed Martin Willi 2008-11-05 07:38:55 +00:00
• 746115a0be %any is IP family neutral Andreas Steffen 2008-11-05 05:32:43 +00:00
• f41a4a4e15 corrected typo2 Andreas Steffen 2008-11-05 05:27:42 +00:00
• 61670ba284 support of %any address string Andreas Steffen 2008-11-05 04:53:45 +00:00
• 7c4fd176db handle 0.0.0.0 string and af == AF_INET6 Andreas Steffen 2008-11-05 00:41:46 +00:00
• 6a8ecfc8be two new load_testing options: request_virtual_ip: request a INTERNAL_IPV4_ADDR as client pool: provide addresses from a named virtual IP pool Martin Willi 2008-11-04 14:55:22 +00:00
• 7854475f42 OpenSSL requires a signature length of exactly RSA_size() Martin Willi 2008-11-04 14:05:42 +00:00
• d4f08fe324 removed superfluous get_other_public_value in diffie_hellman_t interface Martin Willi 2008-11-04 13:12:11 +00:00
• ddd7e6c656 fixed bignum export if BN_num_bytes() != DH_size() Martin Willi 2008-11-04 13:05:00 +00:00
• dcbea444ee fixed memleak Martin Willi 2008-11-04 13:01:36 +00:00
• 480be6436a added a delay option to delay initiations Martin Willi 2008-11-04 12:59:53 +00:00
• ec1bddc50c corrected a copy-and-paste error Andreas Steffen 2008-11-03 23:46:42 +00:00
• c636285878 updated copyright of kernel interface code Andreas Steffen 2008-11-03 23:34:23 +00:00
• bab075b166 added support for xfrm remote kmaddress Andreas Steffen 2008-11-03 23:29:34 +00:00
• 7de6da0c88 added locking mechanism for multithreaded use of OpenSSL Martin Willi 2008-11-03 16:14:12 +00:00
• 4d901e3584 added fake_kernel option to make dummy kernel implementation optional Martin Willi 2008-11-03 15:11:01 +00:00
• ee66fa625e removed accidently checked in debug code Martin Willi 2008-11-03 12:40:42 +00:00
• 1145ca098d load testing between different hosts Martin Willi 2008-11-03 10:02:39 +00:00
• 64ff7a5142 log loaded plugins at startup Martin Willi 2008-11-03 09:44:54 +00:00
• d6dc9db5ef reverted 4541, does not fix the problem Martin Willi 2008-11-03 09:44:20 +00:00
• 9c33987471 migrate job creates a new IKE_SA Andreas Steffen 2008-11-03 07:08:59 +00:00
• cdf69f103a replace tab by spaces Andreas Steffen 2008-11-03 06:56:22 +00:00
• a54e3d51c1 removed unused variables Andreas Steffen 2008-11-03 03:56:03 +00:00