aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * charon-tkm: Add get_other_esa_id function to TKM kernel SADAdrian-Ken Rueegsegger2015-05-043-0/+103
| | | | | | | | | | The function gets the ESA id for another entry associated with the same security policy as the specified ESA.
| * charon-tkm: Only skip creation of first child SAAdrian-Ken Rueegsegger2015-05-041-0/+9
| | | | | | | | | | | | Use the new is_first boolean parameter of the ALERT_KEEP_ON_CHILD_SA_FAILURE alert to determine if the failure was caused by the first CHILD SA.
| * Add bool param to ALERT_KEEP_ON_CHILD_SA_FAILURE alertAdrian-Ken Rueegsegger2015-05-042-3/+8
| | | | | | | | | | The parameter indicates if the alert is raised upon failure to establish the first CHILD SA of an IKE SA.
| * charon-tkm: Fix SAD insertion when adding ESAAdrian-Ken Rueegsegger2015-05-041-1/+1
|/ | | | | Commit f5fc592 added the reqid to the SAD. The insert call swapped the order of the esa_id and reqid parameters.
* vici: Default to certificate subject for identityTimo Teräs2015-05-041-0/+37
| | | | | | | | If id is not specified and certificate authentication is used, use the certificate subject name as identity. Simplifies configuration as in most cases this is the right thing to do. Signed-off-by: Timo Teräs <timo.teras@iki.fi>
* swanctl: Implement monitoring of IKE_SA and CHILD_SA changesTimo Teräs2015-05-042-2/+84
| | | | Signed-off-by: Timo Teräs <timo.teras@iki.fi>
* vici: Add support for ike_sa and child_sa updown notificationsTimo Teräs2015-05-043-0/+137
| | | | | | Useful for monitoring and management purposes. Signed-off-by: Timo Teräs <timo.teras@iki.fi>
* vici: Add function to test if an event should be generatedTimo Teräs2015-05-042-0/+74
| | | | | | | Useful to avoid generating vici messages if they are not needed and their generation is heavy operation. Signed-off-by: Timo Teräs <timo.teras@iki.fi>
* swanctl: Add missing unit in install-time logRomain Francoise2015-05-041-1/+1
|
* init: Don't build/install legacy systemd service if charon isn't builtRomain Francoise2015-05-041-0/+2
| | | | | | If the user configures the build to only include charon-systemd the "legacy" systemd service isn't useful, so skip its generation and installation.
* crypt-burn: free() associated data after testMartin Willi2015-05-041-0/+1
|
* testing: Updated carol's certificate from research CA and dave's certificate ↵5.3.1dr1Andreas Steffen2015-04-2652-846/+898
| | | | from sales CA
* testing: Wait for DH crypto tests to completeAndreas Steffen2015-04-268-8/+8
|
* imv_policy_manager: Added capability to execute an allow or block shell ↵Andreas Steffen2015-04-2610-3/+59
| | | | command string
* testing: Migration of KVM framework to Linux 4.x kernelAndreas Steffen2015-04-253-5/+2207
|
* Version bump to 5.3.1dr1Andreas Steffen2015-04-241-1/+1
|
* Fixed PB-TNC directionality debug messageAndreas Steffen2015-04-241-1/+1
|
* ike-vendor: Add some Microsoft vendor IDsTobias Brunner2015-04-211-0/+10
|
* apidoc: Fix rebuild in out-of-tree buildsTobias Brunner2015-04-201-1/+1
|
* leak-detective: Use passed callback to report leaksTobias Brunner2015-04-201-2/+2
| | | | | | | | This prevented `stroke memusage` from reporting the leaks on the console. Instead, they were sent to the callbacks set up by libstrongswan. Fixes a426851f6362 ("leak-detective: Use callback functions to report leaks and usage information").
* openssl: Don't refer to EVP_des_ecb() if OpenSSL is built without DES supportTobias Brunner2015-04-171-0/+2
| | | | | | While DES-ECB is not registered by the plugin in this case (so the function will never actually be called), the compiler still warns about the implicitly declared function.
* apidoc: Fix make target dependency find precedenceMartin Willi2015-04-161-1/+1
|
* Merge branch 'utils-split'Martin Willi2015-04-1626-1757/+2180
|\ | | | | | | | | | | | | | | Split up the almighty utils.[ch] to separate files in the utils/utils subfolder. These are not meant to include manually, but bring back some order to all this functionality included through utils.h. Additionally give some love to apidoc generation.
| * apidoc: Conditionally run doxygen if any header/Markdown files have changedMartin Willi2015-04-161-2/+4
| |
| * apidoc: Set QUIET to YES, suppressing any parsing/generating status outputMartin Willi2015-04-161-1/+1
| | | | | | | | | | As WARNING messages still get printed, this makes spotting any warnings much simpler.
| * apidoc: Enable documentation of static functionsMartin Willi2015-04-161-1/+1
| | | | | | | | | | As we scan for header files only, this does not affect any local functions, but documents any static inlines we define in header files.
| * strerror: Move to its own Doxygen subgroupMartin Willi2015-04-161-1/+2
| |
| * utils: Clean up includesMartin Willi2015-04-162-36/+31
| |
| * align: Move min/max/padding/alignment functions to separate filesMartin Willi2015-04-166-109/+154
| |
| * time: Move time related functions to separate filesMartin Willi2015-04-166-191/+238
| |
| * object: Move OO programming helper macros to a separate header fileMartin Willi2015-04-163-107/+128
| |
| * status: Move status_t type and functions to separate filesMartin Willi2015-04-166-116/+125
| |
| * path: Move path related utility functions to separate filesMartin Willi2015-04-166-201/+249
| |
| * tty: Move tty related functions to separate filesMartin Willi2015-04-166-110/+157
| |
| * memory: Move memory manipulation related functions to separate filesMartin Willi2015-04-166-380/+424
| |
| * string: Move string related utility functions to separate filesMartin Willi2015-04-166-155/+199
| |
| * byteorder: Move byte order related functions to separate header fileMartin Willi2015-04-163-137/+163
| |
| * types: Use generic type definitions to separate header fileMartin Willi2015-04-163-63/+89
| |
| * atomics: Move atomics/recounting support to separate filesMartin Willi2015-04-166-183/+251
|/
* unit-tests: Further increase the test vector testing timeoutMartin Willi2015-04-161-1/+1
| | | | Some build bots running make check seem to have longer for the DH testing.
* test-vectors: Define test vector symbols as externMartin Willi2015-04-161-7/+7
| | | | | | We don't actually define a vector, but only prototype the test vector implemented in a different file. GCC uses the correct symbol during testing, but clang correctly complains about duplicated symbols during linking.
* Fix years in some copyright statementsTobias Brunner2015-04-164-4/+4
|
* aesni: Fix doxygen groupsMartin Willi2015-04-151-2/+2
|
* Merge branch 'dh-test-vectors'Martin Willi2015-04-1533-79/+1806
|\ | | | | | | | | Add a Diffie-Hellman backend test method, a set of test vectors and implement testing of the gmp, openssl and gcrypt DH backend.
| * kernel-netlink: Don't mangle verbosity during test initializationMartin Willi2015-04-151-2/+0
| | | | | | | | | | We now properly manage thread verbosity in the test framework, and don't need to silence thread spawning messages.
| * unit-tests: Set test verbosity just after test suite loadingMartin Willi2015-04-151-10/+9
| | | | | | | | | | | | We see any plugin startup messages during suite configuration, where initialization is called once to query plugin features. No need to be verbose and show these messages once again in the first test.
| * crypto-factory: Remove obsolete transform testing functionsMartin Willi2015-04-152-54/+0
| |
| * unit-tests: Use progressive testing of transforms with test vectorsMartin Willi2015-04-151-7/+26
| | | | | | | | | | | | This allows us to show which transform from which plugin failed. Also, we use the new cleanup handler functionality that allows proper deinitialization on failure or timeout.
| * transform: Add a getter for the enum_names for a specific transform typeMartin Willi2015-04-152-0/+40
| |
| * enum-names: Fail gracefully when passing a NULL value as enum namesMartin Willi2015-04-152-1/+15
| |
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-10 04:36:35 +0000