tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	set up a new IF-MAP session	Andreas Steffen	2013-03-29	10	-0/+888
\|
*	fixed typo	Andreas Steffen	2013-03-27	1	-1/+1
\|
*	Fixed Doxygen comment in eap_radius plugin	Tobias Brunner	2013-03-27	1	-2/+3
\|
*	Fix detection and use of netinet/ip6.h on FreeBSD	Tobias Brunner	2013-03-27	2	-1/+6
\|
*	Don't set USE_ATTR_SQL when the sql plugin is enabled only	Tobias Brunner	2013-03-27	1	-1/+1
\|
*	Make some private functions in plugins static	Tobias Brunner	2013-03-27	2	-5/+5
\| \| \| \|	Fixes monolithic build.
*	Use new strongSwan HA kernel patchset keeping iptables ABI	Martin Willi	2013-03-26	4	-101/+2
\| \| \| \| \|	Allows us to install stock debian iptables without the need for patching and compiling our own.
*	Define SSHCONF from strongswan testing directory, not TESTDIR	Martin Willi	2013-03-26	5	-3/+4
\| \| \| \| \|	This fixes the use of SSHCONF in the ssh wrapper script before ./do-tests had a chance to create the required symlinks.
*	Lazy unmount guest filesystem after building image, as it still might be busy	Martin Willi	2013-03-26	1	-1/+1
\|
*	crypt_burn: Proper cleanup	Tobias Brunner	2013-03-25	1	-0/+2
\|
*	crypt_burn: Fix loop condition for regular crypters	Tobias Brunner	2013-03-25	1	-1/+1
\|
*	libpts: Cast first argument for %.*s to int	Tobias Brunner	2013-03-25	1	-1/+1
\|
*	error-notify: Close file descriptors in case clients are still connected	Tobias Brunner	2013-03-25	1	-0/+6
\|
*	libpttls: Destroy reader when handling errors during SASL	Tobias Brunner	2013-03-25	1	-0/+2
\|
*	pacman: Define gen_time out of the loop	Tobias Brunner	2013-03-25	1	-1/+2
\| \| \| \|	It gets assigned if count==3 but only used later when count >= 7.
*	ipseckey: NULL pointer dereference fixed in error case	Tobias Brunner	2013-03-25	1	-0/+1
\|
*	Recipes: Disable Anet unit tests	Reto Buerki	2013-03-25	1	-1/+1
\| \| \| \| \| \|	Some Anet unit tests may fail because of the network configuration on the testing host. These failures do not indicate a problem in Anet but are a result of unpredictable events.
*	Fixed some typos, courtesy of codespell	Tobias Brunner	2013-03-25	5	-6/+6
\|
*	Added hostapd package to base image	Andreas Steffen	2013-03-22	1	-1/+1
\|
*	Added Framed-IP-Address information to RADIUS accounting records	Andreas Steffen	2013-03-22	2	-0/+2
\|
*	enforce singular of packets	Andreas Steffen	2013-03-22	1	-4/+6
\|
*	asprintf(3) requires _GNU_SOURCE to be defined5.0.3rc1	Tobias Brunner	2013-03-22	1	-0/+2
\|
*	Added ikev2/rw-eap-framed-ip-radius scenario	Andreas Steffen	2013-03-22	19	-0/+266
\|
*	Store debug output from standalone IMC/IMVs	Andreas Steffen	2013-03-22	1	-2/+2
\|
*	Added ikev2/ip-two-pools-v4v6-db scenario	Andreas Steffen	2013-03-22	9	-0/+110
\|
*	Use proper integer types when handling TLS exchanges	Tobias Brunner	2013-03-22	1	-5/+6
\| \| \| \|	tls_t.build takes a size_t argument not a ssize_t.
*	Check return value of asprintf(3) when converting AR identity	Tobias Brunner	2013-03-22	1	-2/+4
\| \| \| \| \|	Using chunk_t.ptr as target was also not optimal as it resulted in a compiler warning.
*	version bump to 5.0.3rc1	Andreas Steffen	2013-03-22	1	-1/+1
\|
*	Switch encoding of AR Identity Value from binary to UTF-8	Andreas Steffen	2013-03-22	14	-118/+123
\|
*	Fixed TKM build	Reto Buerki	2013-03-22	7	-9/+17
\|
*	Build TNC-enabled wpa_supplicant	Andreas Steffen	2013-03-22	2	-0/+74
\|
*	activate logging before loading plugins	Andreas Steffen	2013-03-21	1	-7/+7
\|
*	Add a load-tester option to keep allocated external address until shutdown	Martin Willi	2013-03-21	2	-1/+50
\|
*	android: No need to disable CMS explicitly	Tobias Brunner	2013-03-20	2	-2/+0
\| \| \| \|	The version check introduced with 0d237763 should take care of it.
*	Allow up to 10 NAT-D payloads in IKEv1 messages	Tobias Brunner	2013-03-20	1	-1/+1
\|
*	Avoid a race condition when reloading secrets from ipsec.secrets	Tobias Brunner	2013-03-20	1	-18/+25
\| \| \| \| \| \| \|	With the previous implementation that cleared the secrets in the active credential set and then loaded the secrets, IKE SA establishment would fail (as initiator or responder) if secrets are concurrently reloaded and the required secret was not yet loaded.
*	Add a method to replace all secrets in a mem_cred_t object	Tobias Brunner	2013-03-20	2	-5/+68
\|
*	android: Build native libraries also for x86	Tobias Brunner	2013-03-20	3	-2/+5
\| \| \| \|	Requires an updated build script for Vstr.
*	android: libtnccs requires headers from libtls	Tobias Brunner	2013-03-20	1	-0/+1
\|
*	android: Fix Android.mk for ipsec script	Tobias Brunner	2013-03-20	1	-1/+2
\|
*	android: Remove/filter header files from LOCAL_SRC_FILES	Tobias Brunner	2013-03-20	9	-20/+36
\| \| \| \|	This avoids huge warnings when building the native code.
*	android: Request and install an IPv6 DNS server	Tobias Brunner	2013-03-20	2	-9/+17
\|
*	android: Also request a virtual IPv6 address and propose IPv6 TS	Tobias Brunner	2013-03-20	3	-23/+25
\| \| \| \| \|	This allows IPv6 over IPv4 but falls back nicely if we don't get a virtual IPv6 (or IPv4) address.
*	ipsec: Increased log level for message in case no outbound policy is found	Tobias Brunner	2013-03-20	1	-1/+1
\| \| \| \| \| \| \|	This might happen on Android if sockets are bound to the physical IP address but packets are still routed via TUN device. Since it seems to happen quite often (or for stuff that requires regular traffic) this hides these messages from the default log.
*	Add an option to autobalance a HA cluster automatically	Martin Willi	2013-03-19	1	-0/+59
\|
*	Check if for some reason we handle a HA segment on both nodes	Martin Willi	2013-03-19	1	-1/+15
\|
*	Acquire HA segment lock while sending heartbeat	Martin Willi	2013-03-19	1	-0/+2
\|
*	Removed unused variable 'id'	Tobias Brunner	2013-03-19	1	-2/+1
\|
*	Properly cleanup libmysql	Tobias Brunner	2013-03-19	1	-1/+1
\| \| \| \|	Seems to work correctly with recent MySQL versions.
*	Use proper address family when adding multiple addresses to SQL pool	Tobias Brunner	2013-03-19	1	-0/+15
\|