Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

feature/update-api

main

Mono Color

• 2c7ad260f9 testing: Update carols certificate in several test cases Tobias Brunner 2014-10-03 11:22:11 +02:00
• 7ab320def3 testing: Add some notes about how to reissue attribute certificates Martin Willi 2014-10-03 12:31:01 +02:00
• 16469e8474 testing: Reissue attribute certificates for the new holder certificates Martin Willi 2014-10-03 12:26:56 +02:00
• 90fe4b3f8a starter: Allow specifying the ipsec.conf location in strongswan.conf Shea Levy 2014-09-30 15:14:47 -04:00
• 213e02b872 stroke: Allow specifying the ipsec.secrets location in strongswan.conf Shea Levy 2014-09-30 15:11:03 -04:00
• 5fea45506e library: Allow specifying the path to strongswan.conf in the STRONGSWAN_CONF env var Shea Levy 2014-09-30 14:31:50 -04:00
• 0efea2fd86 Don't fail to install if sysconfdir isn't writable Shea Levy 2014-09-19 14:32:22 -04:00
• 55e85387bb ikev1: Be more verbose if a peer config would match, but is unusable for Mode Martin Willi 2014-09-25 17:09:53 +02:00
• 9e3ab0d114 ikev2: Reorder task activation for established IKE SAs Tobias Brunner 2014-09-19 13:44:16 +02:00
• b3a7ba14f1 Revert "ikev2: Insert MOBIKE tasks at the front of the queue" Tobias Brunner 2014-09-19 13:40:14 +02:00
• 0c8c965ca1 Merge branch 'curl-features' Martin Willi 2014-09-24 17:37:13 +02:00
• ab23a0f86a travis: Disable soup in "all" test Martin Willi 2014-09-24 15:53:46 +02:00
• a336aefa89 curl: For SSL features, depend on thread-safety provided by our crypto plugins Martin Willi 2014-09-24 13:13:19 +02:00
• 44b6a34d43 configure: Load fetcher plugins after crypto base plugins Martin Willi 2014-09-24 12:24:13 +02:00
• d717b42b51 curl: Dynamically query supported protocols and register appropriate features Martin Willi 2014-08-28 11:11:12 +02:00
• 6eaec1e349 leak-detective: Whitelist libssl SSL_COMP_get_compression_methods() Martin Willi 2014-08-28 11:10:21 +02:00
• 85c95db17a curl: Try to initialize with SSL support to handle https:// URIs Martin Willi 2014-08-28 11:09:26 +02:00
• dcdcae0159 NEWS: Introduce charon-systemd Martin Willi 2014-09-24 11:35:03 +02:00
• b3accbe2cb Merge branch 'netlink-cleanups' Martin Willi 2014-09-24 11:20:53 +02:00
• 5ea627bdfa watcher: Add a method to query the watcher state Martin Willi 2014-07-10 16:27:18 +02:00
• 12c0bde689 kernel-netlink: Define and use rtnetlink message types Martin Willi 2014-07-10 18:01:21 +02:00
• c94e93a7ab kernel-netlink: Pass protocol specific enum names to socket constructor Martin Willi 2014-07-10 14:21:20 +02:00
• 5957e76b38 kernel-netlink: Clean up socket initialization, handle 0 as valid socket fd Martin Willi 2014-07-09 16:47:06 +02:00
• 4c3aca273f kernel-netlink: Clean up response buffer management Martin Willi 2014-07-09 16:16:16 +02:00
• de11d34abb kernel-netlink: Use recv() instead of recvfrom() Martin Willi 2014-07-09 16:04:16 +02:00
• 4c438cf099 kernel-netlink: Avoid casting the NLMSG_DATA() return value Martin Willi 2014-07-09 15:53:14 +02:00
• 0404a29bfe kernel-netlink: Define netlink buffer as an union having a netlink header Martin Willi 2014-07-09 15:47:24 +02:00
• 6fe02dda75 Merge branch 'systemd' Martin Willi 2014-09-24 11:17:29 +02:00
• 575d3ab19a travis: Disable build of native systemd IKE daemon Martin Willi 2014-09-12 10:35:23 +02:00
• c59fad9dbd man: Skip installation of ipsec.conf/secrets manpages when not building starter Martin Willi 2014-09-11 15:56:03 +02:00
• a3d03b4c71 init: Update starter systemd service to distinguish it from strongswan-swanctl Martin Willi 2014-09-15 15:52:47 +02:00
• 0097141858 init: Provide a service file for charon-systemd using swanctl Martin Willi 2014-09-11 16:23:53 +02:00
• b2f76c514d systemd: Check if ./configure detected a systemd system unit directory Martin Willi 2014-09-15 15:38:06 +02:00
• db8ae75bf6 systemd: Discover and check systemd libraries with pkg-config during configure Martin Willi 2014-09-12 10:29:29 +02:00
• e2d9f27c19 systemd: Add a native systemd journal logger Martin Willi 2014-09-11 17:26:34 +02:00
• 5421092b75 plugin-loader: Support a reload() callback for static features Martin Willi 2014-09-12 11:07:22 +02:00
• 73ed38e74f systemd: Provide a charon-systemd daemon targeting full systemd integration Martin Willi 2014-07-17 16:16:23 +02:00
• d9a2f1330a swanctl: Complete --load-creds command summary Martin Willi 2014-08-07 15:23:47 +02:00
• 71d85b33d9 swanctl: Fix description of load-pools command summary Martin Willi 2014-08-07 15:23:27 +02:00
• 67402e67af swanctl: Add a --load-all command, performing --load-{creds,pools,conns} Martin Willi 2014-08-07 15:22:40 +02:00
• 214a859cd6 swanctl: Add a --reload-settings command Martin Willi 2014-07-17 18:14:34 +02:00
• 455e213cb0 vici: Add a command to reload strongswan.conf Martin Willi 2014-07-17 18:02:09 +02:00
• 2dee0a85a6 encoding: Accept all exchange types for non IKEv1/IKEv2 major versions Martin Willi 2014-09-10 11:14:22 +02:00
• d8ad0fc351 settings: Make loading a NULL or empty pattern a (nop-)success Martin Willi 2014-08-25 10:36:01 +02:00
• 68da3bad57 settings: Use strongswan.conf used during library initialization for reload Martin Willi 2014-07-17 18:07:05 +02:00
• 9e783f6e89 library: Store the used root strongswan.conf configuration Martin Willi 2014-07-17 17:47:42 +02:00
• 0bf2abf182 testing: Use multiple jobs to install strongSwan Tobias Brunner 2014-09-16 14:02:05 +02:00
• 82136aa2cf testing: Add a script to build the current (or an arbitrary) source tree Tobias Brunner 2014-08-29 12:13:49 +02:00
• f376503f41 testing: Add packages to rebuild strongSwan from the repository Tobias Brunner 2014-08-29 16:22:49 +02:00
• ffcf8f4ea2 testing: Make strongSwan build recipe more configurable Tobias Brunner 2014-08-29 11:51:54 +02:00
• bc9acd7b9e swanctl: Document --stats command Tobias Brunner 2014-09-19 11:29:45 +02:00
• e0d59e10f8 testing: Update certs and keys in tkm tests Reto Buerki 2014-09-17 15:45:11 +02:00
• 1004d395f5 testing: Update x509-ada version to 0.1.1 Reto Buerki 2014-09-17 15:44:19 +02:00
• 22949c590f ikev2: Don't treat initial messages as MOBIKE exchanges Tobias Brunner 2014-09-16 14:59:05 +02:00
• 8a6b01dd2a ikev1: Don't cache last block of INFORMATIONAL messages as IV Tobias Brunner 2014-08-15 17:52:15 +02:00
• 2e62f51bcc ikev1: Log IV when encrypting messages Tobias Brunner 2014-08-15 17:28:40 +02:00
• 2f7fef569b ikev1: Skip unusable IPComp proposals Tobias Brunner 2014-08-15 15:59:12 +02:00
• 84337ac8d0 ikev1: Properly handle different proposal numbering schemes Tobias Brunner 2014-08-15 15:57:22 +02:00
• 90e6675a65 kernel-netlink: Optionally install protocol and ports on transport mode SAs Tobias Brunner 2014-08-25 14:45:40 +02:00
• 5dec7d2f9d Merge branch 'mobike-fixes' Tobias Brunner 2014-09-12 10:35:06 +02:00
• acd69fc291 ikev2: Reduce timeout if path probing was enabled Tobias Brunner 2014-07-28 14:09:10 +02:00
• de6ab8e85a ikev2: Defer MOBIKE updates if no path is available Tobias Brunner 2014-07-28 13:51:27 +02:00
• 8956dcecd4 ike-mobike: Allow calling transmit() even when not currently path probing Tobias Brunner 2014-07-28 13:46:16 +02:00
• 10bad0fc23 ikev2: Defer path probing if no path is currently available Tobias Brunner 2014-07-28 13:12:20 +02:00
• 7840952edc ike-mobike: Return FALSE in transmit() if no path was available Tobias Brunner 2014-07-28 13:12:09 +02:00
• 1b17f647a5 ikev2: Enable path probing for currently active MOBIKE task Tobias Brunner 2014-07-28 12:25:01 +02:00
• 2180ace937 ike-mobike: Add method to enable path probing Tobias Brunner 2014-07-28 12:24:33 +02:00
• c5a5bc85d9 ike-mobike: Skip peer addresses we can't send packets to when checking paths Tobias Brunner 2014-07-28 12:09:16 +02:00
• ff60134157 ikev2: Skip peer addresses we can't send packets to when looking for valid paths Tobias Brunner 2014-07-28 12:04:40 +02:00
• 3293d14628 ikev2: Insert MOBIKE tasks at the front of the queue Tobias Brunner 2014-07-22 18:51:57 +02:00
• 40164bbe27 ikev2: Migrate number of pending MOBIKE updates Tobias Brunner 2014-07-22 18:30:24 +02:00
• 03f61ba3d5 ikev2: Properly keep track of pending MOBIKE updates Tobias Brunner 2014-07-22 18:25:37 +02:00
• f640af5b7a Merge branch 'android-pfs' Tobias Brunner 2014-09-12 10:24:48 +02:00
• f9ceb5b543 android: Reduce CHILD_SA lifetime Tobias Brunner 2014-08-11 18:19:29 +02:00
• 1fe3b02838 android: Add DH groups to ESP proposals Tobias Brunner 2014-08-11 18:17:00 +02:00
• f92399ef18 child-cfg: Ignore duplicate proposals Tobias Brunner 2014-08-11 18:12:36 +02:00
• 8e52dc2733 proposal: Fix equals() Tobias Brunner 2014-08-11 18:08:24 +02:00
• ac1b3a6ddd android: Reestablish IKE_SA if CHILD_SA rekeying failed Tobias Brunner 2014-08-11 16:34:28 +02:00
• a39c28bb35 android: Report error if CHILD_SA rekeying fails Tobias Brunner 2014-08-11 16:09:35 +02:00
• 47a0e289d9 kernel-netlink: Add global option to configure MSS-clamping on installed routes Tobias Brunner 2014-08-04 15:57:46 +02:00
• c1adf7e0c4 kernel-netlink: Add global option to set MTU on installed routes Tobias Brunner 2014-08-04 15:35:18 +02:00
• c6e8b5dc2c chunk: Fix Doxygen comments for chunk_internet_checksum[_inc] Tobias Brunner 2014-09-11 17:56:12 +02:00
• 8ca9a67fac auth-cfg: Fix crash after several reauthentications with multiple authentication rounds Tobias Brunner 2014-09-11 17:33:52 +02:00
• ea50394bf1 array: Adjust negative index before calling remove_head|tail() Tobias Brunner 2014-08-29 10:18:07 +02:00
• c641974de0 array: Warn about caveat with array_remove_at() and value based arrays Tobias Brunner 2014-09-11 17:29:21 +02:00
• 92b76384a0 asn1: Try to fill the available binary OID buffer if possible Tobias Brunner 2014-09-09 11:46:38 +02:00
• c6f886ce10 unit-tests: Give worker threads time to clean up when testing thread_t.detach() Tobias Brunner 2014-06-25 16:37:25 +02:00
• cee338eccd stream-service: Prevent race conditions due to blocking call to destroy() Tobias Brunner 2014-07-21 12:23:37 +02:00
• 10859adfd4 stream-service: Do not accept or re-register when service is terminated Tobias Brunner 2014-07-21 11:35:34 +02:00
• 22e90cad00 stream-service: Restart accepting without blocking Tobias Brunner 2014-07-21 11:30:34 +02:00
• e58764ca0f android: Add support for querying use stats of a CHILD_SA Tobias Brunner 2014-08-20 11:39:28 +02:00
• de622eb1f9 eap-radius: Forward Cisco and Microsoft specific DNS/NBNS attributes Tobias Brunner 2014-08-19 14:34:28 +02:00
• 2d38a03d77 ikev1: Make sure proposed IPsec mode matches our own Tobias Brunner 2014-08-12 15:15:02 +02:00
• 34e402ef8d ike: Reset IKE_SA in state CONNECTING instead of reauthenticating Tobias Brunner 2014-08-12 12:05:16 +02:00
• 4df9250f26 asn1: Make sure not to exceed buffer for binary OID Tobias Brunner 2014-08-04 14:10:40 +02:00
• f80093e2ee kernel-pfroute: Delete interfaces on RTM_IFANNOUNCE/IFAN_DEPARTURE events Tobias Brunner 2014-07-25 18:07:08 +02:00
• f8613abc8a ip-packet: Define our own structs to handle TCP/UDP headers Tobias Brunner 2014-07-24 14:12:50 +02:00
• 25fcbab678 kernel-pfkey: Report packet counts of IPsec SAs Tobias Brunner 2014-07-18 18:19:46 +02:00
• 8a59fa6467 swanctl: Document how connections.*.unique affects initiators Tobias Brunner 2014-07-18 16:05:47 +02:00
• dbd7f4be31 mutex: Use atomics to set current thread in recursive mutex Tobias Brunner 2014-07-17 10:35:42 +02:00