Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 59be6ddd08 kernel-libipsec: Create a TUN device and use it to install virtual IPs Tobias Brunner 2013-06-11 18:47:55 +02:00
• 279e0d42bd kernel-libipsec: Add plugin that implements kernel_ipsec_t using libipsec Tobias Brunner 2013-06-11 18:43:01 +02:00
• 3cd7ba4960 kernel-netlink: Routes don't require a gateway/nexthop Tobias Brunner 2013-06-11 16:05:40 +02:00
• 1b3b7ba54d charon-cmd: Document auxiliary options Tobias Brunner 2013-06-21 16:58:16 +02:00
• 4d62ad7571 charon-cmd: Link strongswan.conf(5) and charon-cmd(8) man pages Tobias Brunner 2013-06-21 16:35:19 +02:00
• 5991f09565 charon-cmd: Use fixed number of character to align command descriptions Tobias Brunner 2013-06-20 22:01:42 +02:00
• 5e185047e1 charon-cmd: Shortened and fixed command descriptions Tobias Brunner 2013-06-20 21:54:11 +02:00
• 463314b55a charon-cmd: Simplify usage output for authentication profiles Tobias Brunner 2013-06-20 21:35:34 +02:00
• e8d6b91ebd charon-cmd: Add Aggressive Mode profiles to man page Tobias Brunner 2013-06-20 21:15:56 +02:00
• 0d60489bf8 charon-cmd: Add man page for charon-cmd(8) Tobias Brunner 2013-06-16 19:06:40 +02:00
• 295d595b49 charon-cmd: Add --debug argument to set the default log level Tobias Brunner 2013-06-21 15:55:52 +02:00
• 4049ec42bf charon-cmd: Handle simple command line arguments like --help before the others Tobias Brunner 2013-06-21 15:41:12 +02:00
• 0d25c4ef87 plugin-loader: Move logging of failed features to status() Tobias Brunner 2013-06-21 14:46:17 +02:00
• 607f8e9906 plugin-loader: Add method to print loaded plugins on a given log level Tobias Brunner 2013-06-21 14:45:38 +02:00
• 34ee14dd28 plugin-loader: Collect statistics while loading features, print them in case features failed to load Tobias Brunner 2013-06-20 20:49:42 +02:00
• 681e53c70c plugin-loader: Use different log level if failed feature is in critical plugin Tobias Brunner 2013-06-20 20:36:15 +02:00
• 13d2d8f634 plugin-loader: Log message when failing to load plugin Tobias Brunner 2013-06-20 20:33:53 +02:00
• 51b9d7513d plugin-loader: Reduce verbosity while loading plugins Tobias Brunner 2013-06-20 20:27:45 +02:00
• 0adf165c7e Fix crash if the initiator has no suitable proposal available Tobias Brunner 2013-04-26 15:36:42 +02:00
• 9d6a147c81 Merge branch 'unit-tests-ecdsa' Martin Willi 2013-06-21 10:39:16 +02:00
• 092550b03a leak-detective: (re-)whitelist some OpenSSL functions Martin Willi 2013-06-20 10:06:07 +02:00
• ef687db734 unit-tests: load plugins in test-runner from build directory Martin Willi 2013-06-20 09:34:18 +02:00
• b950fc48da unit-tests: link test-runner against -lpthread Martin Willi 2013-06-19 15:37:49 +02:00
• 1ffdb4f3d0 unit-tester: remove obsolete rsa_gen test, now covered in unit-tests Martin Willi 2013-06-19 15:50:04 +02:00
• df1a1a0901 unit-tests: add RSA test cases, very similar to ECDSA Martin Willi 2013-06-19 15:33:47 +02:00
• eabf4af0f8 unit-tests: test with /dev/urandom if random plugin is in use Martin Willi 2013-06-19 15:32:19 +02:00
• d0c09c84a5 unit-tests: test supported ECDSA schemes only Martin Willi 2013-06-19 15:31:25 +02:00
• 2bedb0f270 Move test-runners has_feature() function to plugin loader Martin Willi 2013-06-19 14:52:52 +02:00
• df76881f11 unit-tests: enforce CET/CEST timezone to properly test non-UTC time formatting Martin Willi 2013-06-11 18:31:35 +02:00
• 44886a0667 unit-tests: don't use ck_assert() to test a cleared chunk, as it allocates data Martin Willi 2013-06-11 18:29:49 +02:00
• 52bff13848 unit-tests: define 64-bit constats with ULL, fixing compiler warning on 32-bit Martin Willi 2013-06-11 17:45:45 +02:00
• a5b63a3e5c Limit cleanup of .gc{no,da} files to src and scripts subfolders Martin Willi 2013-06-11 17:27:40 +02:00
• a88cab095d unit-tests: test some zeroed ECDSA signatures that never should succeed Martin Willi 2013-04-09 16:00:19 +02:00
• 7e23f53242 unit-tests: perform signing/validation with keys ECDSA keys generated or loaded Martin Willi 2013-04-09 15:49:09 +02:00
• eabb0befdc unit-tests: add an ECDSA test case loading keys Martin Willi 2013-04-09 15:31:43 +02:00
• d18ff88faf unit-tests: perform a first ECDSA test case if ECDSA is supported Martin Willi 2013-04-09 15:06:28 +02:00
• 200f38ad4c unit-tests: add a helper function checking if a plugin feature is available Martin Willi 2013-04-09 15:05:24 +02:00
• cb1745f7a6 unit-tests: add a test case checking if all test vectors have been passed Martin Willi 2013-04-09 14:35:38 +02:00
• e9e4759733 crypto-factory: count the number of test vector failures during registration Martin Willi 2013-04-09 14:30:13 +02:00
• 3714979427 unit-tests: load all libstrongswan plugins in test-runner Martin Willi 2013-04-09 14:05:12 +02:00
• 8c88ca0fcf stroke: Add statusall-nb as alias for statusallnb Tobias Brunner 2013-06-21 10:43:46 +02:00
• 4182c86aed stroke: Add non-blocking versions of up and down Tobias Brunner 2013-06-16 16:30:21 +02:00
• 9afc6e6a70 starter: Make ipsec.conf path configurable via command line Tobias Brunner 2013-06-13 19:07:55 +02:00
• c0d0391a51 pubkey: Improve comparison of raw public key certificate objects Tobias Brunner 2013-06-05 11:30:05 +02:00
• 888dbac50e ikev2: use protocol of selected proposal to delete a failed CHILD_SA Martin Willi 2013-06-20 12:05:13 +02:00
• 47ec2e407b charon-cmd: use a copy of pid in initiate callback Martin Willi 2013-06-20 11:02:28 +02:00
• e044a1a9e5 charon-cmd: add IKEv1 aggressive mode profiles Martin Willi 2013-06-20 11:01:37 +02:00
• 40b0a15cb5 NEWS: Add first bunch of 5.1.0 highlights Martin Willi 2013-06-20 10:29:25 +02:00
• 4e8142e8e9 Merge branch 'nat-transport' Martin Willi 2013-06-19 16:36:27 +02:00
• 24df067810 man: update ipsec.conf.5, describing new proto/port definition within leftsubnet Martin Willi 2013-06-05 12:03:22 +02:00
• 483a258ad8 stroke: support %dynamic in left/rightsubnet for dynamic selectors Martin Willi 2013-06-05 11:43:19 +02:00
• 3d1af879d2 kernel-netlink: install selectors on SA for transport/BEET mode without proto/port Martin Willi 2013-06-05 11:39:35 +02:00
• 4a7c29bf02 stroke: support a specific proto/port for each net defined in left/rightsubnet Martin Willi 2013-06-05 11:38:51 +02:00
• ad5ad02ade ikev2: properly fall back to tunnel mode if transport/BEET mode not configured Martin Willi 2013-06-05 10:48:57 +02:00
• 975457c4d8 ikev2: support transport mode over NAT Martin Willi 2013-06-05 09:46:02 +02:00
• 4f88ad669a Merge branch 'consistent-reqid' Martin Willi 2013-06-19 16:31:06 +02:00
• a7bc0bf4a6 ike: reuse the reqid of an installed trap having the same config Martin Willi 2013-06-11 16:11:14 +02:00
• 2dcfc6983b trap-manager: add a method to find reqid for installed traps by config Martin Willi 2013-06-05 14:20:44 +02:00
• f4e822c1b4 trap-manager: don't check-in nonexisting IKE_SA if acquire fails Martin Willi 2013-06-06 10:54:06 +02:00
• ae131e6bac trap-manager: fix a memleak when installing a trap to %any Martin Willi 2013-06-05 14:36:44 +02:00
• 1551d8b13d kernel-netlink: reject policy refcount if the reqid differs Martin Willi 2013-06-03 18:13:27 +02:00
• de2debf8e0 stroke: add exportconn{cert,chain} commands in addition to exportx509 Martin Willi 2013-06-14 11:22:14 +02:00
• a485320393 Raise an alert if the responding peer narrowed traffic selectors Martin Willi 2013-06-13 15:03:17 +02:00
• ad58246f53 backtrace: use backtrace_symbols() only if we have backtrace() and dladdr() fails Martin Willi 2013-06-19 16:00:14 +02:00
• 4d04e2c63b utils: Remove volatile qualifier from refcount_t typedef Tobias Brunner 2013-06-19 09:20:35 +02:00
• 24303f99f7 dhcp: search for transactions only for connections having a poolname "dhcp" Martin Willi 2013-06-18 09:50:29 +02:00
• 9a00d9aa2f starter: ignore return value of sete[gu]id(), now having warn_unused_result Martin Willi 2013-06-18 08:54:10 +02:00
• c6f1929a45 socket-default: Make sure sockets are open when checking with FD_ISSET Tobias Brunner 2013-06-14 17:25:16 +02:00
• 1889837767 socket-default: Properly initialize NAT-T port if opening regular socket failed Tobias Brunner 2013-06-14 16:41:33 +02:00
• 92f102c21b android: Forward initiator flag to libipsec when adding IPsec SA Tobias Brunner 2013-06-13 13:55:58 +02:00
• 52d7c530e9 libipsec: Add initiator flag to definition of ipsec_sa_mgr_t.add_sa() Tobias Brunner 2013-06-13 13:53:16 +02:00
• 246e2bed1d Use subset matching instead of is_contained_in() to select a child_cfg Martin Willi 2013-06-13 13:34:12 +02:00
• 44fb978169 ha: Fix CHILD_SA installation in ha_dispatcher after adding initiator flag Tobias Brunner 2013-06-13 13:17:55 +02:00
• a8c9454423 kernel-interface: add an exchange initiator parameter to add_sa() Martin Willi 2013-05-08 10:31:06 +02:00
• d024a4652c Merge branch 'unique-sas' Martin Willi 2013-06-11 15:51:50 +02:00
• 3568abe7be Use ref_get() to make sure IKE_SA unique IDs are unique Martin Willi 2013-05-08 15:19:52 +02:00
• d64f6ef6ae Use ref_get() to make sure CHILD_SA reqids are unique Martin Willi 2013-05-08 15:18:50 +02:00
• 3160b92adb utils: ref_get() returns the new value of the reference counter Martin Willi 2013-05-08 15:07:09 +02:00
• 37a60cad3c ikev1: keep vendor ID task alive during full Main/Aggressive Mode Martin Willi 2013-06-06 15:38:38 +02:00
• 61345afb22 Merge branch 'init-auth-fail' Martin Willi 2013-06-11 15:46:04 +02:00
• e196c41bd2 ikev2: if installing a CHILD_SA as initiator fails, notify the responder Martin Willi 2013-06-07 11:35:43 +02:00
• ff3fff4dc9 ikev2: raise LOCAL_AUTH_FAILED when receiving INFORMATIONAL with AUTH_FAILED Martin Willi 2013-05-17 10:36:40 +02:00
• ca74bf7a06 ikev2: close an established IKE_SA when receiving AUTHENTICATION_FAILED Martin Willi 2013-05-17 10:30:13 +02:00
• eaafcec190 ikev2: if responder authentication fails, send AUTHENTICATION_FAILED Martin Willi 2013-05-17 10:22:00 +02:00
• 2788634c8c Merge branch 'scep-bind' Martin Willi 2013-06-11 15:42:23 +02:00
• 78af570fd5 scepclient: support a --bind option to fetch from a specific source IP Martin Willi 2013-05-15 16:59:34 +02:00
• fe20f752f1 curl: add an option to fetch bound to a local source address Martin Willi 2013-05-15 16:34:12 +02:00
• 0adfffb6dd fetcher: add missing "continue" when handling FETCH_CALLBACK Martin Willi 2013-05-15 16:27:15 +02:00
• 44d9970f4c Allow IPComp on NATed connections, both for IKEv1 and IKEv2 Martin Willi 2013-05-16 13:32:48 +02:00
• f5f7053bcd leak-detective: Resolve hooked functions during initialization Tobias Brunner 2013-06-11 15:38:56 +02:00
• 3873526f3e Properly compare CHILD_SAs during rekey collision Tobias Brunner 2013-05-31 19:01:05 +02:00
• 5744226e92 Merge branch 'plugin-loader' Tobias Brunner 2013-06-11 11:18:33 +02:00
• 31a416a5b2 Removed stray *_plugin_create() declarations from header files Tobias Brunner 2013-06-10 18:33:49 +02:00
• 460488b180 eap-radius: Do initialization in a plugin feature callback Tobias Brunner 2013-06-10 18:15:40 +02:00
• 49d7a98f47 Refactored plugin-loader with improved dependency resolution Tobias Brunner 2013-06-08 15:46:33 +02:00
• facc781500 android-log: Use plugin features Tobias Brunner 2013-06-08 11:05:02 +02:00
• df60999b5f android-dns: Use plugin features to register attribute handler Tobias Brunner 2013-06-08 11:03:42 +02:00
• e183a6c36d maemo: Use plugin features Tobias Brunner 2013-06-08 11:02:26 +02:00
• 6d766925b2 medsrv: Use plugin features with dependency on database implementation Tobias Brunner 2013-06-08 11:00:48 +02:00
• da7c3f8900 medcli: Use plugin features with dependency on database implementation Tobias Brunner 2013-06-08 10:56:44 +02:00