Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 896abbefc5 nm: omit deprecated g_type_init() when using >= GLIB 2.36 Martin Willi 2013-07-18 14:21:17 +02:00
• 2d5a20061a soup: omit deprecated g_type_init() when using >= GLIB 2.36 Martin Willi 2013-07-18 14:19:37 +02:00
• b146ecbc4e libfast: cancel thread if it fails to accept fcgi sessions Martin Willi 2013-02-20 15:21:51 +01:00
• 890f20989f libfast: add a fast_ prefix to all classes, avoiding namespace clashes Martin Willi 2013-07-17 11:50:45 +02:00
• 569d114de8 Merge branch 'charon-xpc' Martin Willi 2013-07-18 12:18:32 +02:00
• b9c47eae06 xpc: allow easy copy & pase of ./configure instructions Martin Willi 2013-06-26 10:37:19 +02:00
• 7f1adbe94e xpc: use -idirafter to build against openssl headers from /usr/include Martin Willi 2013-05-29 14:50:47 +02:00
• 06e8712cb3 xpc: forward some risen alerts over XPC to App Martin Willi 2013-05-27 14:47:27 +02:00
• e7ee45ef38 xpc: enable close_ike_on_child_failure Martin Willi 2013-05-27 14:08:39 +02:00
• e37c5d46d3 xpc: send a "connecting" event when establishing a connection starts Martin Willi 2013-05-22 17:22:47 +02:00
• 3ffa310c44 xpc: use osx-attr plugin to install configuration attributes Martin Willi 2013-05-15 16:04:43 +02:00
• c7ac7f92e9 xpc: update README with new events, markdown style fixes Martin Willi 2013-05-03 18:35:11 +02:00
• 4edcc86149 xpc: send child_updown events over XPC channel Martin Willi 2013-05-02 18:11:47 +02:00
• d60c8d2c74 xpc: support termination of IKE_SAs using XPC RPC on connection channel Martin Willi 2013-05-02 17:45:58 +02:00
• 790ad9e677 xpc: move XPC RPC reply creation to command dispatching Martin Willi 2013-05-02 16:43:44 +02:00
• a0c125eacb xpc: terminate daemon when last XPC connection to App gone Martin Willi 2013-05-02 14:40:23 +02:00
• 6aae6268d7 xpc: fix some refcounting issues related to XPC connections Martin Willi 2013-05-02 14:28:19 +02:00
• 22bffc647d xpc: no need to clear channel table, they are bound to IKE_SA lifetime Martin Willi 2013-05-02 13:58:22 +02:00
• 1a3f71d97a xpc: add support for logging over XPC channels Martin Willi 2013-05-03 16:55:22 +02:00
• fbc89786b5 xpc: don't warn about pointer signedness mismatch (-Wno-pointer-sign) Martin Willi 2013-05-02 11:58:43 +02:00
• dcf8a3c78b xpc: add a description of the basic XPC protocol to README Martin Willi 2013-05-02 11:22:51 +02:00
• d5966e71e9 xpc: use the same XPC message "type" mechanism on Mach service as on channels Martin Willi 2013-05-02 10:54:55 +02:00
• 39d15dde67 xpc: ask App for passwords using connection specific channel Martin Willi 2013-05-02 10:36:37 +02:00
• 8279ce99c4 xpc: use IKE_SA specific XPC return channels for further communication Martin Willi 2013-05-03 16:53:29 +02:00
• bc74e18223 xpc: don't send certificate requests, there are too many when using keychain Martin Willi 2013-05-01 11:06:11 +02:00
• 5016370390 xpc: build with support for the keychain plugin Martin Willi 2013-05-03 16:51:29 +02:00
• e73a653451 xpc: add support for initiate simple IKEv2 EAP connections Martin Willi 2013-04-26 15:17:36 +02:00
• 3dcc9d7aa7 xpc: move dispatching to dedicated class, using dedicated thread Martin Willi 2013-05-03 16:24:05 +02:00
• 4204d1d71a xpc: use non-inlining variant of vstr, compiler does not like it Martin Willi 2013-04-26 14:32:32 +02:00
• 6f8c626b81 xpc: add Xcode project for a charon controlled through XPC Martin Willi 2013-04-24 10:38:19 +02:00
• 61177388bd syslog: setlogmask() to include LOG_INFO Martin Willi 2013-05-15 10:36:08 +02:00
• 55dacbfac2 keychain: flush certificate cache after reloading System keychain Martin Willi 2013-05-01 11:14:16 +02:00
• 57dce77ba6 keychain: monitor changes in the system keychain, reload when necessary Martin Willi 2013-05-01 10:38:46 +02:00
• dcd8bdde4f keychain: use SearchCopyNext keychain enumeration for System certs as well Martin Willi 2013-05-01 10:37:49 +02:00
• 0bdd453392 keychain: load certificates from System Roots Keychain Martin Willi 2013-04-30 15:33:42 +02:00
• bc6c7bf39e keychain: load certificates only once during startup, improving performance Martin Willi 2013-04-30 14:50:48 +02:00
• 6f00ddb90c keychain: support on-the-fly enumeration of trusted/untrusted certificates Martin Willi 2013-04-30 11:59:01 +02:00
• 7b8edabd8a keychain: add a stub for a credential plugin using OS X Keychain Services Martin Willi 2013-04-29 11:19:57 +02:00
• 5d36f04ee2 credmgr: stop querying for secrets once we get a perfect match Martin Willi 2013-05-02 10:07:36 +02:00
• 69039e83f8 credmgr: don't use pointers for id_match_t enum values Martin Willi 2013-05-02 10:03:57 +02:00
• c3e7b3de0b openssl: parse X.509 extended key usage from extension parsing loop Martin Willi 2013-04-30 11:55:38 +02:00
• 3f55f203ee openssl: show which critical X.509 extension is not supported Martin Willi 2013-04-30 11:46:11 +02:00
• 437a6feb07 hashtable: add common hashtable hash/equals functions for pointer/string keys Martin Willi 2013-05-01 12:13:28 +02:00
• 01c0267778 thread: implicitly create thread_t if an external thread calls thread_current() Martin Willi 2013-04-26 16:59:34 +02:00
• 07a9d5c91a ike: Fix reestablishing SAs if no child-creating tasks are queued Tobias Brunner 2013-07-18 10:12:20 +02:00
• 2b0c8ee37d ike-sa: uninstall CHILD_SAs before removing virtual IPs Martin Willi 2013-07-18 10:31:52 +02:00
• 79b6ead1e4 unity: Replicate default behavior if no UNITY_SPLIT_INCLUDE attributes were received Tobias Brunner 2013-07-15 15:17:06 +02:00
• 56b0fac8c9 unity: Allow UNITY_LOCAL_LAN to be longer than 8 bytes Tobias Brunner 2013-07-15 15:15:59 +02:00
• c7d0b80abb unity: Fix memory leak in provider Tobias Brunner 2013-07-15 15:12:35 +02:00
• b2dfa0624d ipsec.conf.5: closeaction is now supported for IKEv1 Tobias Brunner 2013-07-17 18:18:57 +02:00
• a9ffb48f21 ikev1: Reestablish IKE_SA/CHILD_SAs if it gets deleted by the peer Tobias Brunner 2013-07-04 19:14:44 +02:00
• 68db844f99 ike: Migrate queued CHILD_SA-creating tasks when reestablishing an IKE_SA Tobias Brunner 2013-07-03 18:28:37 +02:00
• b79fdab878 ikev1: Support closeaction of CHILD_SA. Oliver Smith 2013-06-28 09:41:19 -07:00
• 6b99e4b7e0 Merge branch 'kernel-pfroute-mobility' Tobias Brunner 2013-07-17 17:49:26 +02:00
• fae4d67adc kernel-pfroute: Ignore IP address changes if address is %any Tobias Brunner 2013-07-10 16:28:55 +02:00
• b308a97944 kernel-pfroute: Properly enumerate sockaddrs in interface messages Tobias Brunner 2013-07-10 16:08:56 +02:00
• 5310f485d9 kernel-pfroute: Provide name of interfaces on which virtual IPs are installed Tobias Brunner 2013-07-10 15:37:35 +02:00
• e9c1ca0278 kernel-pfroute: Ignore virtual IPs in address map Tobias Brunner 2013-07-10 15:29:38 +02:00
• cb082d15ef kernel-pfroute: Make sure source addresses are not virtual and usable Tobias Brunner 2013-07-10 15:02:48 +02:00
• 527663d6b6 kernel-pfroute: Don't report an error when trying to reinstall a route Tobias Brunner 2013-07-10 12:38:21 +02:00
• 8afd0f05e3 kernel-pfkey: Provide interface name when installing exclude route Tobias Brunner 2013-07-10 12:21:58 +02:00
• 0745f846d0 kernel-pfroute: Reinstall routes on interface/address changes Tobias Brunner 2013-07-10 12:14:19 +02:00
• 7b9c3fb41f kernel-pfroute: Trigger a roam event if a new interface appears Tobias Brunner 2013-07-10 11:57:31 +02:00
• e50b20539b kernel-pfroute: Use ref_get() to allocate sequence numbers Tobias Brunner 2013-07-10 11:42:00 +02:00
• baa6419ec1 kernel-pfroute: Make time that is waited for VIPs to appear configurable Tobias Brunner 2013-07-10 11:31:56 +02:00
• dc8b083d9f kernel-pfroute: Retry route lookup without source address on failure Tobias Brunner 2013-07-10 11:22:57 +02:00
• bbd9df25a9 kernel-pfkey: Remove latest IPsec SA mapping when deleting a policy Tobias Brunner 2013-07-10 11:08:01 +02:00
• a9f14ada34 kernel-pfkey: Correctly handle IPSEC_PROTO_ANY in an acquire Tobias Brunner 2013-07-10 10:56:08 +02:00
• 84693a3d79 linked-list: Remove barely used has_more() method Tobias Brunner 2013-07-16 15:25:51 +02:00
• 1a9528f916 linked-list: Don't require an argument for the item when enumerating Tobias Brunner 2013-07-16 14:46:43 +02:00
• cf4172637a linked-list: Remove unused clone_function() method Tobias Brunner 2013-07-16 12:07:00 +02:00
• 0f3ddbd189 linked-list: Remove barely used find_last() method Tobias Brunner 2013-07-16 12:00:57 +02:00
• be3c09d020 linked-list: Remove unused replace() method Tobias Brunner 2013-07-16 11:53:30 +02:00
• 20ea35679e Merge branch 'array' Martin Willi 2013-07-17 17:28:18 +02:00
• c6f1d0de94 child-sa: refactor proxy transport mode address lookup Martin Willi 2013-07-17 10:28:45 +02:00
• 2745ae264a child-sa: replace traffic selector lists by arrays Martin Willi 2013-07-17 10:08:19 +02:00
• 553bb78730 child-sa: replace get_traffic_selectors() with create_ts_enumerator() Martin Willi 2013-07-17 10:01:22 +02:00
• 6207fadb6c ikev2: replace linked lists by arrays in task manager Martin Willi 2013-07-11 17:20:48 +02:00
• 926776ec80 auth-cfg: use array instead of linked list Martin Willi 2013-07-11 16:54:15 +02:00
• c907b57f56 proposal: use array to store proposal list Martin Willi 2013-07-11 16:36:10 +02:00
• 5cd64f979c proposal: use a single list to store all transforms Martin Willi 2013-07-10 14:16:46 +02:00
• 893da0411f ike-sa: use arrays instead of linked lists in long lived collections Martin Willi 2013-07-11 15:58:15 +02:00
• 4730c4b32b unit-tests: implement tests for array collection Martin Willi 2013-07-11 15:09:30 +02:00
• 2621ff4d40 array: introduce an array collection storing elements very efficiently Martin Willi 2013-07-11 11:44:33 +02:00
• f067348134 kernel-libipsec: Log error if no local address is found when installing routes Tobias Brunner 2013-07-15 14:37:31 +02:00
• 1ee1163214 dumm: Sort templates by name Tobias Brunner 2013-07-15 14:37:05 +02:00
• 9e7a45bec2 testing: Don't load certificates explicitly and delete CA certificates in PKCS#12 scenarios Tobias Brunner 2013-07-15 11:19:27 +02:00
• 591f923134 stroke: Add certificates extracted from PKCS#12 files to correct credential set Tobias Brunner 2013-07-15 10:59:13 +02:00
• e0b868f79e pkcs12: Add plugin dependencies with soft dependencies on the most common algorithms Tobias Brunner 2013-07-15 10:48:19 +02:00
• 1e54e40f5d leak-detective: remove hdr entry when reallocating zero bytes Martin Willi 2013-07-12 19:58:02 +02:00
• c93cf85356 leak-detective: print total of allocated/leaked bytes in usage/report Martin Willi 2013-07-12 19:57:17 +02:00
• 783b55cc5c dumm: add include for in.h, if_bridge.h now uses struct in6_addr Martin Willi 2013-07-12 18:19:32 +02:00
• 126778679f Recognize critical IssuingDistributionPoint CRL extension Andreas Steffen 2013-07-12 09:00:47 +02:00
• 0a013e1af5 Override policy recommendation in enforcement Andreas Steffen 2013-07-11 10:34:00 +02:00
• 9e0182b922 openssl plugin can replace random, hmac, and gcm plugins Andreas Steffen 2013-07-10 20:38:07 +02:00
• 3910fb3715 Added openssl-ikev2/net2net-pkcs12 scenario Andreas Steffen 2013-07-10 20:25:49 +02:00
• 49a26e5b57 Added ikev2/net2net-pkcs12 scenario Andreas Steffen 2013-07-10 20:17:44 +02:00
• fad3396f96 Version bump to 5.1.0dr3 Andreas Steffen 2013-07-10 17:50:20 +02:00
• 3b569df215 conntrack -F makes ikev2/nat-rw scenario to work always Andreas Steffen 2013-07-10 17:07:56 +02:00
• 81959e6406 leak-detective: add a usage threshold option based on the number of allocations Martin Willi 2013-07-10 17:27:31 +02:00