tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Give processor_t more control over the lifecycle of a job	Tobias Brunner	2012-06-25	26	-169/+236
\| \| \| \| \| \| \| \| \| \| \|	Jobs are now destroyed by the processor, but they are allowed to reschedule themselves. That is, parts of the reschedule functionality already provided by callback_job_t is moved to the processor. Not yet fully supported is JOB_REQUEUE_DIRECT and canceling jobs. Note: job_t.destroy() is now called not only for queued jobs but also after execution or cancellation of jobs. job_t.status can be used to decide what to do in said method.
*	Added a method to plugin_loader_t to add 'static' plugin features	Tobias Brunner	2012-06-25	2	-0/+115
\| \| \| \| \| \| \| \|	This allows daemons and other components to register plugin features like those provided by plugins (following the same lifecycle). The added features are internally handled like they were added by a plugin.
*	Make sure that all features of critical plugins are loaded	Tobias Brunner	2012-06-25	1	-5/+64
\|
*	Added an option to rename the ipsec script during installation	Tobias Brunner	2012-06-25	7	-40/+64
\| \| \| \| \| \| \|	Also rename the man page and adjust all references in the script, the man page and other files. Closes #194.
*	Removed -o argument when creating .../ipsec.d with install	Tobias Brunner	2012-06-25	1	-1/+1
\| \| \| \|	This should have been removed with 2b52d5cb41.
*	Updated ipsec script man page after removing pluto	Tobias Brunner	2012-06-25	1	-85/+71
\|
*	Use mac_t and PRF and signer wrappers in cmac plugin	Tobias Brunner	2012-06-25	8	-443/+82
\|
*	Use mac_t and PRF and signer wrappers in xcbc plugin	Tobias Brunner	2012-06-25	8	-452/+91
\|
*	Make the hmac_t interface a generic interface for message authentication codes	Tobias Brunner	2012-06-25	11	-132/+131
\|
*	Simplified creation of PRFs and signers in openssl and hmac plugins	Tobias Brunner	2012-06-25	2	-136/+10
\|
*	Function to convert PRFs to hash algorithms added	Tobias Brunner	2012-06-25	2	-0/+39
\|
*	hasher_algorithm_from_integrity() optionally returns truncation length	Tobias Brunner	2012-06-25	3	-7/+45
\|
*	Use simple wrappers for HMAC based PRF and signer in openssl plugin	Tobias Brunner	2012-06-25	8	-562/+132
\|
*	Use simple wrappers for HMAC based PRF and signer in hmac plugin	Tobias Brunner	2012-06-25	8	-524/+127
\|
*	Simple wrappers for HMAC based prf_t and signer_t implementations added	Tobias Brunner	2012-06-25	6	-0/+395
\|
*	Refactored OpenSSL based HMAC implementation	Tobias Brunner	2012-06-25	5	-173/+382
\|
*	Adding OpenSSL HMAC signer functions to openssl plugin	Aleksandr Grinberg	2012-06-25	4	-1/+322
\|
*	Adding OpenSSL HMAC pseudo random functions to openssl plugin	Aleksandr Grinberg	2012-06-25	4	-1/+245
\|
*	Adding OpenSSL random number functions to openssl plugin	Aleksandr Grinberg	2012-06-25	4	-1/+159
\|
*	Fixed IPv6 source address lookup	Tobias Brunner	2012-06-25	1	-5/+43
\| \| \| \| \| \| \| \| \| \| \| \| \|	Because Linux kernels prior to 3.0 do not support RTA_PREFSRC for IPv6 routes we didn't use NLM_F_DUMP to get all routes. Still routes installed with policies are installed also for IPv6. So since only one route is returned without DUMP, and we ignore all routes from our own routing table, no source address was found during roaming if DST of the installed route included the IKE peer. With newer kernels we can now use DUMP as we did for IPv4 already, for older kernels we do so if our own routes are installed in a separate routing table, otherwise we still use GET.
*	updated default configuration of UML hosts to 5.0.0	Andreas Steffen	2012-06-25	14	-72/+19
\|
*	added charon.cisco_unity to strongswan.conf.5 man page	Andreas Steffen	2012-06-25	1	-0/+3
\|
*	support Cisco Unity VID	Andreas Steffen	2012-06-25	2	-3/+11
\|
*	Enable xauth-generic by default but don't build it if IKEv1 is disabled	Tobias Brunner	2012-06-25	1	-1/+5
\|
*	Remove CREDITS from distribution	Tobias Brunner	2012-06-25	1	-1/+1
\|
*	The AUTHORS file is required by automake	Tobias Brunner	2012-06-25	1	-0/+0
\|
*	LICENSE file updated	Tobias Brunner	2012-06-25	1	-21/+8
\|
*	ldaphost and ldapbase ca section keywords are deprecated	Tobias Brunner	2012-06-25	4	-8/+2
\|
*	Removed pluto-specifics from ipsec script	Tobias Brunner	2012-06-25	1	-75/+1
\|
*	README file cleaned up and updated	Tobias Brunner	2012-06-25	1	-2117/+481
\|
*	Enforce uniqueids=keep based on XAuth identity	Martin Willi	2012-06-25	1	-0/+6
\|
*	Don't send XAUTH_OK if a hook prevents SA to establish	Martin Willi	2012-06-25	1	-4/+14
\|
*	Enforce uniqueids=keep only for non-XAuth Main/Agressive Modes	Martin Willi	2012-06-25	2	-28/+28
\|
*	Show EAP/XAuth identity in "ipsec status", if available	Martin Willi	2012-06-25	1	-1/+1
\|
*	Use XAuth/EAP remote identity for uniqueness check	Martin Willi	2012-06-25	3	-4/+6
\|
*	Add missing XAuth name variable when complaining about missing XAuth backend	Martin Willi	2012-06-25	1	-1/+1
\|
*	removed AUTHORS and CREDITS	Andreas Steffen	2012-06-25	2	-110/+0
\|
*	some copyright additions	Andreas Steffen	2012-06-23	1	-5/+8
\|
*	update copyright	Andreas Steffen	2012-06-23	1	-6/+4
\|
*	version bump to 5.0.0	Andreas Steffen	2012-06-23	1	-1/+1
\|
*	Fix SIGSEGV if kernel install fails during Quick Mode as responder.	Tobias Brunner	2012-06-22	1	-4/+8
\|
*	adapted description to IKEv2	Andreas Steffen	2012-06-22	3	-6/+5
\|
*	Fixed compile error because of charon->name in certexpire plugin.	Tobias Brunner	2012-06-21	1	-0/+1
\|
*	fixed typo	Andreas Steffen	2012-06-20	1	-1/+1
\|
*	added ipv6/rw-ip6-in-ip4-ikev1 scenario	Andreas Steffen	2012-06-20	19	-0/+504
\|
*	added ipv6/rw-ip6-in-ip4-ikev2 scenario	Andreas Steffen	2012-06-20	14	-0/+440
\|
*	Select requested virtual IP family based on remote TS, if no local TS available	Martin Willi	2012-06-20	1	-1/+12
\|
*	upgraded UML options to 5.0.0	Andreas Steffen	2012-06-19	2	-8/+9
\|
*	Doxygen fix in PKCS#7 wrapper	Tobias Brunner	2012-06-19	1	-1/+1
\|
*	sleep one second more	Andreas Steffen	2012-06-19	1	-1/+1
\|