aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* fixed two bugs introduced by the stroke ip pool refactoring4.2.10Andreas Steffen2009-01-081-2/+9
|
* increase nonce size to 32 bytes, required when using SHA384/512 PRFsMartin Willi2008-12-311-1/+1
|
* missing LOGFILE in debug statementAndreas Steffen2008-12-231-1/+1
|
* added some NEWS for 4.2.10Martin Willi2008-12-221-0/+24
|
* fixed a potential memory leak when reusing mobike taskMartin Willi2008-12-191-0/+4
|
* RNG tests based on FIPS 140-1Martin Willi2008-12-183-2/+225
|
* support for Padlock RNGMartin Willi2008-12-184-1/+206
|
* proper feature probing for padlockMartin Willi2008-12-171-10/+107
|
* correct use of calloc in hashtable_tTobias Brunner2008-12-171-2/+1
|
* updated documentationMartin Willi2008-12-172-137/+131
| | | | | some minor cleanups calloc does not need an additional memset(0)
* improved IKE_SA uniqueness checkTobias Brunner2008-12-164-89/+83
|
* purge certificates after IKE_AUTH response has been builtMartin Willi2008-12-161-6/+8
|
* reimplemented certificate cache:Martin Willi2008-12-151-154/+220
| | | | | | | fixes unsafe certificate caching use fixed array instead of a list fine grained per-slot locking use cache hits for housekeeping
* signal each entry condvar after enumeration, required if wait_for_entry is ↵Martin Willi2008-12-151-3/+19
| | | | called
* added an additional frame to lock profiling backtracesMartin Willi2008-12-151-1/+1
|
* do not respawn cancelled threads if we are shutting downMartin Willi2008-12-121-1/+3
|
* fixed possible deadlock in checkin_and_destroyMartin Willi2008-12-121-2/+2
|
* avoid DNS lookup if possibleMartin Willi2008-12-121-13/+10
|
* execute events if difference is 0, prevents a busywaitMartin Willi2008-12-121-2/+3
|
* load tester got a "shutdown_when_complete" option, allows performance test ↵Martin Willi2008-12-123-15/+51
| | | | using "time"
* daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_killMartin Willi2008-12-122-8/+8
|
* leak detective binds execution to a signle core, avoids corruption on SMP ↵Martin Willi2008-12-121-0/+12
| | | | machines
* wait until all IKE_SAs are in-house before destroying themMartin Willi2008-12-121-1/+1
|
* address extensions refactoredTobias Brunner2008-12-112-85/+52
|
* fixed usage of "leases" commandMartin Willi2008-12-111-1/+1
|
* nat_traversal in manpage correctedTobias Brunner2008-12-101-1/+1
|
* fixing checkout of IKE SAs with only the initiator SPITobias Brunner2008-12-101-1/+2
|
* increasing the performance of checkout_duplicate by using a hash table.Tobias Brunner2008-12-101-66/+244
|
* initial size of 1 is nonsenseTobias Brunner2008-12-101-1/+1
|
* incremental version of chunk_hashTobias Brunner2008-12-102-2/+15
|
* list assigned leases using "ipsec leases"Martin Willi2008-12-1010-8/+245
|
* added IKE_SA established timer to "ipsec statusall"Martin Willi2008-12-101-5/+17
|
* using rwlock to parallel build credentialsMartin Willi2008-12-091-10/+10
|
* use thread-safe variant of gmtimeMartin Willi2008-12-091-4/+5
|
* fixed load-tester shared key lookupMartin Willi2008-12-091-2/+2
|
* purge auth_info when IKE_SA is established, releases cert memoryMartin Willi2008-12-093-2/+22
|
* limit number of ADDITIONAL_IPV*_ADDR notifiesMartin Willi2008-12-091-4/+9
|
* list pools and usage in ipsec statusallMartin Willi2008-12-093-5/+29
|
* extended stroke in-memory pool to use hash-tablesMartin Willi2008-12-092-58/+172
| | | | | supports online/offline leases properly reassign addresses to identities
* fixed hashtable->get_count() after doubling table sizeMartin Willi2008-12-091-1/+0
|
* require explicit enabling of load-testing pluginMartin Willi2008-12-091-1/+9
|
* generating different initiator identities, configs and certificates on the flyMartin Willi2008-12-083-101/+213
|
* removed debugging leftoversMartin Willi2008-12-081-4/+0
|
* fixed out-of-tree build of scepclientMartin Willi2008-12-081-1/+4
|
* basic x509 certificate generationMartin Willi2008-12-084-50/+357
|
* whitelisted another pthread_setspecific implementationMartin Willi2008-12-081-0/+1
|
* accept NULL values in hashtable enumeratorMartin Willi2008-12-051-2/+8
|
* hashtable enumerator enumerates over both, key and valuesMartin Willi2008-12-053-6/+9
|
* added actual ikev2bis draftMartin Willi2008-12-051-0/+7504
|
* pass identity to release_address(), allows providers to do a lookup by idMartin Willi2008-12-057-11/+13
|