aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * array: Add fallback for qsort_r using thread-local valueTobias Brunner2014-02-124-3/+50
| | | | | | | | Cygwin for example does not support qsort_r.
| * plugin-loader: Optionally use load option in each plugin section to load pluginsTobias Brunner2014-02-123-4/+153
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This now works because all plugins use the same config namespace. If <ns>.load_modular is true, the list of plugins to load is determined via the value of the <ns>.plugins.<name>.load options. Using includes the following is possible: charon { load_modular = yes plugins { include strongswan.d/charon/*.conf } } charon-cmd { load_modular = yes plugins { include strongswan.d/charon-cmd/*.conf } } Where each .conf file would contain something like: <name> { load = yes <option> = <value> } To increase the priority of individual plugins load = <priority> can be used (the default is 1). For instance, to use openssl instead of the built-in crypto plugins set in strongswan.d/charon/openssl.conf: openssl { load = 10 } If two plugins have the same priority their order in the default plugin list is preserved. Plugins not found in that list are ordered alphabetically before other plugins with the same priority.
| * array: Add array_bsearch functionTobias Brunner2014-02-123-0/+141
| |
| * array: Add array_sort functionTobias Brunner2014-02-124-1/+204
| |
| * libcharon: Remove unused charon->nameTobias Brunner2014-02-1210-21/+13
| |
| * charon-tkm: Use lib->ns instead of charon->nameTobias Brunner2014-02-123-5/+5
| |
| * libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-1272-259/+255
| |
| * libhydra: Remove unused hydra->daemonTobias Brunner2014-02-1211-22/+12
| |
| * libhydra: Use lib->ns instead of hydra->daemonTobias Brunner2014-02-1210-30/+30
| |
| * libtls: Move settings to <ns>.tls with fallback to libtlsTobias Brunner2014-02-123-17/+21
| |
| * attr-sql: Use namespace for attr-sql config, with fallbackTobias Brunner2014-02-123-5/+12
| |
| * lib: All settings use configured namespaceTobias Brunner2014-02-1224-196/+196
| |
| * lib: Add default config fallback for configured namespaceTobias Brunner2014-02-121-0/+3
| | | | | | | | All settings in the configured global namespace fall back to libstrongswan.
| * unit-tests: Test how settings_t handles some invalid dataTobias Brunner2014-02-121-0/+72
| |
| * settings: Add method that allows to define fallback sections for other sectionsTobias Brunner2014-02-123-13/+276
| | | | | | | | | | The fallbacks are currently only used for single value lookups. Enumerators are not affected by them.
| * settings: Make print_key() not rely on null-terminated beginning of key bufferTobias Brunner2014-02-121-10/+5
| | | | | | | | | | The key to print (e.g. until the next .) still has to be null-terminated.
| * unit-tests: Add tests for includes and file loading in settings_tTobias Brunner2014-02-121-0/+149
| |
| * settings: Allow empty strings in section keyTobias Brunner2014-02-122-23/+33
| |
| * unit-tests: Add tests for enumerators in settings_tTobias Brunner2014-02-121-0/+148
| |
| * unit-tests: Add tests for setters in settings_tTobias Brunner2014-02-121-0/+109
| |
| * unit-tests: Add basic tests for settings_tTobias Brunner2014-02-123-0/+319
| |
| * lib: Add global config namespaceTobias Brunner2014-02-1238-41/+55
|/
* pool: Typo in Makefile fixedTobias Brunner2014-02-121-1/+1
|
* Merge branch 'sql-install'Tobias Brunner2014-02-1238-1822/+92
|\ | | | | | | | | | | | | SQL schemas and example data (IMV) are now part of the distribution and installed in $prefix/share/strongswan. This way no extra copy is needed for the test suite and distributions can easily pack those files together with the plugins.
| * pool: Install SQL schemas from src/poolTobias Brunner2014-02-125-3/+11
| | | | | | | | | | This allows us to install the schemas if either the attr-sql or sql plugin is enabled, since both use the same schema (at least in parts).
| * sql: Set default values for some fields in addresses tableTobias Brunner2014-02-122-6/+6
| |
| * testing: Use installed PTS SQL schema and data instead of local copyTobias Brunner2014-02-126-1456/+8
| |
| * testing: Use installed SQL schema instead of local copyTobias Brunner2014-02-1225-334/+64
| |
| * libimcv: Install SQL files in /usr/share/strongswan/templates/databaseTobias Brunner2014-02-122-2/+3
| |
| * sql: Install SQL schemas in /usr/share/strongswan/templates/databaseTobias Brunner2014-02-121-0/+3
| |
| * sql: Remove unused cred.sql snippetTobias Brunner2014-02-121-24/+0
|/
* asn1: Support dates before 1970-01-01 (i.e. when time_t gets negative)Tobias Brunner2014-02-123-4/+29
| | | | | | On x86 we allow "overflows" around 1969/1970 but not for other dates. Fixes #509.
* asn1: Add additional validation for parsed ASN.1 date/time valuesTobias Brunner2014-02-122-1/+20
|
* ikev1: Fix config switching due to failed authentication during Aggressive modeTobias Brunner2014-02-121-3/+1
| | | | | | | The encoded ID payload gets destroyed by the authenticator, which caused a segmentation fault after the switch. Fixes #501.
* kernel-pfroute: Don't cache route entries if installation failsTobias Brunner2014-02-121-2/+5
|
* kernel-netlink: Don't cache route entries if installation failsTobias Brunner2014-02-121-2/+5
| | | | Fixes #500.
* identification: Fix printing of empty RDNs on FreeBSDTobias Brunner2014-02-121-1/+6
| | | | On FreeBSD (null) is printed for NULL even if the precision is 0.
* tests: Fix test for printing NULL on FreeBSDTobias Brunner2014-02-121-2/+13
|
* Fixed description of ikev1/rw-ntru-psk scenarioAndreas Steffen2014-02-121-1/+1
|
* Updated test kvm tests to Linux 3.13 kernelAndreas Steffen2014-02-122-3/+2050
|
* Added ikev1/net2net-ntru-cert and ikev1/rw-ntru-psk scenariosAndreas Steffen2014-02-1223-0/+302
|
* testing: Add ssh script to distributionTobias Brunner2014-02-121-1/+1
|
* unit-tests: added asn1_parser testsAndreas Steffen2014-02-103-0/+293
|
* unit-tests: added some more ASN.1 length testsAndreas Steffen2014-02-101-0/+13
|
* leak_detective: Assign return value of realloc to bufThomas Egerer2014-02-101-1/+1
| | | | | | | If realloc return a pointer value different from the value to be reallocated, a double free can occur in this context. Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
* rdrand: Provide get_features() regardless of RDRAND availabilityMartin Willi2014-02-101-6/+6
| | | | | As having no get_features() raises a deprecated warning, we return no features instead.
* rdrand: Move RDRAND detection log to level 2Martin Willi2014-02-101-2/+2
| | | | | When having RDRAND support, these log messages might be confusing when using pki or other tools.
* updown: Return an empty DNS server enumerator if no IKE_SA availableMartin Willi2014-02-061-1/+1
| | | | | The one existing caller does not handle a NULL return and always expects an enumerator; and returning FALSE does not make sense anyway.
* Merge branch 'cmd-proposals'Martin Willi2014-02-065-6/+119
|\ | | | | | | | | | | | | Introduce --ike/esp/ah-proposal options to offer custom proposals, and requests an IPv6 virtual IP if an IPv6 --remote-ts is given. Fixes #508.
| * charon-cmd: Request an IPv6 virtual IP if an IPv6 remote subnet givenMartin Willi2014-02-061-4/+23
| |
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-10 13:20:52 +0000