aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * vici: Support missing groups option in auth configMartin Willi2014-05-072-1/+36
| |
| * vici: Add a load-shared command to load shared IKE and EAP secretsMartin Willi2014-05-071-0/+68
| |
| * vici: Add a load-key command to load private keysMartin Willi2014-05-071-0/+50
| |
| * vici: Support loading of different certificate typesMartin Willi2014-05-071-0/+93
| |
| * vici: Add a credential backendMartin Willi2014-05-074-0/+159
| |
| * vici: Add a command listing all or specific loaded connections using eventsMartin Willi2014-05-071-0/+167
| |
| * vici: Add unload-conn and get-conns commands to manage loaded connectionsMartin Willi2014-05-071-0/+62
| |
| * vici: Make dispatcher a little more verboseMartin Willi2014-05-071-0/+10
| |
| * vici: Add backend providing in-memory connectionsMartin Willi2014-05-074-0/+1607
| |
| * vici: Add generic callback based vici message parsingMartin Willi2014-05-072-0/+139
| |
| * vici: Add a list-policy command to query trap and shunt policiesMartin Willi2014-05-071-0/+147
| |
| * vici: Add install/uninstall commands to manage trap and shunt policiesMartin Willi2014-05-071-0/+112
| |
| * vici: Extract CHILD_SA config lookup methodMartin Willi2014-05-071-14/+26
| |
| * vici: Refactor socket to clean up lockingMartin Willi2014-05-071-87/+233
| | | | | | | | | | | | | | Uses separate locks for socket read and write operations. While holding the socket reader lock, a different thread can still claim the socket write lock. This allows to asynchronously send event messages while holding the read lock.
| * vici: Fix dispatcher leak when handling unknown requestMartin Willi2014-05-071-10/+11
| |
| * vici: Add a test case raising events during request, checks in-order deliveryMartin Willi2014-05-071-0/+76
| |
| * vici: Avoid recursive control log invocationsMartin Willi2014-05-071-18/+24
| |
| * vici: Add a callback based recursive parser functionMartin Willi2014-05-072-0/+136
| |
| * vici: Add a version command to print daemon and OS version infoMartin Willi2014-05-071-0/+23
| |
| * vici: Implement a terminate command to close IKE or CHILD_SAsMartin Willi2014-05-071-0/+118
| |
| * vici: Add a control backend, currently to initiate connections by nameMartin Willi2014-05-074-0/+275
| |
| * vici: Support thread cancellation in command callbacksMartin Willi2014-05-072-19/+53
| |
| * vici: Move dumping to core message class, use it in libviciMartin Willi2014-05-074-56/+81
| |
| * vici: Add convenience value/string/integer getter to libviciMartin Willi2014-05-072-0/+76
| |
| * vici: Add some convenience getters on messageMartin Willi2014-05-073-1/+337
| |
| * vici: Raise events with an optional identifier for specific connectionsMartin Willi2014-05-074-9/+14
| |
| * vici: Invoke dispatcher outside of connection log, allowing events from commandsMartin Willi2014-05-071-4/+13
| |
| * vici: Add a query class, currently implementing a list-sas commandMartin Willi2014-05-074-1/+440
| |
| * vici: Add a libvici low-level client libraryMartin Willi2014-05-076-0/+1413
| |
| * vici: Provide a command dispatcher handling request and event registrationMartin Willi2014-05-079-128/+1105
| |
| * vici: Add a fully asynchronous IPC socket segmenting messages on/from streamMartin Willi2014-05-078-0/+1538
| |
| * vici: Add a test runner for pluginMartin Willi2014-05-074-0/+87
| |
| * vici: Add a plugin stub for the "Versatile IKE Control Interface" pluginMartin Willi2014-05-075-0/+156
| |
| * mem-cred: Replace existing equal shared keys during add_shared()Martin Willi2014-05-071-3/+56
| |
| * mem-cred: Replace existing equal private keys during add_key()Martin Willi2014-05-071-0/+17
| |
| * watcher: Don't wait for running callback once watcher thread cancelledMartin Willi2014-05-071-1/+8
| | | | | | | | | | | | | | | | During shutdown, waiting for callbacks might never complete, as queued callbacks might not get executed under certain conditions. Not the clean fix, but works good enough for now. Seen on Windows in vici tests.
| * watcher: Avoid queueing multiple watcher callbacks at the same timeMartin Willi2014-05-071-1/+8
| | | | | | | | | | | | | | | | | | While we don't add FDs with an active callback to the watched FDSET, we still can get notifications for callbacks active due the asynchronous processing of the same. To avoid queue multiple callbacks, we check for queued callbacks before activating new ones.
| * processor: Flush pending jobs during cancel(), not destroyMartin Willi2014-05-071-1/+11
| | | | | | | | | | During shutdown, cancel queued jobs earlier to avoid having cleanup functions accessing infrastructure not available anymore, for example watcher.
| * utils: Provide a CALLBACK macro, similar to METHOD, but for void* callbacksMartin Willi2014-05-071-0/+13
|/ | | | | | Using the same mechanism as the METHOD macro, the CALLBACK macro defines a hybrid function signature. It strictly uses a weak void* for the first function parameter, in contrast to the dynamic METHOD object "this" type.
* travis: --disable-aikgen in "all" testsMartin Willi2014-05-071-1/+1
| | | | | aikgen has a hard dependency on TrouSerS, which we currently don't have in the travis build.
* Updated NEWS for 5.2.0dr2 release5.2.0dr2Andreas Steffen2014-05-041-0/+2
|
* utils: Enable __atomic* built-ins based on the GCC versionTobias Brunner2014-05-042-19/+7
| | | | | | | | | | | This solves a problem with GNAT when compiling charon-tkm as __atomic* built-ins are only provided in GCC 4.7 and newer. Currently GNAT 4.6 and GCC 4.7.2 is shipped with Debian wheezy (stable), as used in the testing environment. So while the configure script correctly detected the __atomic* built-ins, and defined HAVE_GCC_ATOMIC_OPERATIONS, this define turned out to be incorrect when charon-tkm was later built with GNAT.
* aikgen generates AIK private/public key pairsAndreas Steffen2014-05-036-17/+600
| | | | | | aikgen outputs a binary AIK private key blob and the AIK public key. Optionally the Identity Request encrypted with the public key of the Privacy CA can be output.
* Added PUBKEY_RSA_MODULUS encoding typeAndreas Steffen2014-05-022-12/+37
|
* Extended Ubuntu 14.04 database buildAndreas Steffen2014-05-021-15/+24
|
* Moved BIOS and IMA measurement lists into classes of their ownAndreas Steffen2014-05-026-381/+717
|
* Added NEWS for 5.2.0dr2Andreas Steffen2014-05-011-0/+3
|
* Fixed typoAndreas Steffen2014-05-011-1/+1
|
* Use global status variable for IMA runtimeAndreas Steffen2014-05-011-2/+1
|
* Similar statistics for packages and file measurementsAndreas Steffen2014-05-011-1/+1
|