Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 69333acee0 settings: Add a set_default_str() to set a different default for a key Martin Willi 2013-04-11 19:23:29 +02:00
• 3ca58c32be charon-cmd: prompt for EAP passwords on-demand using a callback credential set Martin Willi 2013-03-26 18:04:27 +01:00
• b48941ae16 charon-cmd: authenticate with EAP if no private key is given Martin Willi 2013-03-26 17:47:28 +01:00
• 7bcd96e43d charon-cmd: pass arguments to all handlers, even if already handled Martin Willi 2013-03-26 17:38:02 +01:00
• 9dfd9275f0 charon-cmd: build long_opts only once when reading arguments in charon-cmd Martin Willi 2013-03-26 17:36:31 +01:00
• f0749552a6 charon-cmd: add support for using dynamic ports in charon-cmd Martin Willi 2013-03-26 17:28:40 +01:00
• d3874008e8 socket-dynamic: when sending from port zero, allocate a free port dynamically Martin Willi 2013-03-26 17:23:38 +01:00
• 5e9144a21f controller: clean up job data if a thread gets cancelled waiting in a function Martin Willi 2013-03-26 16:19:00 +01:00
• 2baa7bbedb charon-cmd: load certificates and RSA private keys Martin Willi 2013-03-26 15:42:06 +01:00
• 78d7a0f7e2 charon-cmd: add a connection object and its initiation to charon-cmd Martin Willi 2013-03-26 15:07:15 +01:00
• be44723de0 charon-cmd: move command line options to separate file, obsolete short options Martin Willi 2013-03-26 14:10:00 +01:00
• 1fed10beb2 charon-cmd: add a stub for charon-cmd, a simple command line IKE client Martin Willi 2013-03-26 11:26:22 +01:00
• b4e9f74e42 Merge branch 'leak-detective-dlsym' Martin Willi 2013-05-06 15:15:58 +02:00
• 40f2a5306a scripts: add a simple test utility to do some malloc() benchmarking/profiling Martin Willi 2013-04-05 16:24:38 +02:00
• 29324299fe backtrace: use atos instead of addr2line on OS X to resolve source lines Martin Willi 2013-04-17 17:45:25 +02:00
• 83714577a9 backtrace: add an alternative stack unwinding implementation using libunwind Martin Willi 2013-04-05 16:26:27 +02:00
• d8f6f0c01c leak-detective: add support for OS X by hooking default malloc zone Martin Willi 2013-04-18 13:07:27 +02:00
• 50fbd32472 leak-detective: remove unused malloc call counters Martin Willi 2013-04-02 18:27:12 +02:00
• 3117824f55 leak-detective: align allocations on both 32 and 64-bit systems to 32 bytes Martin Willi 2013-04-02 17:41:04 +02:00
• 7e3f6299d5 leak-detective: call tzset() explicitly before enabling leak detective Martin Willi 2013-04-02 15:47:55 +02:00
• 17211b6b9a leak-detective: override malloc functions instead of using deprecated hooks Martin Willi 2013-04-02 13:37:06 +02:00
• e9b3bd5434 Merge branch 'silent-automake' Martin Willi 2013-05-06 15:05:40 +02:00
• d0f01a581d Add -s to make if --enable-silent-rules is ./configured Martin Willi 2013-04-10 15:36:14 +02:00
• 0be946dce3 Use the GEN silent rule when generating files with sed Martin Willi 2013-04-10 15:35:55 +02:00
• f932677f0c Use the GEN silent rule when generating oid database with perl Martin Willi 2013-04-10 14:49:29 +02:00
• 9f1dfd88c8 Use the GEN silent rule when generating gperf files Martin Willi 2013-04-10 14:02:53 +02:00
• 84c00e71b7 Provide the --enable-silent-rules ./configure option with automake 1.11 and 1.12 Martin Willi 2013-04-10 14:01:41 +02:00
• 5f55fd6e61 Introduce an optional logger_t.vlog() method with format string and arguments Martin Willi 2013-04-05 14:10:00 +02:00
• e93f386dbb Raise an ALERT_PROPOSAL_MISMATCH_CHILD also when receiving NO_PROPOSAL_CHOSEN Martin Willi 2013-04-17 11:55:24 +02:00
• 00080d2b8b Raise an ALERT_PROPOSAL_MISMATCH_IKE also when receiving NO_PROPOSAL_CHOSEN Martin Willi 2013-04-17 11:46:12 +02:00
• aea7ce3c64 eap-radius: add an option to disable accounting for tunnels without virtual IP Martin Willi 2013-04-17 11:34:33 +02:00
• 69620a48e8 eap-radius: use IKE_SA unique id instead of peer identity to manage virtual IPs Martin Willi 2013-04-17 11:11:52 +02:00
• a3854d8371 Don't unset IKE_SA on bus before we released virtual IPs and attributes Martin Willi 2013-04-17 11:09:23 +02:00
• 55321dcfb6 New Android release after adding AES-GCM, IPv6-in-IPv4 and using kernel-netlink Tobias Brunner 2013-05-03 15:16:14 +02:00
• 79f42ded50 libipsec: Fix memory leak in event relay Tobias Brunner 2013-04-22 15:41:22 +02:00
• 740aedfec1 android: Use stronger ESP proposal including AES-GCM Tobias Brunner 2013-04-22 15:39:41 +02:00
• 051fc25d92 libipsec: Add support for AES-GCM Tobias Brunner 2013-04-22 14:57:11 +02:00
• 24a8d1253f libipsec: Wrap traditional algorithms in AEAD wrapper Tobias Brunner 2013-04-18 17:02:41 +02:00
• 61fb3267b2 android: Remove unused methods on NetworkManager/network_manager_t Tobias Brunner 2013-04-16 15:01:47 +02:00
• 70dfac4459 android: Ignore interface 'lo' Tobias Brunner 2013-04-16 14:54:48 +02:00
• 18dab76bfa android: Repurpose android-net to simply handle connectivity events Tobias Brunner 2013-04-16 14:40:19 +02:00
• 37873f9994 kernel-netlink: Add an option to disable roam events Tobias Brunner 2013-04-16 13:54:25 +02:00
• 3b7f25906e android: Replace android-net plugin with kernel-netlink Tobias Brunner 2013-04-16 14:31:09 +02:00
• 67332b4e22 android: Set strongswan.conf options before initializing other libraries Tobias Brunner 2013-04-16 14:23:07 +02:00
• 0b9ce21b5e kernel-netlink: Define defaults for routing table and prio Tobias Brunner 2013-04-16 13:46:32 +02:00
• 2d7b55bf9b openssl: Define a default for FIPS_MODE Tobias Brunner 2013-05-03 15:00:54 +02:00
• 9312fbc73d In memwipe_check(), don't put magic on stack when calling do_magic() Martin Willi 2013-05-03 14:17:37 +02:00
• 1657b4ef26 Dump stack if memwipe() check fails Martin Willi 2013-05-03 11:41:51 +02:00
• 0f499f41dc Use attest database in tnc/tnccs-20-os scenario Andreas Steffen 2013-04-21 16:31:23 +02:00
• 9fab0a58d3 fixed a 64bit time_t issue Andreas Steffen 2013-04-21 16:07:13 +02:00
• 70a7917e72 destroy SQL query Andreas Steffen 2013-04-21 16:00:23 +02:00
• 6c998b8b9e Keep last AR ID Andreas Steffen 2013-04-21 08:19:30 +02:00
• bec5bf02ac Added use of openssl-fips library to NEWS Andreas Steffen 2013-04-19 18:49:43 +02:00
• 1b912ad384 check for successful activation of FIPS mode Andreas Steffen 2013-04-19 18:46:52 +02:00
• b97dd59ba8 install FIPS-aware OpenSSL Debian packages Andreas Steffen 2013-04-19 18:36:38 +02:00
• 545df30c18 Added openssl-ikev2/rw-cpa scenario Andreas Steffen 2013-04-18 12:46:36 +02:00
• 70312e6596 build openssl-fips in KVM root-image Andreas Steffen 2013-04-18 12:46:02 +02:00
• 2d902d7e7c fixed typo Andreas Steffen 2013-04-19 18:33:41 +02:00
• e6ba688a35 During libstrongswan initialization, check if memwipe() works as expected Martin Willi 2013-04-18 12:37:39 +02:00
• 6b99da026c added libstrongswan.plugins.openssl.fips_mode to man page Andreas Steffen 2013-04-16 13:44:06 +02:00
• f4de6496a2 support of OpenSSL FIPS-140-2 library Andreas Steffen 2013-04-16 12:37:04 +02:00
• ef934caba8 build soup plugin in KVM test environment Andreas Steffen 2013-04-15 20:23:41 +02:00
• 8d384fb7df disable reauth, too Andreas Steffen 2013-04-15 20:21:19 +02:00
• 73da6c88a4 Fix checksum calculation with DESTDIR installations Tobias Brunner 2013-04-15 16:48:46 +02:00
• 2e12fc4b0a version bump to 5.0.4 Andreas Steffen 2013-04-14 19:58:17 +02:00
• 654c88bca8 Added charon.initiator_only option which causes charon to ignore IKE initiation requests by peers Andreas Steffen 2013-04-14 19:57:49 +02:00
• cf1696cab9 Allow SHA1_Init()/SHA1_Update() to fail if OpenSSL version >= 1.0 Martin Willi 2013-04-09 11:48:47 +02:00
• b52771fbb2 Check RSA_public_decrypt() length before constructing and comparing a chunk Martin Willi 2013-04-09 11:38:51 +02:00
• 97d975b7bb RSA_check_key() may return -1 if it fails Martin Willi 2013-04-09 11:37:15 +02:00
• 96a09ce226 RAND_bytes/RAND_pseudo_bytes returns -1 if it is not supported by RAND method Martin Willi 2013-04-09 11:12:16 +02:00
• 0faaab20cd Check return value of ECDSA_Verify() correctly Martin Willi 2013-04-09 10:56:09 +02:00
• b2b99e61c8 eap-radius: Add an option to exclude ports from Called/Calling-Station-Id Martin Willi 2013-04-04 16:05:05 +02:00
• 022df06e1a version bump to 5.0.4dr1 Andreas Steffen 2013-04-09 15:20:49 +02:00
• 676e862487 fixed another printf statement Andreas Steffen 2013-04-09 15:16:49 +02:00
• 1a185ae14b fixed printf statements Andreas Steffen 2013-04-08 22:21:14 +02:00
• 12fa1784d0 emit a single assig_vips bus message for all VIPs Andreas Steffen 2013-04-06 14:16:30 +02:00
• ba2880d569 ifmap plugin subscribes to assing_vip bus signal Andreas Steffen 2013-04-04 13:40:57 +02:00
• 5cb4f5519b Added missing sasl Doxygen group Tobias Brunner 2013-04-05 14:54:29 +02:00
• 14edee56bf unity: Check IKE_SA in only after enumerating virtual IPs Tobias Brunner 2013-04-05 13:45:04 +02:00
• 8dade2d146 fixed configure options Andreas Steffen 2013-04-04 21:09:07 +02:00
• 2a4915e87a cleaned up XML code in tnccs-11 plugin Andreas Steffen 2013-04-04 17:12:00 +02:00
• 9c84bbcbc0 duplicheck: track multiple IKE_SAs in checking state to avoid any races Martin Willi 2013-04-04 15:43:37 +02:00
• 93f53a78b5 fixed memory leak Andreas Steffen 2013-04-03 21:29:04 +02:00
• 3ea6fcb593 properly handle orphaned renewSession jobs Andreas Steffen 2013-04-03 16:44:44 +02:00
• 91503c2112 support chunked HTTP responses Andreas Steffen 2013-04-03 12:08:52 +02:00
• 1044710b04 implemented periodic IF-MAP RenewSession request Andreas Steffen 2013-04-02 16:49:53 +02:00
• bee8b5e385 Refactor check_for_rekeyed_child() in quick_mode task Martin Willi 2013-04-03 17:08:00 +02:00
• ac48d9e458 Reuse reqid of an existing Quick Mode, even if it has been rekeyed Martin Willi 2013-04-03 15:56:26 +02:00
• 7f4f1e8249 List all stroke counters when "all" is given, and report if connection not known Martin Willi 2013-04-03 14:58:08 +02:00
• bee6515a28 Defer CHILD_SA rekeying if allocating an SPI fails Martin Willi 2013-04-03 12:16:27 +02:00
• 3f4300ed1e Accept a certificate/key pair to use client authentication in tls_test Martin Willi 2013-04-02 16:09:17 +02:00
• e019fa60b7 version bump to 5.0.3 Andreas Steffen 2013-04-02 08:55:33 +02:00
• d4a1ae3af1 allow retrieval of private keys from other credential sets Andreas Steffen 2013-04-01 22:32:20 +02:00
• c2c4125cde improve checking of sent and received http messages Andreas Steffen 2013-04-01 22:31:44 +02:00
• 96ad2b17b0 Updated strongswan.conf(5) man page Tobias Brunner 2013-04-01 14:35:39 +02:00
• eca499f3d9 Load raw keys before possibly destroying the identity Tobias Brunner 2013-04-01 13:46:23 +02:00
• a009aedb0b ipseckey: Use proper daemon name for enable option Tobias Brunner 2013-04-01 13:45:11 +02:00
• 53ac177cde Properly handle situation if no resolver plugins are loaded Tobias Brunner 2013-04-01 13:44:04 +02:00
• 5a516a83da fixed capability metadata Andreas Steffen 2013-03-31 22:15:42 +02:00
• fec7c824b8 fix start of wpa_supplicant Andreas Steffen 2013-03-31 19:48:00 +02:00