aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* skip enforcement if a recent measurement was successfulAndreas Steffen2013-07-081-15/+56
|
* libtncif: Android.mk updatedTobias Brunner2013-07-051-1/+2
|
* android: Disable listening on IPv6Tobias Brunner2013-07-051-0/+4
| | | | | As we have to use UDP encapsulation and the Linux kernel currently does not support that this avoids issues with dual-stack gateways.
* socket-default: Add options to disable address familiesTobias Brunner2013-07-052-0/+31
|
* ike: Resolve hosts only for address families currently supportedTobias Brunner2013-07-051-3/+16
|
* net: Socket implementations report the address families they supportTobias Brunner2013-07-055-11/+91
|
* Added config-3.10Andreas Steffen2013-07-041-0/+1952
|
* Version bump to 5.1.0dr2Andreas Steffen2013-07-041-1/+1
|
* Always return a result string for a processed workitemAndreas Steffen2013-07-043-12/+25
|
* Make Block stronger than Isolate in default policyAndreas Steffen2013-07-041-2/+2
|
* Register packages under Debian 7.0 x86_64Andreas Steffen2013-07-045-39/+778
|
* openssl: RAND_pseudo_bytes() returns 0 if bytes are not cryptographically strongMartin Willi2013-07-041-9/+6
| | | | For our purposes with RNG_WEAK this is fine, so accept a zero return value.
* Ping from dave before shutting down tcpdump in libipsec/rw-suite-b test case5.1.0dr1Tobias Brunner2013-07-011-1/+1
|
* libipsec: Properly handle expiration if no lifetime is setTobias Brunner2013-07-011-0/+5
|
* charon-cmd: Ignore generated man pageTobias Brunner2013-07-011-0/+1
|
* Enable libipsec and charon-cmd in strongSwan recipeAndreas Steffen2013-07-011-0/+3
|
* Fixed libipsec/rw-suite-b scenarioAndreas Steffen2013-07-015-107/+1
|
* eap-radius: fix add_attribute/framed_ip method signaturesMartin Willi2013-07-011-2/+2
|
* Added libipsec/rw-suite-b scenarioAndreas Steffen2013-07-0132-0/+2693
|
* Fixed index.txt for strongSwan EC CAAndreas Steffen2013-07-011-5/+5
|
* Don't backup old package listsAndreas Steffen2013-07-011-6/+3
|
* Reuse reqid when restarting CHILD_SAs for dpd|closeaction=restartTobias Brunner2013-07-012-3/+4
|
* Reuse reqid for trap policies installed for dpd|closeaction=holdTobias Brunner2013-07-017-8/+11
|
* Added libipsec/net2net-cert scenarioAndreas Steffen2013-06-2911-0/+1512
|
* Add type=transport to tkm/host2host-* connectionsReto Buerki2013-06-292-0/+2
| | | | | Explicitly specify transport mode in connection configuration of the responding host (sun).
* 5.1.0 changes for test casesAndreas Steffen2013-06-29182-344/+5019
|
* processor: Simplified the main loopTobias Brunner2013-06-281-109/+127
|
* processor: Don't hold the lock while destroying jobsTobias Brunner2013-06-281-38/+66
| | | | | | If a lock is held when queue_job() is called and the same lock is required during the destruction of a job, holding the internal lock in the processor while calling destroy() could result in a deadlock.
* dhcp: Use chunk_hash_static() to calculate ID-based MAC addressesTobias Brunner2013-06-283-5/+5
|
* integrity-checker: Use chunk_hash_static() to calculate checksumsTobias Brunner2013-06-281-7/+2
|
* chunk: Add predictable hash functionTobias Brunner2013-06-283-2/+86
| | | | | Since chunk_hash() is randomized its output is not predictable, that is, it is only within the same process.
* stroke: Changed how proto/port are specified in left|rightsubnetTobias Brunner2013-06-282-7/+15
| | | | Using a colon as separator conflicts with IPv6 addresses.
* plugin-loader: Removed unused path argument of load() methodTobias Brunner2013-06-2825-37/+33
| | | | | Multiple additional search paths can be added with the add_path() method.
* tnc-pdp: Initialize TNC-PDP in plugin callback with proper dependenciesTobias Brunner2013-06-271-6/+25
|
* Attestation IMV requests platform info if not receivedAndreas Steffen2013-06-272-3/+32
|
* integrity-checker: Fix checksum calculation after randomizing chunk_hash()Tobias Brunner2013-06-271-2/+7
|
* unit-tests: Print loaded pluginsTobias Brunner2013-06-271-0/+1
|
* unit-tests: RSA key generation might take longer than 4 secondsTobias Brunner2013-06-271-0/+1
| | | | | Check uses a default timeout of 4 seconds for each test case, generating keys of 6 different key sizes might take longer than that.
* tests: Properly load plugins from build directoryTobias Brunner2013-06-271-7/+2
| | | | | | Calling load() incrementally does not really work as dependencies wouldn't be resolved properly if a required feature was to be provided by a plugin that is loaded later with a separate call to load().
* plugin-loader: Method added to provide additional search paths for pluginsTobias Brunner2013-06-272-10/+66
|
* Support blacklist field in PTS databaseAndreas Steffen2013-06-264-31/+49
|
* Updated PTS demo databaseAndreas Steffen2013-06-262-1668/+54
|
* Device can be member of multiple groupsAndreas Steffen2013-06-251-74/+87
|
* Adding NEWS for 5.1.0Tobias Brunner2013-06-251-3/+38
|
* Merge branch 'check-caps'Tobias Brunner2013-06-2536-71/+326
|\ | | | | | | | | Plugins may now ensure the process has all the required capabilities. Some minor changes to UID/GID handling are also included.
| * capabilities: Return effective UID/GID if user did not configure anythingTobias Brunner2013-06-251-2/+2
| |
| * capabilities: Make the user and group charon(-nm) changes to configurableTobias Brunner2013-06-253-12/+42
| |
| * capabilities: Report effective UID/GID after dropping capabilitiesTobias Brunner2013-06-251-1/+1
| |
| * capabilities: CAP_CHOWN might be required by many plugins opening UNIX socketsTobias Brunner2013-06-258-0/+48
| | | | | | | | | | But as the sockets will be created with the user/group of the running process this might not be required as no change may be needed.
| * capabilities: Handle CAP_CHOWN specially as it might not be requiredTobias Brunner2013-06-252-2/+63
| |