| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| | * | Avoid unnecessary copy of packet data when removing Non-ESP marker. | Tobias Brunner | 2012-08-08 | 1 | -2/+1 | |
| | | | ||||||
| | * | Added packet_t.skip_bytes method to skip bytes at the start of a packet. | Tobias Brunner | 2012-08-08 | 2 | -3/+26 | |
| | | | ||||||
| | * | Improved how NAT-T keepalives are handled in sockets/receiver. | Tobias Brunner | 2012-08-08 | 4 | -24/+16 | |
| | | | ||||||
| | * | Let kernel interfaces decide how to enable UDP decapsulation of ESP packets. | Tobias Brunner | 2012-08-08 | 10 | -90/+133 | |
| | | | ||||||
| | * | Callback for ESP packets added to receiver. | Tobias Brunner | 2012-08-08 | 2 | -6/+86 | |
| | | | ||||||
| | * | Add Non-ESP marker in sender and not individual socket plugins. | Tobias Brunner | 2012-08-08 | 5 | -39/+23 | |
| | | | ||||||
| | * | Handle Non-ESP marker in receiver and not individual socket plugins. | Tobias Brunner | 2012-08-08 | 4 | -40/+34 | |
| | | | ||||||
| | * | Java code style fixed (analogous to C code). | Tobias Brunner | 2012-08-08 | 2 | -14/+28 | |
| | | | ||||||
| | * | Load libipsec in Android app. | Tobias Brunner | 2012-08-08 | 4 | -1/+15 | |
| | | | ||||||
| | * | Stub library for user space IPsec implementation added. | Tobias Brunner | 2012-08-08 | 8 | -0/+187 | |
| | | | ||||||
| | * | Some NDK build info updated. | Tobias Brunner | 2012-08-08 | 1 | -4/+7 | |
| | | | ||||||
| | * | Changed minimal SDK/API level to 14. | Tobias Brunner | 2012-08-08 | 3 | -4/+4 | |
| | | | ||||||
| | * | Added android.net.VpnService wrapper around charon (loaded via JNI). | Tobias Brunner | 2012-08-08 | 6 | -6/+228 | |
| | | | ||||||
| | * | Added Android shell app created with Android SDK. | Tobias Brunner | 2012-08-08 | 11 | -0/+118 | |
| | | | ||||||
| | * | Android.mk for NDK build added. | Tobias Brunner | 2012-08-08 | 4 | -0/+96 | |
| | | | ||||||
| | * | Extracted some parts from Android.mk.in which can be used for NDK builds. | Tobias Brunner | 2012-08-08 | 4 | -18/+25 | |
| | | | ||||||
| | * | Use filter instead of findstring to check for enabled plugins in Android.mk. | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | | | | | | | | | | | | findstring is not prefix-safe (i.e. android matches android-log). On the other hand filter matches words separated by whitespace and if no wildcard (%) is used the full word has to match. | |||||
| | * | Moved Android specific logger to separate plugin. | Tobias Brunner | 2012-08-08 | 12 | -36/+175 | |
| | | | | | | | | | | | | | This is mainly because the other parts of the existing android plugin can not be built in the NDK (access to keystore and system properties are not part of the stable NDK libraries). | |||||
| | * | Link android plugin against liblog in the NDK. | Tobias Brunner | 2012-08-08 | 1 | -0/+1 | |
| | | | | | | | | | Doesn't seem to hurt the build within the source tree. | |||||
| | * | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 18 | -48/+89 | |
| | | | | | | | | | configurable. | |||||
| | * | Make path to Android OpenSSL headers configurable. | Tobias Brunner | 2012-08-08 | 2 | -1/+2 | |
| | | | ||||||
| | * | Don't require STRONGSWAN_CONF to be defined. | Tobias Brunner | 2012-08-08 | 1 | -2/+9 | |
| | | | ||||||
| | * | Don't require PLUGINDIR to be defined. | Tobias Brunner | 2012-08-08 | 1 | -6/+15 | |
| | | | | | | | | | If it is not available, we just load monolithically built plugins. | |||||
| * | | Doxygen fix | Tobias Brunner | 2012-08-11 | 1 | -1/+1 | |
| | | | ||||||
| * | | Avoid problems with Doxygen by adding warn_unused_result attribute at the ↵ | Tobias Brunner | 2012-08-11 | 9 | -61/+57 | |
| | | | | | | | | | end of method signatures | |||||
| * | | Add warn_unused_result attributes to rng_(get|allocate)_bytes_not_zero | Tobias Brunner | 2012-08-11 | 1 | -5/+6 | |
| | | | | | | | | | Also fixed Doxygen comments. | |||||
| * | | Documentation fixes regarding xauth-pam/eap-gtc plugins | Tobias Brunner | 2012-08-11 | 2 | -4/+6 | |
| | | | ||||||
| * | | If _POSIX_SPIN_LOCKS is defined as -1, it is not available | Martin Willi | 2012-08-10 | 1 | -0/+4 | |
| | | | ||||||
| * | | If vstr printf functions are #defined, undef them before redefinition | Martin Willi | 2012-08-10 | 1 | -0/+31 | |
| | | | | | | | | | | | At least Mountain Lion seems to have them #defined to secure _chk variants. | |||||
| * | | Use actual daemon name to enable XAuth/PSK with aggressive mode | Martin Willi | 2012-08-10 | 1 | -2/+3 | |
| | | | ||||||
| * | | Add xauth-pam/eap-gtc NEWS | Martin Willi | 2012-08-10 | 1 | -0/+5 | |
| | | | ||||||
| * | | EAP-GTC can use any XAuth backend, including xauth-pam | Martin Willi | 2012-08-10 | 2 | -88/+45 | |
| | | | | | | | | | | | | | | | This makes EAP-GTC a generic plain password authentication method, as it is used with XAuth. Instead of verifying credentials with PAM, any backend can be configured. The default is xauth-pam, providing the same functionality as EAP-GTC in strongSwan 4.x. | |||||
| * | | Add xauth-pam, an XAuth backend verifying credentials with PAM | Martin Willi | 2012-08-10 | 7 | -1/+395 | |
| | | | ||||||
| * | | Add getspnam_r() to leak detective whitelist | Martin Willi | 2012-08-10 | 1 | -0/+1 | |
| | | | ||||||
| * | | make max_message_size parameter consistent with similar options | Andreas Steffen | 2012-08-09 | 3 | -4/+4 | |
| | | | ||||||
| * | | Check if TLS handshake received Finished before processing application data | Martin Willi | 2012-08-09 | 1 | -0/+6 | |
| |/ | ||||||
| * | Remove queued IKEv1 message before processing it | Martin Willi | 2012-08-08 | 1 | -3/+5 | |
| | | | | | | Avoids destruction or processing of a queued message in recursive process_message() call. | |||||
| * | Include src address in hash of initial message for Main Mode | Tobias Brunner | 2012-08-08 | 1 | -5/+31 | |
| | | | | | | | | If two initiators use the same SPI and also use the same SA proposal the hash for the initial message would be exactly the same. For IKEv2 and Aggressive Mode that's not a problem as these messages include random data (Ni, KEi payloads). | |||||
| * | implemented deletion of product_file database entries | Andreas Steffen | 2012-08-07 | 1 | -15/+13 | |
| | | ||||||
| * | Add DH group 15 (MODP-3072) to IKE proposal | Adrian-Ken Rueegsegger | 2012-08-06 | 1 | -0/+1 | |
| | | ||||||
| * | PEM loading soft-depends on MD5 only, as unencrypted files don't need MD5 | Martin Willi | 2012-08-03 | 1 | -4/+4 | |
| | | | | | Fixes #211. | |||||
| * | Rebuild charon after running ./configure to reflect plugin changes | Martin Willi | 2012-08-03 | 1 | -0/+2 | |
| | | ||||||
| * | Block XAuth transaction on established IKE_SAs, but allow Mode Config | Martin Willi | 2012-08-03 | 2 | -2/+1 | |
| | | ||||||
| * | Implemented recursive mutex without thread-specific counter | Tobias Brunner | 2012-08-03 | 1 | -23/+17 | |
| | | ||||||
| * | Use a single thread-specific value for our custom rwlock_t implementation | Tobias Brunner | 2012-08-03 | 1 | -50/+67 | |
| | | | | | | | The pthread implementation on Android currently only supports 64 different thread-specific values per process, which we hit easily when every rwlock_t requires one. | |||||
| * | Fix linking of addrblock plugin when building monolithic | Martin Willi | 2012-08-03 | 1 | -1/+1 | |
| | | | | | Fixes #212. | |||||
| * | Reject initial exchange messages early once IKE_SA is established | Martin Willi | 2012-08-02 | 1 | -0/+18 | |
| | | ||||||
| * | Add some more NEWS about 5.0.1 | Martin Willi | 2012-08-02 | 1 | -0/+10 | |
| | | ||||||
| * | Move MODP_CUSTOM va_arg fetching out of loop | Martin Willi | 2012-08-02 | 1 | -15/+11 | |
| | | | | | It seems problematic at least on PPC with gcc 4.3, fixes #208. | |||||
| * | updated NEWS | Andreas Steffen | 2012-07-31 | 1 | -0/+14 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |