Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• bb2059c60a added proposal parsing of uncommon DH groups 3072/6144 Martin Willi 2008-10-08 12:57:11 +00:00
• 4f0241e6cf some mobike improvement NEWS Martin Willi 2008-10-08 12:24:08 +00:00
• 85be7e5b75 ignore routing events for our own routes Martin Willi 2008-10-08 08:29:49 +00:00
• ce5b17082d mobike: try to keep existing source address before switching to another Martin Willi 2008-10-08 08:23:46 +00:00
• e39b271b17 raw public key support for charon Andreas Steffen 2008-10-08 07:03:39 +00:00
• d1cbe55127 implemented ipsec listalgs as a stroke command Andreas Steffen 2008-10-08 07:00:13 +00:00
• 51358f9f72 correct fix that replaces Changeset 4378 Andreas Steffen 2008-10-08 06:57:52 +00:00
• c85862931f removing fix applied by Changeset 4378 Andreas Steffen 2008-10-08 06:15:41 +00:00
• ec6a88f617 added the sql/rw-rsa and sql/rw-rsa-keyid scenarios using raw RSA public keys Andreas Steffen 2008-10-08 03:37:40 +00:00
• af09048e35 get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 hash consistent with the IKEv2 keyid philosophy Andreas Steffen 2008-10-08 03:35:52 +00:00
• 95fd1dedb3 Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype Andreas Steffen 2008-10-08 01:19:26 +00:00
• 7a07cd1c75 fixed loop termination criterion in addr_in_subnet(). Thanks go to Wolfgang Steudel, TU Ilmenau Andreas Steffen 2008-10-07 21:41:45 +00:00
• c8ba5125d6 guest bootup waits for init, not for network stack (fixes 2.6.27 guest kernels) Martin Willi 2008-10-07 16:31:41 +00:00
• 693a244d0f ported mconsole-exec patch to 2.6.27-rc7 Martin Willi 2008-10-07 09:09:34 +00:00
• aa9a300677 userland support to process notifies for new NAT mappings detected in UDP encapsulation Martin Willi 2008-10-07 07:55:28 +00:00
• 41b1cd6b87 wait 5 seconds before deactivating eth1 interface on alice Andreas Steffen 2008-10-07 04:56:50 +00:00
• e8c58d8e64 explicitly load kernel-netlink plugin in UML scenarios Andreas Steffen 2008-10-07 04:51:20 +00:00
• 9d9a772ee1 use MOBIKE enabled DPD if we are NATed update SAs if we detect changes in NAT mappings Martin Willi 2008-10-06 13:37:04 +00:00
• 0592212f23 fixed builder_cancel macro to return NULL on failed build Martin Willi 2008-10-06 13:08:49 +00:00
• aa1b90a5b2 do not run CHILD_SA delete action if rekeying Martin Willi 2008-10-03 16:01:14 +00:00
• 09d7ef2614 added --disable-kernel-netlink configure option Andreas Steffen 2008-10-03 03:27:42 +00:00
• 9c0aa46b64 use dpd_action also for remotely closed tunnels Martin Willi 2008-10-02 13:47:19 +00:00
• 7827997346 also respect the mobike=no setting as responder Martin Willi 2008-09-30 12:36:58 +00:00
• ceff3064fe using signed return value for read() Martin Willi 2008-09-30 06:27:50 +00:00
• a341a68fac merging renaming of mode_t to ipsec_mode_t back to trunk Tobias Brunner 2008-09-25 13:56:23 +00:00
• 507f26f685 merging modularized kernel interface back to trunk Tobias Brunner 2008-09-25 07:56:58 +00:00
• 80fc5bd95c missing '_' added Tobias Brunner 2008-09-19 13:20:09 +00:00
• 414caff027 version bump to 4.2.8 Andreas Steffen 2008-09-18 00:42:22 +00:00
• b37cda8211 completed NEWS for 4.2.7 release Andreas Steffen 2008-09-18 00:34:31 +00:00
• cdaf57ec34 fixed DH value range testing Martin Willi 2008-09-17 09:02:30 +00:00
• 73f6886a50 checking mpz_export return value properly fixes a potential DoS attack if a DH value of zero gets processed Martin Willi 2008-09-17 08:10:48 +00:00
• b33c11b6c7 stroke parses and lists AC groups Andreas Steffen 2008-09-17 02:17:01 +00:00
• bb34d2611f updated ubuntu packages for release compatible with NM svn20080908 Martin Willi 2008-09-12 13:48:11 +00:00
• f061d83358 ported NM plugin to upstream NetworkManager changes splitted secrets (4031) using uuid in auth-dialog (4053) Martin Willi 2008-09-12 13:28:31 +00:00
• 346bb576a2 allow multiple DELETE payloads in an informational message Martin Willi 2008-09-11 11:14:09 +00:00
• b1f4785428 updated NEWS Martin Willi 2008-09-05 15:10:56 +00:00
• 07447ea597 fixed ubuntu distribution/typos Martin Willi 2008-09-05 14:44:21 +00:00
• f494dbd494 new ubuntu package release Martin Willi 2008-09-05 14:01:47 +00:00
• 1d03954aad NM plugin supports (encrypted) private key files Martin Willi 2008-09-05 13:26:58 +00:00
• 07d7f9a402 time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s) Andreas Steffen 2008-09-04 16:19:46 +00:00
• e376d75f96 some NEWS Martin Willi 2008-09-04 14:52:33 +00:00
• 0c6a489046 fixed some translations/encoding Martin Willi 2008-09-04 13:51:35 +00:00
• f0e8a8f7f3 an initial German translation for NM plugin Martin Willi 2008-09-04 13:39:37 +00:00
• 3876c44175 updated debian build to extended nm plugin Martin Willi 2008-09-04 11:55:31 +00:00
• 82840e6c92 reduced nm verbosity Martin Willi 2008-09-04 10:35:20 +00:00
• aff26a62c3 implemented NetworkManager certificate/private key authentication using ssh-agent Martin Willi 2008-09-04 08:40:37 +00:00
• 994ed35312 added a configure option to select charon binary Martin Willi 2008-09-04 08:37:31 +00:00
• 6af6f88a79 agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific private key from the agent Martin Willi 2008-09-04 08:35:11 +00:00
• 60055b7e1c charon.keep_alive = 0 disables the sending of NAT keep alives Andreas Steffen 2008-09-03 19:00:08 +00:00
• 3dfecde4c0 configure NAT keep alive interval using the charon.keep_alive key Andreas Steffen 2008-09-03 18:49:06 +00:00
• 6283b1f1f8 typos Tobias Brunner 2008-09-03 07:44:46 +00:00
• 703791715b handle INFORMATIONAL exchanges with NATD payloads in mobike task Martin Willi 2008-09-02 14:02:40 +00:00
• 21c9546321 libstrongswan agent plugin to use ssh-agent for RSA signatures Martin Willi 2008-09-02 11:04:26 +00:00
• 46eb41644d ported openac to credential factory changes Martin Willi 2008-09-02 11:01:05 +00:00
• f7c17aa15c refactored credential builder allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts Martin Willi 2008-09-02 11:00:13 +00:00
• 4da0116d78 OIDs used by strongSwan Andreas Steffen 2008-09-01 11:38:03 +00:00
• 1a4d27c854 added thread_analysis tool Andreas Steffen 2008-09-01 11:19:07 +00:00
• eb3e27059b use libcap for capability dropping optional, must be enabled --with-capabilities=libcap will be extended to support --with-capabilities=libcap2 Martin Willi 2008-08-29 09:24:14 +00:00
• 8fa6f2dc66 streamlined ipsec listalgs output Andreas Steffen 2008-08-29 05:35:09 +00:00
• e609b1cda2 capability API to allow plugin-controlled capability set Martin Willi 2008-08-28 16:27:48 +00:00
• dc98e50153 cosmetics Martin Willi 2008-08-28 11:15:01 +00:00
• e577ad3985 creating default IKE proposals dynamically using algorithm enumeration API Martin Willi 2008-08-28 11:07:57 +00:00
• f1b014b9a3 separated sha1_prf implementation from sha1_hasher Martin Willi 2008-08-28 10:57:24 +00:00
• 9482208633 crypto_factory algorithm enumeration API implementation of "ipsec listalgs" Martin Willi 2008-08-28 09:24:42 +00:00
• 8bbc7ca710 * allow to load templates from arbitrary places * changed implementation of guest?/iface? Tobias Brunner 2008-08-28 08:05:07 +00:00
• 6c20579a43 mkdir_p: utility function to create a directory and all required parent directories Tobias Brunner 2008-08-28 07:47:55 +00:00
• 018ae7c1aa build scripts for ubuntu NetworkManager packages Martin Willi 2008-08-27 13:51:05 +00:00
• ee210ca353 check user account validity after PAM authentication Martin Willi 2008-08-27 13:48:54 +00:00
• a9bb69c8a8 version bump to 4.2.7 Andreas Steffen 2008-08-27 12:01:57 +00:00
• 609166f49f additional NEWS for 4.2.6 Martin Willi 2008-08-27 08:39:09 +00:00
• ca4f63383c * guest#running? * guest?, iface? (also Guest.include? resp. guest.include?) * easy accessors for guests and ifaces (Guest.sun instead of Guest["sun"] and guest.eth0 instead of guest["eth0"]) * if a block is given for iface#add or iface#del then the change is only temporary while executing the block and gets reverted afterwards Tobias Brunner 2008-08-27 07:35:20 +00:00
• 9f9d6ece39 my changes for the 4.2.6 release Andreas Steffen 2008-08-27 07:19:40 +00:00
• 2c6dced953 added ikev2/rw-eap-aka-identity scenario Andreas Steffen 2008-08-26 20:02:58 +00:00
• a44d02627f cosmetics Andreas Steffen 2008-08-26 19:54:47 +00:00
• 41dc6b56b0 ipsec statusall lists eap_type and eap_identity Andreas Steffen 2008-08-26 19:45:44 +00:00
• a625146517 enable-eap-identity in UML scenarios Andreas Steffen 2008-08-26 19:17:14 +00:00
• 281dd55891 using strongSwan, not NetworkManager version number Martin Willi 2008-08-26 14:27:53 +00:00
• be49236373 fixing charon path for now for ubuntu package Martin Willi 2008-08-26 14:27:12 +00:00
• d9fc51387d added ikev2/multi-level-ca-cr-init and ikev2/multi-level-ca-cr-resp scenarios Andreas Steffen 2008-08-26 05:34:33 +00:00
• 919019b3cd completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes Andreas Steffen 2008-08-26 05:15:34 +00:00
• bafb220857 adapted sql/rw-eap-aka-rsa scenario to new EAP identity type Andreas Steffen 2008-08-25 13:52:26 +00:00
• 3c87e92695 list CA restrictions in ipsec statusall Andreas Steffen 2008-08-25 12:35:18 +00:00
• f6ecd44fc6 added NM gnome plugin to distribution Martin Willi 2008-08-25 08:21:51 +00:00
• c1ee908e4c removed generated Makefile.in.in from svn Martin Willi 2008-08-25 08:15:57 +00:00
• a88aae3df6 enforce DN of configured gateway certificate Martin Willi 2008-08-25 07:50:21 +00:00
• 7945c90adb new EAP-Identity handling uses ID_EAP in plugins Martin Willi 2008-08-25 07:49:48 +00:00
• 1a109c9fc6 disabled PSK option until we have a way to enforce strong secrets Martin Willi 2008-08-25 07:48:11 +00:00
• 1995f79f10 use username part of RFC822 IDs for PAM authentication Martin Willi 2008-08-25 07:47:16 +00:00
• 822901061b ported parts of two-sim branch eap_identity parameter to exchange in eap_identity some auth_info/peer_cfg refactorings fixed some bugs, introduced new ones Martin Willi 2008-08-22 10:44:51 +00:00
• 7c112a12c0 run guests with some niceness Martin Willi 2008-08-22 08:37:15 +00:00
• 5ba7efb083 pool names are unique Martin Willi 2008-08-22 07:38:59 +00:00
• 3e45b3a1ad do not return IPv6 src addresses for IPv4 destinations Martin Willi 2008-08-21 15:17:45 +00:00
• b848f0377c fixed EAP-GTC secret lookup improved error logging PAM authentication needs CAP_AUDIT_WRITE capability Martin Willi 2008-08-21 14:40:03 +00:00
• 1caa265c61 a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM Martin Willi 2008-08-21 12:10:07 +00:00
• dc6a2edd0d corrected caption Andreas Steffen 2008-08-21 11:58:58 +00:00
• 5cd07d18a3 charon.process_route = no does not process RTM_NEWROUTE and RTM_DELROUTE events. Useful for taking down hundreds of virtual IPs on the same host Andreas Steffen 2008-08-21 11:55:16 +00:00
• 2d6559b107 added sqlite busy handler: retries on locking conflicts Martin Willi 2008-08-21 09:25:06 +00:00
• 02e907fe66 avoid too many alloca()s in netlink send, problematic on MIPS Martin Willi 2008-08-21 07:55:16 +00:00
• bdbf3c49fc some string fixes Martin Willi 2008-08-20 13:59:37 +00:00
• 6368a58ffc added missing tooltip Martin Willi 2008-08-20 12:02:53 +00:00