aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * ike: Store unhandled attributes on IKE_SA as wellMartin Willi2014-06-164-12/+12
|/
* Version bump to 5.2.0rc1Andreas Steffen2014-06-151-1/+1
|
* Mentioned first six swanctl scenarios in NEWS5.2.0dr6Andreas Steffen2014-06-141-0/+1
|
* Added swanctl/rw-psk-fqdn and swanctl/rw-psk-ipv4 scenariosAndreas Steffen2014-06-1422-0/+441
|
* Single-line --raw mode simplifies evaltest of swanctl scenariosAndreas Steffen2014-06-145-92/+16
|
* Split swanctl --raw mode into single-line and --pretty modeAndreas Steffen2014-06-1418-185/+310
|
* Added swanctl/ip-pool-db scenarioAndreas Steffen2014-06-1111-0/+246
|
* Updated strongTNC configurationAndreas Steffen2014-06-118-12/+15
|
* Added swanctl/ip-pool scenarioAndreas Steffen2014-06-1011-0/+231
|
* Allow multiple hash values in the file reference databaseAndreas Steffen2014-06-102-32/+60
|
* Added swanctl/rw-cert scenarioAndreas Steffen2014-06-1011-0/+216
|
* Added Android 4.3 and 4.4.3 to imv databaseAndreas Steffen2014-06-101-0/+24
|
* Define default swanctl credentials in hosts directoryAndreas Steffen2014-06-1030-4/+383
|
* Added missing units (s = seconds)Andreas Steffen2014-06-101-1/+1
|
* Fixes in SWID entity supportAndreas Steffen2014-06-082-19/+7
|
* Merge branch 'win-32bit'Martin Willi2014-06-0613-38/+68
|\ | | | | | | | | Fixes some issues when building 32-bit Windows binaries. Mostly related to the call API. Introduces a Travis 32-bit Windows build variant.
| * travis: Add a Windows 32-bit variant build testMartin Willi2014-06-062-6/+18
| |
| * windows: Link against psapi32Martin Willi2014-06-061-1/+1
| | | | | | | | | | On some version GetModuleFileNameEx/GetModuleInformation is in psapi32 instead of kernel32. We link to both libraries to make sure we have it.
| * backtrace: Use GetModuleInformation/GetModuleFileNameEx directly on Win32Martin Willi2014-06-061-2/+10
| | | | | | | | The K32 variants are actually needed on 64-bit only.
| * windows: Use WINAPI call convention for Windows API callbacksMartin Willi2014-06-068-23/+28
| | | | | | | | | | For x86_64 it does not actually matter, but for i686 builds the call convention is different with WINAPI.
| * windows: Do not check if having clock_gettime()Martin Willi2014-06-061-6/+11
|/ | | | | Windows does not have it, but libwinpthread has. If this library is available during build, it will be linked, which we prefer to avoid.
* Version bump to 5.2.0dr6Andreas Steffen2014-06-061-1/+1
|
* Ubuntu 14.04 updated to 3.13.0-29 kernelAndreas Steffen2014-06-061-1/+1
|
* Extended pt-tls-client PLUGINS listAndreas Steffen2014-06-061-1/+1
|
* Updated REST APIAndreas Steffen2014-06-062-7/+17
|
* android: Add all Android.mk files to the tarballTobias Brunner2014-06-063-1/+4
|
* Fixed typo in strongswan.confAndreas Steffen2014-06-051-1/+1
|
* NEWS: Introduce Windows supportMartin Willi2014-06-041-0/+8
|
* Merge branch 'win-fetcher'Martin Willi2014-06-0410-53/+678
|\ | | | | | | | | Implements a HTTP/HTTPS fetcher for the Windows platform using the native WinHTTP API.
| * travis: Build "all" tests without Windows HTTP fetcherMartin Willi2014-06-041-1/+1
| | | | | | | | | | We don't include it in the Windows build test either, as MinGW does not come with -lwinhttp.
| * pki: Support complex trustchain and revocation checking in --verifyMartin Willi2014-06-042-52/+90
| |
| * unit-tests: Zero-initialize chunk to avoid free on non-successful fetchMartin Willi2014-06-041-1/+1
| | | | | | | | | | If the fetch fails, the fetcher is not required to return an empty chunk. Avoid the resulting invalid free() by initializing data.ptr to NULL.
| * winhttp: Support basic authentication for URLs having credentialsMartin Willi2014-06-041-3/+23
| |
| * winhttp: Support new response code fetcher optionMartin Willi2014-06-041-0/+34
| |
| * winhttp: Implement a http(s) fetcher based on Microsofts WinHTTP APIMartin Willi2014-06-047-0/+533
|/
* Merge branch 'win-kernel'Martin Willi2014-06-0422-4/+4822
|\ | | | | | | | | | | | | Adds the kernel-iph and kernel-wfp kernel backends for the Windows platform. kernel-iph provides a networking backend using the IP Helper native Windows API, while the kernel-wfp backend implements an interface to the Windows Kernel IPsec layer using the Windows Filtering Platform API.
| * travis: Build "all" tests without Windows kernel backendsMartin Willi2014-06-041-1/+2
| |
| * kernel-wfp: Include Windows header patch for MinGW 4.8.1Martin Willi2014-06-042-0/+29
| |
| * kernel-wfp: Clone acquire traffic selectors only if they existMartin Willi2014-06-041-1/+3
| |
| * kernel-wfp: Install routes for trap policiesMartin Willi2014-06-041-3/+21
| |
| * kernel-wfp: Refactor route management to separate functionMartin Willi2014-06-041-39/+47
| |
| * kernel-wfp: Install tunnel mode policies to appropriate sub-layersMartin Willi2014-06-042-6/+22
| | | | | | | | | | While it is unclear if this has any effect at all, we prefer specific sublayers to install policies as suggested.
| * kernel-wfp: Declare GUIDs and auth/cipher configs missing in some MinGW buildsMartin Willi2014-06-041-0/+89
| |
| * kernel-wfp: Support multiple traffic selectors on tunnel mode SAsMartin Willi2014-06-041-36/+80
| |
| * child-sa: Pass the number of total policies tied to an SA to the kernelMartin Willi2014-06-042-0/+10
| | | | | | | | | | This will be useful if the kernel backend has to know how many policies follow an SA install, for example if it must install all policies concurrently.
| * kernel-iph: Implicitly enable IP forwarding when installing routesMartin Willi2014-06-041-0/+26
| |
| * kernel-wfp: Show a warning for packets the kernel drops in its IPsec layersMartin Willi2014-06-041-0/+6
| |
| * kernel-wfp: Set flag to get UDP encapsulation with tunnel mode workingMartin Willi2014-06-042-0/+22
| | | | | | | | | | | | Having this flag set fixes connections initiated by the Windows host, but unfortunately does not yet fix incoming connections. Connection state issue? We still see 0xc00000e2 error events, translating to INTERNAL_ERROR.
| * kernel-wfp: Install tunnel and trap forward policiesMartin Willi2014-06-043-136/+275
| |
| * kernel-wfp: Manually create a ProviderContext to attach individual filtersMartin Willi2014-06-044-79/+73
| | | | | | | | | | | | This gives us more flexibility than using the intransparent FwpmIPsecTunnelAdd, and fixes the issues we have seen with trap policies. Forward filters are still missing, but required for site-to-site tunnels.