Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• c5d2d867f1 mem-pool: replace per-identity online/offline lists by more efficient arrays Martin Willi 2013-07-24 16:13:07 +02:00
• d882880e87 mem-pool: refcount online lease when reassigning it to another tunnel Martin Willi 2013-07-24 15:45:39 +02:00
• 77ccff82cf ikev1: Always send ID payloads (traffic selectors) during Quick Mode Tobias Brunner 2013-07-25 17:08:17 +02:00
• 1f2d9c7688 watcher: Made notify array initialization compatible with older GCC versions Tobias Brunner 2013-07-25 16:57:42 +02:00
• ebb4ad1baa unit-tests: Add additional tests for host_t Tobias Brunner 2013-07-24 12:16:52 +02:00
• 7a192c57a3 imv-attestation: Properly measure complete directories Tobias Brunner 2013-07-24 16:23:14 +02:00
• 116363e5c6 array: Number of items in get_size() is unsigned Tobias Brunner 2013-07-24 16:03:38 +02:00
• d7dc4fedd1 stream: Ensure UNIX socket path is null terminated Tobias Brunner 2013-07-24 11:18:31 +02:00
• e7d717cf01 kernel-pfkey: Add sanity check when deleting policies Tobias Brunner 2013-07-24 11:11:25 +02:00
• e5455e9413 imv-os: check_packages() fails if product query fails Tobias Brunner 2013-07-24 11:04:34 +02:00
• cfca183d55 pkcs5: Add missing break statements when checking crypto primitives Tobias Brunner 2013-07-24 10:58:34 +02:00
• 346a4a1fc2 imv-scanner: Properly check snprintf() return value Tobias Brunner 2013-07-24 10:45:32 +02:00
• 16748bdff7 socket-dynamic: Properly initialize IPv6 address Tobias Brunner 2013-07-24 10:36:49 +02:00
• 5baec6448d unit-tests: Add test for host_create_netmask() Tobias Brunner 2013-07-24 10:33:06 +02:00
• 6e2ec33f9d host: Prevent overflow in host_create_netmask() if mask is 0 or 32/128 Tobias Brunner 2013-07-24 10:31:52 +02:00
• a00ac1d9ee imv-attestation: Use proper cast for length when using %.*s Tobias Brunner 2013-07-24 09:04:09 +02:00
• 0c76d820dc tnc-ifmap: Use proper cast for length when using %.*s Tobias Brunner 2013-07-24 09:00:35 +02:00
• cfdd23b967 capabilities: Proper error handling when reading groups Tobias Brunner 2013-07-24 08:43:10 +02:00
• 3021139f6f strongswan.conf: Moved some stuff around Tobias Brunner 2013-07-23 12:23:05 +02:00
• 5b1e3d3fdc ipsec: Add --piddir to retrieve the PID/socket directory Tobias Brunner 2013-07-22 18:12:04 +02:00
• 517823b466 starter: Properly refer to the ipsec script if it was renamed Tobias Brunner 2013-07-22 17:59:49 +02:00
• 62293ed271 coupling: Fix call to call_hook() Tobias Brunner 2013-07-22 17:53:56 +02:00
• 2ed8b36a8a strongswan.conf: Add missing options Tobias Brunner 2013-07-22 17:45:43 +02:00
• 146fa8b2d3 charon-xpc: Use correct namespace when setting default settings Tobias Brunner 2013-07-22 17:44:37 +02:00
• a14d907e33 tnc-pdp: Fix reading port setting from strongswan.conf Tobias Brunner 2013-07-22 17:43:54 +02:00
• 2b1ac51c9c fixed typo Andreas Steffen 2013-07-19 20:07:32 +02:00
• 645e9291f0 updated some TNC scenarios Andreas Steffen 2013-07-19 19:36:07 +02:00
• dcd5129c25 processor: force synchronous execute_job() if set_threads(0) has been called Martin Willi 2013-07-19 15:27:07 +02:00
• 2fa92ad256 proposal: correctly enumerate registered AEADs to build default IKE proposal Martin Willi 2013-07-19 15:01:53 +02:00
• 3cd01df785 Version bump to 5.1.0rc1 Andreas Steffen 2013-07-19 10:40:49 +02:00
• 82b1a38601 tkm: Properly refer to includes now that AM_CPPFLAGS is used Tobias Brunner 2013-07-19 09:02:04 +02:00
• 8f1b44b40c keychain: Use AM_CPPFLAGS instead of INCLUDES Tobias Brunner 2013-07-19 09:01:39 +02:00
• 0ceb288815 Fix various API doc issues and typos Tobias Brunner 2013-07-18 17:27:11 +02:00
• cb6c4e0430 identification: parse identities having a "@@" prefix as ID_RFC822_ADDR Martin Willi 2013-07-18 16:45:10 +02:00
• c3b8335cfb NEWS: mention watcher and stream services Martin Willi 2013-07-18 16:10:48 +02:00
• 666dff70eb Merge branch 'ipc-service' Martin Willi 2013-07-18 16:03:14 +02:00
• b4b3959b22 stream-service: move CAP_CHOWN check from plugins to service constructor Martin Willi 2013-07-18 15:46:17 +02:00
• 1897dd730f processor: remove the now unused get_threads() method again Martin Willi 2013-07-18 11:42:59 +02:00
• ea009869e9 watcher: use processors new execute_job() to notify FDs Martin Willi 2013-07-18 11:40:40 +02:00
• 6653e6c13e processor: add an execute_job() method to directly execute an important job Martin Willi 2013-07-18 11:37:42 +02:00
• 55240835b0 watcher: properly support multiple watch callback types for the same FD Martin Willi 2013-07-17 16:07:47 +02:00
• d0c25a3f23 watcher: read multiple notifications if available Martin Willi 2013-07-17 16:03:23 +02:00
• 8fc89db7b6 certexpire: add an option to enforce exporting trustchains having a private key Martin Willi 2011-11-15 17:13:53 +00:00
• 868abd0626 error-notify: catch and forward some alerts related to certificate validation Martin Willi 2013-07-09 14:28:10 +02:00
• 58750670cf bus: raise certificate validation alerts using credential manager hook Martin Willi 2013-07-09 14:21:40 +02:00
• 4d7a762871 credmgr: introduce a hook function to catch trust chain validation errors Martin Willi 2013-07-09 11:55:32 +02:00
• f7cff7fac4 lookip: double size of id field in message Martin Willi 2013-02-04 10:02:14 +01:00
• f33d1d503f error-notify: increase size of string/identity fields in messages Martin Willi 2013-02-04 09:59:54 +01:00
• 0a35ae781d whitelist: use a read-copy when listing entries Martin Willi 2013-07-08 11:44:52 +02:00
• 0ccc5bb216 whitelist: fix error handling when creating the socket fails Martin Willi 2013-07-08 10:52:49 +02:00
• d3278c1f73 lookip: fix error handling when creating the socket fails Martin Willi 2013-07-08 10:40:25 +02:00
• cfdb5f4855 error-notify: fix error handling when creating the socket fails Martin Willi 2013-07-08 10:39:23 +02:00
• 46666dd3c1 kernel-pfroute: use watcher to receive kernel events Martin Willi 2013-07-01 15:48:22 +02:00
• 7f698daef9 kernel-pfkey: use watcher to receive networking events Martin Willi 2013-07-01 15:45:01 +02:00
• f4f77d7467 kernel-netlink: use watcher to receive kernel events for net/ipsec Martin Willi 2013-07-01 15:42:22 +02:00
• 5f755cef46 eap-radius: use watcher instead of receiver thread on DAE socket Martin Willi 2013-07-01 11:52:42 +02:00
• c0db5d3845 dhcp: use watcher instead of dedicated receiver thread Martin Willi 2013-07-01 09:47:28 +02:00
• 17028e29c2 farp: use watcher instead of dedicated receiver thread Martin Willi 2013-07-01 11:59:56 +02:00
• 73da4ed849 load-tester: use a stream service to dispatch control connections Martin Willi 2013-07-01 12:18:15 +02:00
• e11c02c8f1 whitelist: use a stream service to accept client connections Martin Willi 2013-07-01 14:47:11 +02:00
• 091d0afa21 lookip: use stream service with async I/O dispatching Martin Willi 2013-07-01 12:47:45 +02:00
• c2a6fdf286 error-notify: use a stream service to accept client connections Martin Willi 2013-07-01 11:42:18 +02:00
• 83faec5abe duplicheck: use a stream service to accept client connections Martin Willi 2013-07-01 11:19:01 +02:00
• 065907b99d stroke: use a stream service to handle stroke requests Martin Willi 2013-06-28 14:35:12 +02:00
• 4701929266 stream: allow async read/write callback to destroy the stream explicitly Martin Willi 2013-07-02 14:09:45 +02:00
• c9d1742b5d stream: don't close underlying socket when creating a stream from it Martin Willi 2013-07-02 14:04:51 +02:00
• 58d0dadddc watcher: add some debugging statements Martin Willi 2013-07-02 14:03:51 +02:00
• 91a2ae644c watcher: if the processor has no threads, execute the job with watcher thread Martin Willi 2013-07-02 11:01:10 +02:00
• 50720d7ce9 processor: add a getter for the threads passed to set_threads() Martin Willi 2013-07-02 11:00:27 +02:00
• a0e3a7363f watcher: unregister a watcher FD if its thread gets cancelled Martin Willi 2013-07-01 18:38:42 +02:00
• a558ba16f3 watcher: release threads waiting in remove() when watcher thread gets cancelled Martin Willi 2013-07-01 18:34:08 +02:00
• e6e8a2b2e0 stream: support keeping the service alive outside of service callback Martin Willi 2013-07-01 14:57:28 +02:00
• d57b9e7c82 stream: add read/write_all() methods to stream Martin Willi 2013-07-01 10:36:52 +02:00
• 1d1ef9e7ca stream: support cancellation of stream service callback Martin Willi 2013-06-28 14:33:03 +02:00
• 047a190600 stream: use a service constructor to create services Martin Willi 2013-06-28 14:55:27 +02:00
• fbdc65debb stream: replace print/vprint() convenience functions by a FILE* getter Martin Willi 2013-06-28 14:33:41 +02:00
• 70d1ccec96 stream: add a concurrency option to services, limiting parallel callbacks Martin Willi 2013-06-28 11:50:59 +02:00
• db0e160ba2 stream: add a job priority option to stream services Martin Willi 2013-06-28 10:32:30 +02:00
• 441bb9e7b7 stream: add backlog option to stream services, forward to listen() Martin Willi 2013-06-28 10:20:13 +02:00
• c5597a4b56 stream: add support for TCP stream services Martin Willi 2013-06-27 17:25:51 +02:00
• db1c8aa460 stream: add support for TCP streams Martin Willi 2013-06-27 17:25:21 +02:00
• f04746d9b4 stream: add support for UNIX stream services Martin Willi 2013-06-26 17:16:33 +02:00
• b785cfe05b stream: add support for UNIX streams Martin Willi 2013-06-26 17:08:14 +02:00
• c1fd8c22ce stream: support async operation using watcher Martin Willi 2013-06-27 15:49:11 +02:00
• 7a23588195 stream: add printf()-style covenience functions Martin Willi 2013-06-27 11:46:41 +02:00
• 2ba276017d stream: create library instance of stream-manager Martin Willi 2013-06-27 10:16:00 +02:00
• d6ff53940f stream: add a manager to dynamically register streams and services Martin Willi 2013-06-26 17:28:19 +02:00
• daf1880b39 stream: add a stream service class abstracting services using BSD sockets Martin Willi 2013-06-26 17:13:11 +02:00
• b6b940001a stream: add a stream class abstracting BSD sockets Martin Willi 2013-06-26 17:03:19 +02:00
• 32b2a5e04b watcher: add a centralized an generic facility to monitor file descriptors Martin Willi 2013-06-24 14:58:01 +02:00
• e5b5a66712 kernel-pfkey: Fail route installation if remote TS matches peer Tobias Brunner 2013-07-18 15:41:36 +02:00
• 29bdfb4086 kernel-libipsec: Fail route installation if remote TS matches peer Tobias Brunner 2013-07-18 15:41:13 +02:00
• dfc9902013 capabilities: Some plugins don't actually require capabilities at runtime Tobias Brunner 2013-07-08 18:24:43 +02:00
• 027676f750 capabilities: Add function to check if a capability is held, without keeping it Tobias Brunner 2013-07-08 17:48:16 +02:00
• 56b753ca04 NEWS: leak-detective improvements Martin Willi 2013-07-18 15:13:49 +02:00
• 2334ae56e0 NEWS: add keychain plugin Martin Willi 2013-07-18 15:07:00 +02:00
• af2db7a651 autoconf: replace autogen.sh custom script with a call to autoreconf -i Martin Willi 2013-07-18 12:01:18 +02:00
• 19cb07b890 automake: replace INCLUDES by AM_CPPFLAGS Martin Willi 2013-07-17 14:45:39 +02:00
• c577b5eb44 autoconf: rename configure.in to configure.ac Martin Willi 2013-07-17 14:04:41 +02:00
• 2e9e2fa848 eap-sim-pcsc: fix compiler warning Martin Willi 2013-07-18 14:55:05 +02:00