Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 0cf4dc53c7 updated strongswan.conf man page for tn_ifmap plugin Andreas Steffen 2013-03-31 19:05:53 +02:00
• 45e2be2399 renamed tnc_ifmap2 plugin to tnc_ifmap Andreas Steffen 2013-03-31 16:37:30 +02:00
• bde8e287d9 removed obsoleted tnc_ifmap plugin Andreas Steffen 2013-03-31 16:07:08 +02:00
• 4581767493 implemented http basic authentication Andreas Steffen 2013-03-31 15:59:32 +02:00
• e8675cb35d parse IF-MAP server URI Andreas Steffen 2013-03-31 11:39:06 +02:00
• 4f4875ff13 implemented publish_enforcement_report and endSession methods Andreas Steffen 2013-03-30 13:19:27 +01:00
• 628fee4563 implemented publish_ike_sa method Andreas Steffen 2013-03-30 09:15:16 +01:00
• c6f9b1fb1f ifmap message type is known Andreas Steffen 2013-03-30 08:22:33 +01:00
• b02bdc1e06 implemented publish_device_ip method Andreas Steffen 2013-03-30 08:11:10 +01:00
• 14bf3cc1bd added IF-MAP SOAP error handling Andreas Steffen 2013-03-30 08:10:39 +01:00
• cd13c9a90f created tnc_ifmap2_soap_msg class Andreas Steffen 2013-03-29 23:09:11 +01:00
• b885c3cde6 implement NewSession and PurgePublisher messages using the libxml2 library Andreas Steffen 2013-03-29 22:29:12 +01:00
• e99aab35de set up a new IF-MAP session Andreas Steffen 2013-03-29 09:42:06 +01:00
• 5a8dd63433 fixed typo Andreas Steffen 2013-03-27 22:56:37 +01:00
• 54781f5f34 Fixed Doxygen comment in eap_radius plugin Tobias Brunner 2013-03-27 11:07:06 +01:00
• ae8ac58c45 Fix detection and use of netinet/ip6.h on FreeBSD Tobias Brunner 2013-03-27 09:56:48 +01:00
• 613fb0b494 Don't set USE_ATTR_SQL when the sql plugin is enabled only Tobias Brunner 2013-03-27 07:47:53 +01:00
• 419a9a4fcd Make some private functions in plugins static Tobias Brunner 2013-03-27 07:31:57 +01:00
• c59f3dcb68 Use new strongSwan HA kernel patchset keeping iptables ABI Martin Willi 2013-03-22 11:33:51 +01:00
• b5f3c1f785 Define SSHCONF from strongswan testing directory, not TESTDIR Martin Willi 2013-03-22 11:30:59 +01:00
• 0ba8842348 Lazy unmount guest filesystem after building image, as it still might be busy Martin Willi 2013-03-22 11:27:37 +01:00
• 51caeeb161 crypt_burn: Proper cleanup Tobias Brunner 2013-03-25 18:04:38 +01:00
• d4f2f3dd7f crypt_burn: Fix loop condition for regular crypters Tobias Brunner 2013-03-25 18:02:07 +01:00
• f2e6a67ed9 libpts: Cast first argument for %.*s to int Tobias Brunner 2013-03-25 17:37:52 +01:00
• 237bb5d467 error-notify: Close file descriptors in case clients are still connected Tobias Brunner 2013-03-25 17:33:45 +01:00
• 2467c46856 libpttls: Destroy reader when handling errors during SASL Tobias Brunner 2013-03-25 17:19:51 +01:00
• acbe87787b pacman: Define gen_time out of the loop Tobias Brunner 2013-03-25 17:13:49 +01:00
• 38c410b1aa ipseckey: NULL pointer dereference fixed in error case Tobias Brunner 2013-03-25 17:02:45 +01:00
• f7fea72e46 Recipes: Disable Anet unit tests Reto Buerki 2013-03-25 16:24:29 +01:00
• cf95d2926c Fixed some typos, courtesy of codespell Tobias Brunner 2013-03-25 10:59:37 +01:00
• 7e20062fdf Added hostapd package to base image Andreas Steffen 2013-03-22 23:53:39 +01:00
• 8f72ba4aff Added Framed-IP-Address information to RADIUS accounting records Andreas Steffen 2013-03-22 23:52:01 +01:00
• 9fa9f68d8d enforce singular of packets Andreas Steffen 2013-03-22 21:13:59 +01:00
• 48d82a7dc7 asprintf(3) requires _GNU_SOURCE to be defined Tobias Brunner 2013-03-22 19:41:01 +01:00
• 0b6c43f038 Added ikev2/rw-eap-framed-ip-radius scenario Andreas Steffen 2013-03-22 19:08:42 +01:00
• 4a3c1cdc2b Store debug output from standalone IMC/IMVs Andreas Steffen 2013-03-22 16:45:24 +01:00
• 1eada67bcb Added ikev2/ip-two-pools-v4v6-db scenario Andreas Steffen 2013-03-22 12:18:43 +01:00
• 79306b7e6e Use proper integer types when handling TLS exchanges Tobias Brunner 2013-03-22 11:36:48 +01:00
• 03237238b8 Check return value of asprintf(3) when converting AR identity Tobias Brunner 2013-03-22 11:34:16 +01:00
• 753e0a0099 version bump to 5.0.3rc1 Andreas Steffen 2013-03-22 10:38:25 +01:00
• a1bc67d6c9 Switch encoding of AR Identity Value from binary to UTF-8 Andreas Steffen 2013-03-22 10:37:49 +01:00
• 3db17b0ccc Fixed TKM build Reto Buerki 2013-03-22 10:35:48 +01:00
• 2c80ab3def Build TNC-enabled wpa_supplicant Andreas Steffen 2013-03-22 10:33:39 +01:00
• 6e58f0a34f activate logging before loading plugins Andreas Steffen 2013-03-21 18:04:24 +01:00
• dd3c243844 Add a load-tester option to keep allocated external address until shutdown Martin Willi 2013-03-21 10:29:23 +01:00
• 24b5e71522 android: No need to disable CMS explicitly Tobias Brunner 2013-03-20 16:59:45 +01:00
• 665fac2433 Allow up to 10 NAT-D payloads in IKEv1 messages Tobias Brunner 2013-03-20 16:20:39 +01:00
• 1a71178940 Avoid a race condition when reloading secrets from ipsec.secrets Tobias Brunner 2013-03-01 14:36:02 +01:00
• d307be7f6c Add a method to replace all secrets in a mem_cred_t object Tobias Brunner 2013-03-01 14:34:31 +01:00
• 29d93e2470 android: Build native libraries also for x86 Tobias Brunner 2013-03-20 14:50:41 +01:00
• 51f2905d9b android: libtnccs requires headers from libtls Tobias Brunner 2013-03-08 17:26:04 +01:00
• 9a4d06df44 android: Fix Android.mk for ipsec script Tobias Brunner 2013-03-08 17:05:55 +01:00
• e5d819b617 android: Remove/filter header files from LOCAL_SRC_FILES Tobias Brunner 2013-03-08 16:48:11 +01:00
• 8249f288f2 android: Request and install an IPv6 DNS server Tobias Brunner 2013-03-07 18:20:10 +01:00
• ee66565d43 android: Also request a virtual IPv6 address and propose IPv6 TS Tobias Brunner 2013-03-07 18:16:56 +01:00
• c994ec3b70 ipsec: Increased log level for message in case no outbound policy is found Tobias Brunner 2013-03-07 16:21:11 +01:00
• e2d2b542f1 Add an option to autobalance a HA cluster automatically Martin Willi 2013-03-19 16:49:07 +01:00
• 33524f02f9 Check if for some reason we handle a HA segment on both nodes Martin Willi 2013-03-19 16:48:53 +01:00
• 21f40fe891 Acquire HA segment lock while sending heartbeat Martin Willi 2013-03-19 16:46:43 +01:00
• e8526ae991 Removed unused variable 'id' Tobias Brunner 2013-03-19 16:37:40 +01:00
• 5e551da16b Properly cleanup libmysql Tobias Brunner 2013-03-18 19:17:19 +01:00
• 2ac772a5d0 Use proper address family when adding multiple addresses to SQL pool Tobias Brunner 2013-03-18 19:11:10 +01:00
• fe62707209 Ignore SQL-based IP address pools if their address family does not match Tobias Brunner 2013-03-18 18:45:29 +01:00
• 1b33e6c4ca charon-nm: Add dependencies to CERT_DECODE and PRIVKEY plugin features Tobias Brunner 2013-02-26 15:43:30 +01:00
• 3651c8dcd5 charon-nm: Prevent NM from changing the default route Tobias Brunner 2013-02-22 18:52:17 +01:00
• 9cf09ecad7 charon-nm: Use VIP (if any) as local address Tobias Brunner 2013-02-22 18:49:55 +01:00
• c15eea7306 charon-nm: Pass a dummy TUN device to NetworkManager Tobias Brunner 2013-02-22 16:51:52 +01:00
• b7645a5d30 charon-nm: Fix NM plugin utility macros Tobias Brunner 2013-02-25 18:46:15 +01:00
• e7017a6bb9 Ignore 'compile' script which is generated by AM_PROG_CC_C_O Tobias Brunner 2013-03-19 16:18:35 +01:00
• 68bfee4bc4 Avoid returning COOKIEs right after system boot Tobias Brunner 2013-01-31 18:42:26 +01:00
• 2071dd63d6 Fix scheduling of heartbeat sending in HA plugin Martin Willi 2013-03-19 15:17:41 +01:00
• 5cf3afd1fa Fix compiler warning in HA plugin Martin Willi 2013-03-19 15:16:06 +01:00
• 7f0f185bed Merge branch 'tkm' Tobias Brunner 2013-03-19 15:25:38 +01:00
• 7cc6fa1a98 Various stylistic fixes Adrian-Ken Rueegsegger 2013-03-18 18:47:16 +01:00
• db50a35ad8 Add NEWS about TKM separation Reto Buerki 2013-03-18 16:13:55 +01:00
• c57b7a66c3 Use network byte order for ESA SPIs Adrian-Ken Rueegsegger 2013-03-04 11:23:22 +01:00
• e2928a3e8c Provide MODP-2048 through TKM DH plugin Adrian-Ken Rueegsegger 2013-02-11 15:21:49 +01:00
• 7f21523abd Add charon-tkm API documentation Adrian-Ken Rueegsegger 2013-01-30 11:16:16 +01:00
• 0063e03325 Do not hardwire keys to KEY_RSA Reto Buerki 2013-01-30 15:36:03 +01:00
• 38c1fd3cb1 Provide TKM credential encoder Reto Buerki 2013-01-18 14:40:02 +01:00
• 1b22565ba5 Switch to openssl plugin Reto Buerki 2013-01-29 10:28:38 +01:00
• 8484f2bc5c Implement multiple-clients integration test Reto Buerki 2013-01-28 11:58:03 +01:00
• a520e4a010 Implement net2net-xfrmproxy integration test Reto Buerki 2013-01-28 10:44:19 +01:00
• 847d320950 Implement net2net-initiator integration test Reto Buerki 2013-01-28 10:40:36 +01:00
• d8b2064a34 Add xfrm_proxy integration test Reto Buerki 2013-01-25 10:40:29 +01:00
• f10f7fe261 Provide script to build Ada XFRM proxy Reto Buerki 2013-01-25 10:33:46 +01:00
• 3150dbd3e3 Add TKM responder integration test Reto Buerki 2013-01-24 17:05:17 +01:00
• 117375ed00 Add initial TKM integration test Reto Buerki 2013-01-22 20:52:55 +01:00
• 7b702150a0 Add expect-file guest image script Reto Buerki 2013-01-24 18:26:34 +01:00
• 0e1d008d71 Add /usr/local/lib/ipsec to linker cache Reto Buerki 2013-01-22 20:52:15 +01:00
• b491ee4ecd Provide recipes to build tkm and required libraries Reto Buerki 2013-01-22 16:07:25 +01:00
• 3fc766d61e Add GNAT compiler and Ada libs to base image Reto Buerki 2013-01-22 16:04:34 +01:00
• ae6f4ee39f Don't manually register kernel_netlink_net Reto Buerki 2013-01-23 13:51:12 +01:00
• 32b2ea9edb Move stroke plugin to the end of PLUGINS list Reto Buerki 2013-01-23 13:43:07 +01:00
• 41eaaef79b Make sure IP_XFRM_POLICY is defined Reto Buerki 2013-01-17 10:01:31 +01:00
• 89b1d5f32c Call isa_skip_create_first when keeping IKE SA Adrian-Ken Rueegsegger 2012-12-19 15:58:17 +01:00
• 140a6b7b34 Make IKE and EES sockets configurable Adrian-Ken Rueegsegger 2012-12-18 17:15:58 +01:00
• f47ea969f8 Implement TKM-specific credential set Reto Buerki 2012-12-18 15:35:40 +01:00
• ec169572a0 Initialize libstrongswan in test_runner main() Reto Buerki 2012-12-18 15:06:07 +01:00
• 9099d2ba0b Set ri_id to reqid when setting user certificate Adrian-Ken Rueegsegger 2012-12-17 18:27:03 +01:00