tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
\| *	kernel-libipsec: Handle packets between charon socket, libipsec and TUN device	Tobias Brunner	2013-06-21	1	-0/+85
\| \|
\| *	kernel-libipsec: Create a TUN device and use it to install virtual IPs	Tobias Brunner	2013-06-21	2	-0/+40
\| \|
\| *	kernel-libipsec: Add plugin that implements kernel_ipsec_t using libipsec	Tobias Brunner	2013-06-21	7	-0/+400
\| \|
\| *	kernel-netlink: Routes don't require a gateway/nexthop	Tobias Brunner	2013-06-21	1	-5/+9
\|/
*	charon-cmd: Document auxiliary options	Tobias Brunner	2013-06-21	1	-0/+15
\|
*	charon-cmd: Link strongswan.conf(5) and charon-cmd(8) man pages	Tobias Brunner	2013-06-21	2	-4/+33
\|
*	charon-cmd: Use fixed number of character to align command descriptions	Tobias Brunner	2013-06-21	1	-16/+15
\| \| \| \| \|	If the command and argument is longer than that write the first line of description to the following line.
*	charon-cmd: Shortened and fixed command descriptions	Tobias Brunner	2013-06-21	1	-2/+2
\|
*	charon-cmd: Simplify usage output for authentication profiles	Tobias Brunner	2013-06-21	1	-11/+3
\| \| \| \|	The man page describes the min full.
*	charon-cmd: Add Aggressive Mode profiles to man page	Tobias Brunner	2013-06-21	1	-6/+10
\|
*	charon-cmd: Add man page for charon-cmd(8)	Tobias Brunner	2013-06-21	2	-0/+123
\|
*	charon-cmd: Add --debug argument to set the default log level	Tobias Brunner	2013-06-21	3	-2/+13
\|
*	charon-cmd: Handle simple command line arguments like --help before the others	Tobias Brunner	2013-06-21	1	-3/+14
\|
*	plugin-loader: Move logging of failed features to status()	Tobias Brunner	2013-06-21	1	-7/+11
\| \| \| \| \| \| \| \| \|	Still log an error message if critical features fail, as loaded plugins/features are not logged in that case. This way loaded plugins are printed before failed features and the relation is easier to make for users. It also allows programs to log this message on a different level.
*	plugin-loader: Add method to print loaded plugins on a given log level	Tobias Brunner	2013-06-21	10	-4/+26
\|
*	plugin-loader: Collect statistics while loading features, print them in case ↵	Tobias Brunner	2013-06-21	1	-69/+40
\| \| \| \| \| \| \|	features failed to load There is no need to explicitly search for failed features in critical plugins as this is now detected while loading the features.
*	plugin-loader: Use different log level if failed feature is in critical plugin	Tobias Brunner	2013-06-21	1	-2/+16
\|
*	plugin-loader: Log message when failing to load plugin	Tobias Brunner	2013-06-21	1	-0/+8
\|
*	plugin-loader: Reduce verbosity while loading plugins	Tobias Brunner	2013-06-21	1	-4/+4
\|
*	Fix crash if the initiator has no suitable proposal available	Tobias Brunner	2013-06-21	1	-0/+5
\| \| \| \|	Could be triggered with a typo in the ike or esp options when ! is used.
*	Merge branch 'unit-tests-ecdsa'	Martin Willi	2013-06-21	17	-160/+866
\|\ \| \| \| \| \| \| \| \| \| \|	Adds support for testing plugin functionality to test-runner. Introduces some good/bad tests for ECDSA/RSA which would have caught those RSA/ECDSA signature vulnerabilities.
\| *	leak-detective: (re-)whitelist some OpenSSL functions	Martin Willi	2013-06-21	1	-0/+5
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Some static allocations in plugins won't get freed, because in the test case process the plugins are not destroyed. If a plugin would clean up allocations done while just using the plugin, these show up as leak in the child process, letting tests fail.
\| *	unit-tests: load plugins in test-runner from build directory	Martin Willi	2013-06-21	2	-1/+30
\| \|
\| *	unit-tests: link test-runner against -lpthread	Martin Willi	2013-06-21	1	-0/+1
\| \|
\| *	unit-tester: remove obsolete rsa_gen test, now covered in unit-tests	Martin Willi	2013-06-21	3	-122/+0
\| \|
\| *	unit-tests: add RSA test cases, very similar to ECDSA	Martin Willi	2013-06-21	4	-1/+400
\| \|
\| *	unit-tests: test with /dev/urandom if random plugin is in use	Martin Willi	2013-06-21	1	-0/+6
\| \|
\| *	unit-tests: test supported ECDSA schemes only	Martin Willi	2013-06-21	1	-0/+14
\| \|
\| *	Move test-runners has_feature() function to plugin loader	Martin Willi	2013-06-21	3	-32/+40
\| \|
\| *	unit-tests: enforce CET/CEST timezone to properly test non-UTC time formatting	Martin Willi	2013-06-21	1	-0/+6
\| \|
\| *	unit-tests: don't use ck_assert() to test a cleared chunk, as it allocates data	Martin Willi	2013-06-21	1	-3/+10
\| \| \| \| \| \| \| \|	The new allocation might be in the freed area, affecting the test result.
\| *	unit-tests: define 64-bit constats with ULL, fixing compiler warning on 32-bit	Martin Willi	2013-06-21	1	-2/+2
\| \|
\| *	Limit cleanup of .gc{no,da} files to src and scripts subfolders	Martin Willi	2013-06-21	1	-2/+2
\| \| \| \| \| \| \| \| \| \|	Other folders in the build tree might not be related to the strongSwan tree, or are not even accessible.
\| *	unit-tests: test some zeroed ECDSA signatures that never should succeed	Martin Willi	2013-06-21	1	-0/+63
\| \|
\| *	unit-tests: perform signing/validation with keys ECDSA keys generated or loaded	Martin Willi	2013-06-21	1	-0/+47
\| \|
\| *	unit-tests: add an ECDSA test case loading keys	Martin Willi	2013-06-21	1	-0/+61
\| \|
\| *	unit-tests: perform a first ECDSA test case if ECDSA is supported	Martin Willi	2013-06-21	4	-1/+58
\| \|
\| *	unit-tests: add a helper function checking if a plugin feature is available	Martin Willi	2013-06-21	1	-0/+32
\| \|
\| *	unit-tests: add a test case checking if all test vectors have been passed	Martin Willi	2013-06-21	4	-1/+44
\| \|
\| *	crypto-factory: count the number of test vector failures during registration	Martin Willi	2013-06-21	2	-30/+73
\| \|
\| *	unit-tests: load all libstrongswan plugins in test-runner	Martin Willi	2013-06-21	2	-0/+7
\|/
*	stroke: Add statusall-nb as alias for statusallnb	Tobias Brunner	2013-06-21	2	-1/+2
\|
*	stroke: Add non-blocking versions of up and down	Tobias Brunner	2013-06-21	3	-5/+23
\| \| \| \| \| \|	stroke up-nb and stroke down-nb do not block until the command has finished. Instead, they return right after initiating the respective operation.
*	starter: Make ipsec.conf path configurable via command line	Tobias Brunner	2013-06-21	1	-3/+14
\|
*	pubkey: Improve comparison of raw public key certificate objects	Tobias Brunner	2013-06-21	1	-1/+11
\|
*	ikev2: use protocol of selected proposal to delete a failed CHILD_SA	Martin Willi	2013-06-20	1	-2/+2
\| \| \| \|	Depending on the failure, the protocol might not yet be set on the CHILD_SA.
*	charon-cmd: use a copy of pid in initiate callback	Martin Willi	2013-06-20	1	-6/+7
\| \| \| \| \|	When cancelling a connection that gets established, cmd_connection_t gets freed before terminate() is called. This results in kill()ing invalid PID.
*	charon-cmd: add IKEv1 aggressive mode profiles	Martin Willi	2013-06-20	3	-10/+35
\|
*	NEWS: Add first bunch of 5.1.0 highlights	Martin Willi	2013-06-20	1	-0/+19
\|
*	Merge branch 'nat-transport'	Martin Willi	2013-06-19	4	-60/+306
\|\ \| \| \| \| \| \| \| \| \| \|	Enable transport mode in NAT situations when using IKEv2. Additionally brings an extended leftsubnet format, where each subnet can take a separate protocol and port.