Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | initial size of 1 is nonsense | Tobias Brunner | 2008-12-10 | 1 | -1/+1 | |
| | ||||||
* | incremental version of chunk_hash | Tobias Brunner | 2008-12-10 | 2 | -2/+15 | |
| | ||||||
* | list assigned leases using "ipsec leases" | Martin Willi | 2008-12-10 | 10 | -8/+245 | |
| | ||||||
* | added IKE_SA established timer to "ipsec statusall" | Martin Willi | 2008-12-10 | 1 | -5/+17 | |
| | ||||||
* | using rwlock to parallel build credentials | Martin Willi | 2008-12-09 | 1 | -10/+10 | |
| | ||||||
* | use thread-safe variant of gmtime | Martin Willi | 2008-12-09 | 1 | -4/+5 | |
| | ||||||
* | fixed load-tester shared key lookup | Martin Willi | 2008-12-09 | 1 | -2/+2 | |
| | ||||||
* | purge auth_info when IKE_SA is established, releases cert memory | Martin Willi | 2008-12-09 | 3 | -2/+22 | |
| | ||||||
* | limit number of ADDITIONAL_IPV*_ADDR notifies | Martin Willi | 2008-12-09 | 1 | -4/+9 | |
| | ||||||
* | list pools and usage in ipsec statusall | Martin Willi | 2008-12-09 | 3 | -5/+29 | |
| | ||||||
* | extended stroke in-memory pool to use hash-tables | Martin Willi | 2008-12-09 | 2 | -58/+172 | |
| | | | | | supports online/offline leases properly reassign addresses to identities | |||||
* | fixed hashtable->get_count() after doubling table size | Martin Willi | 2008-12-09 | 1 | -1/+0 | |
| | ||||||
* | require explicit enabling of load-testing plugin | Martin Willi | 2008-12-09 | 1 | -1/+9 | |
| | ||||||
* | generating different initiator identities, configs and certificates on the fly | Martin Willi | 2008-12-08 | 3 | -101/+213 | |
| | ||||||
* | removed debugging leftovers | Martin Willi | 2008-12-08 | 1 | -4/+0 | |
| | ||||||
* | fixed out-of-tree build of scepclient | Martin Willi | 2008-12-08 | 1 | -1/+4 | |
| | ||||||
* | basic x509 certificate generation | Martin Willi | 2008-12-08 | 4 | -50/+357 | |
| | ||||||
* | whitelisted another pthread_setspecific implementation | Martin Willi | 2008-12-08 | 1 | -0/+1 | |
| | ||||||
* | accept NULL values in hashtable enumerator | Martin Willi | 2008-12-05 | 1 | -2/+8 | |
| | ||||||
* | hashtable enumerator enumerates over both, key and values | Martin Willi | 2008-12-05 | 3 | -6/+9 | |
| | ||||||
* | added actual ikev2bis draft | Martin Willi | 2008-12-05 | 1 | -0/+7504 | |
| | ||||||
* | pass identity to release_address(), allows providers to do a lookup by id | Martin Willi | 2008-12-05 | 7 | -11/+13 | |
| | ||||||
* | extended changeset [4753] | Andreas Steffen | 2008-12-04 | 1 | -1/+2 | |
| | ||||||
* | implemented the policy cache in kernel_netlink_ipsec_t with a hash table ↵ | Tobias Brunner | 2008-12-04 | 1 | -41/+54 | |
| | | | | instead of a linked list. | |||||
* | fixed off by one error | Tobias Brunner | 2008-12-04 | 1 | -1/+1 | |
| | ||||||
* | fixed copy-paste bug (double-free) | Martin Willi | 2008-12-04 | 1 | -1/+0 | |
| | ||||||
* | reset pointer for a clean destruction | Martin Willi | 2008-12-04 | 1 | -0/+1 | |
| | ||||||
* | handling peer_match with higher priority tan ike_match to select correct ↵ | Martin Willi | 2008-12-04 | 1 | -1/+1 | |
| | | | | config if IPs are equal | |||||
* | leak whitelisting of OPENSSL_config() | Martin Willi | 2008-12-04 | 1 | -0/+1 | |
| | ||||||
* | suppress output from leak-detective in openac | Andreas Steffen | 2008-12-04 | 1 | -2/+2 | |
| | ||||||
* | load openac plugins explicitly | Andreas Steffen | 2008-12-04 | 1 | -0/+3 | |
| | ||||||
* | fixed refactoring error in openac | Andreas Steffen | 2008-12-04 | 2 | -2/+3 | |
| | ||||||
* | suppress leak-detective stderr output in ipsec pool | Andreas Steffen | 2008-12-04 | 16 | -26/+46 | |
| | ||||||
* | fixed double free of host in sadb_address2ts | Andreas Steffen | 2008-12-04 | 1 | -1/+0 | |
| | ||||||
* | enable leak-detective and integrity-test in UML tests by default | Andreas Steffen | 2008-12-04 | 1 | -3/+3 | |
| | ||||||
* | add support for smartcards in charon by using the ENGINE API provided by ↵ | Tobias Brunner | 2008-12-03 | 6 | -10/+187 | |
| | | | | OpenSSL, based on patches by Michael Roßberg. | |||||
* | enable quoted tokens in the token enumerator | Tobias Brunner | 2008-12-03 | 2 | -18/+42 | |
| | ||||||
* | fixed compiler warning | Tobias Brunner | 2008-12-03 | 1 | -1/+1 | |
| | ||||||
* | added memstr and extract_token_str helper functions | Tobias Brunner | 2008-12-03 | 4 | -2/+57 | |
| | ||||||
* | adding general purpose hash table | Tobias Brunner | 2008-12-03 | 3 | -0/+543 | |
| | ||||||
* | fixed double free of host in selector2ts | Martin Willi | 2008-12-03 | 1 | -27/+24 | |
| | ||||||
* | ref_get()/ref_put() use atomic gcc operations if supported, thanks to Thomas ↵ | Martin Willi | 2008-12-02 | 3 | -13/+32 | |
| | | | | Jarosch for the patch | |||||
* | added a --disable-threads ./configure option for pluto | Martin Willi | 2008-12-02 | 2 | -1/+16 | |
| | ||||||
* | use DBG_ANY to set all loglevels | Martin Willi | 2008-12-02 | 1 | -5/+2 | |
| | ||||||
* | added time.h include for struct tm | Martin Willi | 2008-12-02 | 1 | -0/+1 | |
| | ||||||
* | some task queueing improvements: | Martin Willi | 2008-12-01 | 8 | -63/+186 | |
| | | | | | | | | - do not pass CHILD_SAs to task constructor, might not be valid anymore during execution (late lookup) - use sub-tasks to delete CHILD/IKE_SA after rekeying, as we want to execute the delete before additional queued tasks | |||||
* | re-established lost default auth sys_logger | Andreas Steffen | 2008-12-01 | 1 | -3/+15 | |
| | ||||||
* | schedule rekeying when activating passive IKE_SAs | Martin Willi | 2008-11-28 | 1 | -1/+2 | |
| | ||||||
* | do not delete passive IKE_SAs | Martin Willi | 2008-11-28 | 1 | -0/+5 | |
| | ||||||
* | added a PASSIVE IKE_SA state to manage it externally | Martin Willi | 2008-11-28 | 2 | -4/+25 | |
| |