| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | android: Leak the private key reference on Jelly Bean to avoid a bug in the ↵ | Tobias Brunner | 2012-09-24 | 1 | -1/+10 | |
| | | | | | | | | | | framework A bug in the framework on Android Jelly Bean causes a SIGSEGV when the private key object returned from KeyChain.getPrivateKey is garbage collected. Leaking the global reference to that object prevents the garbage collection and thereby the crash. | |||||
| * | android: Added a global variable to check the current SDK version | Tobias Brunner | 2012-09-24 | 2 | -1/+26 | |
| | | ||||||
| * | Don't check interface of inbound message if interfaces are not filtered | Tobias Brunner | 2012-09-24 | 3 | -7/+19 | |
| | | | | | | We don't have a proper kernel-net interface on Android yet, so the check for a usable interface does not work there. | |||||
| * | android: Load the private key and certificates separately in android_creds_t | Tobias Brunner | 2012-09-24 | 3 | -43/+36 | |
| | | ||||||
| * | android: Added a method to get the user's private key via JNI | Tobias Brunner | 2012-09-24 | 3 | -1/+61 | |
| | | ||||||
| * | android: Added a JNI backed private key implementation | Tobias Brunner | 2012-09-24 | 3 | -0/+324 | |
| | | | | | | This is required because private keys are provided by an OpenSSL engine in Jelly Bean, which makes them inaccessible directly via getEncoding. | |||||
| * | Documentation about some time values clarified | Tobias Brunner | 2012-09-24 | 2 | -3/+3 | |
| | | ||||||
| * | removed ikev2/dynamic-responder scenario | Andreas Steffen | 2012-09-22 | 14 | -214/+0 | |
| | | ||||||
| * | Make sure the if_name member of cached route entries is initialized to NULL | Tobias Brunner | 2012-09-22 | 2 | -4/+10 | |
| | | ||||||
| * | do not enable integrity and crypto tests in ikev1/rw-cert-unity scenario | Andreas Steffen | 2012-09-21 | 2 | -8/+0 | |
| | | ||||||
| * | NEWS about kernel interface changes | Tobias Brunner | 2012-09-21 | 1 | -0/+11 | |
| | | ||||||
| * | Properly handle thread cancelation in rwlock_condvar_t | Tobias Brunner | 2012-09-21 | 1 | -15/+20 | |
| | | ||||||
| * | Use an rwlock in kernel-pfroute too | Tobias Brunner | 2012-09-21 | 1 | -13/+14 | |
| | | ||||||
| * | Use rwlock and rwlock_condvar to increase concurrency in kernel-netlink plugin | Tobias Brunner | 2012-09-21 | 1 | -58/+55 | |
| | | ||||||
| * | Use a separate mutex for cached routes in kernel-netlink plugin | Tobias Brunner | 2012-09-21 | 1 | -8/+15 | |
| | | ||||||
| * | Added a condvar implementation that works with rwlock_t | Tobias Brunner | 2012-09-21 | 3 | -4/+220 | |
| | | ||||||
| * | Use a lock to safely check and update the time for the next roam event | Tobias Brunner | 2012-09-21 | 1 | -16/+28 | |
| | | ||||||
| * | Added an option to configure the interface on which virtual IP addresses are ↵ | Tobias Brunner | 2012-09-21 | 2 | -19/+33 | |
| | | | | | installed | |||||
| * | Changed how kernel-netlink handles virtual IP addresses | Tobias Brunner | 2012-09-21 | 1 | -248/+308 | |
| | | | | | Also tried to avoid the use of enumerators. | |||||
| * | Made IP address enumeration more flexible | Tobias Brunner | 2012-09-21 | 10 | -53/+50 | |
| | | | | | Also added an option to enumerate addresses on ignored interfaces. | |||||
| * | Avoid calculating the hash if hashtable is empty | Tobias Brunner | 2012-09-21 | 1 | -0/+5 | |
| | | ||||||
| * | Use a hashtable to quickly check for usable IP addresses/interfaces | Tobias Brunner | 2012-09-21 | 2 | -85/+284 | |
| | | ||||||
| * | Drop packets received on ignored interfaces | Tobias Brunner | 2012-09-21 | 1 | -2/+12 | |
| | | ||||||
| * | Filter ignored interfaces in kernel interfaces (for events, address ↵ | Tobias Brunner | 2012-09-21 | 4 | -61/+134 | |
| | | | | | enumeration, etc.) | |||||
| * | %any is never on a local interface | Tobias Brunner | 2012-09-21 | 2 | -0/+10 | |
| | | ||||||
| * | Avoid memset in is_anyaddr() | Tobias Brunner | 2012-09-21 | 1 | -6/+2 | |
| | | ||||||
| * | Make it easy to check if an address is locally usable via changed ↵ | Tobias Brunner | 2012-09-21 | 10 | -65/+62 | |
| | | | | | get_interface() method | |||||
| * | Don't ignore loopback devices and allow addresses on them being enumerated | Tobias Brunner | 2012-09-21 | 10 | -31/+35 | |
| | | ||||||
| * | Added options and a lookup function that will allow filtering of network ↵ | Tobias Brunner | 2012-09-21 | 4 | -4/+81 | |
| | | | | | interfaces | |||||
| * | Make streq() and strcaseeq() static inline functions so they can be used as ↵ | Tobias Brunner | 2012-09-21 | 2 | -26/+32 | |
| | | | | | callbacks | |||||
| * | Use source address in get_nexthop() call | Tobias Brunner | 2012-09-21 | 8 | -12/+19 | |
| | | | | | | Otherwise the nexthop returned might belong to a different route than the one actually used with the current source address. | |||||
| * | Source address lookup refactored | Tobias Brunner | 2012-09-21 | 1 | -146/+221 | |
| | | | | | | | | Routes matching the destination are now first parsed and sorted by network prefix length. This list is then used to search for the best route with a matching preferred source address (if one is specified). This makes sure we really check all routes for that address. | |||||
| * | Check routes with equal prefix if preferred source is specified | Tobias Brunner | 2012-09-21 | 1 | -2/+4 | |
| | | ||||||
| * | Try to find preferred source on interface if returned source does not match | Tobias Brunner | 2012-09-21 | 1 | -10/+29 | |
| | | ||||||
| * | Try to keep the given source address when looking up routes | Tobias Brunner | 2012-09-21 | 1 | -6/+32 | |
| | | | | | | | This allows to pin the local end of an IKE_SA to an address that is not the physical address of an interface. Without this patch the local address would change to the physical address when roam events occur. | |||||
| * | Make sure we propose a dynamic TS if we don't have hosts to derive a TS from | Tobias Brunner | 2012-09-21 | 1 | -10/+8 | |
| | | | | | 7ee37114 removed this behavior. | |||||
| * | Move rw-eap-dynamic scenario to its proper location | Tobias Brunner | 2012-09-21 | 14 | -0/+0 | |
| | | ||||||
| * | In mem_pool, check for an existing ID entry before creating a new one | Martin Willi | 2012-09-20 | 1 | -7/+10 | |
| | | ||||||
| * | Merge branch 'unity' | Martin Willi | 2012-09-18 | 25 | -7/+1234 | |
| |\ | | | | | | | Add Cisco Unity extension support implemented in a dedicated plugin. | |||||
| | * | Add a simple test case for the unity plugin, featuring both includes and ↵ | Martin Willi | 2012-09-18 | 9 | -0/+113 | |
| | | | | | | | | | excludes | |||||
| | * | Build unity plugin in strongSwan test suite | Martin Willi | 2012-09-18 | 2 | -0/+6 | |
| | | | ||||||
| | * | Add unity plugin NEWS | Martin Willi | 2012-09-18 | 1 | -0/+7 | |
| | | | ||||||
| | * | Update ipsec.conf.5, leftsubnet can handle multiple subnets in IKEv1 with Unity | Martin Willi | 2012-09-18 | 1 | -2/+3 | |
| | | | ||||||
| | * | As Unity responder, don't change the proposed TS at all, racoon doesn't like ↵ | Martin Willi | 2012-09-18 | 2 | -7/+8 | |
| | | | | | | | | | that | |||||
| | * | Don't complain about multiple TS in IKEv1, as it supported with Unity | Martin Willi | 2012-09-18 | 1 | -5/+0 | |
| | | | ||||||
| | * | As initiator, narrow received Unity attributes to configured TS | Martin Willi | 2012-09-18 | 1 | -4/+11 | |
| | | | ||||||
| | * | When using Unity, bump up remote TS as initiator to 0.0.0.0/0, too | Martin Willi | 2012-09-18 | 1 | -5/+8 | |
| | | | ||||||
| | * | Enable Cisco Unity only if Unity vendor id received | Martin Willi | 2012-09-18 | 3 | -2/+5 | |
| | | | ||||||
| | * | Exchange 0.0.0.0/0 traffic selectors with Unity, narrowing after exchange | Martin Willi | 2012-09-18 | 1 | -22/+87 | |
| | | | ||||||
| | * | Add a Unity attribute provider that adds Split-Includes for TS | Martin Willi | 2012-09-18 | 4 | -1/+232 | |
| | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |