aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Refactored ntru_param_setsAndreas Steffen2014-03-079-246/+175
|
* thread: Properly clean up meta data of main threadTobias Brunner2014-03-071-0/+2
|
* settings: Log all errors on level 1Tobias Brunner2014-03-041-4/+3
| | | | Closes #539.
* settings: Avoid conf file parsing beyond allocated bufferThomas Egerer2014-03-031-2/+2
| | | | | | | | | | | | | | | A valgrind analysis of libstrongswan revealed an invalid read of 1 in the function starts_with(). A more thorough analysis proved this to be true and showed that with a specially crafted config file (e.g. a single '#'-character not followed by a newline), the parser might even interpret the random memory contents following the allocated buffer as part of the configuration file. The way the parser is designed, it must be able to skip an inserted '\0' and continue parsing. Since it is not able to skip two '\0' characters, the 'fix' of allocating two more bytes than the size of the parsed file and setting them to '\0' seems to be a safe bet. Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
* configure: Fix autoreconf with older autotoolsTobias Brunner2014-03-031-2/+1
| | | | | | | | Older autoconf versions (e.g. on CentOS 6.5) produce an empty else block for the removed empty argument, which the shell then trips over when executing ./configure. Fixes #536.
* Optimize ntru_poly constructors some more5.1.2Andreas Steffen2014-02-271-26/+24
|
* Version bump to 5.1.2Andreas Steffen2014-02-271-1/+1
|
* Optimized initialisation of indicesAndreas Steffen2014-02-271-50/+39
|
* Added get_array() method to ntru_poly_t classAndreas Steffen2014-02-276-157/+90
|
* Defined ntru_poly_create_from_seed() and ntru_poly_create_from_data() ↵Andreas Steffen2014-02-276-138/+220
| | | | constructors and built some unit tests for the latter)
* Optimized use of temporary arrays in polynomial multiplicationAndreas Steffen2014-02-272-24/+24
|
* Implement ring multiplication methodAndreas Steffen2014-02-274-113/+245
|
* conf: Fix out-of-tree build from distributionTobias Brunner2014-02-271-6/+3
| | | | | | It worked from the repository, where strongswan.conf.5.main is generated in the build dir, but not from the distribution where it is located in the source dir, so explicitly create it in the source dir.
* utils: Add memrchr(3) replacement for platforms that don't support itTobias Brunner2014-02-264-2/+82
| | | | For instance, on Mac OS X memrchr(3) is not provided by the C library.
* Merge branch 'dirname'Tobias Brunner2014-02-2415-121/+307
|\ | | | | | | | | Fixes the incorrect usage of dirname(3) in settings_t and stroke_cred_t, and adds thread-safe variants of dirname(3) and basename(3).
| * libpts: Use path_base|dirname()Tobias Brunner2014-02-244-14/+18
| |
| * conftest: Use path_dirname()Tobias Brunner2014-02-241-1/+1
| |
| * stroke: Use thread-safe dirname(3)Tobias Brunner2014-02-241-6/+4
| |
| * settings: Use thread-safe dirname(3)Tobias Brunner2014-02-241-5/+3
| |
| * utils: Add thread-safe variants of dirname(3) and basename(3)Tobias Brunner2014-02-243-4/+144
| |
| * utils: Move thread-safe strerror replacement to a separate fileTobias Brunner2014-02-247-99/+145
| | | | | | | | | | For some utils _GNU_SOURCE might be needed but that conflicts with the signature of strerror_r(3).
| * stroke: Use dirname(3) correctlyTobias Brunner2014-02-241-5/+5
| |
| * settings: Use dirname(3) correctlyTobias Brunner2014-02-241-4/+4
|/ | | | | | | | dirname(3) may return a pointer to a statically allocated buffer. So freeing the returned value can result to undefined behavior. This was noticed on FreeBSD where it caused very strange crashes. It is also not thread-safe, which will be addressed later.
* Use logical AND functionAndreas Steffen2014-02-231-1/+1
|
* pki: Make cmds array static, ensuring that it is zero-initializedMartin Willi2014-02-201-2/+1
| | | | | As pki --help relies on a zero-terminated array, make the actually non-public cmds array static to ensure initialization.
* index limit can be easily computedAndreas Steffen2014-02-196-54/+28
|
* uclibc only defines strndup(3) if _GNU_SOURCE is definedTobias Brunner2014-02-1913-25/+43
| | | | References #516.
* sshkey: uclibc only defines fmemopen(3) if _GNU_SOURCE is definedTobias Brunner2014-02-191-0/+1
| | | | Fixes #516.
* coverage: Apparently not all shells can expand {src,scripts}Tobias Brunner2014-02-191-2/+2
| | | | One example is ash.
* pki: Fix minor resource leak on failure to read the private key in --req5.1.2rc2Tobias Brunner2014-02-181-1/+2
|
* stroke: Use proper modifiers to print size_t argumentsTobias Brunner2014-02-181-1/+1
|
* Created ntru_poly class for sparse trinary polynomialsAndreas Steffen2014-02-189-440/+575
|
* android: Don't limit number to packets during EAP-TTLSTobias Brunner2014-02-181-0/+2
|
* lookip: Properly return from disconnect callback jobTobias Brunner2014-02-181-1/+3
| | | | References #518.
* Doxygen: Sort group names alphabeticallyTobias Brunner2014-02-181-1/+1
|
* Fixed some typosTobias Brunner2014-02-184-7/+7
|
* plugin-loader: Escape <ns> in comment as Doxygen sees this as XML tagTobias Brunner2014-02-181-2/+2
|
* unit-tests: Ignore tests not test_runnerTobias Brunner2014-02-181-1/+1
|
* conf: Ignore generated strongswan.conf.5.mainTobias Brunner2014-02-181-1/+2
|
* Added ikev2/lookip scenarioAndreas Steffen2014-02-1712-1/+151
|
* Version bump to 5.1.2rc2Andreas Steffen2014-02-171-1/+1
|
* lookip: Disconnect asynchronously to avoid dead-locking watcher unregistrationMartin Willi2014-02-172-6/+32
| | | | | | | | | While it really would be desirable to allow stream destruction during on_read() callbacks, this does not work anymore since e49b2998. Until we have a proper solution for this issue, use asynchronous disconnects for the only user doing so. Fixes #518.
* Fixed a minor vulnerability in which a malformed ASN.1 length field could ↵5.1.2rc1Andreas Steffen2014-02-141-0/+1
| | | | cause a crash of the charon daemon if the verbose debug level 3 (raw hex dump) for the asn subsystem is enabled.
* conf: Fix installation on FreeBSDTobias Brunner2014-02-131-2/+2
| | | | Apparently, the -t option for install is not portable.
* pacman.sh creates /etc/pts/dists directory if it doesn't exist yetAndreas Steffen2014-02-131-0/+1
|
* NEWS: Add strongswan.conf changes and IPComp fixesTobias Brunner2014-02-131-0/+24
|
* conf: The use of $^ is not portableTobias Brunner2014-02-131-3/+6
| | | | | Generating strongswan.conf.5.main in a subshell gets the file properly written to the builddir in out-of-tree builds.
* printf-hook-glibc: printf.h on FreeBSD 10 does not include stdargs.hTobias Brunner2014-02-131-1/+1
|
* array: Fix compilation on FreeBSDTobias Brunner2014-02-131-2/+2
|
* Merge branch 'modular-load'Tobias Brunner2014-02-12270-2427/+4724
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Introduces a new configuration file layout. strongswan.conf is now only very simple and mainly includes the config snippets from the strongswan.d and strongswan.d/charon directories (the latter containing snippets for individual plugins). Config snippets with commented defaults are generated for all currently defined settings and are installed if they don't exist yet and the respective plugin/component is enabled. Similarly, the strongswan.conf(5) man page, which documents all these settings, is automatically generated from the same source. The config snippets are also installed in $prefix/share/strongswan so existing files can be compared to the most current defaults. As an alternative to the non-extensible charon.load option, the plugins to load can now be determined via the respective charon.plugins.<name>.load setting. This functionality is enabled by the new default strongswan.conf file (via the charon.load_modular option) and the load setting in the generated config snippets of all enabled plugins. The load setting optionally takes a numeric priority value that allows reordering the plugins (plugins with the same priority are ordered according to the default plugin order). Additionally, all settings that were formerly defined in library specific "global" sections are now application specific. For instance, instead of configuring libstrongswan.plugins.random.random and affecting charon, charon-cmd, pki, basically every application using libstrongswan, the option can now be set individually for each application (e.g. pki.plugins.random.random to affect only pki). The old options are still supported though, which actually allows to define defaults for all applications in the libstrongswan section. The libtls options are mapped to <app>.tls. The libimcv and libtnccs options are mapped to <app>.imcv and <app>.tnc, respectively (while their plugin's options are now under <app>.plugins together with all the others). Fixes #475.
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-09 20:06:25 +0000