Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 0963a9952c vici: Don't compare unsigned certificate_type_t to -1 Martin Willi 2014-04-03 16:41:07 +02:00
• e00ce378fa vici: Use non-blocking first read when receiving message during client on_read() Martin Willi 2014-04-09 14:01:45 +02:00
• 7de35b7ff6 vici: Perform specified start_action on connection load, undo it on unload Martin Willi 2014-03-10 14:21:50 +01:00
• 96071fdb55 vici: Add a generic log event to raise events for log messages Martin Willi 2014-03-06 10:44:55 +01:00
• 2676ffdb9f vici: Be less verbose about client connections Martin Willi 2014-03-06 10:27:11 +01:00
• 101dba01ce vici: Add a list-certs command to query different certificate types Martin Willi 2014-02-24 17:21:48 +01:00
• b57739f721 vici: Support pinning end entity and CA certificates to connections Martin Willi 2014-02-19 15:45:24 +01:00
• e6e975ff9d vici: Support missing groups option in auth config Martin Willi 2014-02-19 15:25:10 +01:00
• 6efa792d22 vici: Add a load-shared command to load shared IKE and EAP secrets Martin Willi 2014-02-19 15:08:11 +01:00
• 559ef7de48 vici: Add a load-key command to load private keys Martin Willi 2014-02-19 13:08:10 +01:00
• c12edb2a27 vici: Support loading of different certificate types Martin Willi 2014-02-19 10:51:09 +01:00
• de190f62c2 vici: Add a credential backend Martin Willi 2014-02-19 10:20:19 +01:00
• e1b65630b2 vici: Add a command listing all or specific loaded connections using events Martin Willi 2014-02-18 15:34:13 +01:00
• 501ddf127b vici: Add unload-conn and get-conns commands to manage loaded connections Martin Willi 2014-02-18 15:32:43 +01:00
• 37aa250cad vici: Make dispatcher a little more verbose Martin Willi 2014-02-18 11:58:28 +01:00
• b3d8bd8d26 vici: Add backend providing in-memory connections Martin Willi 2014-02-17 18:28:53 +01:00
• dd5ce0a97a vici: Add generic callback based vici message parsing Martin Willi 2014-02-17 18:27:45 +01:00
• 1f2e63ea41 vici: Add a list-policy command to query trap and shunt policies Martin Willi 2014-02-13 16:12:21 +01:00
• 5c6e81dcf8 vici: Add install/uninstall commands to manage trap and shunt policies Martin Willi 2014-02-13 15:20:34 +01:00
• 550f3f5646 vici: Extract CHILD_SA config lookup method Martin Willi 2014-02-13 15:20:05 +01:00
• e567675d29 vici: Refactor socket to clean up locking Martin Willi 2014-02-12 17:55:38 +01:00
• 9bfa397eba vici: Fix dispatcher leak when handling unknown request Martin Willi 2014-02-13 09:44:34 +01:00
• e2496bda02 vici: Add a test case raising events during request, checks in-order delivery Martin Willi 2014-02-13 09:43:32 +01:00
• 3b5808a0f6 vici: Avoid recursive control log invocations Martin Willi 2014-02-12 17:55:05 +01:00
• 993bfe95fb vici: Add a callback based recursive parser function Martin Willi 2014-02-12 15:37:06 +01:00
• d9ae1c68e5 vici: Add a version command to print daemon and OS version info Martin Willi 2014-02-11 17:41:05 +01:00
• c7d4dad66d vici: Implement a terminate command to close IKE or CHILD_SAs Martin Willi 2014-02-11 17:14:22 +01:00
• 5f95657c65 vici: Add a control backend, currently to initiate connections by name Martin Willi 2014-02-10 17:10:54 +01:00
• ecc4b51048 vici: Support thread cancellation in command callbacks Martin Willi 2014-02-11 15:09:08 +01:00
• 045bdf5283 vici: Move dumping to core message class, use it in libvici Martin Willi 2014-02-11 14:36:42 +01:00
• 7f4cfdff58 vici: Add convenience value/string/integer getter to libvici Martin Willi 2014-02-11 14:09:14 +01:00
• db18495514 vici: Add some convenience getters on message Martin Willi 2014-02-10 17:09:52 +01:00
• b40a12a96f vici: Raise events with an optional identifier for specific connections Martin Willi 2014-02-10 17:09:01 +01:00
• 293431269b vici: Invoke dispatcher outside of connection log, allowing events from commands Martin Willi 2014-02-10 17:04:35 +01:00
• 252025210f vici: Add a query class, currently implementing a list-sas command Martin Willi 2014-01-24 17:15:49 +01:00
• eb4fd014b8 vici: Add a libvici low-level client library Martin Willi 2014-01-29 11:20:20 +01:00
• 8383d626b9 vici: Provide a command dispatcher handling request and event registration Martin Willi 2014-01-23 15:32:23 +01:00
• 8457da7528 vici: Add a fully asynchronous IPC socket segmenting messages on/from stream Martin Willi 2014-01-21 17:53:15 +01:00
• 1e39454214 vici: Add a test runner for plugin Martin Willi 2014-01-21 14:39:35 +01:00
• 6770cfe34a vici: Add a plugin stub for the "Versatile IKE Control Interface" plugin Martin Willi 2014-01-20 10:59:21 +01:00
• d4368689a0 mem-cred: Replace existing equal shared keys during add_shared() Martin Willi 2014-02-19 14:29:42 +01:00
• f8223f5f7e mem-cred: Replace existing equal private keys during add_key() Martin Willi 2014-02-19 14:21:10 +01:00
• d2b07d3187 watcher: Don't wait for running callback once watcher thread cancelled Martin Willi 2014-03-10 10:48:27 +01:00
• d16d5a245f watcher: Avoid queueing multiple watcher callbacks at the same time Martin Willi 2014-02-18 17:54:34 +01:00
• 874e212f71 processor: Flush pending jobs during cancel(), not destroy Martin Willi 2014-02-11 15:41:49 +01:00
• 9e93251397 utils: Provide a CALLBACK macro, similar to METHOD, but for void* callbacks Martin Willi 2014-01-22 16:55:27 +01:00
• dba3c649da travis: --disable-aikgen in "all" tests Martin Willi 2014-05-07 14:11:35 +02:00
• 41a4d5a4a6 Updated NEWS for 5.2.0dr2 release Andreas Steffen 2014-05-04 21:37:05 +02:00
• a0c2370ea5 utils: Enable __atomic* built-ins based on the GCC version Tobias Brunner 2014-05-02 17:58:26 +02:00
• 9be1c8d175 aikgen generates AIK private/public key pairs Andreas Steffen 2014-05-02 20:10:53 +02:00
• a81bd670b0 Added PUBKEY_RSA_MODULUS encoding type Andreas Steffen 2014-05-02 19:50:43 +02:00
• 60634df383 Extended Ubuntu 14.04 database build Andreas Steffen 2014-05-01 22:16:34 +02:00
• 48064815ea Moved BIOS and IMA measurement lists into classes of their own Andreas Steffen 2014-05-01 22:13:06 +02:00
• 9b9d522303 Added NEWS for 5.2.0dr2 Andreas Steffen 2014-05-01 17:00:42 +02:00
• ab6e7d6975 Fixed typo Andreas Steffen 2014-05-01 17:00:04 +02:00
• 7bd8ea2fdd Use global status variable for IMA runtime Andreas Steffen 2014-05-01 16:58:59 +02:00
• 887a88d55b Similar statistics for packages and file measurements Andreas Steffen 2014-04-30 17:23:20 +02:00
• 660f3200ad Updated build_database.sh to Ubuntu 14.04 Andreas Steffen 2014-04-30 15:46:37 +02:00
• eebc1e75b2 Updated ITA-IMA finalize messages Andreas Steffen 2014-04-29 18:57:55 +02:00
• bc2721b2f2 Implemented IMA-NG support Andreas Steffen 2014-04-28 10:02:06 +02:00
• f91c7d85c4 Merge branch 'unit-tests' Martin Willi 2014-04-30 17:23:07 +02:00
• 523dd96558 unit-tests: Document the supported env variables Martin Willi 2014-02-13 08:59:28 +01:00
• 1b9b228c41 unit-tests: Support strongswan.conf defined plugin list and base directory Thomas Egerer 2014-02-13 08:55:13 +01:00
• f406a5bf72 unit-tests: Allow configuration of libstrongswan via config Thomas Egerer 2014-02-13 08:54:08 +01:00
• 20924ae28f unit-tests: Add a ck_assert_chunk_eq() convenience macro Martin Willi 2014-02-11 13:55:56 +01:00
• 0456aa616f unit-tests: Silence a literal signedness warning raised by GCC 4.6.3 Martin Willi 2014-02-13 11:41:16 +01:00
• 24ea377458 sqlite: Allow query arguments to be freed before starting the enumeration Tobias Brunner 2014-04-30 09:30:17 +02:00
• f2eb226653 Version bump to 5.2.0dr2 Andreas Steffen 2014-04-27 19:15:11 +02:00
• f5b0558b15 Improved finalize messages in ITA-IMA component Andreas Steffen 2014-04-27 19:13:15 +02:00
• c478dfe617 child-cfg: Fix removal of redundant traffic selectors Tobias Brunner 2014-04-25 18:58:55 +02:00
• 446c036794 android: New release based on 5.1.3 Tobias Brunner 2014-04-25 14:38:46 +02:00
• 711af588f9 libcharon: Added AEAD sources of libtls to Android.mk Tobias Brunner 2014-04-25 14:26:01 +02:00
• 289456d26a libimcv: Updated Android.mk Tobias Brunner 2014-04-25 14:19:09 +02:00
• 8064764070 android: Use static version of libcrypto Tobias Brunner 2014-03-27 18:04:18 +01:00
• acc042fa7b tun-device: Use SIOCAIFADDR to set IP address on FreeBSD 10 Tobias Brunner 2014-04-25 11:28:52 +02:00
• 502eeb7f76 Merge branch 'atomic-ref' Tobias Brunner 2014-04-24 17:55:25 +02:00
• 73c33ff423 bus: Add a fast-path if log messages don't have to be logged Tobias Brunner 2014-04-17 10:47:32 +02:00
• 7b08063e70 load-tester: Fix race condition issuing same SPI Christophe Gouault 2014-04-08 17:11:14 +02:00
• 2cbaa63295 load-tester: Fix race condition issuing same identity Christophe Gouault 2014-04-08 17:11:13 +02:00
• a68454bd68 ike-sa-manager: Improve scalability of half-open IKE_SA checking Tobias Brunner 2014-04-11 16:23:39 +02:00
• 0f603d425d utils: Use GCC's __atomic built-ins if available Tobias Brunner 2014-04-11 16:07:32 +02:00
• efedd0d21e utils: Add ref_cur() to retrieve the current value of a reference counter Tobias Brunner 2014-04-11 15:13:22 +02:00
• 1dfd11fd92 testing: Added pfkey/compress test case Tobias Brunner 2014-04-22 16:27:41 +02:00
• 6afa7761a5 kernel-pfkey: Added IPComp support Francois ten Krooden 2014-04-22 15:34:41 +02:00
• 8dcde902e4 packages: New Debian network-manager-strongswan release Martin Willi 2014-04-24 15:45:30 +02:00
• 9c00ec3a86 packages: Hand over network-manager-strongswan debian package maintenance Martin Willi 2014-04-24 15:40:56 +02:00
• 1db1e7cd7a packages: Use charon-nm in network-manager-strongswan debian package Martin Willi 2014-04-24 15:34:50 +02:00
• 65117a0764 nm: Bump NetworkManager plugin version to 1.3.1 Martin Willi 2014-04-24 15:38:21 +02:00
• f5a1cfe3f8 pacman.sh now fetches Ubuntu 14.04 security updates Andreas Steffen 2014-04-24 09:08:07 +02:00
• 95083fc6fb Merge branch 'reauth-collision' Martin Willi 2014-04-17 10:14:49 +02:00
• 0b3bea3965 ike: Delay actively initiated reauthentication when other exchanges in progress Martin Willi 2014-04-10 11:31:17 +02:00
• f02cabbe35 ikev2: Reject CHILD_SA creation/rekeying while deleting an IKE_SA Martin Willi 2014-04-10 11:25:32 +02:00
• 094963d1b1 ikev2: Apply extensions and conditions before starting rekeying Martin Willi 2014-04-10 10:24:34 +02:00
• 713a1122b4 ikev2: Add inherit_pre() to apply config and hosts before IKE_SA rekeying Martin Willi 2014-04-10 10:21:32 +02:00
• c4c9d291d2 ikev1: Add an option to accept unencrypted ID/HASH payloads Martin Willi 2014-04-14 14:42:27 +02:00
• 4469e3d050 ikev2: Fix reauthentication if peer assigns a different virtual IP Tobias Brunner 2014-04-15 16:00:47 +02:00
• 37cb91d737 Added NEWS for 5.2.0dr1 Andreas Steffen 2014-04-15 10:04:27 +02:00
• fa6c5f3506 Handle tag separators Andreas Steffen 2014-04-15 08:55:11 +02:00
• edd2ed860f Renewed expired user certificate Andreas Steffen 2014-04-14 22:52:26 +02:00
• 9b7f9ab5d2 Updated SWID scenarios Andreas Steffen 2014-04-14 11:26:08 +02:00