aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* testing: Updated carol's certificate from research CA and dave's certificate ↵5.3.1dr1Andreas Steffen2015-04-2652-846/+898
| | | | from sales CA
* testing: Wait for DH crypto tests to completeAndreas Steffen2015-04-268-8/+8
|
* imv_policy_manager: Added capability to execute an allow or block shell ↵Andreas Steffen2015-04-2610-3/+59
| | | | command string
* testing: Migration of KVM framework to Linux 4.x kernelAndreas Steffen2015-04-253-5/+2207
|
* Version bump to 5.3.1dr1Andreas Steffen2015-04-241-1/+1
|
* Fixed PB-TNC directionality debug messageAndreas Steffen2015-04-241-1/+1
|
* ike-vendor: Add some Microsoft vendor IDsTobias Brunner2015-04-211-0/+10
|
* apidoc: Fix rebuild in out-of-tree buildsTobias Brunner2015-04-201-1/+1
|
* leak-detective: Use passed callback to report leaksTobias Brunner2015-04-201-2/+2
| | | | | | | | This prevented `stroke memusage` from reporting the leaks on the console. Instead, they were sent to the callbacks set up by libstrongswan. Fixes a426851f6362 ("leak-detective: Use callback functions to report leaks and usage information").
* openssl: Don't refer to EVP_des_ecb() if OpenSSL is built without DES supportTobias Brunner2015-04-171-0/+2
| | | | | | While DES-ECB is not registered by the plugin in this case (so the function will never actually be called), the compiler still warns about the implicitly declared function.
* apidoc: Fix make target dependency find precedenceMartin Willi2015-04-161-1/+1
|
* Merge branch 'utils-split'Martin Willi2015-04-1626-1757/+2180
|\ | | | | | | | | | | | | | | Split up the almighty utils.[ch] to separate files in the utils/utils subfolder. These are not meant to include manually, but bring back some order to all this functionality included through utils.h. Additionally give some love to apidoc generation.
| * apidoc: Conditionally run doxygen if any header/Markdown files have changedMartin Willi2015-04-161-2/+4
| |
| * apidoc: Set QUIET to YES, suppressing any parsing/generating status outputMartin Willi2015-04-161-1/+1
| | | | | | | | | | As WARNING messages still get printed, this makes spotting any warnings much simpler.
| * apidoc: Enable documentation of static functionsMartin Willi2015-04-161-1/+1
| | | | | | | | | | As we scan for header files only, this does not affect any local functions, but documents any static inlines we define in header files.
| * strerror: Move to its own Doxygen subgroupMartin Willi2015-04-161-1/+2
| |
| * utils: Clean up includesMartin Willi2015-04-162-36/+31
| |
| * align: Move min/max/padding/alignment functions to separate filesMartin Willi2015-04-166-109/+154
| |
| * time: Move time related functions to separate filesMartin Willi2015-04-166-191/+238
| |
| * object: Move OO programming helper macros to a separate header fileMartin Willi2015-04-163-107/+128
| |
| * status: Move status_t type and functions to separate filesMartin Willi2015-04-166-116/+125
| |
| * path: Move path related utility functions to separate filesMartin Willi2015-04-166-201/+249
| |
| * tty: Move tty related functions to separate filesMartin Willi2015-04-166-110/+157
| |
| * memory: Move memory manipulation related functions to separate filesMartin Willi2015-04-166-380/+424
| |
| * string: Move string related utility functions to separate filesMartin Willi2015-04-166-155/+199
| |
| * byteorder: Move byte order related functions to separate header fileMartin Willi2015-04-163-137/+163
| |
| * types: Use generic type definitions to separate header fileMartin Willi2015-04-163-63/+89
| |
| * atomics: Move atomics/recounting support to separate filesMartin Willi2015-04-166-183/+251
|/
* unit-tests: Further increase the test vector testing timeoutMartin Willi2015-04-161-1/+1
| | | | Some build bots running make check seem to have longer for the DH testing.
* test-vectors: Define test vector symbols as externMartin Willi2015-04-161-7/+7
| | | | | | We don't actually define a vector, but only prototype the test vector implemented in a different file. GCC uses the correct symbol during testing, but clang correctly complains about duplicated symbols during linking.
* Fix years in some copyright statementsTobias Brunner2015-04-164-4/+4
|
* aesni: Fix doxygen groupsMartin Willi2015-04-151-2/+2
|
* Merge branch 'dh-test-vectors'Martin Willi2015-04-1533-79/+1806
|\ | | | | | | | | Add a Diffie-Hellman backend test method, a set of test vectors and implement testing of the gmp, openssl and gcrypt DH backend.
| * kernel-netlink: Don't mangle verbosity during test initializationMartin Willi2015-04-151-2/+0
| | | | | | | | | | We now properly manage thread verbosity in the test framework, and don't need to silence thread spawning messages.
| * unit-tests: Set test verbosity just after test suite loadingMartin Willi2015-04-151-10/+9
| | | | | | | | | | | | We see any plugin startup messages during suite configuration, where initialization is called once to query plugin features. No need to be verbose and show these messages once again in the first test.
| * crypto-factory: Remove obsolete transform testing functionsMartin Willi2015-04-152-54/+0
| |
| * unit-tests: Use progressive testing of transforms with test vectorsMartin Willi2015-04-151-7/+26
| | | | | | | | | | | | This allows us to show which transform from which plugin failed. Also, we use the new cleanup handler functionality that allows proper deinitialization on failure or timeout.
| * transform: Add a getter for the enum_names for a specific transform typeMartin Willi2015-04-152-0/+40
| |
| * enum-names: Fail gracefully when passing a NULL value as enum namesMartin Willi2015-04-152-1/+15
| |
| * crypto-factory: Add enumerator method to support individual transform testingMartin Willi2015-04-152-0/+127
| |
| * unit-tests: Invoke all registered thread cleanup handlers on test failureMartin Willi2015-04-151-0/+3
| | | | | | | | | | | | | | | | | | | | | | If a test fails in a timeout or a test failure, longjmp() is used to restore the thread context and handle test failure. However, there might be unreleased resources, namely locks, which prevent the library to clean up properly after finishing the test. By using thread cleanup handlers, we can release any test subject internal or test specific external resources on test failure. We do so by calling all registered cleanup handlers.
| * thread: Add a function to pop and call all registered cleanup handlersMartin Willi2015-04-154-0/+78
| |
| * thread: Don't acquire lock for thread_cleanup_push/popMartin Willi2015-04-151-5/+0
| | | | | | | | | | This is called only by the thread for its own thread_t, and does not need synchronization.
| * travis: Run a gcrypt test with leak-detectiveMartin Willi2015-04-152-5/+1
| | | | | | | | And also enable gcrypt in the all tests with leak-detective enabled.
| * gcrypt: Explicitly initialize RNG backend to allocate static dataMartin Willi2015-04-151-0/+3
| | | | | | | | | | | | The libgcrypt RNG implementation uses static buffer allocation which it does not free. There is no symbol we can catch in leak-detective, hence we explicitly initialize the RNG during the whitelisted gcrypt_plugin_create() function.
| * leak-detective: Whitelist gcrypt_plugin_create()Martin Willi2015-04-151-0/+1
| | | | | | | | | | | | gcry_check_version() does not free statically allocated resources. However, we can't whitelist it in some versions, as it is not a resolvable symbol name. Instead, whitelist our own plugin constructor function.
| * unit-tests: Add a TESTS_PLUGINS environment variableMartin Willi2015-04-152-1/+6
| | | | | | | | This is often more convenient than specifying plugins in a configuration file.
| * unit-tests: Use a larger timeout for test vector testingMartin Willi2015-04-151-0/+1
| | | | | | | | | | As we test DH calculations this now takes more time. If multiple DH backends are enabled, we likely hit the default test timeout.
| * gcrypt: Support setting private value and testing of DH backendMartin Willi2015-04-151-0/+19
| |
| * openssl: Support setting ECDH private valuesMartin Willi2015-04-151-0/+44
| |