Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | NEWS: Mention replay_window ipsec.conf option | Martin Willi | 2014-06-17 | 1 | -0/+4 | |
| | | ||||||
| * | swanctl: Document replay_window option | Martin Willi | 2014-06-17 | 1 | -0/+7 | |
| | | ||||||
| * | vici: Support a replay_window CHILD_SA option | Martin Willi | 2014-06-17 | 1 | -0/+16 | |
| | | ||||||
| * | starter: Add a replay_window connection option | Martin Willi | 2014-06-17 | 8 | -0/+12 | |
| | | ||||||
| * | kernel-pfkey: Support connection specific replay window sizes up to 32 packets | Martin Willi | 2014-06-17 | 1 | -1/+1 | |
| | | ||||||
| * | kernel-netlink: Support connection specific replay window sizes | Martin Willi | 2014-06-17 | 1 | -39/+16 | |
| | | ||||||
| * | kernel-interface: Add a replay_window parameter to add_sa() | Martin Willi | 2014-06-17 | 12 | -25/+43 | |
| | | ||||||
| * | child-cfg: Store connection specific replay window on CHILD_SA config | Martin Willi | 2014-06-17 | 2 | -0/+38 | |
|/ | ||||||
* | Merge branch 'win-errno' | Martin Willi | 2014-06-17 | 2 | -65/+278 | |
|\ | | | | | | | Improves errno handling for Winsock2 compatibility functions. | |||||
| * | windows: Declare strerror_s() | Martin Willi | 2014-06-17 | 1 | -0/+5 | |
| | | | | | | | | | | Older MinGW versions seem to miss this function declaration. Fixes build on Travis using Ubuntu 12.04. | |||||
| * | windows: Extend strerror_r/s by extended POSIX errno strings | Martin Willi | 2014-06-17 | 2 | -0/+66 | |
| | | ||||||
| * | windows: Implement strerror_r using strerror_s | Martin Willi | 2014-06-17 | 1 | -0/+9 | |
| | | ||||||
| * | windows: Wrap most Winsock2 Posix functions to set errno | Martin Willi | 2014-06-17 | 2 | -65/+198 | |
|/ | | | | | | While Winsock provides many Posix compatibility functions, they do not set errno, but use WSAGetLastError() for error reporting. The wrapped functions derive an errno from WSAGetLastError() on failure. | |||||
* | watcher: Prevent race condition spawning multiple watcher threads | Martin Willi | 2014-06-17 | 1 | -1/+3 | |
| | | | | | | | | If file descriptors get added and removed in rapid succession, the active watcher thread might not take notice of it and continues running. However, add() spawns a watcher thread whenever a file descriptor is added to an empty set. This could result in multiple watcher threads, which is fixed by a proper check for running watchers. | |||||
* | thread-value: Defer cleanup handling to thread termination on Windows | Martin Willi | 2014-06-17 | 3 | -40/+51 | |
| | | | | | | | | | | | Instead of cleaning up all thread-values during destruction, cleanup handler is invoked when a thread detaches. Thread detaching is cough using the Windows DllMain() entry point, and allows us to basically revert 204098a7. Using this mechanism, we make sure that the cleanup handler is invoked by the the correct thread. Further, this mechanism works for externally-spawned threads which run outside of our thread_cb() routine, and works more efficiently with short-running threads. | |||||
* | socket-win: Use non-overlapped I/O and socket event selection | Martin Willi | 2014-06-17 | 1 | -31/+13 | |
| | | | | | | | | The use of overlapped I/O was incorrect, as we passed stack based buffers, but did not cancel/wait for pending completion on all sockets. Our receive-from-all socket interface is actually tricky to implement using overlapped I/O. Switch to WSAEventSelect() event management, which can be canceled properly while working in a select()-like way. | |||||
* | Merge branch 'attr-enum' | Martin Willi | 2014-06-17 | 7 | -15/+104 | |
|\ | | | | | | | | | | | Introduces a handle_vips() hook very similar to assign_vips(), but for clients handling virtual IPs and other configuration attributes. Non-handled attributes are stored on the IKE_SA as well and can be enumerated. | |||||
| * | bus: Add a handle_vips() hook invoked after handling configuration attributes | Martin Willi | 2014-06-17 | 6 | -0/+53 | |
| | | | | | | | | | | | | | | | | | | Similar to assign_vips() used by a peer assigning virtual IPs to the other peer, the handle_vips() hook gets invoked on a peers after receiving attributes. On release of the same attributes the hook gets invoked again. This is useful to inspect handled attributes, as the ike_updown() hook is invoked after authentication, when attributes have not been handled yet. | |||||
| * | ikev1: Invoke the assign_vips() bus hook for IKEv1 as well | Martin Willi | 2014-06-16 | 2 | -3/+7 | |
| | | ||||||
| * | ike: Create an enumerator for (un-)handled configuration attributes on IKE_SA | Martin Willi | 2014-06-16 | 2 | -0/+32 | |
| | | ||||||
| * | ike: Store unhandled attributes on IKE_SA as well | Martin Willi | 2014-06-16 | 4 | -12/+12 | |
|/ | ||||||
* | Version bump to 5.2.0rc1 | Andreas Steffen | 2014-06-15 | 1 | -1/+1 | |
| | ||||||
* | Mentioned first six swanctl scenarios in NEWS5.2.0dr6 | Andreas Steffen | 2014-06-14 | 1 | -0/+1 | |
| | ||||||
* | Added swanctl/rw-psk-fqdn and swanctl/rw-psk-ipv4 scenarios | Andreas Steffen | 2014-06-14 | 22 | -0/+441 | |
| | ||||||
* | Single-line --raw mode simplifies evaltest of swanctl scenarios | Andreas Steffen | 2014-06-14 | 5 | -92/+16 | |
| | ||||||
* | Split swanctl --raw mode into single-line and --pretty mode | Andreas Steffen | 2014-06-14 | 18 | -185/+310 | |
| | ||||||
* | Added swanctl/ip-pool-db scenario | Andreas Steffen | 2014-06-11 | 11 | -0/+246 | |
| | ||||||
* | Updated strongTNC configuration | Andreas Steffen | 2014-06-11 | 8 | -12/+15 | |
| | ||||||
* | Added swanctl/ip-pool scenario | Andreas Steffen | 2014-06-10 | 11 | -0/+231 | |
| | ||||||
* | Allow multiple hash values in the file reference database | Andreas Steffen | 2014-06-10 | 2 | -32/+60 | |
| | ||||||
* | Added swanctl/rw-cert scenario | Andreas Steffen | 2014-06-10 | 11 | -0/+216 | |
| | ||||||
* | Added Android 4.3 and 4.4.3 to imv database | Andreas Steffen | 2014-06-10 | 1 | -0/+24 | |
| | ||||||
* | Define default swanctl credentials in hosts directory | Andreas Steffen | 2014-06-10 | 30 | -4/+383 | |
| | ||||||
* | Added missing units (s = seconds) | Andreas Steffen | 2014-06-10 | 1 | -1/+1 | |
| | ||||||
* | Fixes in SWID entity support | Andreas Steffen | 2014-06-08 | 2 | -19/+7 | |
| | ||||||
* | Merge branch 'win-32bit' | Martin Willi | 2014-06-06 | 13 | -38/+68 | |
|\ | | | | | | | | | Fixes some issues when building 32-bit Windows binaries. Mostly related to the call API. Introduces a Travis 32-bit Windows build variant. | |||||
| * | travis: Add a Windows 32-bit variant build test | Martin Willi | 2014-06-06 | 2 | -6/+18 | |
| | | ||||||
| * | windows: Link against psapi32 | Martin Willi | 2014-06-06 | 1 | -1/+1 | |
| | | | | | | | | | | On some version GetModuleFileNameEx/GetModuleInformation is in psapi32 instead of kernel32. We link to both libraries to make sure we have it. | |||||
| * | backtrace: Use GetModuleInformation/GetModuleFileNameEx directly on Win32 | Martin Willi | 2014-06-06 | 1 | -2/+10 | |
| | | | | | | | | The K32 variants are actually needed on 64-bit only. | |||||
| * | windows: Use WINAPI call convention for Windows API callbacks | Martin Willi | 2014-06-06 | 8 | -23/+28 | |
| | | | | | | | | | | For x86_64 it does not actually matter, but for i686 builds the call convention is different with WINAPI. | |||||
| * | windows: Do not check if having clock_gettime() | Martin Willi | 2014-06-06 | 1 | -6/+11 | |
|/ | | | | | Windows does not have it, but libwinpthread has. If this library is available during build, it will be linked, which we prefer to avoid. | |||||
* | Version bump to 5.2.0dr6 | Andreas Steffen | 2014-06-06 | 1 | -1/+1 | |
| | ||||||
* | Ubuntu 14.04 updated to 3.13.0-29 kernel | Andreas Steffen | 2014-06-06 | 1 | -1/+1 | |
| | ||||||
* | Extended pt-tls-client PLUGINS list | Andreas Steffen | 2014-06-06 | 1 | -1/+1 | |
| | ||||||
* | Updated REST API | Andreas Steffen | 2014-06-06 | 2 | -7/+17 | |
| | ||||||
* | android: Add all Android.mk files to the tarball | Tobias Brunner | 2014-06-06 | 3 | -1/+4 | |
| | ||||||
* | Fixed typo in strongswan.conf | Andreas Steffen | 2014-06-05 | 1 | -1/+1 | |
| | ||||||
* | NEWS: Introduce Windows support | Martin Willi | 2014-06-04 | 1 | -0/+8 | |
| | ||||||
* | Merge branch 'win-fetcher' | Martin Willi | 2014-06-04 | 10 | -53/+678 | |
|\ | | | | | | | | | Implements a HTTP/HTTPS fetcher for the Windows platform using the native WinHTTP API. | |||||
| * | travis: Build "all" tests without Windows HTTP fetcher | Martin Willi | 2014-06-04 | 1 | -1/+1 | |
| | | | | | | | | | | We don't include it in the Windows build test either, as MinGW does not come with -lwinhttp. |