Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Optimize ntru_poly constructors some more5.1.2 | Andreas Steffen | 2014-02-27 | 1 | -26/+24 |
| | |||||
* | Version bump to 5.1.2 | Andreas Steffen | 2014-02-27 | 1 | -1/+1 |
| | |||||
* | Optimized initialisation of indices | Andreas Steffen | 2014-02-27 | 1 | -50/+39 |
| | |||||
* | Added get_array() method to ntru_poly_t class | Andreas Steffen | 2014-02-27 | 6 | -157/+90 |
| | |||||
* | Defined ntru_poly_create_from_seed() and ntru_poly_create_from_data() ↵ | Andreas Steffen | 2014-02-27 | 6 | -138/+220 |
| | | | | constructors and built some unit tests for the latter) | ||||
* | Optimized use of temporary arrays in polynomial multiplication | Andreas Steffen | 2014-02-27 | 2 | -24/+24 |
| | |||||
* | Implement ring multiplication method | Andreas Steffen | 2014-02-27 | 4 | -113/+245 |
| | |||||
* | conf: Fix out-of-tree build from distribution | Tobias Brunner | 2014-02-27 | 1 | -6/+3 |
| | | | | | | It worked from the repository, where strongswan.conf.5.main is generated in the build dir, but not from the distribution where it is located in the source dir, so explicitly create it in the source dir. | ||||
* | utils: Add memrchr(3) replacement for platforms that don't support it | Tobias Brunner | 2014-02-26 | 4 | -2/+82 |
| | | | | For instance, on Mac OS X memrchr(3) is not provided by the C library. | ||||
* | Merge branch 'dirname' | Tobias Brunner | 2014-02-24 | 15 | -121/+307 |
|\ | | | | | | | | | Fixes the incorrect usage of dirname(3) in settings_t and stroke_cred_t, and adds thread-safe variants of dirname(3) and basename(3). | ||||
| * | libpts: Use path_base|dirname() | Tobias Brunner | 2014-02-24 | 4 | -14/+18 |
| | | |||||
| * | conftest: Use path_dirname() | Tobias Brunner | 2014-02-24 | 1 | -1/+1 |
| | | |||||
| * | stroke: Use thread-safe dirname(3) | Tobias Brunner | 2014-02-24 | 1 | -6/+4 |
| | | |||||
| * | settings: Use thread-safe dirname(3) | Tobias Brunner | 2014-02-24 | 1 | -5/+3 |
| | | |||||
| * | utils: Add thread-safe variants of dirname(3) and basename(3) | Tobias Brunner | 2014-02-24 | 3 | -4/+144 |
| | | |||||
| * | utils: Move thread-safe strerror replacement to a separate file | Tobias Brunner | 2014-02-24 | 7 | -99/+145 |
| | | | | | | | | | | For some utils _GNU_SOURCE might be needed but that conflicts with the signature of strerror_r(3). | ||||
| * | stroke: Use dirname(3) correctly | Tobias Brunner | 2014-02-24 | 1 | -5/+5 |
| | | |||||
| * | settings: Use dirname(3) correctly | Tobias Brunner | 2014-02-24 | 1 | -4/+4 |
|/ | | | | | | | | dirname(3) may return a pointer to a statically allocated buffer. So freeing the returned value can result to undefined behavior. This was noticed on FreeBSD where it caused very strange crashes. It is also not thread-safe, which will be addressed later. | ||||
* | Use logical AND function | Andreas Steffen | 2014-02-23 | 1 | -1/+1 |
| | |||||
* | pki: Make cmds array static, ensuring that it is zero-initialized | Martin Willi | 2014-02-20 | 1 | -2/+1 |
| | | | | | As pki --help relies on a zero-terminated array, make the actually non-public cmds array static to ensure initialization. | ||||
* | index limit can be easily computed | Andreas Steffen | 2014-02-19 | 6 | -54/+28 |
| | |||||
* | uclibc only defines strndup(3) if _GNU_SOURCE is defined | Tobias Brunner | 2014-02-19 | 13 | -25/+43 |
| | | | | References #516. | ||||
* | sshkey: uclibc only defines fmemopen(3) if _GNU_SOURCE is defined | Tobias Brunner | 2014-02-19 | 1 | -0/+1 |
| | | | | Fixes #516. | ||||
* | coverage: Apparently not all shells can expand {src,scripts} | Tobias Brunner | 2014-02-19 | 1 | -2/+2 |
| | | | | One example is ash. | ||||
* | pki: Fix minor resource leak on failure to read the private key in --req5.1.2rc2 | Tobias Brunner | 2014-02-18 | 1 | -1/+2 |
| | |||||
* | stroke: Use proper modifiers to print size_t arguments | Tobias Brunner | 2014-02-18 | 1 | -1/+1 |
| | |||||
* | Created ntru_poly class for sparse trinary polynomials | Andreas Steffen | 2014-02-18 | 9 | -440/+575 |
| | |||||
* | android: Don't limit number to packets during EAP-TTLS | Tobias Brunner | 2014-02-18 | 1 | -0/+2 |
| | |||||
* | lookip: Properly return from disconnect callback job | Tobias Brunner | 2014-02-18 | 1 | -1/+3 |
| | | | | References #518. | ||||
* | Doxygen: Sort group names alphabetically | Tobias Brunner | 2014-02-18 | 1 | -1/+1 |
| | |||||
* | Fixed some typos | Tobias Brunner | 2014-02-18 | 4 | -7/+7 |
| | |||||
* | plugin-loader: Escape <ns> in comment as Doxygen sees this as XML tag | Tobias Brunner | 2014-02-18 | 1 | -2/+2 |
| | |||||
* | unit-tests: Ignore tests not test_runner | Tobias Brunner | 2014-02-18 | 1 | -1/+1 |
| | |||||
* | conf: Ignore generated strongswan.conf.5.main | Tobias Brunner | 2014-02-18 | 1 | -1/+2 |
| | |||||
* | Added ikev2/lookip scenario | Andreas Steffen | 2014-02-17 | 12 | -1/+151 |
| | |||||
* | Version bump to 5.1.2rc2 | Andreas Steffen | 2014-02-17 | 1 | -1/+1 |
| | |||||
* | lookip: Disconnect asynchronously to avoid dead-locking watcher unregistration | Martin Willi | 2014-02-17 | 2 | -6/+32 |
| | | | | | | | | | While it really would be desirable to allow stream destruction during on_read() callbacks, this does not work anymore since e49b2998. Until we have a proper solution for this issue, use asynchronous disconnects for the only user doing so. Fixes #518. | ||||
* | Fixed a minor vulnerability in which a malformed ASN.1 length field could ↵5.1.2rc1 | Andreas Steffen | 2014-02-14 | 1 | -0/+1 |
| | | | | cause a crash of the charon daemon if the verbose debug level 3 (raw hex dump) for the asn subsystem is enabled. | ||||
* | conf: Fix installation on FreeBSD | Tobias Brunner | 2014-02-13 | 1 | -2/+2 |
| | | | | Apparently, the -t option for install is not portable. | ||||
* | pacman.sh creates /etc/pts/dists directory if it doesn't exist yet | Andreas Steffen | 2014-02-13 | 1 | -0/+1 |
| | |||||
* | NEWS: Add strongswan.conf changes and IPComp fixes | Tobias Brunner | 2014-02-13 | 1 | -0/+24 |
| | |||||
* | conf: The use of $^ is not portable | Tobias Brunner | 2014-02-13 | 1 | -3/+6 |
| | | | | | Generating strongswan.conf.5.main in a subshell gets the file properly written to the builddir in out-of-tree builds. | ||||
* | printf-hook-glibc: printf.h on FreeBSD 10 does not include stdargs.h | Tobias Brunner | 2014-02-13 | 1 | -1/+1 |
| | |||||
* | array: Fix compilation on FreeBSD | Tobias Brunner | 2014-02-13 | 1 | -2/+2 |
| | |||||
* | Merge branch 'modular-load' | Tobias Brunner | 2014-02-12 | 270 | -2427/+4724 |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Introduces a new configuration file layout. strongswan.conf is now only very simple and mainly includes the config snippets from the strongswan.d and strongswan.d/charon directories (the latter containing snippets for individual plugins). Config snippets with commented defaults are generated for all currently defined settings and are installed if they don't exist yet and the respective plugin/component is enabled. Similarly, the strongswan.conf(5) man page, which documents all these settings, is automatically generated from the same source. The config snippets are also installed in $prefix/share/strongswan so existing files can be compared to the most current defaults. As an alternative to the non-extensible charon.load option, the plugins to load can now be determined via the respective charon.plugins.<name>.load setting. This functionality is enabled by the new default strongswan.conf file (via the charon.load_modular option) and the load setting in the generated config snippets of all enabled plugins. The load setting optionally takes a numeric priority value that allows reordering the plugins (plugins with the same priority are ordered according to the default plugin order). Additionally, all settings that were formerly defined in library specific "global" sections are now application specific. For instance, instead of configuring libstrongswan.plugins.random.random and affecting charon, charon-cmd, pki, basically every application using libstrongswan, the option can now be set individually for each application (e.g. pki.plugins.random.random to affect only pki). The old options are still supported though, which actually allows to define defaults for all applications in the libstrongswan section. The libtls options are mapped to <app>.tls. The libimcv and libtnccs options are mapped to <app>.imcv and <app>.tnc, respectively (while their plugin's options are now under <app>.plugins together with all the others). Fixes #475. | ||||
| * | conf: Install config files world-readable but warn about permissions for ↵ | Tobias Brunner | 2014-02-12 | 12 | -15/+28 |
| | | | | | | | | certain options | ||||
| * | conf: Document variables and config files/dirs | Tobias Brunner | 2014-02-12 | 1 | -2/+22 |
| | | |||||
| * | Add Python and pkg-config as requirements to HACKING | Tobias Brunner | 2014-02-12 | 1 | -0/+2 |
| | | | | | | | | | | pkg-config is probably installed on most systems by default, but e.g. not on Cygwin. | ||||
| * | conf: Only install config snippets for enabled components | Tobias Brunner | 2014-02-12 | 2 | -3/+23 |
| | | |||||
| * | conf: Document options of other programs | Tobias Brunner | 2014-02-12 | 6 | -1/+68 |
| | |