Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 4431e1e04d updown: Force subnet address to be numeric Tobias Brunner 2014-06-16 15:34:05 +02:00
• 07b57e203b windows: Include <sys/stat.h> explicitly before overloading memset()/memcpy() Martin Willi 2014-06-25 16:06:59 +02:00
• fc8ca5f2f2 eap-radius: Increase buffer for accounting attributes to maximum attribute size Martin Willi 2014-06-25 13:09:20 +02:00
• cd6b2af33e kernel-netlink: Cast IPv6 address blobs to the proper type Tobias Brunner 2014-06-24 15:43:49 +02:00
• 3e4ce88633 android: Define HAVE_DLADDR as plugin loader checks for it Tobias Brunner 2014-06-05 10:17:09 +02:00
• 5195416d90 android: Update Android.mk files to match changes due to the Windows port Tobias Brunner 2014-06-24 15:33:17 +02:00
• 866514c70c charon: Set CLOEXEC flag on daemon PID file and /dev/(u)random source FDs Martin Willi 2014-06-24 14:43:38 +02:00
• 6d4654b9f9 utils: Add wrappers for memcpy(3), memmove(3) and memset(3) Tobias Brunner 2014-06-24 14:52:42 +02:00
• bb91109af8 pki: Also check for MAX_COMMANDS when building getopt_long arguments Tobias Brunner 2014-06-20 17:55:48 +02:00
• d82aa931db Auxiliary swid_tagstats table boosts performance Andreas Steffen 2014-06-23 13:32:50 +02:00
• a4844dbc8f Merge branch 'algorithm-order' Tobias Brunner 2014-06-20 16:22:15 +02:00
• aba9ef542e unit-tests: Add tests for DH factory Tobias Brunner 2014-06-18 17:25:47 +02:00
• 94dbbd8079 crypto-factory: Only sort RNGs by algorithm identifier Tobias Brunner 2014-06-20 09:07:05 +02:00
• e145f27db7 unit-tests: Add test for crypto_factory_t's rng_create method Tobias Brunner 2014-05-06 19:56:17 +02:00
• 90854d289f kernel-netlink: Install virtual IPv6 addresses as deprecated Tobias Brunner 2014-06-20 08:51:07 +02:00
• 8661c56d38 vici: Install libvici in ipseclibdir like we do with other libraries Tobias Brunner 2014-06-19 14:41:37 +02:00
• 93c68fcd26 Merge branch 'shunt-policies-routes' Tobias Brunner 2014-06-19 14:33:50 +02:00
• 88f125f560 kernel-netlink: Pass prefix when looking up next hop for shunt policies Tobias Brunner 2014-06-18 10:10:25 +02:00
• de7cb6de65 kernel-netlink: Add support for destination prefix when determining next hop Tobias Brunner 2014-06-18 09:58:01 +02:00
• c005073d0b kernel-interface: Add destination prefix to get_nexthop() Tobias Brunner 2014-06-18 09:55:39 +02:00
• 73b22aa842 Merge branch 'passthrough-policies-priority' Tobias Brunner 2014-06-19 14:24:48 +02:00
• 2ef6f57456 testing: Add ikev2/shunt-policies-nat-rw scenario Tobias Brunner 2014-06-19 13:37:05 +02:00
• d93987ce24 testing: Remove ikev2/shunt-policies scenario Tobias Brunner 2014-06-19 13:38:49 +02:00
• 981466251f shunt-manager: Install passthrough policies with highest priority Tobias Brunner 2014-05-13 12:20:27 +02:00
• 5b883719a1 libipsec: Add support for new policy priority class Tobias Brunner 2014-05-13 12:20:02 +02:00
• 77b6a145a0 kernel-pfkey: Add support for new policy priority class Tobias Brunner 2014-05-13 12:19:41 +02:00
• f1675e4e29 kernel-netlink: Add support for new policy priority class Tobias Brunner 2014-05-13 12:17:09 +02:00
• 479060d2d6 ipsec: Add a fourth priority class for bypass policies Tobias Brunner 2014-05-13 12:16:33 +02:00
• 566d1a90cd Remove kernel-klips plugin Tobias Brunner 2014-05-13 11:18:40 +02:00
• 3bf98189d7 kernel-netlink: Follow RFC 6724 when selecting IPv6 source addresses Tobias Brunner 2014-03-14 15:41:52 +01:00
• 6364219281 Merge branch 'ipsec.conf-parser' Tobias Brunner 2014-06-19 14:04:33 +02:00
• f4d29bf16d starter: Don't directly refer to source files in Makefile for unit tests Tobias Brunner 2014-06-19 11:58:15 +02:00
• 6719c4c828 starter: Explicitly allow @# at the beginning of strings Tobias Brunner 2014-06-18 15:11:32 +02:00
• 2d88617e7d starter: Add --conftest option to test ipsec.conf syntax Tobias Brunner 2014-06-18 11:31:49 +02:00
• a953f3ad4a starter: Remove old parser Tobias Brunner 2014-05-21 15:06:12 +02:00
• 81ba3c1a5e starter: Use new parser to read config file Tobias Brunner 2014-05-21 14:51:44 +02:00
• 640c75bb2e starter: Move kw_entry_t definition Tobias Brunner 2014-05-21 14:36:46 +02:00
• 8839796c3e starter: Remove unused ARG_LST argument type Tobias Brunner 2014-05-21 13:36:24 +02:00
• f245ac6cc0 starter: Add tests for ipsec.conf parser Tobias Brunner 2014-05-20 18:16:48 +02:00
• a1625fdc9b unit-tests: Make fixture functions optional Tobias Brunner 2014-05-20 19:27:50 +02:00
• f609682e5d starter: Add new bison/flex based parser for ipsec.conf Tobias Brunner 2014-05-20 18:15:13 +02:00
• 4ef86a849b starter: Remove out of date README Tobias Brunner 2014-05-20 16:40:39 +02:00
• 9dbf2019e2 collections: Add interface for read-only dictionaries Tobias Brunner 2014-05-16 11:53:08 +02:00
• 3c206f2e81 hashtable: Add destroy_function method Tobias Brunner 2013-08-27 16:37:41 +02:00
• dcb168413f stroke: Add --daemon option Tobias Brunner 2014-02-20 17:27:54 +01:00
• 02de66e1bf starter: Use stream abstraction to communicate with stroke plugin Tobias Brunner 2014-02-20 16:17:11 +01:00
• 906a409608 stroke: Use stream abstraction to communicate with stroke plugin Tobias Brunner 2014-02-20 16:04:36 +01:00
• b384daafde winhttp: Fix a typo to properly release connection handle Martin Willi 2014-06-19 11:09:20 +02:00
• 9f950af17a load-tester: Add a crl option to include a CRL uri in generated certificates Martin Willi 2014-06-19 10:48:27 +02:00
• 8b855a97c2 bus: Properly va_copy() argument list before passing it to printf() functions Martin Willi 2014-06-19 10:10:54 +02:00
• 758dc8a953 child-sa: Set replay window on both inbound and outbound SA Martin Willi 2014-06-18 16:50:18 +02:00
• 8b9b11919d kernel-netlink: Never use XFRMA_REPLAY_ESN_VAL to configure zero replay windows Martin Willi 2014-06-18 14:57:21 +02:00
• d345f0b75d Added swanctl/net2net-route scenario Andreas Steffen 2014-06-18 14:57:33 +02:00
• 3f5f0b8940 Added swanctl/net2net-start scenario Andreas Steffen 2014-06-18 14:35:59 +02:00
• 4402bae77d Minor changes in swanctl scenarios Andreas Steffen 2014-06-18 14:35:36 +02:00
• 927dff2366 The policy_started check is not needed any more Andreas Steffen 2014-06-18 14:01:02 +02:00
• ed42874645 Added swanctl --list-pols and swanctl --stats do scenario log Andreas Steffen 2014-06-18 13:16:18 +02:00
• d6f0372daf testing: Delete accidentally committed test cases Tobias Brunner 2014-06-18 09:36:08 +02:00
• abe116cdf8 ikev1: Allow late connection switching based on XAuth username Tobias Brunner 2014-05-16 10:39:22 +02:00
• aba55fdffe identification: Only use either , or / to separate RDNs Tobias Brunner 2014-05-05 13:55:15 +02:00
• 846fd70eec sshkey: Fix loading of ECDSA keys from files Tobias Brunner 2014-04-03 09:23:55 +02:00
• 1cda692110 sshkey: Add support to parse SSH public keys from files with left|rightsigkey Tobias Brunner 2014-04-03 09:21:43 +02:00
• 97dafa16a0 Merge branch 'vici-stats' Martin Willi 2014-06-17 17:56:05 +02:00
• 5885ec2a27 vici: Support memory stats without leak-detective on Windows Martin Willi 2014-06-11 16:50:59 +02:00
• df93458685 swanctl: Add a --stats command to print daemon infos and statistics Martin Willi 2014-06-11 16:19:38 +02:00
• 65689ce76a vici: Add a stats command returning various daemon infos and statistics Martin Willi 2014-06-11 16:07:40 +02:00
• 19ea055092 swanctl: Support private key decryption passhprases in swanctl.conf Martin Willi 2014-06-04 10:37:59 +02:00
• 28e0f9b57d Merge branch 'conn-specific-replay' Martin Willi 2014-06-17 16:50:14 +02:00
• 52d77f3290 NEWS: Mention replay_window ipsec.conf option Martin Willi 2014-06-17 16:44:58 +02:00
• 5b7725f3b0 swanctl: Document replay_window option Martin Willi 2014-06-17 16:48:25 +02:00
• d73a46171d vici: Support a replay_window CHILD_SA option Martin Willi 2014-06-16 17:41:07 +02:00
• d5367d2262 starter: Add a replay_window connection option Martin Willi 2014-06-16 17:36:13 +02:00
• 823ce4a37f kernel-pfkey: Support connection specific replay window sizes up to 32 packets Martin Willi 2014-06-16 17:33:45 +02:00
• 44098fbaca kernel-netlink: Support connection specific replay window sizes Martin Willi 2014-06-16 17:32:49 +02:00
• 30c009c2fe kernel-interface: Add a replay_window parameter to add_sa() Martin Willi 2014-06-16 17:31:43 +02:00
• bdcaa5e680 child-cfg: Store connection specific replay window on CHILD_SA config Martin Willi 2014-06-16 17:26:33 +02:00
• a2c2ce9693 Merge branch 'win-errno' Martin Willi 2014-06-17 15:24:06 +02:00
• dff39a4c5b windows: Declare strerror_s() Martin Willi 2014-06-11 17:10:19 +02:00
• 1bcf850738 windows: Extend strerror_r/s by extended POSIX errno strings Martin Willi 2014-06-11 12:07:34 +02:00
• c2119cded4 windows: Implement strerror_r using strerror_s Martin Willi 2014-06-11 11:38:52 +02:00
• 8b5d41a274 windows: Wrap most Winsock2 Posix functions to set errno Martin Willi 2014-06-11 11:08:03 +02:00
• bc1139480f watcher: Prevent race condition spawning multiple watcher threads Martin Willi 2014-06-11 15:04:15 +02:00
• 23750961d5 thread-value: Defer cleanup handling to thread termination on Windows Martin Willi 2014-06-11 14:24:22 +02:00
• 2d846c2035 socket-win: Use non-overlapped I/O and socket event selection Martin Willi 2014-06-10 15:58:31 +02:00
• 31f2696076 Merge branch 'attr-enum' Martin Willi 2014-06-17 15:15:02 +02:00
• eef7427b0f bus: Add a handle_vips() hook invoked after handling configuration attributes Martin Willi 2014-02-11 10:09:08 +01:00
• 7fc98a840b ikev1: Invoke the assign_vips() bus hook for IKEv1 as well Martin Willi 2014-02-11 09:49:44 +01:00
• 9d257034d8 ike: Create an enumerator for (un-)handled configuration attributes on IKE_SA Martin Willi 2014-02-11 10:12:24 +01:00
• 5ae3221075 ike: Store unhandled attributes on IKE_SA as well Martin Willi 2014-02-11 09:19:45 +01:00
• b16e177e06 Version bump to 5.2.0rc1 Andreas Steffen 2014-06-15 11:40:15 +02:00
• 733037009f Mentioned first six swanctl scenarios in NEWS Andreas Steffen 2014-06-14 15:43:44 +02:00
• 39d6469d76 Added swanctl/rw-psk-fqdn and swanctl/rw-psk-ipv4 scenarios Andreas Steffen 2014-06-14 15:14:53 +02:00
• 3eb22f1f00 Single-line --raw mode simplifies evaltest of swanctl scenarios Andreas Steffen 2014-06-12 23:00:26 +02:00
• dacb75f5c0 Split swanctl --raw mode into single-line and --pretty mode Andreas Steffen 2014-06-12 22:57:15 +02:00
• 12d618e280 Added swanctl/ip-pool-db scenario Andreas Steffen 2014-06-11 18:11:11 +02:00
• cda2a1e4dc Updated strongTNC configuration Andreas Steffen 2014-06-11 18:09:48 +02:00
• d643f2cf91 Added swanctl/ip-pool scenario Andreas Steffen 2014-06-10 16:11:25 +02:00
• 3a9602d58b Allow multiple hash values in the file reference database Andreas Steffen 2014-06-10 15:10:21 +02:00
• c621847395 Added swanctl/rw-cert scenario Andreas Steffen 2014-06-10 09:13:20 +02:00
• 8fc0eae37b Added Android 4.3 and 4.4.3 to imv database Andreas Steffen 2014-06-10 09:11:21 +02:00