aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * configure: Add an option to enable all optional features/pluginsTobias Brunner2014-03-202-2/+17
| | | | | | | | This has probably no real practical use, but it simplifies testing.
| * configure: Reorder and group feature optionsTobias Brunner2014-03-201-93/+106
| |
| * unit-tests: Generate weak keys with gcrypt plugin (but quickly)Tobias Brunner2014-03-201-0/+3
| |
| * tnc-pdp: Fix monolithic buildTobias Brunner2014-03-201-1/+2
|/
* plugin-feature: Hash only the actually used feature argumentTobias Brunner2014-03-201-1/+31
| | | | | | | | Clang does not initialize padding in union members so hashing the complete "arg" union could lead to different hashes if the hashed plugin_feature_t does not have static storage duration. Fixes #549.
* Added TPMRA workitem support for [dummy] Trusted Boot measurementsAndreas Steffen2014-03-191-0/+16
|
* pki: When dispatching commands, don't look beyond non-null-terminated arrayMartin Willi2014-03-191-1/+1
|
* pki: Check length of commands array before accessing command in --helpMartin Willi2014-03-191-1/+1
| | | | | | | As --help is counted as command as well, the array is not null-terminated and we have to check for MAX_COMMANDS. Fixes #550.
* charon-nm: No additional secrets are required once a password has been enteredTobias Brunner2014-03-181-0/+4
| | | | | | | Recent versions of NM will call need_secrets() as long as it returns TRUE, but then fail as the number of calls is limited by an assert. Fixes #547.
* array: Fix removal of elements in the second half of an arrayTobias Brunner2014-03-181-1/+1
| | | | | | | Memory beyond the end of the array was moved when array elements in the second half of an array were removed. Fixes #548.
* plugin-loader: Properly initialize modular plugin list if no plugins are enabledTobias Brunner2014-03-181-0/+1
|
* Implemented ntru_private_key classAndreas Steffen2014-03-1815-1381/+1429
|
* 11 bits are needed to encode a maximum index of 1086Andreas Steffen2014-03-151-1/+1
|
* Merged libstrongswan options into charon sectionAndreas Steffen2014-03-1598-240/+41
|
* strongswan.conf is not needed on RADIUS server aliceAndreas Steffen2014-03-152-0/+2
|
* tnc-ifmap: Get a reference to the client cert as it is also used in an auth ↵Tobias Brunner2014-03-101-1/+1
| | | | config
* Version bump to 5.1.3dr1Andreas Steffen2014-03-071-1/+1
|
* Disable mandatory ECP support for attestionAndreas Steffen2014-03-0724-9/+347
|
* Refactored NTRU parameter set selectionAndreas Steffen2014-03-073-40/+47
|
* Refactored ntru_param_setsAndreas Steffen2014-03-079-246/+175
|
* thread: Properly clean up meta data of main threadTobias Brunner2014-03-071-0/+2
|
* settings: Log all errors on level 1Tobias Brunner2014-03-041-4/+3
| | | | Closes #539.
* settings: Avoid conf file parsing beyond allocated bufferThomas Egerer2014-03-031-2/+2
| | | | | | | | | | | | | | | A valgrind analysis of libstrongswan revealed an invalid read of 1 in the function starts_with(). A more thorough analysis proved this to be true and showed that with a specially crafted config file (e.g. a single '#'-character not followed by a newline), the parser might even interpret the random memory contents following the allocated buffer as part of the configuration file. The way the parser is designed, it must be able to skip an inserted '\0' and continue parsing. Since it is not able to skip two '\0' characters, the 'fix' of allocating two more bytes than the size of the parsed file and setting them to '\0' seems to be a safe bet. Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
* configure: Fix autoreconf with older autotoolsTobias Brunner2014-03-031-2/+1
| | | | | | | | Older autoconf versions (e.g. on CentOS 6.5) produce an empty else block for the removed empty argument, which the shell then trips over when executing ./configure. Fixes #536.
* Optimize ntru_poly constructors some more5.1.2Andreas Steffen2014-02-271-26/+24
|
* Version bump to 5.1.2Andreas Steffen2014-02-271-1/+1
|
* Optimized initialisation of indicesAndreas Steffen2014-02-271-50/+39
|
* Added get_array() method to ntru_poly_t classAndreas Steffen2014-02-276-157/+90
|
* Defined ntru_poly_create_from_seed() and ntru_poly_create_from_data() ↵Andreas Steffen2014-02-276-138/+220
| | | | constructors and built some unit tests for the latter)
* Optimized use of temporary arrays in polynomial multiplicationAndreas Steffen2014-02-272-24/+24
|
* Implement ring multiplication methodAndreas Steffen2014-02-274-113/+245
|
* conf: Fix out-of-tree build from distributionTobias Brunner2014-02-271-6/+3
| | | | | | It worked from the repository, where strongswan.conf.5.main is generated in the build dir, but not from the distribution where it is located in the source dir, so explicitly create it in the source dir.
* utils: Add memrchr(3) replacement for platforms that don't support itTobias Brunner2014-02-264-2/+82
| | | | For instance, on Mac OS X memrchr(3) is not provided by the C library.
* Merge branch 'dirname'Tobias Brunner2014-02-2415-121/+307
|\ | | | | | | | | Fixes the incorrect usage of dirname(3) in settings_t and stroke_cred_t, and adds thread-safe variants of dirname(3) and basename(3).
| * libpts: Use path_base|dirname()Tobias Brunner2014-02-244-14/+18
| |
| * conftest: Use path_dirname()Tobias Brunner2014-02-241-1/+1
| |
| * stroke: Use thread-safe dirname(3)Tobias Brunner2014-02-241-6/+4
| |
| * settings: Use thread-safe dirname(3)Tobias Brunner2014-02-241-5/+3
| |
| * utils: Add thread-safe variants of dirname(3) and basename(3)Tobias Brunner2014-02-243-4/+144
| |
| * utils: Move thread-safe strerror replacement to a separate fileTobias Brunner2014-02-247-99/+145
| | | | | | | | | | For some utils _GNU_SOURCE might be needed but that conflicts with the signature of strerror_r(3).
| * stroke: Use dirname(3) correctlyTobias Brunner2014-02-241-5/+5
| |
| * settings: Use dirname(3) correctlyTobias Brunner2014-02-241-4/+4
|/ | | | | | | | dirname(3) may return a pointer to a statically allocated buffer. So freeing the returned value can result to undefined behavior. This was noticed on FreeBSD where it caused very strange crashes. It is also not thread-safe, which will be addressed later.
* Use logical AND functionAndreas Steffen2014-02-231-1/+1
|
* pki: Make cmds array static, ensuring that it is zero-initializedMartin Willi2014-02-201-2/+1
| | | | | As pki --help relies on a zero-terminated array, make the actually non-public cmds array static to ensure initialization.
* index limit can be easily computedAndreas Steffen2014-02-196-54/+28
|
* uclibc only defines strndup(3) if _GNU_SOURCE is definedTobias Brunner2014-02-1913-25/+43
| | | | References #516.
* sshkey: uclibc only defines fmemopen(3) if _GNU_SOURCE is definedTobias Brunner2014-02-191-0/+1
| | | | Fixes #516.
* coverage: Apparently not all shells can expand {src,scripts}Tobias Brunner2014-02-191-2/+2
| | | | One example is ash.
* pki: Fix minor resource leak on failure to read the private key in --req5.1.2rc2Tobias Brunner2014-02-181-1/+2
|
* stroke: Use proper modifiers to print size_t argumentsTobias Brunner2014-02-181-1/+1
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-11 16:14:09 +0000