| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | Doxygen fix | Tobias Brunner | 2012-08-11 | 1 | -1/+1 | |
| | | | ||||||
| * | | Avoid problems with Doxygen by adding warn_unused_result attribute at the ↵ | Tobias Brunner | 2012-08-11 | 9 | -61/+57 | |
| | | | | | | | | | end of method signatures | |||||
| * | | Add warn_unused_result attributes to rng_(get|allocate)_bytes_not_zero | Tobias Brunner | 2012-08-11 | 1 | -5/+6 | |
| | | | | | | | | | Also fixed Doxygen comments. | |||||
| * | | Documentation fixes regarding xauth-pam/eap-gtc plugins | Tobias Brunner | 2012-08-11 | 2 | -4/+6 | |
| | | | ||||||
| * | | If _POSIX_SPIN_LOCKS is defined as -1, it is not available | Martin Willi | 2012-08-10 | 1 | -0/+4 | |
| | | | ||||||
| * | | If vstr printf functions are #defined, undef them before redefinition | Martin Willi | 2012-08-10 | 1 | -0/+31 | |
| | | | | | | | | | | | At least Mountain Lion seems to have them #defined to secure _chk variants. | |||||
| * | | Use actual daemon name to enable XAuth/PSK with aggressive mode | Martin Willi | 2012-08-10 | 1 | -2/+3 | |
| | | | ||||||
| * | | Add xauth-pam/eap-gtc NEWS | Martin Willi | 2012-08-10 | 1 | -0/+5 | |
| | | | ||||||
| * | | EAP-GTC can use any XAuth backend, including xauth-pam | Martin Willi | 2012-08-10 | 2 | -88/+45 | |
| | | | | | | | | | | | | | | | This makes EAP-GTC a generic plain password authentication method, as it is used with XAuth. Instead of verifying credentials with PAM, any backend can be configured. The default is xauth-pam, providing the same functionality as EAP-GTC in strongSwan 4.x. | |||||
| * | | Add xauth-pam, an XAuth backend verifying credentials with PAM | Martin Willi | 2012-08-10 | 7 | -1/+395 | |
| | | | ||||||
| * | | Add getspnam_r() to leak detective whitelist | Martin Willi | 2012-08-10 | 1 | -0/+1 | |
| | | | ||||||
| * | | make max_message_size parameter consistent with similar options | Andreas Steffen | 2012-08-09 | 3 | -4/+4 | |
| | | | ||||||
| * | | Check if TLS handshake received Finished before processing application data | Martin Willi | 2012-08-09 | 1 | -0/+6 | |
| |/ | ||||||
| * | Remove queued IKEv1 message before processing it | Martin Willi | 2012-08-08 | 1 | -3/+5 | |
| | | | | | | Avoids destruction or processing of a queued message in recursive process_message() call. | |||||
| * | Include src address in hash of initial message for Main Mode | Tobias Brunner | 2012-08-08 | 1 | -5/+31 | |
| | | | | | | | | If two initiators use the same SPI and also use the same SA proposal the hash for the initial message would be exactly the same. For IKEv2 and Aggressive Mode that's not a problem as these messages include random data (Ni, KEi payloads). | |||||
| * | implemented deletion of product_file database entries | Andreas Steffen | 2012-08-07 | 1 | -15/+13 | |
| | | ||||||
| * | Add DH group 15 (MODP-3072) to IKE proposal | Adrian-Ken Rueegsegger | 2012-08-06 | 1 | -0/+1 | |
| | | ||||||
| * | PEM loading soft-depends on MD5 only, as unencrypted files don't need MD5 | Martin Willi | 2012-08-03 | 1 | -4/+4 | |
| | | | | | Fixes #211. | |||||
| * | Rebuild charon after running ./configure to reflect plugin changes | Martin Willi | 2012-08-03 | 1 | -0/+2 | |
| | | ||||||
| * | Block XAuth transaction on established IKE_SAs, but allow Mode Config | Martin Willi | 2012-08-03 | 2 | -2/+1 | |
| | | ||||||
| * | Implemented recursive mutex without thread-specific counter | Tobias Brunner | 2012-08-03 | 1 | -23/+17 | |
| | | ||||||
| * | Use a single thread-specific value for our custom rwlock_t implementation | Tobias Brunner | 2012-08-03 | 1 | -50/+67 | |
| | | | | | | | The pthread implementation on Android currently only supports 64 different thread-specific values per process, which we hit easily when every rwlock_t requires one. | |||||
| * | Fix linking of addrblock plugin when building monolithic | Martin Willi | 2012-08-03 | 1 | -1/+1 | |
| | | | | | Fixes #212. | |||||
| * | Reject initial exchange messages early once IKE_SA is established | Martin Willi | 2012-08-02 | 1 | -0/+18 | |
| | | ||||||
| * | Add some more NEWS about 5.0.1 | Martin Willi | 2012-08-02 | 1 | -0/+10 | |
| | | ||||||
| * | Move MODP_CUSTOM va_arg fetching out of loop | Martin Willi | 2012-08-02 | 1 | -15/+11 | |
| | | | | | It seems problematic at least on PPC with gcc 4.3, fixes #208. | |||||
| * | updated NEWS | Andreas Steffen | 2012-07-31 | 1 | -0/+14 | |
| | | ||||||
| * | libimcv requires nonce plugin | Andreas Steffen | 2012-07-31 | 1 | -1/+1 | |
| | | ||||||
| * | Lookup IKEv1 PSK even if the peer identity is not known | Martin Willi | 2012-07-31 | 1 | -1/+1 | |
| | | ||||||
| * | update state before handling status | Andreas Steffen | 2012-07-30 | 1 | -16/+20 | |
| | | ||||||
| * | implemented support if functional sub-components | Andreas Steffen | 2012-07-30 | 19 | -285/+630 | |
| | | ||||||
| * | extended and documented ipsec attest | Andreas Steffen | 2012-07-30 | 4 | -46/+107 | |
| | | ||||||
| * | Proper fallback if capability dropping is not available | Tobias Brunner | 2012-07-27 | 4 | -2/+9 | |
| | | ||||||
| * | The use of $< in Makefiles is not portable | Tobias Brunner | 2012-07-27 | 3 | -5/+5 | |
| | | | | | | | It requires GNU make which is not what most people use on e.g. FreeBSD. Fixes #205. | |||||
| * | Include stdint.h for UINTxx_MAX defines | Tobias Brunner | 2012-07-27 | 1 | -2/+3 | |
| | | | | | Fixes #205. | |||||
| * | measure all kernel modules and optimize firefox and thunderbird measurements | Andreas Steffen | 2012-07-27 | 1 | -34/+14 | |
| | | ||||||
| * | with --relative --file do not insert absolute filenames into database | Andreas Steffen | 2012-07-27 | 1 | -3/+5 | |
| | | ||||||
| * | Don't include acquiring packet traffic selectors in IKEv1 | Martin Willi | 2012-07-26 | 1 | -0/+5 | |
| | | | | | | | | | As we only can negotiate a single TS in IKEv1, don't prepend the triggering packet TS, as we do in IKEv2. Otherwise we don't establish the TS of the configuration, but only that of the triggering packet. Fixes #207. | |||||
| * | Implement late peer config switching after XAuth authentication | Martin Willi | 2012-07-26 | 1 | -15/+80 | |
| | | | | | | | | If additional authentication constraints, such as group membership, is not fulfilled by an XAuth backend, we search for another peer configuration that fulfills all constraints, including those from phase1. | |||||
| * | Check if XAuth round complies to configured authentication round | Martin Willi | 2012-07-26 | 1 | -7/+18 | |
| | | ||||||
| * | Show which group would be required when failing in constraint check | Martin Willi | 2012-07-26 | 1 | -8/+10 | |
| | | ||||||
| * | Don't add ANY identity constraint to auth config, as XAuth rounds don't use one | Martin Willi | 2012-07-26 | 2 | -3/+15 | |
| | | ||||||
| * | Merge auth config items added from XAuth backends to IKE_SA | Martin Willi | 2012-07-26 | 1 | -0/+1 | |
| | | ||||||
| * | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 9 | -3/+21 | |
| | | ||||||
| * | IMA SHA1 file measurement is not needed any more | Andreas Steffen | 2012-07-23 | 1 | -9/+1 | |
| | | ||||||
| * | fixed typo | Andreas Steffen | 2012-07-23 | 1 | -1/+1 | |
| | | ||||||
| * | Release leaking child config after uninstalling shunt policy | Martin Willi | 2012-07-23 | 1 | -0/+1 | |
| | | ||||||
| * | moved PA-TNC message logging to level 1 | Andreas Steffen | 2012-07-23 | 1 | -2/+2 | |
| | | ||||||
| * | transport IMA file info via PTS Component Evidence Policy URI | Andreas Steffen | 2012-07-23 | 11 | -119/+156 | |
| | | ||||||
| * | ipsec attest now deletes file hashes | Andreas Steffen | 2012-07-22 | 2 | -2/+25 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |