Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 1b9f6c2410 handle DBUS permission problems gracefully Martin Willi 2008-08-20 11:44:47 +00:00
• 142eaea43c fixed shared key lookup by ID proper auth method selection Martin Willi 2008-08-20 08:51:18 +00:00
• 592dc30108 fixed auth-dialog password flush Martin Willi 2008-08-20 08:49:47 +00:00
• 59bb33e1e0 set version back to 4.2.6 Andreas Steffen 2008-08-19 18:53:15 +00:00
• af165431d2 fixed libstrongswan integrity test Andreas Steffen 2008-08-19 18:51:30 +00:00
• ec24987164 certificate based gateway authentication prototype PSK user authentication with auth-dialog Martin Willi 2008-08-19 15:19:45 +00:00
• 62556b2b45 updated nm plugin to NetworkManager API changes Martin Willi 2008-08-18 11:59:19 +00:00
• 475814ce5f roam jobs for routing table changes not fired for virtual IP routes Martin Willi 2008-08-18 11:07:26 +00:00
• 7cdf728586 do not fire a roam job when virtual IP is deleted Andreas Steffen 2008-08-15 19:15:52 +00:00
• 26fd3f0057 temporary workaround to prevent roam jobs due to virtual IP installations Andreas Steffen 2008-08-11 19:04:48 +00:00
• 9f1ec81290 corrected typo Andreas Steffen 2008-08-11 18:40:22 +00:00
• e5d6f165fc * ruby extension extracted from irdumm * guests do not shutdown anymore on SIGINT in irb Tobias Brunner 2008-08-07 14:56:54 +00:00
• 990ebd4a75 added ipv6/net2net-ip6-in-ip6-ikev2 scenario Andreas Steffen 2008-08-06 20:40:14 +00:00
• 249a90af98 add additional scenario diagrams Andreas Steffen 2008-08-06 20:35:42 +00:00
• f753e03ab8 added missing cleanup on failure Tobias Brunner 2008-08-06 07:31:26 +00:00
• 342c84ddec initiator sends contents of rightca= if present as a certificate request without searching for further CA certificates Andreas Steffen 2008-08-05 09:05:57 +00:00
• ea36a1f159 fixed improper TAILQ fix which caused pluto to segfault Andreas Steffen 2008-08-03 18:01:21 +00:00
• 619998b3ac corrected caption Andreas Steffen 2008-08-01 12:59:08 +00:00
• 7ebac6728b Redhat/Fedora requires var/lock/subsys/ipsec for runlevel changes Andreas Steffen 2008-08-01 12:04:35 +00:00
• 573fd9ce03 ipsec starter gives the charon daemon 8s to terminate gracefully before killing the process brutally Andreas Steffen 2008-08-01 10:35:59 +00:00
• 181abd3fdd fixed the close_peerlog() bug causing ipsec pluto --help to segfault Andreas Steffen 2008-08-01 10:12:33 +00:00
• 39c0ae3780 configuration plugin for NetworkManager Martin Willi 2008-07-31 15:07:52 +00:00
• 092a9b88ad added options for virtual IP, UDP encapsulation, IPComp proper handling of libstrongswan/glib TRUE/FALSE conflict Martin Willi 2008-07-31 14:32:11 +00:00
• 5e9346ed92 exec on a guest now returns the return value of the executed process Tobias Brunner 2008-07-31 12:59:59 +00:00
• 6dbce9c803 reimplemented dbus plugin for NetworkManager 0.7, renamed to nm Martin Willi 2008-07-31 11:16:14 +00:00
• 2d87903db9 recreating FIFO if it exists Martin Willi 2008-07-31 09:04:54 +00:00
• eb04645c10 fixed usage typo Martin Willi 2008-07-31 09:01:56 +00:00
• 19ad10b5d3 increased stroke socket backlog to 10 Martin Willi 2008-07-30 14:17:05 +00:00
• f0a8fa25ba using a entry cache for duplicate checks, avoids deadlocks Martin Willi 2008-07-30 14:15:08 +00:00
• 7a4ad866b0 use condvar broadcasts to signal threads waiting for an IP, there might be more than one Martin Willi 2008-07-30 13:19:12 +00:00
• eadd460f7c the list of addresses on the interface of a guest is not cached anymore, but queried directly from the interface Tobias Brunner 2008-07-30 13:15:18 +00:00
• 9901cdb4cd * Guest#exec uses the new exec_str function * tab completion in irdumm enabled Tobias Brunner 2008-07-30 13:01:04 +00:00
• 2e73cd6e87 added an extended exec function to guests that allows to get the output of the command as string or by line. Tobias Brunner 2008-07-30 12:58:45 +00:00
• 38a8e39739 using shared read locks in credential set enumerators to avoid deadlocks Martin Willi 2008-07-30 11:38:44 +00:00
• 21632b76e0 added strongswan.conf option "charon.dos_protection" to disable cookies/aggressiveness check Martin Willi 2008-07-30 08:27:08 +00:00
• f5a0d968fc added keyid2sql helper script Andreas Steffen 2008-07-29 19:46:39 +00:00
• ce91f67f60 starter now waits for a maximum of 10s instead of 1s for charon before restarting the daemon Andreas Steffen 2008-07-29 19:44:54 +00:00
• 98ba96f185 demoted IKE state change output to debug level 2 Andreas Steffen 2008-07-28 14:01:45 +00:00
• 3fd9c75717 ignore AUTH_LIFETIME value if reauthentication has already been scheduled earlier Andreas Steffen 2008-07-28 13:53:04 +00:00
• 7fb2693724 switched xterm console title Martin Willi 2008-07-28 13:10:34 +00:00
• bc8f868c99 using gnome-terminal in irdumm Martin Willi 2008-07-28 12:37:01 +00:00
• 5c96dab653 version bump to 4.2.6 Andreas Steffen 2008-07-28 09:14:07 +00:00
• 7c04589335 use XFRM_MSG_UPDPOLICY for existing policies only Martin Willi 2008-07-28 08:29:04 +00:00
• 2863509616 updated UML INSTALL information Andreas Steffen 2008-07-25 10:30:53 +00:00
• 77a06476dc adapted UML scenarios to improved virtual IP address pool Andreas Steffen 2008-07-25 10:18:23 +00:00
• cae0c12d53 SQLite database template with improved address pool management Andreas Steffen 2008-07-25 08:02:53 +00:00
• 8124e49148 added changes for the 4.2.5 release Andreas Steffen 2008-07-25 08:00:04 +00:00
• 6ef70d2109 added tests.h to distribution Martin Willi 2008-07-24 12:48:36 +00:00
• b6bf863459 fixed UCI thread cancellation on ARM Martin Willi 2008-07-24 08:52:12 +00:00
• 3bc5a137cb added option charon.plugins.sql.lease_history to disable lease history logging Martin Willi 2008-07-24 08:28:45 +00:00
• 875a8326b3 fixed statistic calcuation for static leases Martin Willi 2008-07-24 08:21:55 +00:00
• f6facbe75c completed IKE_SA logging at the AUDIT level Andreas Steffen 2008-07-23 18:46:34 +00:00
• a01ad99341 fixed pool statistics Martin Willi 2008-07-23 13:56:07 +00:00
• 6410231335 IKE_SA rekeying inherits other_host from old IKE_SA Andreas Steffen 2008-07-23 07:44:26 +00:00
• 0eede4a31f cosmetics Andreas Steffen 2008-07-23 06:38:24 +00:00
• 295826b9f0 start default strongSwan UML topology Andreas Steffen 2008-07-22 17:21:01 +00:00
• 51c8f8261f some more changes to IKE_SA and CHILD_SA logging Andreas Steffen 2008-07-22 17:10:10 +00:00
• f7198e7e8c experimental and untested reimplementation of sql based IP pool uses address preallocation and separate address/lease tables for linear lookup time Martin Willi 2008-07-22 14:56:15 +00:00
• 32f5ee159e cosmetics Andreas Steffen 2008-07-22 12:13:48 +00:00
• 66da78b4bb ipsec status lists IPCOMP CPIs Andreas Steffen 2008-07-22 12:03:58 +00:00
• c3967e779e own CPI was not deleted due to copy-and-paste error Andreas Steffen 2008-07-22 10:53:56 +00:00
• eba7470b76 consistent logging of SPIs and CPIs Andreas Steffen 2008-07-22 10:16:45 +00:00
• 7db7d06e28 missing FETCH_END caused SEGFAULT in ikev2/rw-hash-and-url scenario Andreas Steffen 2008-07-22 06:24:00 +00:00
• af18c84ffb display protoport in dynamic/32 traffic selectors Andreas Steffen 2008-07-21 19:08:03 +00:00
• ee93541783 fixed bus args copy on non i386 archs Martin Willi 2008-07-21 14:23:43 +00:00
• fb34475b5c consistent logging of IKE and CHILD SAs Andreas Steffen 2008-07-21 12:47:59 +00:00
• 0a625fde3e pool performance testing Martin Willi 2008-07-21 11:17:20 +00:00
• 6b64fe2684 loading unit-tester plugin as the last one Martin Willi 2008-07-21 11:16:07 +00:00
• c7314e68ab reverted bus to non-recursive mutex due instability Martin Willi 2008-07-21 11:15:16 +00:00
• fc861b0b7e added a driver type getter for database implementations Martin Willi 2008-07-21 11:13:06 +00:00
• a4a3e0c7dc introduced an additional bus->signal parameter for signal specific data added SIG_IKE/SIG_CHD macros for signal emitting Martin Willi 2008-07-18 15:51:40 +00:00
• 2f725443e5 removed testing app, this is scriptable with irdumm now Martin Willi 2008-07-18 12:14:43 +00:00
• a98793adfe allow but filter recursive listener invocation Martin Willi 2008-07-18 11:05:01 +00:00
• 1082b06121 fixed compiler warning Martin Willi 2008-07-18 10:54:49 +00:00
• 12b1c1a1bc extended UCI plugin by a simple control interface using a fifo Martin Willi 2008-07-18 10:34:44 +00:00
• bb7b613b83 eliminated bashisms in _updown scripts Andreas Steffen 2008-07-18 10:04:40 +00:00
• bd07b59079 avoid heap allocation in bus->signal for performance reasons Martin Willi 2008-07-17 11:45:58 +00:00
• 5353f22ed7 fixed potential segfault in resolve_hosts Martin Willi 2008-07-17 11:06:31 +00:00
• d61d1913e1 ignore IPCOMP acquires, fixes additional CHILD_SA setup with acquired SAs using compression Martin Willi 2008-07-17 08:25:34 +00:00
• 7ca49551c8 do not distinguish different policy protocols in userland cache Martin Willi 2008-07-16 12:33:19 +00:00
• 7b9e1ff0fd do not complain about existing routes Martin Willi 2008-07-16 12:30:47 +00:00
• 08ab369b8c included Thomas in copyright statement Andreas Steffen 2008-07-16 12:28:29 +00:00
• 8384cfa338 build dumm with leak ./configure Martin Willi 2008-07-16 11:54:44 +00:00
• 7beea2e99f fixed acquire-delay bug by: installing policies before states updating policies if protocol has changed Martin Willi 2008-07-16 11:51:37 +00:00
• 519e87b078 updated copyright statement Andreas Steffen 2008-07-16 10:17:04 +00:00
• 872aa6ea51 fixed bashism in ipsec.in Andreas Steffen 2008-07-16 06:59:08 +00:00
• 326bfd0450 set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel mode Andreas Steffen 2008-07-15 21:35:55 +00:00
• de5f70e74d typo Andreas Steffen 2008-07-15 15:31:34 +00:00
• eb0cc33886 The XFRM_STATE_AF_UNSPEC flag added to xfrm.h allows IPv4-over-IPv6 and IPv6-over-IPv6 tunnels with the 2.6.26 and later Linux kernels Andreas Steffen 2008-07-15 15:28:00 +00:00
• 66d4745f8e ported patch to final 2.6.26 release, including UML Makefile fixes Martin Willi 2008-07-15 14:41:12 +00:00
• 6d58c2be9a cosmetics Andreas Steffen 2008-07-15 13:09:09 +00:00
• 0ef961b878 added pfsgroup to ipsec.conf.5 man page Andreas Steffen 2008-07-15 13:07:27 +00:00
• 4336a1c611 edited description Andreas Steffen 2008-07-11 17:09:48 +00:00
• a771dc33d0 added the ikev2/any-interface scenario Andreas Steffen 2008-07-11 17:08:25 +00:00
• 174960bedc expanded ikev2/ip-two-pools-db to a spoke-to-hub network using virtual IP addresses Andreas Steffen 2008-07-11 15:24:02 +00:00
• ef3f717bfe reverted [4125],[4166], reimplemented the proper way Martin Willi 2008-07-11 08:54:56 +00:00
• 6b5d95919c setting ike_sa on bus in checkout_new Martin Willi 2008-07-11 08:47:18 +00:00
• 858a9fd584 update_peerid() does not accept %any as a certificate's subjectAltName Andreas Steffen 2008-07-09 22:13:39 +00:00
• e7991a2eef do a route lookup to allow routing of left=%any connections Martin Willi 2008-07-09 14:16:19 +00:00
• 6c652e6b55 added /usr/local/[s]bin to uml exec path Martin Willi 2008-07-09 12:39:11 +00:00