Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Single-line --raw mode simplifies evaltest of swanctl scenarios | Andreas Steffen | 2014-06-14 | 5 | -92/+16 | |
| | ||||||
* | Split swanctl --raw mode into single-line and --pretty mode | Andreas Steffen | 2014-06-14 | 18 | -185/+310 | |
| | ||||||
* | Added swanctl/ip-pool-db scenario | Andreas Steffen | 2014-06-11 | 11 | -0/+246 | |
| | ||||||
* | Updated strongTNC configuration | Andreas Steffen | 2014-06-11 | 8 | -12/+15 | |
| | ||||||
* | Added swanctl/ip-pool scenario | Andreas Steffen | 2014-06-10 | 11 | -0/+231 | |
| | ||||||
* | Allow multiple hash values in the file reference database | Andreas Steffen | 2014-06-10 | 2 | -32/+60 | |
| | ||||||
* | Added swanctl/rw-cert scenario | Andreas Steffen | 2014-06-10 | 11 | -0/+216 | |
| | ||||||
* | Added Android 4.3 and 4.4.3 to imv database | Andreas Steffen | 2014-06-10 | 1 | -0/+24 | |
| | ||||||
* | Define default swanctl credentials in hosts directory | Andreas Steffen | 2014-06-10 | 30 | -4/+383 | |
| | ||||||
* | Added missing units (s = seconds) | Andreas Steffen | 2014-06-10 | 1 | -1/+1 | |
| | ||||||
* | Fixes in SWID entity support | Andreas Steffen | 2014-06-08 | 2 | -19/+7 | |
| | ||||||
* | Merge branch 'win-32bit' | Martin Willi | 2014-06-06 | 13 | -38/+68 | |
|\ | | | | | | | | | Fixes some issues when building 32-bit Windows binaries. Mostly related to the call API. Introduces a Travis 32-bit Windows build variant. | |||||
| * | travis: Add a Windows 32-bit variant build test | Martin Willi | 2014-06-06 | 2 | -6/+18 | |
| | | ||||||
| * | windows: Link against psapi32 | Martin Willi | 2014-06-06 | 1 | -1/+1 | |
| | | | | | | | | | | On some version GetModuleFileNameEx/GetModuleInformation is in psapi32 instead of kernel32. We link to both libraries to make sure we have it. | |||||
| * | backtrace: Use GetModuleInformation/GetModuleFileNameEx directly on Win32 | Martin Willi | 2014-06-06 | 1 | -2/+10 | |
| | | | | | | | | The K32 variants are actually needed on 64-bit only. | |||||
| * | windows: Use WINAPI call convention for Windows API callbacks | Martin Willi | 2014-06-06 | 8 | -23/+28 | |
| | | | | | | | | | | For x86_64 it does not actually matter, but for i686 builds the call convention is different with WINAPI. | |||||
| * | windows: Do not check if having clock_gettime() | Martin Willi | 2014-06-06 | 1 | -6/+11 | |
|/ | | | | | Windows does not have it, but libwinpthread has. If this library is available during build, it will be linked, which we prefer to avoid. | |||||
* | Version bump to 5.2.0dr6 | Andreas Steffen | 2014-06-06 | 1 | -1/+1 | |
| | ||||||
* | Ubuntu 14.04 updated to 3.13.0-29 kernel | Andreas Steffen | 2014-06-06 | 1 | -1/+1 | |
| | ||||||
* | Extended pt-tls-client PLUGINS list | Andreas Steffen | 2014-06-06 | 1 | -1/+1 | |
| | ||||||
* | Updated REST API | Andreas Steffen | 2014-06-06 | 2 | -7/+17 | |
| | ||||||
* | android: Add all Android.mk files to the tarball | Tobias Brunner | 2014-06-06 | 3 | -1/+4 | |
| | ||||||
* | Fixed typo in strongswan.conf | Andreas Steffen | 2014-06-05 | 1 | -1/+1 | |
| | ||||||
* | NEWS: Introduce Windows support | Martin Willi | 2014-06-04 | 1 | -0/+8 | |
| | ||||||
* | Merge branch 'win-fetcher' | Martin Willi | 2014-06-04 | 10 | -53/+678 | |
|\ | | | | | | | | | Implements a HTTP/HTTPS fetcher for the Windows platform using the native WinHTTP API. | |||||
| * | travis: Build "all" tests without Windows HTTP fetcher | Martin Willi | 2014-06-04 | 1 | -1/+1 | |
| | | | | | | | | | | We don't include it in the Windows build test either, as MinGW does not come with -lwinhttp. | |||||
| * | pki: Support complex trustchain and revocation checking in --verify | Martin Willi | 2014-06-04 | 2 | -52/+90 | |
| | | ||||||
| * | unit-tests: Zero-initialize chunk to avoid free on non-successful fetch | Martin Willi | 2014-06-04 | 1 | -1/+1 | |
| | | | | | | | | | | If the fetch fails, the fetcher is not required to return an empty chunk. Avoid the resulting invalid free() by initializing data.ptr to NULL. | |||||
| * | winhttp: Support basic authentication for URLs having credentials | Martin Willi | 2014-06-04 | 1 | -3/+23 | |
| | | ||||||
| * | winhttp: Support new response code fetcher option | Martin Willi | 2014-06-04 | 1 | -0/+34 | |
| | | ||||||
| * | winhttp: Implement a http(s) fetcher based on Microsofts WinHTTP API | Martin Willi | 2014-06-04 | 7 | -0/+533 | |
|/ | ||||||
* | Merge branch 'win-kernel' | Martin Willi | 2014-06-04 | 22 | -4/+4822 | |
|\ | | | | | | | | | | | | | Adds the kernel-iph and kernel-wfp kernel backends for the Windows platform. kernel-iph provides a networking backend using the IP Helper native Windows API, while the kernel-wfp backend implements an interface to the Windows Kernel IPsec layer using the Windows Filtering Platform API. | |||||
| * | travis: Build "all" tests without Windows kernel backends | Martin Willi | 2014-06-04 | 1 | -1/+2 | |
| | | ||||||
| * | kernel-wfp: Include Windows header patch for MinGW 4.8.1 | Martin Willi | 2014-06-04 | 2 | -0/+29 | |
| | | ||||||
| * | kernel-wfp: Clone acquire traffic selectors only if they exist | Martin Willi | 2014-06-04 | 1 | -1/+3 | |
| | | ||||||
| * | kernel-wfp: Install routes for trap policies | Martin Willi | 2014-06-04 | 1 | -3/+21 | |
| | | ||||||
| * | kernel-wfp: Refactor route management to separate function | Martin Willi | 2014-06-04 | 1 | -39/+47 | |
| | | ||||||
| * | kernel-wfp: Install tunnel mode policies to appropriate sub-layers | Martin Willi | 2014-06-04 | 2 | -6/+22 | |
| | | | | | | | | | | While it is unclear if this has any effect at all, we prefer specific sublayers to install policies as suggested. | |||||
| * | kernel-wfp: Declare GUIDs and auth/cipher configs missing in some MinGW builds | Martin Willi | 2014-06-04 | 1 | -0/+89 | |
| | | ||||||
| * | kernel-wfp: Support multiple traffic selectors on tunnel mode SAs | Martin Willi | 2014-06-04 | 1 | -36/+80 | |
| | | ||||||
| * | child-sa: Pass the number of total policies tied to an SA to the kernel | Martin Willi | 2014-06-04 | 2 | -0/+10 | |
| | | | | | | | | | | This will be useful if the kernel backend has to know how many policies follow an SA install, for example if it must install all policies concurrently. | |||||
| * | kernel-iph: Implicitly enable IP forwarding when installing routes | Martin Willi | 2014-06-04 | 1 | -0/+26 | |
| | | ||||||
| * | kernel-wfp: Show a warning for packets the kernel drops in its IPsec layers | Martin Willi | 2014-06-04 | 1 | -0/+6 | |
| | | ||||||
| * | kernel-wfp: Set flag to get UDP encapsulation with tunnel mode working | Martin Willi | 2014-06-04 | 2 | -0/+22 | |
| | | | | | | | | | | | | Having this flag set fixes connections initiated by the Windows host, but unfortunately does not yet fix incoming connections. Connection state issue? We still see 0xc00000e2 error events, translating to INTERNAL_ERROR. | |||||
| * | kernel-wfp: Install tunnel and trap forward policies | Martin Willi | 2014-06-04 | 3 | -136/+275 | |
| | | ||||||
| * | kernel-wfp: Manually create a ProviderContext to attach individual filters | Martin Willi | 2014-06-04 | 4 | -79/+73 | |
| | | | | | | | | | | | | This gives us more flexibility than using the intransparent FwpmIPsecTunnelAdd, and fixes the issues we have seen with trap policies. Forward filters are still missing, but required for site-to-site tunnels. | |||||
| * | kernel-wfp: Print filter weight in "ipsecdump filters" | Martin Willi | 2014-06-04 | 1 | -0/+4 | |
| | | ||||||
| * | kernel-wfp: Add support for trap policies and acquires | Martin Willi | 2014-06-04 | 2 | -1/+304 | |
| | | ||||||
| * | socket-win: Install IKE bypass policies using bypass_socket() | Martin Willi | 2014-06-04 | 2 | -0/+12 | |
| | | ||||||
| * | kernel-wfp: Implement bypass_socket() using dedicated filter rules | Martin Willi | 2014-06-04 | 1 | -2/+117 | |
| | |