Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Added TLS client side support for DHE suites | Martin Willi | 2010-09-02 | 1 | -25/+187 | |
| | ||||||
* | Store a MODP group we use for each TLS suite | Martin Willi | 2010-09-02 | 2 | -12/+34 | |
| | ||||||
* | Added support for MODP_CUSTOM to gmp plugin | Martin Willi | 2010-09-02 | 3 | -17/+52 | |
| | ||||||
* | Added a MODP_CUSTOM DH group which takes g and p as constructor arguments | Martin Willi | 2010-09-02 | 4 | -7/+29 | |
| | ||||||
* | Implemented "signature algorithm" hello extension | Martin Willi | 2010-09-02 | 2 | -1/+45 | |
| | ||||||
* | Added TLS extension identifiers | Martin Willi | 2010-09-02 | 2 | -0/+17 | |
| | ||||||
* | Added generic TLS data sign/verify, hash/sig algorithm construction | Martin Willi | 2010-09-02 | 3 | -97/+143 | |
| | ||||||
* | Continue with a randomized premaster if decryption failed / version mismatches | Martin Willi | 2010-09-02 | 1 | -9/+41 | |
| | ||||||
* | pluto: Removed unused lifetime from raw_eroute. | Tobias Brunner | 2010-09-02 | 1 | -7/+4 | |
| | ||||||
* | pluto: Added support for statically configured reqids. | Tobias Brunner | 2010-09-02 | 2 | -2/+2 | |
| | ||||||
* | testing: Added ikev1 xfrm mark scenarios. | Tobias Brunner | 2010-09-02 | 20 | -0/+1553 | |
| | ||||||
* | pluto: Make marks available in updown script. | Tobias Brunner | 2010-09-02 | 1 | -0/+18 | |
| | ||||||
* | pluto: Fixed comparison of connections, if marks are specified. | Tobias Brunner | 2010-09-02 | 1 | -0/+8 | |
| | ||||||
* | pluto: Store xfrm marks on connection and use them when installing SAs and ↵ | Tobias Brunner | 2010-09-02 | 3 | -29/+42 | |
| | | | | policies. | |||||
* | starter: Some whitespace cleanup. | Tobias Brunner | 2010-09-02 | 2 | -4/+4 | |
| | ||||||
* | pluto: Added PLUTO_UDP_ENC argument to updown script. | Tobias Brunner | 2010-09-02 | 3 | -13/+22 | |
| | | | | This contains the remote UDP port in case of UDP encapsulated ESP. | |||||
* | pluto: Return value fixed. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | pluto: Removed bare shunt table. | Tobias Brunner | 2010-09-02 | 4 | -339/+8 | |
| | ||||||
* | Do not install routes for pluto. | Tobias Brunner | 2010-09-02 | 2 | -0/+10 | |
| | | | | | There are some incompatibilities with e.g. passthrough policies. Pluto installs required source routes via updown script. | |||||
* | pluto: Handle changed NAT mappings via libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 3 | -81/+87 | |
| | ||||||
* | pluto: Removed no_klips flag (--noklips option). | Tobias Brunner | 2010-09-02 | 7 | -168/+126 | |
| | ||||||
* | pluto: Removed references to KLIPS from documentation, log messages and ↵ | Tobias Brunner | 2010-09-02 | 6 | -74/+23 | |
| | | | | comments. | |||||
* | pluto: Added --debug-kernel as alias for --debug-klips. | Tobias Brunner | 2010-09-02 | 3 | -6/+8 | |
| | ||||||
* | pluto: Replaced DBG_KLIPS with DBG_KERNEL. | Tobias Brunner | 2010-09-02 | 6 | -19/+19 | |
| | ||||||
* | pluto: Removed the KLIPS preprocessor flag. | Tobias Brunner | 2010-09-02 | 10 | -98/+6 | |
| | ||||||
* | pluto: Removed unneeded kernel abstractions. | Tobias Brunner | 2010-09-02 | 6 | -1482/+0 | |
| | ||||||
* | pluto: Completely removed struct kernel_ops. | Tobias Brunner | 2010-09-02 | 3 | -70/+0 | |
| | ||||||
* | pluto: Refactored PF_KEY capabilities registration. | Tobias Brunner | 2010-09-02 | 3 | -239/+108 | |
| | | | | | Although we use the kernel interface from libhydra we still need this to make the available algorithms known to pluto. | |||||
* | pluto: Removed unneeded functions from PF_KEY interface. | Tobias Brunner | 2010-09-02 | 3 | -427/+31 | |
| | | | | We still use the algorithm registration. | |||||
* | pluto: Completely removed orphaned_holds. | Tobias Brunner | 2010-09-02 | 3 | -54/+0 | |
| | ||||||
* | Scheduler and processor have been moved to libstrongswan. | Tobias Brunner | 2010-09-02 | 3 | -5/+3 | |
| | | | | | Also reverts 0c21dc000d3cd5c82eb22c4481e6459978456364 as the dependency to libcharon is no longer required. | |||||
* | pluto: Install IN policy of a shunt eroute with protocol. | Tobias Brunner | 2010-09-02 | 1 | -1/+2 | |
| | ||||||
* | pluto: Fixed byte-order of ports in traffic selectors. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | testing: Print output of 'make oldconfig' to STDOUT, besides logging it. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | testing: Only sleep after a host has actually been started. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | testing: Build strongSwan a bit faster using make -j. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | testing: Force the UML Kernel to x86. | Tobias Brunner | 2010-09-02 | 1 | -2/+2 | |
| | ||||||
* | testing: Adding kernel-netlink to pluto.load statements. | Tobias Brunner | 2010-09-02 | 116 | -116/+116 | |
| | ||||||
* | testing: Added missing host alice to test.conf. | Tobias Brunner | 2010-09-02 | 36 | -72/+72 | |
| | ||||||
* | Charon specific strongswan.conf options generalized. | Tobias Brunner | 2010-09-02 | 5 | -14/+18 | |
| | ||||||
* | pluto: Listen for kernel events via libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 4 | -38/+86 | |
| | ||||||
* | pluto: Adapted kernel.c to changed kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -47/+45 | |
| | ||||||
* | Adapted child_sa_t to changed kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -25/+49 | |
| | ||||||
* | Fixing installation of trap policies (SPI=0) in kernel interface. | Tobias Brunner | 2010-09-02 | 7 | -51/+59 | |
| | ||||||
* | pluto: Do not close all file descriptors on startup, just redirect stdin, ↵ | Tobias Brunner | 2010-09-02 | 1 | -16/+8 | |
| | | | | | | | stdout and stderr to /dev/null. Otherwise the pipe used to synchronize pluto->events with the main thread would be closed. | |||||
* | pluto: Added a generic event queue. | Tobias Brunner | 2010-09-02 | 6 | -1/+292 | |
| | | | | | This allows to easily execute arbitrary callbacks in the context of the pluto main thread (e.g. in order to synchronize with threads from the thread-pool). | |||||
* | pluto: Fixed the reqid that is passed to the updown script. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | ||||||
* | pluto: Migrated setup_half_ipsec_sa to libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -352/+113 | |
| | ||||||
* | pluto: Removed unneeded get_proto_reqid. | Tobias Brunner | 2010-09-02 | 1 | -18/+0 | |
| | | | | We will use the same reqid for all protocols, as in charon. | |||||
* | pluto: Added missing return_on in out_sa. | Tobias Brunner | 2010-09-02 | 1 | -2/+2 | |
| |