Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | skip enforcement if a recent measurement was successful | Andreas Steffen | 2013-07-08 | 1 | -15/+56 | |
| | ||||||
* | libtncif: Android.mk updated | Tobias Brunner | 2013-07-05 | 1 | -1/+2 | |
| | ||||||
* | android: Disable listening on IPv6 | Tobias Brunner | 2013-07-05 | 1 | -0/+4 | |
| | | | | | As we have to use UDP encapsulation and the Linux kernel currently does not support that this avoids issues with dual-stack gateways. | |||||
* | socket-default: Add options to disable address families | Tobias Brunner | 2013-07-05 | 2 | -0/+31 | |
| | ||||||
* | ike: Resolve hosts only for address families currently supported | Tobias Brunner | 2013-07-05 | 1 | -3/+16 | |
| | ||||||
* | net: Socket implementations report the address families they support | Tobias Brunner | 2013-07-05 | 5 | -11/+91 | |
| | ||||||
* | Added config-3.10 | Andreas Steffen | 2013-07-04 | 1 | -0/+1952 | |
| | ||||||
* | Version bump to 5.1.0dr2 | Andreas Steffen | 2013-07-04 | 1 | -1/+1 | |
| | ||||||
* | Always return a result string for a processed workitem | Andreas Steffen | 2013-07-04 | 3 | -12/+25 | |
| | ||||||
* | Make Block stronger than Isolate in default policy | Andreas Steffen | 2013-07-04 | 1 | -2/+2 | |
| | ||||||
* | Register packages under Debian 7.0 x86_64 | Andreas Steffen | 2013-07-04 | 5 | -39/+778 | |
| | ||||||
* | openssl: RAND_pseudo_bytes() returns 0 if bytes are not cryptographically strong | Martin Willi | 2013-07-04 | 1 | -9/+6 | |
| | | | | For our purposes with RNG_WEAK this is fine, so accept a zero return value. | |||||
* | Ping from dave before shutting down tcpdump in libipsec/rw-suite-b test case5.1.0dr1 | Tobias Brunner | 2013-07-01 | 1 | -1/+1 | |
| | ||||||
* | libipsec: Properly handle expiration if no lifetime is set | Tobias Brunner | 2013-07-01 | 1 | -0/+5 | |
| | ||||||
* | charon-cmd: Ignore generated man page | Tobias Brunner | 2013-07-01 | 1 | -0/+1 | |
| | ||||||
* | Enable libipsec and charon-cmd in strongSwan recipe | Andreas Steffen | 2013-07-01 | 1 | -0/+3 | |
| | ||||||
* | Fixed libipsec/rw-suite-b scenario | Andreas Steffen | 2013-07-01 | 5 | -107/+1 | |
| | ||||||
* | eap-radius: fix add_attribute/framed_ip method signatures | Martin Willi | 2013-07-01 | 1 | -2/+2 | |
| | ||||||
* | Added libipsec/rw-suite-b scenario | Andreas Steffen | 2013-07-01 | 32 | -0/+2693 | |
| | ||||||
* | Fixed index.txt for strongSwan EC CA | Andreas Steffen | 2013-07-01 | 1 | -5/+5 | |
| | ||||||
* | Don't backup old package lists | Andreas Steffen | 2013-07-01 | 1 | -6/+3 | |
| | ||||||
* | Reuse reqid when restarting CHILD_SAs for dpd|closeaction=restart | Tobias Brunner | 2013-07-01 | 2 | -3/+4 | |
| | ||||||
* | Reuse reqid for trap policies installed for dpd|closeaction=hold | Tobias Brunner | 2013-07-01 | 7 | -8/+11 | |
| | ||||||
* | Added libipsec/net2net-cert scenario | Andreas Steffen | 2013-06-29 | 11 | -0/+1512 | |
| | ||||||
* | Add type=transport to tkm/host2host-* connections | Reto Buerki | 2013-06-29 | 2 | -0/+2 | |
| | | | | | Explicitly specify transport mode in connection configuration of the responding host (sun). | |||||
* | 5.1.0 changes for test cases | Andreas Steffen | 2013-06-29 | 182 | -344/+5019 | |
| | ||||||
* | processor: Simplified the main loop | Tobias Brunner | 2013-06-28 | 1 | -109/+127 | |
| | ||||||
* | processor: Don't hold the lock while destroying jobs | Tobias Brunner | 2013-06-28 | 1 | -38/+66 | |
| | | | | | | If a lock is held when queue_job() is called and the same lock is required during the destruction of a job, holding the internal lock in the processor while calling destroy() could result in a deadlock. | |||||
* | dhcp: Use chunk_hash_static() to calculate ID-based MAC addresses | Tobias Brunner | 2013-06-28 | 3 | -5/+5 | |
| | ||||||
* | integrity-checker: Use chunk_hash_static() to calculate checksums | Tobias Brunner | 2013-06-28 | 1 | -7/+2 | |
| | ||||||
* | chunk: Add predictable hash function | Tobias Brunner | 2013-06-28 | 3 | -2/+86 | |
| | | | | | Since chunk_hash() is randomized its output is not predictable, that is, it is only within the same process. | |||||
* | stroke: Changed how proto/port are specified in left|rightsubnet | Tobias Brunner | 2013-06-28 | 2 | -7/+15 | |
| | | | | Using a colon as separator conflicts with IPv6 addresses. | |||||
* | plugin-loader: Removed unused path argument of load() method | Tobias Brunner | 2013-06-28 | 25 | -37/+33 | |
| | | | | | Multiple additional search paths can be added with the add_path() method. | |||||
* | tnc-pdp: Initialize TNC-PDP in plugin callback with proper dependencies | Tobias Brunner | 2013-06-27 | 1 | -6/+25 | |
| | ||||||
* | Attestation IMV requests platform info if not received | Andreas Steffen | 2013-06-27 | 2 | -3/+32 | |
| | ||||||
* | integrity-checker: Fix checksum calculation after randomizing chunk_hash() | Tobias Brunner | 2013-06-27 | 1 | -2/+7 | |
| | ||||||
* | unit-tests: Print loaded plugins | Tobias Brunner | 2013-06-27 | 1 | -0/+1 | |
| | ||||||
* | unit-tests: RSA key generation might take longer than 4 seconds | Tobias Brunner | 2013-06-27 | 1 | -0/+1 | |
| | | | | | Check uses a default timeout of 4 seconds for each test case, generating keys of 6 different key sizes might take longer than that. | |||||
* | tests: Properly load plugins from build directory | Tobias Brunner | 2013-06-27 | 1 | -7/+2 | |
| | | | | | | Calling load() incrementally does not really work as dependencies wouldn't be resolved properly if a required feature was to be provided by a plugin that is loaded later with a separate call to load(). | |||||
* | plugin-loader: Method added to provide additional search paths for plugins | Tobias Brunner | 2013-06-27 | 2 | -10/+66 | |
| | ||||||
* | Support blacklist field in PTS database | Andreas Steffen | 2013-06-26 | 4 | -31/+49 | |
| | ||||||
* | Updated PTS demo database | Andreas Steffen | 2013-06-26 | 2 | -1668/+54 | |
| | ||||||
* | Device can be member of multiple groups | Andreas Steffen | 2013-06-25 | 1 | -74/+87 | |
| | ||||||
* | Adding NEWS for 5.1.0 | Tobias Brunner | 2013-06-25 | 1 | -3/+38 | |
| | ||||||
* | Merge branch 'check-caps' | Tobias Brunner | 2013-06-25 | 36 | -71/+326 | |
|\ | | | | | | | | | Plugins may now ensure the process has all the required capabilities. Some minor changes to UID/GID handling are also included. | |||||
| * | capabilities: Return effective UID/GID if user did not configure anything | Tobias Brunner | 2013-06-25 | 1 | -2/+2 | |
| | | ||||||
| * | capabilities: Make the user and group charon(-nm) changes to configurable | Tobias Brunner | 2013-06-25 | 3 | -12/+42 | |
| | | ||||||
| * | capabilities: Report effective UID/GID after dropping capabilities | Tobias Brunner | 2013-06-25 | 1 | -1/+1 | |
| | | ||||||
| * | capabilities: CAP_CHOWN might be required by many plugins opening UNIX sockets | Tobias Brunner | 2013-06-25 | 8 | -0/+48 | |
| | | | | | | | | | | But as the sockets will be created with the user/group of the running process this might not be required as no change may be needed. | |||||
| * | capabilities: Handle CAP_CHOWN specially as it might not be required | Tobias Brunner | 2013-06-25 | 2 | -2/+63 | |
| | |