aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * travis: Install pip to install pytest in "all" testsMartin Willi2015-03-182-1/+8
| | | | | | | | | | This allows ./configure to detect py.test, and execute python unit tests we provide in the vici python egg.
| * vici: Add support for python 3Björn Schuberg2015-03-185-8/+29
| |
| * vici: Execute python tests during "check" if py.test is availableMartin Willi2015-03-181-0/+4
| |
| * configure: Check optional py.test availability when building with python eggsMartin Willi2015-03-181-0/+2
| |
| * vici: Add test of Packet layer in python libraryBjörn Schuberg2015-03-181-1/+47
| |
| * vici: Add test of Message (de)serialization in python libraryBjörn Schuberg2015-03-183-0/+100
| |
| * vici: Evaluate Python streamed command results, and raise CommandExceptionMartin Willi2015-03-181-1/+10
| |
| * vici: Catch Python GeneratorExit to properly cancel streamed event iterationMartin Willi2015-03-182-1/+12
| |
| * vici: Fall back to heap buffer when vararg printing on stack failsMartin Willi2015-03-181-21/+44
| | | | | | | | This avoids failures when building log event messages including larger hexdumps.
| * vici: Return a Python generator instead of a list for streamed responsesMartin Willi2015-03-182-47/+25
| | | | | | | | | | | | | | In addition that it may reduce memory usage and improve performance for large responses, it returns immediate results. This is important for longer lasting commands, such as initiate/terminate, where immediate log feedback is preferable when interactively calling such commands.
| * vici: Raise a Python CommandException instead of returning a CommandResultMartin Willi2015-03-182-82/+42
| |
| * vici: Add initial Python egg documentation to READMEMartin Willi2015-03-181-0/+65
| |
| * vici: Use OrderedDict to handle vici responses in Python libraryMartin Willi2015-03-181-2/+3
| | | | | | | | | | The default Python dictionaries are unordered, but order is important for some vici trees (for example the order of authentication rounds).
| * vici: Return authentication rounds with unique namesMartin Willi2015-03-182-3/+7
| | | | | | | | | | | | To simplify handling of authentication rounds in dictionaries/hashtables on the client side, we assign unique names to each authentication round when listing connection.
| * vici: Rebuild ruby gem on source file changesMartin Willi2015-03-181-1/+1
| |
| * vici: Use default Unix vici socket if none passed to ruby constructorMartin Willi2015-03-182-4/+7
| | | | | | | | | | While we currently have a static path instead of one generated with Autotools, this at least is congruent to what we have in the Python library.
| * vici: Support non-Unix sockets for vici connections using PythonMartin Willi2015-03-182-7/+9
| |
| * vici: Add python egg setuptools building and installation using easy_installMartin Willi2015-03-181-0/+15
| | | | | | | | | | | | An uninstall target is currently not supported, as there is no trivial way with either plain setuptools or with easy_install. pip would probably be the best choice, but we currently don't depend on it.
| * vici: Generate a version specific setup.py for setuptools installationMartin Willi2015-03-183-0/+41
| |
| * vici: Include python package in distributionMartin Willi2015-03-183-0/+10
| |
| * configure: Add --enable-python-eggs and --with-pythoneggdir optionsMartin Willi2015-03-181-0/+15
| | | | | | | | | | Detect easy_install for Python egg installation to install any egg we provide in strongSwan.
| * vici: Add python package MIT licenseBjörn Schuberg2015-03-182-0/+20
| |
| * vici: Expose Session as a top-level symbol in python packageBjörn Schuberg2015-03-181-0/+1
| |
| * vici: Introduce main API Session class in python packageBjörn Schuberg2015-03-181-1/+244
| |
| * vici: Add a python vici command execution handlerBjörn Schuberg2015-03-182-1/+134
| |
| * vici: Add vici python protocol handlerBjörn Schuberg2015-03-184-0/+199
|/
* Merge branch 'swanctl-pkcs12'Martin Willi2015-03-184-59/+246
|\ | | | | | | | | | | Add support for loading PKCS#12 containers from a swanctl/pkcs12 directory. Fixes #815.
| * swanctl: Cache entered PKCS#12 decryption secretMartin Willi2015-03-181-6/+23
| | | | | | | | | | It is usually used more than once, but most likely the same for decryption and MAC verification.
| * swanctl: Support loading PKCS#12 containers from a pkcs12 swanctl directoryMartin Willi2015-03-184-0/+128
| |
| * swanctl: Generalize private key decryption to support other credential typesMartin Willi2015-03-181-55/+97
|/
* encoding: Verify the length of KE payload data for known groupsMartin Willi2015-03-181-0/+67
| | | | | | | IKE is very strict in the length of KE payloads, and it should be safe to strictly verify their length. Not doing so is no direct threat, but allows DDoS amplification by sending short KE payloads for large groups using the target as the source address.
* ikev2: Migrate MOBIKE additional peer addresses to new SA after IKE_SA rekeyingMartin Willi2015-03-181-0/+6
|
* ikev2: Immediately initiate queued tasks after establishing rekeyed IKE_SAMartin Willi2015-03-185-0/+176
| | | | | | If additional tasks get queued before/while rekeying an IKE_SA, these get migrated to the new IKE_SA. We previously did not trigger initiation of these tasks, though, leaving the task unexecuted until a new task gets queued.
* Version bump to 5.3.0dr2Andreas Steffen2015-03-161-1/+1
|
* Replace kid by aik_id in ITA TBOOT functional componentAndreas Steffen2015-03-161-7/+2
|
* Fixed two BLISS key type identifier stringsAndreas Steffen2015-03-161-2/+2
|
* charon-systemd: Add missing semicolonMartin Willi2015-03-161-1/+1
| | | | References #887, fixes f3c83322.
* osx: Include eap-gtc plugin in build instructionsMartin Willi2015-03-161-1/+1
|
* Added availability of TNC AR IP address to IMVs to NEWS5.3.0dr1Andreas Steffen2015-03-151-0/+4
|
* Create TPM TBOOT Measurement groupAndreas Steffen2015-03-151-0/+18
|
* vici: Use %u to print stats returned by mallinfo(3)Tobias Brunner2015-03-131-4/+4
| | | | Fixes #886.
* stroke: Use %u to print stats returned by mallinfo(3)Tobias Brunner2015-03-131-1/+1
| | | | References #886.
* charon-systemd: Add support to configure user and group via strongswan.confTobias Brunner2015-03-131-6/+19
| | | | Fixes #887.
* eap-radius: Increase Acct-Session-ID string bufferMartin Willi2015-03-131-1/+1
| | | | | | | | As the startup timestamp needs 10 characters, we only have left 4 characters for the IKE_SA unique identifier. This is insufficient when having 10000 IKE_SAs or more established, resulting in non-unique session identifiers. Fixes #889.
* testing: Remove obsolete leftnexthop option from configsTobias Brunner2015-03-126-6/+0
|
* ikev2: Don't set old IKE_SA to REKEYING state during make-before-break reauthMartin Willi2015-03-111-1/+0
| | | | | | | | | We are actually not in rekeying state, but just trigger a separate, new IKE_SA as a replacement for the current IKE_SA. Switching to the REKEYING state disables the invocation of both IKE and CHILD_SA updown hooks as initiator, preventing the removal of any firewall rules. Fixes #885.
* ha: Destroy synced IKE_SA if no configuration is found during updateMartin Willi2015-03-101-0/+3
|
* ikev1: Don't handle DPD timeout job if IKE_SA got passiveMartin Willi2015-03-101-0/+6
| | | | | | While a passively installed IKE_SA does not queue a DPD timeout job, one that switches from active to passive might execute it. Ignore such a queued job if the IKE_SA is in passive state.
* testing: Don't check for exact IKEv1 fragment sizeMartin Willi2015-03-101-2/+2
| | | | | Similar to 7a9c0d51, the exact packet size depends on many factors we don't want to consider in this test case.
* testing: Fix active/passive role description in ha/both-active test caseMartin Willi2015-03-101-2/+2
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-11 18:27:11 +0000