Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 2dee0a85a6 encoding: Accept all exchange types for non IKEv1/IKEv2 major versions Martin Willi 2014-09-10 11:14:22 +02:00
• d8ad0fc351 settings: Make loading a NULL or empty pattern a (nop-)success Martin Willi 2014-08-25 10:36:01 +02:00
• 68da3bad57 settings: Use strongswan.conf used during library initialization for reload Martin Willi 2014-07-17 18:07:05 +02:00
• 9e783f6e89 library: Store the used root strongswan.conf configuration Martin Willi 2014-07-17 17:47:42 +02:00
• 0bf2abf182 testing: Use multiple jobs to install strongSwan Tobias Brunner 2014-09-16 14:02:05 +02:00
• 82136aa2cf testing: Add a script to build the current (or an arbitrary) source tree Tobias Brunner 2014-08-29 12:13:49 +02:00
• f376503f41 testing: Add packages to rebuild strongSwan from the repository Tobias Brunner 2014-08-29 16:22:49 +02:00
• ffcf8f4ea2 testing: Make strongSwan build recipe more configurable Tobias Brunner 2014-08-29 11:51:54 +02:00
• bc9acd7b9e swanctl: Document --stats command Tobias Brunner 2014-09-19 11:29:45 +02:00
• e0d59e10f8 testing: Update certs and keys in tkm tests Reto Buerki 2014-09-17 15:45:11 +02:00
• 1004d395f5 testing: Update x509-ada version to 0.1.1 Reto Buerki 2014-09-17 15:44:19 +02:00
• 22949c590f ikev2: Don't treat initial messages as MOBIKE exchanges Tobias Brunner 2014-09-16 14:59:05 +02:00
• 8a6b01dd2a ikev1: Don't cache last block of INFORMATIONAL messages as IV Tobias Brunner 2014-08-15 17:52:15 +02:00
• 2e62f51bcc ikev1: Log IV when encrypting messages Tobias Brunner 2014-08-15 17:28:40 +02:00
• 2f7fef569b ikev1: Skip unusable IPComp proposals Tobias Brunner 2014-08-15 15:59:12 +02:00
• 84337ac8d0 ikev1: Properly handle different proposal numbering schemes Tobias Brunner 2014-08-15 15:57:22 +02:00
• 90e6675a65 kernel-netlink: Optionally install protocol and ports on transport mode SAs Tobias Brunner 2014-08-25 14:45:40 +02:00
• 5dec7d2f9d Merge branch 'mobike-fixes' Tobias Brunner 2014-09-12 10:35:06 +02:00
• acd69fc291 ikev2: Reduce timeout if path probing was enabled Tobias Brunner 2014-07-28 14:09:10 +02:00
• de6ab8e85a ikev2: Defer MOBIKE updates if no path is available Tobias Brunner 2014-07-28 13:51:27 +02:00
• 8956dcecd4 ike-mobike: Allow calling transmit() even when not currently path probing Tobias Brunner 2014-07-28 13:46:16 +02:00
• 10bad0fc23 ikev2: Defer path probing if no path is currently available Tobias Brunner 2014-07-28 13:12:20 +02:00
• 7840952edc ike-mobike: Return FALSE in transmit() if no path was available Tobias Brunner 2014-07-28 13:12:09 +02:00
• 1b17f647a5 ikev2: Enable path probing for currently active MOBIKE task Tobias Brunner 2014-07-28 12:25:01 +02:00
• 2180ace937 ike-mobike: Add method to enable path probing Tobias Brunner 2014-07-28 12:24:33 +02:00
• c5a5bc85d9 ike-mobike: Skip peer addresses we can't send packets to when checking paths Tobias Brunner 2014-07-28 12:09:16 +02:00
• ff60134157 ikev2: Skip peer addresses we can't send packets to when looking for valid paths Tobias Brunner 2014-07-28 12:04:40 +02:00
• 3293d14628 ikev2: Insert MOBIKE tasks at the front of the queue Tobias Brunner 2014-07-22 18:51:57 +02:00
• 40164bbe27 ikev2: Migrate number of pending MOBIKE updates Tobias Brunner 2014-07-22 18:30:24 +02:00
• 03f61ba3d5 ikev2: Properly keep track of pending MOBIKE updates Tobias Brunner 2014-07-22 18:25:37 +02:00
• f640af5b7a Merge branch 'android-pfs' Tobias Brunner 2014-09-12 10:24:48 +02:00
• f9ceb5b543 android: Reduce CHILD_SA lifetime Tobias Brunner 2014-08-11 18:19:29 +02:00
• 1fe3b02838 android: Add DH groups to ESP proposals Tobias Brunner 2014-08-11 18:17:00 +02:00
• f92399ef18 child-cfg: Ignore duplicate proposals Tobias Brunner 2014-08-11 18:12:36 +02:00
• 8e52dc2733 proposal: Fix equals() Tobias Brunner 2014-08-11 18:08:24 +02:00
• ac1b3a6ddd android: Reestablish IKE_SA if CHILD_SA rekeying failed Tobias Brunner 2014-08-11 16:34:28 +02:00
• a39c28bb35 android: Report error if CHILD_SA rekeying fails Tobias Brunner 2014-08-11 16:09:35 +02:00
• 47a0e289d9 kernel-netlink: Add global option to configure MSS-clamping on installed routes Tobias Brunner 2014-08-04 15:57:46 +02:00
• c1adf7e0c4 kernel-netlink: Add global option to set MTU on installed routes Tobias Brunner 2014-08-04 15:35:18 +02:00
• c6e8b5dc2c chunk: Fix Doxygen comments for chunk_internet_checksum[_inc] Tobias Brunner 2014-09-11 17:56:12 +02:00
• 8ca9a67fac auth-cfg: Fix crash after several reauthentications with multiple authentication rounds Tobias Brunner 2014-09-11 17:33:52 +02:00
• ea50394bf1 array: Adjust negative index before calling remove_head|tail() Tobias Brunner 2014-08-29 10:18:07 +02:00
• c641974de0 array: Warn about caveat with array_remove_at() and value based arrays Tobias Brunner 2014-09-11 17:29:21 +02:00
• 92b76384a0 asn1: Try to fill the available binary OID buffer if possible Tobias Brunner 2014-09-09 11:46:38 +02:00
• c6f886ce10 unit-tests: Give worker threads time to clean up when testing thread_t.detach() Tobias Brunner 2014-06-25 16:37:25 +02:00
• cee338eccd stream-service: Prevent race conditions due to blocking call to destroy() Tobias Brunner 2014-07-21 12:23:37 +02:00
• 10859adfd4 stream-service: Do not accept or re-register when service is terminated Tobias Brunner 2014-07-21 11:35:34 +02:00
• 22e90cad00 stream-service: Restart accepting without blocking Tobias Brunner 2014-07-21 11:30:34 +02:00
• e58764ca0f android: Add support for querying use stats of a CHILD_SA Tobias Brunner 2014-08-20 11:39:28 +02:00
• de622eb1f9 eap-radius: Forward Cisco and Microsoft specific DNS/NBNS attributes Tobias Brunner 2014-08-19 14:34:28 +02:00
• 2d38a03d77 ikev1: Make sure proposed IPsec mode matches our own Tobias Brunner 2014-08-12 15:15:02 +02:00
• 34e402ef8d ike: Reset IKE_SA in state CONNECTING instead of reauthenticating Tobias Brunner 2014-08-12 12:05:16 +02:00
• 4df9250f26 asn1: Make sure not to exceed buffer for binary OID Tobias Brunner 2014-08-04 14:10:40 +02:00
• f80093e2ee kernel-pfroute: Delete interfaces on RTM_IFANNOUNCE/IFAN_DEPARTURE events Tobias Brunner 2014-07-25 18:07:08 +02:00
• f8613abc8a ip-packet: Define our own structs to handle TCP/UDP headers Tobias Brunner 2014-07-24 14:12:50 +02:00
• 25fcbab678 kernel-pfkey: Report packet counts of IPsec SAs Tobias Brunner 2014-07-18 18:19:46 +02:00
• 8a59fa6467 swanctl: Document how connections.*.unique affects initiators Tobias Brunner 2014-07-18 16:05:47 +02:00
• dbd7f4be31 mutex: Use atomics to set current thread in recursive mutex Tobias Brunner 2014-07-17 10:35:42 +02:00
• 7e433456fc curl: Log error code too Tobias Brunner 2014-07-11 15:40:15 +02:00
• 4f71ee2cf6 unit-tests: Add option to exclude specific test suites Tobias Brunner 2014-07-11 10:51:31 +02:00
• 5818467639 openssl: Report correct key length for EC keys when not using NIST curves Tobias Brunner 2014-08-26 18:26:33 +02:00
• 8d80528a60 credmgr: Fix copy and paste error in add_validator Thomas Egerer 2014-08-28 16:04:06 +02:00
• 51da5b920b Generated new test certificates Andreas Steffen 2014-08-28 21:34:40 +02:00
• e1c7e1bc1f ha: Don't adopt IKEv1 children when building without IKEv1 support Martin Willi 2014-08-28 10:16:51 +02:00
• 6095714e64 testing: Make sure the kernel exists when starting Tobias Brunner 2014-08-25 10:58:46 +02:00
• cfdc620a3f unity: Do not bump TS to 0.0.0.0/0 as initiator when no Split-Include received Martin Willi 2014-08-04 10:38:08 +02:00
• a45ba880c8 unity: Handle narrowing according to roles in the IKE_SA Tobias Brunner 2014-07-17 17:24:43 +02:00
• cb98380fe9 Merge branch 'push-mode-reauth' Martin Willi 2014-08-25 09:57:05 +02:00
• 4f243dfaa9 ikev1: Defer Mode Config push after CHILD adoption when using XAuth Martin Willi 2014-07-07 11:10:43 +02:00
• 891bbbd4bb ikev1: Defer Mode Config push after CHILD adoption and reauth detection Martin Willi 2014-07-07 10:42:11 +02:00
• 898c8b12f9 ikev1: Extend adopt_children_job by task queuing, executed after adoption Martin Willi 2014-07-07 10:36:35 +02:00
• cd9bba508b ikev1: Accept Quick Mode DELETES while Quick Mode rekeying is active Martin Willi 2014-07-11 11:59:01 +02:00
• 11bf11c1f5 utils: Check if the parameter passed to countof() is actually an array type Martin Willi 2014-07-04 14:37:58 +02:00
• bb6be26197 utils: Add some initial build time assertion macros Martin Willi 2014-07-04 14:35:27 +02:00
• 8986e2da47 starter: Do not close all file descriptors after fork() Martin Willi 2014-07-11 14:40:56 +02:00
• c08b74c524 ike-sa-manager: Use transient hasher for IKE_SA_INIT hash calculation Christophe Gouault 2014-07-11 13:40:25 +02:00
• 46184b07c1 diffie-hellman: Explicitly initialize DH exponent sizes during initialization Martin Willi 2014-07-16 16:44:24 +02:00
• 52ba4f6bf4 kernel-pfroute: Fix kernel response handling Tobias Brunner 2014-08-19 11:08:33 +02:00
• b04f40406d configure: Add additional includes when checking for linux/fib_rules.h Tobias Brunner 2014-08-11 18:38:20 +02:00
• 508f90131a starter: Wait indefinitely for charon when using --attach-gdb Martin Willi 2014-08-08 10:28:58 +02:00
• f51c923f69 starter: Don't monitor child if debugger is attached Thomas Egerer 2014-08-07 18:05:46 +02:00
• eafe8795ca Added Debian 7.6 to IMV database Andreas Steffen 2014-08-06 08:04:42 +02:00
• 78ec8c6085 unused os_info_t object removed Andreas Steffen 2014-08-06 07:55:54 +02:00
• bc14124147 Updated build-database.sh to 3.13.0-32-generic Ubuntu kernel Andreas Steffen 2014-08-06 07:54:57 +02:00
• fafed376e7 imv-swid: Use pkg-config to check for libjson-c Tobias Brunner 2014-07-30 16:01:41 +02:00
• ffa9b67189 dns-proxy: Don't use proxy socket if we fail to bypass it Tobias Brunner 2014-07-30 09:48:08 +02:00
• d236db8701 swanctl: Fix documentation of options for send_cert setting Tobias Brunner 2014-07-28 10:37:09 +02:00
• 8d31df9099 android: New release after adding certificate import, DNS proxy and GUI changes Tobias Brunner 2014-07-22 11:34:09 +02:00
• 1ddc1ec0b3 Merge branch 'android-dns-proxy' Tobias Brunner 2014-07-22 11:10:59 +02:00
• ffff7219ef android: For keyingtries > 0 notify the GUI if the limit is reached when reestablishing Tobias Brunner 2014-07-17 15:39:29 +02:00
• 5fd9e5fd00 android: Terminate IKE_SA if initial IKE_SA_INIT fails Tobias Brunner 2014-07-17 15:22:29 +02:00
• 945832c67d android: Only allow DNS queries for the configured hostname Tobias Brunner 2014-07-16 16:20:00 +02:00
• e77f226a0f android: Add optional filter functionality to DNS proxy Tobias Brunner 2014-07-16 16:17:28 +02:00
• c66f5f844d android: Recreate the TUN device without DNS when reestablishing IKE_SAs Tobias Brunner 2014-07-16 14:01:12 +02:00
• 36aab70ab0 android: Add method to BuilderAdapter to re-establish without DNS-related data Tobias Brunner 2014-07-16 13:54:57 +02:00
• cc1712a8f4 android: Use DNS proxy when reestablishing IKE_SAs Tobias Brunner 2014-07-16 13:11:10 +02:00
• 614359a7d5 bus: Add ike_reestablish_pre hook, called before DNS resolution Tobias Brunner 2014-07-16 12:38:44 +02:00
• 2dc26c557e android: Add DNS proxy implementation Tobias Brunner 2014-07-15 17:52:43 +02:00
• 16e519d42c ip_packet: Add function to easily encode UDP packets Tobias Brunner 2014-07-15 17:32:25 +02:00
• 108a67893f ip_packet: Apply transport protocol ports when encoding IP packet Tobias Brunner 2014-07-15 17:19:48 +02:00