Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | extended changeset [4753] | Andreas Steffen | 2008-12-04 | 1 | -1/+2 | |
| | ||||||
* | implemented the policy cache in kernel_netlink_ipsec_t with a hash table ↵ | Tobias Brunner | 2008-12-04 | 1 | -41/+54 | |
| | | | | instead of a linked list. | |||||
* | fixed off by one error | Tobias Brunner | 2008-12-04 | 1 | -1/+1 | |
| | ||||||
* | fixed copy-paste bug (double-free) | Martin Willi | 2008-12-04 | 1 | -1/+0 | |
| | ||||||
* | reset pointer for a clean destruction | Martin Willi | 2008-12-04 | 1 | -0/+1 | |
| | ||||||
* | handling peer_match with higher priority tan ike_match to select correct ↵ | Martin Willi | 2008-12-04 | 1 | -1/+1 | |
| | | | | config if IPs are equal | |||||
* | leak whitelisting of OPENSSL_config() | Martin Willi | 2008-12-04 | 1 | -0/+1 | |
| | ||||||
* | suppress output from leak-detective in openac | Andreas Steffen | 2008-12-04 | 1 | -2/+2 | |
| | ||||||
* | load openac plugins explicitly | Andreas Steffen | 2008-12-04 | 1 | -0/+3 | |
| | ||||||
* | fixed refactoring error in openac | Andreas Steffen | 2008-12-04 | 2 | -2/+3 | |
| | ||||||
* | suppress leak-detective stderr output in ipsec pool | Andreas Steffen | 2008-12-04 | 16 | -26/+46 | |
| | ||||||
* | fixed double free of host in sadb_address2ts | Andreas Steffen | 2008-12-04 | 1 | -1/+0 | |
| | ||||||
* | enable leak-detective and integrity-test in UML tests by default | Andreas Steffen | 2008-12-04 | 1 | -3/+3 | |
| | ||||||
* | add support for smartcards in charon by using the ENGINE API provided by ↵ | Tobias Brunner | 2008-12-03 | 6 | -10/+187 | |
| | | | | OpenSSL, based on patches by Michael Roßberg. | |||||
* | enable quoted tokens in the token enumerator | Tobias Brunner | 2008-12-03 | 2 | -18/+42 | |
| | ||||||
* | fixed compiler warning | Tobias Brunner | 2008-12-03 | 1 | -1/+1 | |
| | ||||||
* | added memstr and extract_token_str helper functions | Tobias Brunner | 2008-12-03 | 4 | -2/+57 | |
| | ||||||
* | adding general purpose hash table | Tobias Brunner | 2008-12-03 | 3 | -0/+543 | |
| | ||||||
* | fixed double free of host in selector2ts | Martin Willi | 2008-12-03 | 1 | -27/+24 | |
| | ||||||
* | ref_get()/ref_put() use atomic gcc operations if supported, thanks to Thomas ↵ | Martin Willi | 2008-12-02 | 3 | -13/+32 | |
| | | | | Jarosch for the patch | |||||
* | added a --disable-threads ./configure option for pluto | Martin Willi | 2008-12-02 | 2 | -1/+16 | |
| | ||||||
* | use DBG_ANY to set all loglevels | Martin Willi | 2008-12-02 | 1 | -5/+2 | |
| | ||||||
* | added time.h include for struct tm | Martin Willi | 2008-12-02 | 1 | -0/+1 | |
| | ||||||
* | some task queueing improvements: | Martin Willi | 2008-12-01 | 8 | -63/+186 | |
| | | | | | | | | - do not pass CHILD_SAs to task constructor, might not be valid anymore during execution (late lookup) - use sub-tasks to delete CHILD/IKE_SA after rekeying, as we want to execute the delete before additional queued tasks | |||||
* | re-established lost default auth sys_logger | Andreas Steffen | 2008-12-01 | 1 | -3/+15 | |
| | ||||||
* | schedule rekeying when activating passive IKE_SAs | Martin Willi | 2008-11-28 | 1 | -1/+2 | |
| | ||||||
* | do not delete passive IKE_SAs | Martin Willi | 2008-11-28 | 1 | -0/+5 | |
| | ||||||
* | added a PASSIVE IKE_SA state to manage it externally | Martin Willi | 2008-11-28 | 2 | -4/+25 | |
| | ||||||
* | pass SKd to derive_ike_keys() to have a more interoperable API | Martin Willi | 2008-11-28 | 3 | -38/+93 | |
| | ||||||
* | fixed a double-unlock bug, showed up when using rwlocks in backend manager | Martin Willi | 2008-11-28 | 1 | -22/+4 | |
| | ||||||
* | use rwlocks in backend manager to allow simultaneous access | Martin Willi | 2008-11-27 | 1 | -19/+19 | |
| | ||||||
* | use a rwlock in attribute manager to allow simultaneous access | Martin Willi | 2008-11-27 | 1 | -12/+12 | |
| | ||||||
* | remove attribute provider in SQL plugin destruction | Martin Willi | 2008-11-27 | 1 | -0/+1 | |
| | ||||||
* | added an include hack to build starter without gmp.h | Martin Willi | 2008-11-27 | 3 | -2/+15 | |
| | ||||||
* | fixed pluto out-of-tree builds | Martin Willi | 2008-11-27 | 1 | -2/+2 | |
| | ||||||
* | token enumerator missed the last token if it contains only a single char | Martin Willi | 2008-11-27 | 2 | -6/+46 | |
| | ||||||
* | checkin of non-existing IKE_SAs | Martin Willi | 2008-11-26 | 3 | -78/+71 | |
| | | | | removed unneeded checkin() return values | |||||
* | removed private parser function pointers, allows compiler to inline | Martin Willi | 2008-11-26 | 1 | -200/+48 | |
| | ||||||
* | removed private generator function pointers, allows compiler to inline | Martin Willi | 2008-11-26 | 2 | -276/+154 | |
| | ||||||
* | inlined some short chunk functions, showed up in the profiler | Martin Willi | 2008-11-26 | 2 | -56/+30 | |
| | ||||||
* | memxor() tweaks, as it is heavily used in xcbc | Martin Willi | 2008-11-26 | 1 | -2/+10 | |
| | ||||||
* | allow to globally disable DOS protection by setting charon.dos_protection to no. | Tobias Brunner | 2008-11-26 | 1 | -0/+5 | |
| | ||||||
* | optimized the scheduler for performance by replacing the linked list with a ↵ | Tobias Brunner | 2008-11-25 | 1 | -47/+109 | |
| | | | | heap. | |||||
* | replacing the pthread_mutex in scheduler_t with the wrapped implementation. | Tobias Brunner | 2008-11-25 | 3 | -38/+62 | |
| | | | | added a method to condvar_t which allows to wait for an absolute timeout. | |||||
* | performance optimization for the DOS protection. | Tobias Brunner | 2008-11-25 | 5 | -41/+322 | |
| | | | | | | * half-open SAs per peer are tracked in a hash table * charon.dos_protection setting replaced with charon.cookie_threshold and charon.block_threshold * chunk_hash function added | |||||
* | fixed crash due to missing function call parameter | Andreas Steffen | 2008-11-25 | 1 | -1/+13 | |
| | ||||||
* | use static IPsec policy iptables rule for alice in mobike scenario | Andreas Steffen | 2008-11-25 | 2 | -1/+4 | |
| | ||||||
* | fixed set_message_id() on IKE_SA | Martin Willi | 2008-11-24 | 2 | -129/+132 | |
| | | | | | added missing bus->message() hook invocation whitespace cleanups | |||||
* | set message IDs on IKE_SAs | Martin Willi | 2008-11-24 | 4 | -9/+47 | |
| | ||||||
* | moved the IPV6_IPSEC_POLICY definition to the ipsec plugins, fixes uClibc build | Martin Willi | 2008-11-24 | 3 | -5/+10 | |
| |