Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Added wrapper for POSIX spin locks | Tobias Brunner | 2012-07-04 | 3 | -0/+191 | |
| | ||||||
* | Fixed job handling in controller_t | Tobias Brunner | 2012-07-04 | 1 | -110/+128 | |
| | | | | Also IKE_SAs are now checked out in the jobs and not before. | |||||
* | Add charon-nm to .gitignore | Martin Willi | 2012-07-03 | 1 | -0/+1 | |
| | ||||||
* | Default to register_printf_specifier() if no printf hooking #defined | Martin Willi | 2012-07-03 | 1 | -0/+7 | |
| | | | | | | This allows us to build (non-./configured) external tools against libstrongswan without explicitly specifiying the most commonly used printf hooking function. | |||||
* | openssl: Ensure the thread ID is never zero | Tobias Brunner | 2012-07-03 | 1 | -1/+3 | |
| | | | | | | This might otherwise cause problems because OpenSSL tries to lock mutexes recursively if it assumes the lock is held by a different thread e.g. during FIPS initialization. | |||||
* | Accept non-"/0" subnet sizes for traffic selectors starting at 0.0.0.0 | Martin Willi | 2012-07-02 | 1 | -40/+9 | |
| | ||||||
* | Update our network-manager-strongswan/debian to what is actually used downstream | Martin Willi | 2012-07-02 | 6 | -38/+66 | |
| | ||||||
* | remove virtual IP for moon's inner interface5.0.0 | Andreas Steffen | 2012-06-29 | 3 | -3/+0 | |
| | ||||||
* | Added GPL header to AndroidConfigLocal.h | Tobias Brunner | 2012-06-29 | 1 | -0/+15 | |
| | ||||||
* | Added GPL header to scripts | Tobias Brunner | 2012-06-29 | 8 | -0/+112 | |
| | ||||||
* | Added LICENSE file to the distribution | Tobias Brunner | 2012-06-29 | 1 | -1/+1 | |
| | ||||||
* | Added OpenSSL/GPL exception to LICENSE file | Tobias Brunner | 2012-06-29 | 1 | -8/+41 | |
| | | | | Also updated other parts of the license. | |||||
* | Removed superfluous remove_hasher() call in md5 plugin | Tobias Brunner | 2012-06-29 | 1 | -2/+0 | |
| | ||||||
* | Pass "lo" as faked tundev to NM, as it now needs a valid interface since 0.9 | Martin Willi | 2012-06-29 | 1 | -3/+4 | |
| | ||||||
* | As a responder, don't start a TRANSACTION request if we expect one from the ↵ | Martin Willi | 2012-06-29 | 2 | -2/+4 | |
| | | | | initiator | |||||
* | an IKE daemon needs these plugins but a PDP doesn't | Andreas Steffen | 2012-06-29 | 1 | -1/+1 | |
| | ||||||
* | added Ubuntu 12.04 LTS i686 measurements | Andreas Steffen | 2012-06-28 | 1 | -0/+319 | |
| | ||||||
* | IMCs and IMVs might depend on X.509 certificates or trusted public keys | Andreas Steffen | 2012-06-28 | 2 | -0/+4 | |
| | ||||||
* | added ikev1/virtual-ip scenario | Andreas Steffen | 2012-06-28 | 11 | -0/+159 | |
| | ||||||
* | corrected description of ikev1/ip-pool-db scenario | Andreas Steffen | 2012-06-28 | 1 | -1/+1 | |
| | ||||||
* | corrected description of ikev1/ip-pool scenario | Andreas Steffen | 2012-06-28 | 1 | -1/+1 | |
| | ||||||
* | added ikev1/ip-pool scenario | Andreas Steffen | 2012-06-28 | 11 | -0/+154 | |
| | ||||||
* | merged xauth-id-rsa and xauth-rsa-config scenarios | Andreas Steffen | 2012-06-28 | 28 | -182/+9 | |
| | ||||||
* | Defined a macro to replace strerror(3) with calls to thread-safe wrapper | Tobias Brunner | 2012-06-28 | 2 | -0/+7 | |
| | ||||||
* | Thread-safe wrapper around strerror(3)/strerror_r(3) added | Tobias Brunner | 2012-06-28 | 3 | -4/+93 | |
| | ||||||
* | Show some uname() info in "ipsec statusall" | Martin Willi | 2012-06-28 | 1 | -3/+10 | |
| | ||||||
* | Show some uname() info during charon startup | Martin Willi | 2012-06-28 | 1 | -1/+8 | |
| | ||||||
* | charon automatically removes virtual interfaces | Andreas Steffen | 2012-06-28 | 7 | -14/+0 | |
| | ||||||
* | libcharon also requires kernel interfaces and a socket implementation | Tobias Brunner | 2012-06-27 | 1 | -0/+3 | |
| | ||||||
* | Defer quick mode initiation if we expect a mode config request | Martin Willi | 2012-06-27 | 1 | -1/+20 | |
| | ||||||
* | Queue a mode config task as responder if we need a virtual IP | Martin Willi | 2012-06-27 | 2 | -4/+16 | |
| | ||||||
* | Add basic support for XAuth responder authentication | Martin Willi | 2012-06-27 | 2 | -8/+10 | |
| | ||||||
* | Map XAuth responder authentication methods between IKEv1 and IKEv2 | Martin Willi | 2012-06-27 | 1 | -1/+13 | |
| | ||||||
* | Show remote EAP/XAuth identity in "statusall" on a separate line | Martin Willi | 2012-06-27 | 1 | -1/+12 | |
| | ||||||
* | gcrypt: Register SHA1 first as HASH_PREFERRED depends on it | Tobias Brunner | 2012-06-27 | 1 | -1/+1 | |
| | ||||||
* | Use static plugin features in libcharon to define essential dependencies | Tobias Brunner | 2012-06-27 | 2 | -1/+11 | |
| | ||||||
* | Use static plugin features in charon-nm | Tobias Brunner | 2012-06-27 | 3 | -22/+37 | |
| | ||||||
* | Ignore a received %any virtual IP for installation | Martin Willi | 2012-06-26 | 1 | -1/+2 | |
| | ||||||
* | Mask the configured mark value to ensure it is in range | Tobias Brunner | 2012-06-26 | 1 | -0/+2 | |
| | ||||||
* | Some updates in ipsec.conf(5) for 5.0.0 | Tobias Brunner | 2012-06-26 | 1 | -36/+50 | |
| | ||||||
* | Added MAC wrappers to Android.mk | Tobias Brunner | 2012-06-26 | 1 | -0/+3 | |
| | ||||||
* | Also build charon's IKEv1 implementation on Android | Tobias Brunner | 2012-06-26 | 2 | -0/+24 | |
| | ||||||
* | Build nonce plugin on Android | Tobias Brunner | 2012-06-26 | 2 | -1/+4 | |
| | ||||||
* | Missing source file added to libcharon's Android.mk | Tobias Brunner | 2012-06-26 | 1 | -0/+1 | |
| | ||||||
* | scepclient: Added support to build it on Android | Tobias Brunner | 2012-06-26 | 3 | -4/+46 | |
| | ||||||
* | Added support for the curl plugin on Android | Tobias Brunner | 2012-06-26 | 2 | -0/+7 | |
| | ||||||
* | Avoid SIGSEGV during shutdown if charon is not started as root | Tobias Brunner | 2012-06-25 | 1 | -2/+2 | |
| | ||||||
* | NEWS about thread pool updates added | Tobias Brunner | 2012-06-25 | 1 | -0/+7 | |
| | ||||||
* | Make rescheduling a job more predictable | Tobias Brunner | 2012-06-25 | 4 | -49/+90 | |
| | | | | | | | | | | | | | This avoids race conditions between calls to cancel() and jobs that like to be rescheduled. If jobs were able to reschedule themselves it would theoretically be possible that two worker threads have the same job assigned (the one currently executing the job and the one executing the same but rescheduled job if it already is time to execute it), this means that cancel() could be called twice for that job. Creating a new job based on the current one and reschedule that is also OK, but rescheduling itself is more efficient for jobs that need to be executed often. | |||||
* | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 31 | -475/+261 | |
| | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. |