Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 233b853dfa extended credential_set_t interface by a cache_cert() method allows persistent or in-memory caching of fetched certificates Martin Willi 2008-04-17 11:22:37 +00:00
• 46a5604a04 splitted IKE_SA manager destroy to allow plugin interaction Martin Willi 2008-04-17 10:46:25 +00:00
• e5617e40d1 adding rightsourceip=%poolname properly to peer config Martin Willi 2008-04-17 08:55:32 +00:00
• 4904d26120 slightly optimized IKE_SA checkin Martin Willi 2008-04-16 08:43:32 +00:00
• 054c9e6031 parallelized trust chain verification temporary imported certificates are thread-local only read-write locking on credential manager credential sets must be thread-save now Martin Willi 2008-04-16 08:38:15 +00:00
• 2c463cdfb1 optimized half-open IKE_SA lookup (no checkout) Martin Willi 2008-04-16 08:34:52 +00:00
• 140ed97c0c disable DPD if dpddelay is set but dpdaction=none Martin Willi 2008-04-16 05:50:56 +00:00
• 20e32cf86c updated sql testcases to new table schema Martin Willi 2008-04-15 15:14:32 +00:00
• 02e4180e48 updated sql plugin to respect config changes Martin Willi 2008-04-15 15:13:53 +00:00
• 1822ca740b disabled SQL logging by default, as tests scenarios do not have a logging table Martin Willi 2008-04-15 15:13:08 +00:00
• f722fa31db added error logging to sqlite plugin Martin Willi 2008-04-15 15:12:01 +00:00
• 0dab0f1d5d fixed build of smp plugin Martin Willi 2008-04-15 11:51:46 +00:00
• f45411c045 set long-forgotten DPD defaults Andreas Steffen 2008-04-15 11:27:45 +00:00
• 82d8368bd7 build plugins after daemon/libstrongswan Martin Willi 2008-04-15 07:57:01 +00:00
• 6a365f0740 added API for random number generators, served through credential factory ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random) Martin Willi 2008-04-15 05:56:35 +00:00
• 0644ebd3de implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater additionally supports a "keep" value to keep the old IKE_SA Martin Willi 2008-04-14 13:23:24 +00:00
• a593db5d35 ike_sa_manager enumerable, not iterable Martin Willi 2008-04-14 11:37:46 +00:00
• b010310517 updated rightsourceip parameter in man page Martin Willi 2008-04-14 08:27:05 +00:00
• 348af092ac added close_action as a seperate config option to dpd_action Martin Willi 2008-04-14 08:17:18 +00:00
• cadb5d16e5 fixed jumping IKE_SA unique ids Martin Willi 2008-04-14 07:55:23 +00:00
• 45819d7d49 fixed rightsourceip=%config scenarios Martin Willi 2008-04-14 07:18:16 +00:00
• fa89d4457a use ip6tables in sql/rw-psk-ipv6 scenario Andreas Steffen 2008-04-14 06:10:10 +00:00
• acda610cbb fixed suppression of cert requests in eap-sim and eap-aka scenarios Andreas Steffen 2008-04-14 04:33:17 +00:00
• ff41ca0dc4 host_srcip was not properly initialized in starterwhack.c Andreas Steffen 2008-04-13 21:42:44 +00:00
• 743d9c7b20 added sql/rw-psk-ipv6 scenario Andreas Steffen 2008-04-13 19:50:15 +00:00
• 09a01b5e51 added sql/rw-psk-rsa-split scenario Andreas Steffen 2008-04-13 19:49:20 +00:00
• b1bdfa4890 fixed disabling the sending of cert requests Andreas Steffen 2008-04-13 17:31:07 +00:00
• 96926b006d using dpd actions to enforce connection state dpd actions a per child-, not peer ike-sa Martin Willi 2008-04-11 08:14:48 +00:00
• 4a6474c2c3 enabling acquire for mediated connections Tobias Brunner 2008-04-10 12:51:04 +00:00
• 78abba428f enabling reauthentication on mediation connections Tobias Brunner 2008-04-10 08:42:27 +00:00
• 4a03518112 fixing a problem if the mediation server initiates the rekeying Tobias Brunner 2008-04-10 07:24:30 +00:00
• 22452f70fc mediation connections should now properly rekey Tobias Brunner 2008-04-09 18:12:22 +00:00
• ad81e51afc implemented a simple attribute provider for stroke Martin Willi 2008-04-09 12:56:20 +00:00
• cdcfe777f4 implementation of an CFG attribute framework, currently supporting virtual IPs updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool Martin Willi 2008-04-09 12:54:47 +00:00
• 4a96521965 signature in connectivity checks is now built with the message id in network byte order Tobias Brunner 2008-04-08 13:45:30 +00:00
• 5df92bba51 changed force_encap to forceencaps Martin Willi 2008-04-08 12:53:36 +00:00
• 1d295d1ffa printing the checklist, two bugfixes Tobias Brunner 2008-04-08 12:31:27 +00:00
• 6f186d7e2e connect manager: restart the sender if it is not running anymore Tobias Brunner 2008-04-08 09:21:27 +00:00
• 03e5336340 better logging for chunks in connect manager Tobias Brunner 2008-04-08 08:41:23 +00:00
• 028a345c63 refactored callback data in connect manager Tobias Brunner 2008-04-08 08:33:15 +00:00
• f6e7c0f785 removed stale ocsp header Martin Willi 2008-04-08 06:27:04 +00:00
• 6970925422 fast finishing connectivity checks on the initiators side Tobias Brunner 2008-04-07 15:45:37 +00:00
• dd563e60df corrected the logging for retransmissions of connectivity checks Tobias Brunner 2008-04-07 14:45:39 +00:00
• b03c1d415c changed how retransmissions of connectivity checks are sent Tobias Brunner 2008-04-07 11:26:15 +00:00
• 852abcd3a3 fixed doxygen groups to avoid recursion Martin Willi 2008-04-07 10:37:14 +00:00
• 571ad29507 wildcard matching in shared secrets not implemented yet Andreas Steffen 2008-04-07 10:29:08 +00:00
• e44612c878 added sql/rw-psk-ipv4 scenario Andreas Steffen 2008-04-07 10:24:49 +00:00
• 70a568b015 fixing another memory leak Tobias Brunner 2008-04-07 09:36:52 +00:00
• af9e3954e2 set accelerated rekeying defaults in ipsec.sql for UML scenarios Andreas Steffen 2008-04-07 09:10:58 +00:00
• 2c0df332a9 added sql/rw-cert scenario Andreas Steffen 2008-04-07 08:57:46 +00:00
• 1749642b15 use cert->equals() to filter out equal certificates in seperate instances Martin Willi 2008-04-07 08:48:08 +00:00
• da5e7bdb4c try to cache the same instance of equal certificates Martin Willi 2008-04-07 08:44:43 +00:00
• b5dbcc6270 compare certificates against full encoding to allow equality check of untrusted certs Martin Willi 2008-04-07 08:28:35 +00:00
• 9caadea8c8 fixed bad cleanup which results in segfault if no issuer cert found, fixes #43 Martin Willi 2008-04-07 08:06:02 +00:00
• 6fbd3f1738 fixed path to ipsec.sql Andreas Steffen 2008-04-07 07:57:38 +00:00
• 56bcc343ff ipsec.sql remains in /etc/ipsec.d Andreas Steffen 2008-04-07 07:25:04 +00:00
• decfd8e546 moved strongswan.conf to /etc Andreas Steffen 2008-04-07 07:21:06 +00:00
• 480297b883 cosmetics Andreas Steffen 2008-04-07 07:02:47 +00:00
• ff867d062e added ./configure option --with-strongswan-conf= defaults to /etc/strongswan.conf Martin Willi 2008-04-07 06:56:33 +00:00
• 4071ad1e5b fixed segfault when opening a SQLite database fails Martin Willi 2008-04-07 06:49:13 +00:00
• 096b7f6889 do-tests now lists strongswan.conf and ip xfrm policy|state Andreas Steffen 2008-04-07 06:14:21 +00:00
• 8ec032fc62 added helper scripts to create SQL scripts Martin Willi 2008-04-07 06:06:42 +00:00
• 84fc1abf7a added sql/net2net-psk scenario Andreas Steffen 2008-04-06 18:11:19 +00:00
• b6032b2400 corrected description Andreas Steffen 2008-04-06 18:10:57 +00:00
• f8ab4a8f76 log shared secret with debug level 4 Andreas Steffen 2008-04-06 17:51:29 +00:00
• b26fecefa0 disable mobike in sql/net2net-cert scenario Andreas Steffen 2008-04-06 12:53:57 +00:00
• 1b247314fd default is hostaccess=no Andreas Steffen 2008-04-06 12:15:05 +00:00
• bc722433be version bump to 4.2.1 Andreas Steffen 2008-04-06 12:12:13 +00:00
• 69813bd27f added sql/net2net-cert scenario Andreas Steffen 2008-04-06 12:06:33 +00:00
• babaaa3c11 support of SQL databases in UML scenarios Andreas Steffen 2008-04-06 12:05:42 +00:00
• a9184df36b do not build leak_detective.o if not enabled Martin Willi 2008-04-04 11:38:16 +00:00
• 2429fb4958 defining hook functions ourself as definition in uClibc and glibc differ, fixes #36 Martin Willi 2008-04-04 11:37:19 +00:00
• 67d147e888 removed unused gmp.h to build libstrongswan without libgmp Martin Willi 2008-04-04 11:13:14 +00:00
• 4c7e6112c5 and another Tobias Brunner 2008-04-03 15:22:06 +00:00
• 471f923071 fixed two other memory leaks Tobias Brunner 2008-04-03 15:13:25 +00:00
• cce97b647a redirecting all leak_report information to stderr Martin Willi 2008-04-03 11:25:08 +00:00
• 6c45e62242 some code cleanups Martin Willi 2008-04-03 10:22:17 +00:00
• 84b18d5fc7 replaced mutex in leak detective with thread scheduling Tobias Brunner 2008-04-03 09:24:35 +00:00
• 8e91a36314 thread locking for sender and processor optimized Tobias Brunner 2008-04-03 09:19:12 +00:00
• 6af29ccf33 configure option in strongswan.conf for thread count Martin Willi 2008-04-03 08:37:24 +00:00
• 6e4e27f8de updated test data to use correct encoding data Martin Willi 2008-04-03 06:45:17 +00:00
• 196b28a470 demoted more notify debug messages to level 2 Andreas Steffen 2008-04-02 19:15:05 +00:00
• f342cc08c0 make peer IP address and peer IP available to the xauth_module.verify_secret() method Andreas Steffen 2008-04-02 19:04:45 +00:00
• 97da3d2de0 renamed AES_cbc_encrypt to SS_AES_cbc_encrypt due to name collision with OpenSSL library Andreas Steffen 2008-04-02 18:51:10 +00:00
• 7a9d3ae471 support of force_keepalive parameter Andreas Steffen 2008-04-02 18:35:23 +00:00
• c3f803c4c6 fixing some memory leaks Tobias Brunner 2008-04-02 18:21:03 +00:00
• f049b29491 securing total_threads with the mutex while destroying the processor Tobias Brunner 2008-04-02 15:28:08 +00:00
• 1ee637d8b1 generate debug output if ocsp response does not contain status information for a given certificate Andreas Steffen 2008-04-02 14:28:17 +00:00
• 473eff33aa updated TODO Martin Willi 2008-04-02 13:21:02 +00:00
• 16f5dacd4b added some NEWS for the 4.2 release Martin Willi 2008-04-02 13:20:46 +00:00
• d6bd078a65 updated RFCs/drafts Martin Willi 2008-04-02 13:20:14 +00:00
• 513f20156a fixed med_db test Martin Willi 2008-04-02 12:27:39 +00:00
• 489e3da0ea updated mediation database to public key authentication added mysql table definition, test data testcase Martin Willi 2008-04-02 12:25:14 +00:00
• e29ebcb1af fixed compile warnings Martin Willi 2008-04-02 09:54:20 +00:00
• 281d04502e additional debug line makes certificate status checking more understandable Andreas Steffen 2008-04-02 06:25:59 +00:00
• 9372f44c67 workaround for parsing IPv6 PSKs requires extract_last_token() Andreas Steffen 2008-04-01 20:40:29 +00:00
• 080555e76a demoted received notify debug message to level 2 Andreas Steffen 2008-04-01 20:22:38 +00:00
• 158a62c326 adapted ikev2 uml scenarios for the 4.2 version Andreas Steffen 2008-04-01 20:05:02 +00:00
• 372b7ac7e2 added missing files for commit [3721] Martin Willi 2008-04-01 15:03:02 +00:00
• 9d1c384b4b loading of subjectPublicKeyInfo wrapped keys using KEY_ANY (openssl format) testcase Martin Willi 2008-04-01 14:51:31 +00:00