aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Use exact mask when calling umask(2)Tobias Brunner2013-10-293-3/+3
| | | | | | Due to the previous negation the high bits of the mask were set, which at least some versions of the Android build system prevent with a compile-time check.
* whitelist: Read multiple commands until client closes connectionMartin Willi2013-10-291-30/+28
| | | | | This restores the same behavior we had before e11c02c8, and fixes the whitelist add/remove-from command.
* libtnccs: Add dummy entry to pb_tnc_tcg_msg_infosTobias Brunner2013-10-291-1/+2
| | | | | That's required because the first message type in pb_tnc_tcg_msg_type_t is 1 not 0.
* swid: Properly clean up after reading SWID tagTobias Brunner2013-10-291-2/+3
|
* man: strongswan.conf(5) updatedTobias Brunner2013-10-291-5/+35
|
* Fixed some typosTobias Brunner2013-10-294-4/+4
|
* charon-xpc: Load missing eap-md5 plugin after enabling itMartin Willi2013-10-281-1/+1
|
* charon-xpc: Disable warnings about deprecated functionsMartin Willi2013-10-281-1/+1
| | | | This avoids all the deprecated warnings when using OpenSSL functins.
* charon-xpc: Avoid -all_load linker flagMartin Willi2013-10-281-1/+0
| | | | This seems to be not required anymore with the LLVM 5 toolchain.
* charon-xpc: Properly xpc_retain() connections we xpc_release()Martin Willi2013-10-282-0/+2
|
* charon-xpc: Properly cast SA identifier to uintptr representationMartin Willi2013-10-281-1/+1
|
* charon-xpc: Don’t build against libvstr anymoreMartin Willi2013-10-282-14/+4
| | | | We now have our own printf backend and use it instead of Vstr.
* charon-xpc: Build with EAP-MD5 supportMartin Willi2013-10-281-2/+2
|
* utils: Fix check for fmemopen() fallback implementationMartin Willi2013-10-242-2/+3
|
* unit-tests: Set sa_len in sockaddr template data, if requiredMartin Willi2013-10-241-0/+6
|
* printf-hook-builtin: Don't rely on isinf() return value signednessMartin Willi2013-10-241-8/+9
| | | | | Many systems don't return a negative value for negative infinities; so do a separate check.
* watcher: Rebuild fdset when select() failsMartin Willi2013-10-241-1/+12
| | | | | | This should make sure we refresh the fdset if a user closes an FD it just removed. Some selects() seem to complain about the bad FD before signaling the notification pipe.
* rwlock: Disable thread cancelability while waiting in (fallback) rwlockMartin Willi2013-10-241-0/+7
| | | | | | An rwlock wait is not a thread cancellation point. As a canceled thread would not have released the mutex, the rwlock would have been left in unusable state.
* rwlock: Don't use buggy pthread_rwlock on OS XMartin Willi2013-10-241-0/+7
| | | | Recursive read locks don't seem to work properly, at least on 10.9.
* utils: Provide a fmemopen(3) fallback using BSD funopen()Martin Willi2013-10-243-0/+62
|
* Fixed sql/net2net-route-pem scenario evaluation5.1.1rc1Andreas Steffen2013-10-231-2/+2
|
* Added some example Debian SWID tagsAndreas Steffen2013-10-238-1/+211
|
* Added Brainpool ECP support to NEWSAndreas Steffen2013-10-231-0/+4
|
* Added two Brainpool IKEv2 scenariosAndreas Steffen2013-10-2322-0/+298
|
* pki: Replace BUILD_FROM_FD with passing a chunk via BUILD_BLOBTobias Brunner2013-10-2311-74/+54
| | | | This allows more than one builder to try parsing the data read from STDIN.
* chunk: Add helper function to create a chunk from data read from a file ↵Tobias Brunner2013-10-232-0/+40
| | | | descriptor
* semaphore: Support cancellation in wait functions of semaphore fallbackMartin Willi2013-10-231-4/+6
| | | | | Semaphore wait functions should be a thread cancellation point, but did not properly release the mutex in the fallback implementation.
* rwlock: Re-acquire rwlock even if condvar wait times outMartin Willi2013-10-231-1/+1
| | | | | A caller expects that the associated rwlock is held, whether the condvar gets signaled or the wait times out.
* Updated and split data.sqlAndreas Steffen2013-10-2318-4565/+392
|
* Adapted recipe and patches to freeradius-2.2.1Andreas Steffen2013-10-223-23/+4
|
* Support Ubuntu 13.10 measurementsAndreas Steffen2013-10-212-1/+46
|
* check it specified IF-TNCCS protocol is enabledAndreas Steffen2013-10-211-0/+6
|
* kernel-netlink: Check existence of linux/fib_rules.h, don't include it in ↵Tobias Brunner2013-10-184-77/+12
| | | | | | distribution This reverts commit b0761f1f0a5abd225edc291c8285f99a538e6a66.
* Merge branch 'icmp'Tobias Brunner2013-10-178-44/+245
|\ | | | | | | | | | | | | Improves handling of ICMP[v6] traffic selectors that specify message type and code. Fixes #421.
| * ipsec.conf.5: Note about ICMP[v6] message type/code addedTobias Brunner2013-10-171-0/+8
| |
| * updown: Properly configure ICMP[v6] message type and code in firewall rulesTobias Brunner2013-10-171-4/+29
| |
| * updown: Pass ICMP[v6] message type and code to updown scriptTobias Brunner2013-10-172-4/+27
| | | | | | | | The type is passed in $PLUTO_MY_PORT and the code in $PLUTO_PEER_PORT.
| * kernel-pfkey: Install ICMP[v6] type/code as expected by the Linux kernelTobias Brunner2013-10-171-19/+52
| |
| * kernel-netlink: Convert ports in acquires to ICMP[v6] type and codeTobias Brunner2013-10-171-3/+8
| |
| * kernel-netlink: Properly install policies with ICMP[v6] types and codesTobias Brunner2013-10-171-1/+12
| |
| * traffic-selector: Print ICMP[v6] message type and code in a more readable wayTobias Brunner2013-10-171-4/+35
| |
| * traffic-selector: Store ICMP[v6] message type and code properlyTobias Brunner2013-10-172-8/+70
| | | | | | | | We now store them as defined in RFC 4301, section 4.4.1.1.
| * traffic-selector: Move class to its own Doxygen groupTobias Brunner2013-10-172-1/+4
|/
* Merge branch 'ecc-brainpool'Tobias Brunner2013-10-176-9/+311
|\ | | | | | | Adds support for ECC Brainpool curves for DH exchanges.
| * proposal: Add ECC Brainpool DH groups to the default proposalTobias Brunner2013-10-171-0/+4
| |
| * openssl: Add workaround if ECC Brainpool curves are not definedTobias Brunner2013-10-171-11/+247
| |
| * openssl: Add support for ECC Brainpool curves for DH, if defined by OpenSSLTobias Brunner2013-10-172-6/+51
| | | | | | | | OpenSSL does not include them in releases before 1.0.2.
| * ecc: Added ECC Brainpool ECDH groups as registered with IANAAndreas Steffen2013-10-173-3/+20
|/
* unit-tests: Make test for bio_writer_t more portableTobias Brunner2013-10-171-2/+8
|
* libipsec: Don't print ciphertext with ICV in log messageTobias Brunner2013-10-171-1/+2
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-14 19:27:01 +0000