Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 9dde9d69ed ipsec: Update rereadcacerts/aacerts command description in manpage Martin Willi 2015-02-06 14:23:17 +01:00
• 11c14bd2f5 stroke: Serve ca section CA certificates directly, not over central CA set Martin Willi 2015-02-06 12:43:33 +01:00
• ef2c61bc92 mem-cred: Add a method to unify certificate references, without adding it Martin Willi 2015-02-06 12:34:30 +01:00
• aba46b104e stroke: Purge existing CA/AA certificates during reread Martin Willi 2015-02-06 12:22:32 +01:00
• d69cf39bb4 stroke: Use separate credential sets for CA/AA certificates Martin Willi 2015-02-06 12:21:12 +01:00
• 845d36969e stroke: Refactor load_certdir function Martin Willi 2015-02-06 11:58:17 +01:00
• 1549a98493 vici: Don't use a default rand_time larger than half of rekey/reauth_time Martin Willi 2015-02-03 11:56:15 +01:00
• f6511e36b5 vici: If a IKE reauth_time is configured, disable the default rekey_time Martin Willi 2015-02-03 11:53:09 +01:00
• 1cce0df4a6 ikev2: Schedule a timeout for the delete message following passive IKE rekeying Martin Willi 2014-11-25 14:21:34 +01:00
• 6b57790270 kernel-netlink: Respect kernel routing priorities for IKE routes Martin Willi 2015-01-15 15:05:42 +01:00
• 4dc72f5e57 enum: Extend printf hook to print flags Thomas Egerer 2015-01-22 18:23:42 +01:00
• 53013b5f0c unit-tests: Don't fail host_create_from_dns() test if IPv6 not supported Martin Willi 2015-03-02 14:05:44 +01:00
• faafaf35f4 bliss: Add generated Huffman codes to the repository Tobias Brunner 2015-02-17 16:47:29 +01:00
• 8f5521cbac Fixed a memory leak in the attribute segmentation code Andreas Steffen 2015-02-27 15:13:07 +01:00
• 1151c9922a vici: Support ruby gem out-of-tree builds Martin Willi 2015-02-27 11:40:50 +01:00
• e722ee5df8 ha: Always install the CHILD_SAs with the inbound flag set to FALSE Martin Willi 2015-02-27 10:54:38 +01:00
• ca316734e8 Updated Ubuntu 14.04 kernel version Andreas Steffen 2015-02-27 08:45:37 +01:00
• 03b4d11ace Fixed compiler warnings Andreas Steffen 2015-02-27 08:44:16 +01:00
• 83f0c22afe travis: Disable unwind backtraces regardless of LEAK_DETECTIVE option Martin Willi 2015-02-26 10:39:50 +01:00
• c6595222d6 Version bump to 5.3.0dr1 Andreas Steffen 2015-02-26 09:12:54 +01:00
• 27bd0fed93 Allow SHA256 and SHA384 data hash for BLISS signatures. Andreas Steffen 2015-02-25 21:12:30 +01:00
• a7f0ab786d unit-tests: Completed BLISS tests Andreas Steffen 2015-02-23 20:28:50 +01:00
• bfb708ea23 Check for null pointer before applying memwipe() Andreas Steffen 2015-02-02 11:36:14 +01:00
• c2aca9eed2 Implemented improved BLISS-B signature algorithm Andreas Steffen 2015-01-31 02:16:15 +01:00
• d0d8568356 host-resolver: Do not cancel threads waiting for new queries during cleanup Martin Willi 2015-02-24 16:00:38 +01:00
• 2113f48271 host-resolver: Disable resolver thread cancellation by default Martin Willi 2015-02-24 15:59:35 +01:00
• 0ae862efd1 unit-tests: Add host_create_from_dns() test cases resolving "localhost" Martin Willi 2015-02-24 15:56:37 +01:00
• 54d143ca37 travis: Disable forecast/connmark plugins in monolithic builds Martin Willi 2015-02-24 11:27:53 +01:00
• 20a0fd9255 plugin-loader: Do not unload libraries during dlclose(), if supported Martin Willi 2015-02-24 11:50:21 +01:00
• 67a9744bb9 unit-tests: Accept numerical protocol/port numbers in traffic selector tests Martin Willi 2015-02-23 18:39:52 +01:00
• 98632af672 forecast: Explicitly cast sockaddr to fix compiler warning Tobias Brunner 2015-02-23 12:13:56 +01:00
• 89b60e9fd7 configure: Use pkg-config to detect libiptc used by connmark/forecast Tobias Brunner 2015-02-23 12:11:22 +01:00
• 4e236a7e15 openssl: Return the proper IV length for OpenSSL crypters Tobias Brunner 2015-02-20 13:34:04 +01:00
• 57b096eb7a Merge branch 'forecast' Martin Willi 2015-02-20 16:01:44 +01:00
• dc88d1796a NEWS: Introduce forecast multicast/broadcast forwarding plugin Martin Willi 2014-12-05 16:12:12 +01:00
• c10b2be967 testing: Add a forecast test case Martin Willi 2014-12-18 16:05:24 +01:00
• 3748fc70a7 testing: Build forecast plugin Martin Willi 2014-12-18 16:02:45 +01:00
• ed14d3ebe4 forecast: Document strongswan.conf options Martin Willi 2014-12-05 16:07:16 +01:00
• e5ad2e6614 forecast: Add the broadcast/multicast forwarding plugin called forecast Martin Willi 2014-12-05 15:50:24 +01:00
• c72fa57a00 Merge branch 'connmark' Martin Willi 2015-02-20 15:59:19 +01:00
• 1e1e88e6d9 NEWS: Introduce connmark plugin Martin Willi 2014-11-18 11:41:44 +01:00
• 9ed09d5f77 testing: Add a connmark plugin test Martin Willi 2014-11-18 11:33:28 +01:00
• 15f392d9ed testing: Build strongSwan with the connmark plugin Martin Willi 2014-11-17 18:06:29 +01:00
• f3a419e9c4 testing: Install iptables-dev to guest images Martin Willi 2014-11-17 18:06:05 +01:00
• 2a8e351117 travis: Install iptables-dev for connmark plugin in "all" tests Martin Willi 2014-11-17 12:07:36 +01:00
• cc1682bef9 ipsec-types: Support the %unique mark value Martin Willi 2014-11-17 11:59:38 +01:00
• b8973b2661 connmark: Add CONNMARK rules to select correct output SA based on conntrack Martin Willi 2014-11-14 12:57:53 +01:00
• e1fe2781b0 bus: Add an ike_update() hook invoked when peer endpoints change Martin Willi 2014-12-09 13:20:44 +01:00
• 8c2290dcf9 connmark: Add a plugin stub Martin Willi 2014-11-14 11:01:45 +01:00
• 45ab5b0fca load-tester: Support initiating XAuth authentication Martin Willi 2015-01-27 10:40:39 +01:00
• ee83067e5c Merge branch 'make-before-break' Martin Willi 2015-02-04 11:50:12 +01:00
• 4a00f912ed NEWS: Introduce make-before-break reauthentication Martin Willi 2015-02-04 11:47:56 +01:00
• f27fb58ae0 testing: Update description and test evaluation of host2host-transport-nat Martin Willi 2014-11-12 16:52:52 +01:00
• 050556bf59 testing: Be a little more flexible in testing for established CHILD_SA modes Martin Willi 2014-11-12 12:09:04 +01:00
• b1ff437bbc testing: Add a test scenario for make-before-break reauth using a virtual IP Martin Willi 2014-11-10 15:36:48 +01:00
• ae3fdf2603 testing: Add a test scenario for make-before-break reauth without a virtual IP Martin Willi 2014-11-10 15:36:08 +01:00
• 22e6a06b8c mem-pool: Pass the remote IKE address, to re-acquire() an address during reauth Martin Willi 2014-11-04 16:32:33 +01:00
• 3676023e54 ikev2: Schedule a make-before-break completion task to delete old IKE_SA Martin Willi 2014-11-04 13:41:48 +01:00
• 52bd3b8ef9 ikev2: Allow task to skip exchange by setting undefined exchange type Martin Willi 2014-11-04 13:54:29 +01:00
• 349f7f2412 ikev2: Trigger make-before-break reauthentication instead of reauth task Martin Willi 2014-11-03 16:37:29 +01:00
• c8e7dbcb56 ike-sa-manager: Use IKEv1 uniqueness reauthentication detection for IKEv2, too Martin Willi 2014-11-03 16:00:13 +01:00
• 88a06a3596 Merge branch 'attr-migrate' Martin Willi 2015-02-04 11:38:58 +01:00
• b9be25ea39 attribute-handler: Pass full IKE_SA to handler backends Martin Willi 2014-11-04 15:53:50 +01:00
• bc9ded9dbf attribute-provider: Pass full IKE_SA to provider backends Martin Willi 2014-11-04 15:38:07 +01:00
• a12f357b40 attribute-manager: Pass full IKE_SA to handler methods Martin Willi 2014-11-04 15:20:41 +01:00
• a16058a491 attribute-manager: Pass the full IKE_SA to provider methods Martin Willi 2014-11-04 15:11:42 +01:00
• 124490a8e0 unit-tester: Drop the old unit-tester libcharon plugin Martin Willi 2014-11-04 15:00:15 +01:00
• 751363275f attributes: Move the configuration attributes framework to libcharon Martin Willi 2014-11-04 14:45:34 +01:00
• 1f29cd2c5d libcharon: Add a test runner Martin Willi 2014-12-12 12:44:32 +01:00
• 82e4b83378 attr-sql: Move plugin to libcharon Martin Willi 2014-11-04 14:22:20 +01:00
• c6c7f97a1d attr: Move plugin to libcharon Martin Willi 2014-11-04 14:19:03 +01:00
• 6bfd1fbb71 resolve: Move plugin back to libcharon Martin Willi 2014-11-04 14:13:34 +01:00
• a75980c4aa Merge branch 'tkm-reqid-alloc' Martin Willi 2015-02-04 11:31:47 +01:00
• 65566c37ca testing: Add tkm xfrmproxy-expire test Reto Buerki 2014-12-18 11:49:05 +01:00
• 03409ac7a0 testing: Assert ees acquire messages in xfrmproxy tests Reto Buerki 2014-12-18 10:43:42 +01:00
• 3fb42bc87f charon-tkm: Use get_dst_host getter in EES callback Reto Buerki 2014-12-19 09:11:12 +01:00
• e12ff07c96 charon-tkm: Add get_dst_host getter to SAD Reto Buerki 2014-12-19 08:54:22 +01:00
• ba8aefd5f2 charon-tkm: Improve SAD get_esa_id log messages Reto Buerki 2014-12-19 08:52:19 +01:00
• f5fc592ae1 charon-tkm: Store reqid in SAD Reto Buerki 2014-12-18 17:58:26 +01:00
• e1e854bd0c charon-tkm: Store remote SPI in SAD Reto Buerki 2014-12-18 16:49:16 +01:00
• fa4f66cba3 charon-tkm: Make CHILD/ESP SA database public Reto Buerki 2014-12-18 16:24:07 +01:00
• e63cbb367c charon-tkm: Fix logger entity name in tests.c Reto Buerki 2014-12-18 16:16:49 +01:00
• 8fce649d9a testing: Assert proper ESA deletion Reto Buerki 2014-12-18 17:32:09 +01:00
• 94eb09ac35 Merge branch 'reqid-alloc' Martin Willi 2015-02-19 18:18:51 +01:00
• 246c969d8b ike: Consistently log CHILD_SAs with their unique_id instead of their reqid Martin Willi 2014-10-28 10:54:38 +01:00
• fa42367ca1 unity: Reference IKE_SAs by the IKEv1 COOKIEs, improving lookup performance Martin Willi 2014-10-27 16:16:13 +01:00
• db80d0d2da ike-sa-manager: Remove IKE_SA checkout by CHILD_SA reqid Martin Willi 2014-10-27 16:08:59 +01:00
• 246dcf8691 migrate-job: Do CHILD_SA reqid lookup locally Martin Willi 2014-10-27 16:03:05 +01:00
• b125839a1a kernel-interface: Raise mapping event with a proto/SPI/dst tuple Martin Willi 2014-10-27 15:38:47 +01:00
• 85ace154d8 inactivity-job: Schedule job by CHILD_SA unique ID instead of reqid Martin Willi 2014-10-27 15:19:09 +01:00
• 84e391e08e charon-tkm: Fix compilation of ees_callback.c Reto Buerki 2014-11-17 15:15:19 +01:00
• f81a949748 kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqid Martin Willi 2014-10-27 15:07:05 +01:00
• 971a91685d controller: Use the CHILD_SA unique_id to terminate CHILD_SAs Martin Willi 2014-10-27 14:03:32 +01:00
• e4a131b1ce swanctl: List CHILD_SA unique ID as the primary identifier, but print reqid, too Martin Willi 2014-10-27 13:54:51 +01:00
• 53cf7fa60a stroke: List CHILD_SA unique ID as the primary identifier, but print reqid, too Martin Willi 2014-10-27 14:07:14 +01:00
• adc1885bf7 vici: Include the CHILD_SA unique ID in list-sa event Martin Willi 2014-10-27 13:51:59 +01:00
• 38227d0e08 ike: Maintain per-IKE_SA CHILD_SAs in the global CHILD_SA manager Martin Willi 2014-10-23 16:52:25 +02:00
• e732fb11a9 child-sa-manager: Add a global manager storing CHILD_SA relations Martin Willi 2014-10-23 15:42:21 +02:00
• 85b238887d child-sa: Replace reqid based marks by "unique" marks Martin Willi 2014-11-13 15:26:10 +01:00
• 4ec397b894 child-sa: Introduce a unique CHILD_SA identifier Martin Willi 2014-10-23 11:27:25 +02:00