Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | kernel-pfroute: Activate TUN device before setting address | Tobias Brunner | 2013-06-21 | 1 | -1/+1 | |
| | | | | | | | | | | On FreeBSD, for some reason, we don't learn the interface is up otherwise. Even though ifconfig lists it as up at the same time. | |||||
| * | tun-device: Avoid opening /dev/tunX multiple times (e.g. on FreeBSD) | Tobias Brunner | 2013-06-21 | 1 | -2/+6 | |
| | | ||||||
| * | kernel-libipsec: Router reads packets from multiple TUN devices | Tobias Brunner | 2013-06-21 | 4 | -16/+268 | |
| | | | | | | | | These devices are collected via kernel_listener_t interface. | |||||
| * | kernel-libipsec: Use separate class to route packets between charon, ↵ | Tobias Brunner | 2013-06-21 | 4 | -74/+188 | |
| | | | | | | | | libipsec and TUN device | |||||
| * | kernel-pfroute: Raise tun event when creating/destroying TUN devices for ↵ | Tobias Brunner | 2013-06-21 | 1 | -1/+6 | |
| | | | | | | | | virtual IPs | |||||
| * | kernel: Add an event kernel interfaces can raise if they create/destroy a ↵ | Tobias Brunner | 2013-06-21 | 3 | -5/+43 | |
| | | | | | | | | TUN device | |||||
| * | printf-hook: Avoid double-free when freeing Vstr config | Tobias Brunner | 2013-06-21 | 1 | -1/+0 | |
| | | | | | | | | | | | | | | Thread-specific objects get freed when the thread value object is destroyed (wasn't the case earlier, i.e. before 2b19dd35), which may cause the second call to vstr_free_conf() to fail in an assert in Vstr (depending on how it was built). | |||||
| * | kernel-libipsec: Track policies and automatically install routes | Tobias Brunner | 2013-06-21 | 1 | -5/+455 | |
| | | | | | | | | | | | | | | | | The routes direct traffic matching the remote traffic selector to the TUN device. If the remote traffic selector includes the IKE peer a very specific route is installed to allow IKE traffic. | |||||
| * | kernel-libipsec: Handle packets between charon socket, libipsec and TUN device | Tobias Brunner | 2013-06-21 | 1 | -0/+85 | |
| | | ||||||
| * | kernel-libipsec: Create a TUN device and use it to install virtual IPs | Tobias Brunner | 2013-06-21 | 2 | -0/+40 | |
| | | ||||||
| * | kernel-libipsec: Add plugin that implements kernel_ipsec_t using libipsec | Tobias Brunner | 2013-06-21 | 7 | -0/+400 | |
| | | ||||||
| * | kernel-netlink: Routes don't require a gateway/nexthop | Tobias Brunner | 2013-06-21 | 1 | -5/+9 | |
|/ | ||||||
* | charon-cmd: Document auxiliary options | Tobias Brunner | 2013-06-21 | 1 | -0/+15 | |
| | ||||||
* | charon-cmd: Link strongswan.conf(5) and charon-cmd(8) man pages | Tobias Brunner | 2013-06-21 | 2 | -4/+33 | |
| | ||||||
* | charon-cmd: Use fixed number of character to align command descriptions | Tobias Brunner | 2013-06-21 | 1 | -16/+15 | |
| | | | | | If the command and argument is longer than that write the first line of description to the following line. | |||||
* | charon-cmd: Shortened and fixed command descriptions | Tobias Brunner | 2013-06-21 | 1 | -2/+2 | |
| | ||||||
* | charon-cmd: Simplify usage output for authentication profiles | Tobias Brunner | 2013-06-21 | 1 | -11/+3 | |
| | | | | The man page describes the min full. | |||||
* | charon-cmd: Add Aggressive Mode profiles to man page | Tobias Brunner | 2013-06-21 | 1 | -6/+10 | |
| | ||||||
* | charon-cmd: Add man page for charon-cmd(8) | Tobias Brunner | 2013-06-21 | 2 | -0/+123 | |
| | ||||||
* | charon-cmd: Add --debug argument to set the default log level | Tobias Brunner | 2013-06-21 | 3 | -2/+13 | |
| | ||||||
* | charon-cmd: Handle simple command line arguments like --help before the others | Tobias Brunner | 2013-06-21 | 1 | -3/+14 | |
| | ||||||
* | plugin-loader: Move logging of failed features to status() | Tobias Brunner | 2013-06-21 | 1 | -7/+11 | |
| | | | | | | | | | Still log an error message if critical features fail, as loaded plugins/features are not logged in that case. This way loaded plugins are printed before failed features and the relation is easier to make for users. It also allows programs to log this message on a different level. | |||||
* | plugin-loader: Add method to print loaded plugins on a given log level | Tobias Brunner | 2013-06-21 | 10 | -4/+26 | |
| | ||||||
* | plugin-loader: Collect statistics while loading features, print them in case ↵ | Tobias Brunner | 2013-06-21 | 1 | -69/+40 | |
| | | | | | | | features failed to load There is no need to explicitly search for failed features in critical plugins as this is now detected while loading the features. | |||||
* | plugin-loader: Use different log level if failed feature is in critical plugin | Tobias Brunner | 2013-06-21 | 1 | -2/+16 | |
| | ||||||
* | plugin-loader: Log message when failing to load plugin | Tobias Brunner | 2013-06-21 | 1 | -0/+8 | |
| | ||||||
* | plugin-loader: Reduce verbosity while loading plugins | Tobias Brunner | 2013-06-21 | 1 | -4/+4 | |
| | ||||||
* | Fix crash if the initiator has no suitable proposal available | Tobias Brunner | 2013-06-21 | 1 | -0/+5 | |
| | | | | Could be triggered with a typo in the ike or esp options when ! is used. | |||||
* | Merge branch 'unit-tests-ecdsa' | Martin Willi | 2013-06-21 | 17 | -160/+866 | |
|\ | | | | | | | | | | | Adds support for testing plugin functionality to test-runner. Introduces some good/bad tests for ECDSA/RSA which would have caught those RSA/ECDSA signature vulnerabilities. | |||||
| * | leak-detective: (re-)whitelist some OpenSSL functions | Martin Willi | 2013-06-21 | 1 | -0/+5 | |
| | | | | | | | | | | | | | | Some static allocations in plugins won't get freed, because in the test case process the plugins are not destroyed. If a plugin would clean up allocations done while just using the plugin, these show up as leak in the child process, letting tests fail. | |||||
| * | unit-tests: load plugins in test-runner from build directory | Martin Willi | 2013-06-21 | 2 | -1/+30 | |
| | | ||||||
| * | unit-tests: link test-runner against -lpthread | Martin Willi | 2013-06-21 | 1 | -0/+1 | |
| | | ||||||
| * | unit-tester: remove obsolete rsa_gen test, now covered in unit-tests | Martin Willi | 2013-06-21 | 3 | -122/+0 | |
| | | ||||||
| * | unit-tests: add RSA test cases, very similar to ECDSA | Martin Willi | 2013-06-21 | 4 | -1/+400 | |
| | | ||||||
| * | unit-tests: test with /dev/urandom if random plugin is in use | Martin Willi | 2013-06-21 | 1 | -0/+6 | |
| | | ||||||
| * | unit-tests: test supported ECDSA schemes only | Martin Willi | 2013-06-21 | 1 | -0/+14 | |
| | | ||||||
| * | Move test-runners has_feature() function to plugin loader | Martin Willi | 2013-06-21 | 3 | -32/+40 | |
| | | ||||||
| * | unit-tests: enforce CET/CEST timezone to properly test non-UTC time formatting | Martin Willi | 2013-06-21 | 1 | -0/+6 | |
| | | ||||||
| * | unit-tests: don't use ck_assert() to test a cleared chunk, as it allocates data | Martin Willi | 2013-06-21 | 1 | -3/+10 | |
| | | | | | | | | The new allocation might be in the freed area, affecting the test result. | |||||
| * | unit-tests: define 64-bit constats with ULL, fixing compiler warning on 32-bit | Martin Willi | 2013-06-21 | 1 | -2/+2 | |
| | | ||||||
| * | Limit cleanup of .gc{no,da} files to src and scripts subfolders | Martin Willi | 2013-06-21 | 1 | -2/+2 | |
| | | | | | | | | | | Other folders in the build tree might not be related to the strongSwan tree, or are not even accessible. | |||||
| * | unit-tests: test some zeroed ECDSA signatures that never should succeed | Martin Willi | 2013-06-21 | 1 | -0/+63 | |
| | | ||||||
| * | unit-tests: perform signing/validation with keys ECDSA keys generated or loaded | Martin Willi | 2013-06-21 | 1 | -0/+47 | |
| | | ||||||
| * | unit-tests: add an ECDSA test case loading keys | Martin Willi | 2013-06-21 | 1 | -0/+61 | |
| | | ||||||
| * | unit-tests: perform a first ECDSA test case if ECDSA is supported | Martin Willi | 2013-06-21 | 4 | -1/+58 | |
| | | ||||||
| * | unit-tests: add a helper function checking if a plugin feature is available | Martin Willi | 2013-06-21 | 1 | -0/+32 | |
| | | ||||||
| * | unit-tests: add a test case checking if all test vectors have been passed | Martin Willi | 2013-06-21 | 4 | -1/+44 | |
| | | ||||||
| * | crypto-factory: count the number of test vector failures during registration | Martin Willi | 2013-06-21 | 2 | -30/+73 | |
| | | ||||||
| * | unit-tests: load all libstrongswan plugins in test-runner | Martin Willi | 2013-06-21 | 2 | -0/+7 | |
|/ | ||||||
* | stroke: Add statusall-nb as alias for statusallnb | Tobias Brunner | 2013-06-21 | 2 | -1/+2 | |
| |