aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * nm: Pass external gateway to NMTobias Brunner2016-09-051-1/+8
| | | | | | | | This seems to be required by newer versions.
| * nm: Update auth-dialogTobias Brunner2016-09-052-106/+251
| | | | | | | | | | | | This updates the auth dialog so that passwords are properly retrieved (e.g. for the nm-applet). It also adds support for external UI mode and properly handles secret flags.
| * nm: Enforce min. length for PSKs in backendTobias Brunner2016-09-051-0/+10
| |
| * nm: Add minimum length constraint for PSK passwords in connection editorTobias Brunner2016-09-051-0/+16
| | | | | | | | We already have this restriction in the auth-dialog.
| * nm: Bump minor version to 1.4.0Lubomir Rintel2016-09-051-1/+1
| | | | | | | | | | | | This is probably a good idea to do to signal there's significant changes in dependencies to the distro package maintainers with libnm port and associated changes.
| * nm: Bump to GTK+ 3.0Lubomir Rintel2016-09-051-1/+1
| | | | | | | | It's been released years ago; we depend on newer stuff than that now.
| * nm: Replace libgnomeui with libnma for password dialogLubomir Rintel2016-09-054-49/+30
| | | | | | | | | | | | | | | | libgnomeui is long deprecated. There's one functional difference: the choice to save the passwords is gone. The password flags and saved password should be set in the preferences dialog, but this commit does not fix that.
| * nm: Grey out the unneeded authentication optionsLubomir Rintel2016-09-051-52/+39
| | | | | | | | | | Hiding and showing the items is not ideal, since it leaves the spacing in place and the layout gets really messy.
| * nm: Add a widget for setting a passwordLubomir Rintel2016-09-054-28/+206
| | | | | | | | | | | | | | | | | | It was only possible to set the password from the authentication dialog, which is not ideal; as it requires a connection attempt. This adds an input entry along with a primary icon from libnma/libnm-gtk which allows selecting the backend and flags for the password (system, session agent, always ask or empty).
| * nm: Port to libnmLubomir Rintel2016-09-058-48/+63
| |
| * nm: Check for libnmLubomir Rintel2016-09-054-11/+13
| | | | | | | | | | libnm replaces libnm-glib. This will make sense with port to libnm and is done to reduce line noise in that commit.
| * nm: Build two plugin binaries from the single sourceLubomir Rintel2016-09-051-8/+26
|/ | | | | | | | | | | | | | | | | | | They're both the same now. We'll port the new one to libnm in follow-up commits. NetworkManager 1.2 (which is currently versioned as 1.1.0) is going to bring some new ABI while still supporting the old one. There's new VPN service and UI plugin APIs in libnm. There's one difficulty though -- the connection editor 1.2 will be linked against libnm and a new libnma library it will provide (as opposed to libnm-glib and libnm-gtk), thus will be incapable of loading of property plugins that are linked with the old libraries (due to glib type system limitations). However, we must not break support for other connection editors (GNOME control center, older versions of nm-connection-editor, etc.) therefore we need to build two versions of the property plugin. NetworkManager 1.2's libnm will provide a shim that makes it easy.
* Merge branch 'nm-updates'Tobias Brunner2016-09-0510-388/+366
|\ | | | | | | | | | | | | Provides several fixes and cleanups for the NM build (does not include fixes for recent NM versions). Closes strongswan/strongswan#39.
| * nm: Version bumb to 1.3.2Tobias Brunner2016-09-051-1/+1
| |
| * nm: Remove incorrect top-level GtkWindowTobias Brunner2016-09-051-312/+306
| | | | | | | | Fixes #1013.
| * nm: Replace libgnomekeyring with libsecretLubomir Rintel2016-09-054-40/+20
| | | | | | | | The former is deprecated and the newer API is nicer anyway.
| * nm: Drop useless calls to AC_SUBSTLubomir Rintel2016-09-051-11/+0
| | | | | | | | PKG_CHECK_MODULES does the substitutions.
| * nm: Drop some unneeded dependenciesLubomir Rintel2016-09-053-10/+0
| |
| * nm: Install the .name file into /usr/lib/NetworkManager/VPNLubomir Rintel2016-09-053-3/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | It's the preferred location for system-provided plugins. A compatible file in /etc is still kept. Also, the compatibility /etc file needs to use a full path due to a bug in GNOME Shell. The full path to a arch-dependent file in a supposedly arch-independent file is a sin and a multilib violation in some distributions. However. some pre-release versions of NetworkManager-1.2 as shipped by distributions require a full path. Let's keep a configure-time option for that.
| * nm: Automatically determine NM plugin directoryTobias Brunner2016-09-052-2/+3
| |
| * nm: Automatically determine path to the auth dialogLubomir Rintel2016-09-054-3/+6
| |
| * nm: Don't do <deny send_interface="..." /> in dbus service fileLubomir Rintel2016-09-051-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It does more than intended; apart from denying messages to that particular interface it also denies all messages non-qualified with an interface globally. This blocks messages completely unrelated to strongSwan's VPN plugin, such as NetworkManager communication with the VPN plugins. From the dbus-daemon manual: Be careful with send_interface/receive_interface, because the interface field in messages is optional. In particular, do NOT specify <deny send_interface="org.foo.Bar"/>! This will cause no-interface messages to be blocked for all services, which is almost certainly not what you intended. Always use rules of the form: <deny send_interface="org.foo.Bar" send_destination="org.foo.Service"/> We can just safely remove those rules, since we're sufficiently protected by the send_destination matches and method calls are disallowed by default anyway. Closes strongswan/strongswan#42.
| * nm: Move the D-Bus policy to charon-nmLubomir Rintel2016-09-053-5/+5
|/ | | | It's needed for useful use of charon-nm, unlike the GUI.
* nm: Add AppStream metadataLubomir Rintel2016-09-055-1/+51
| | | | | | | This will ensure the strongSwan NetworkManager plugin will be easily installable from the app stores such as GNOME Software. Closes strongswan/strongswan#41.
* pt-tls-client: Added support of ECDSA keysAndreas Steffen2016-08-311-7/+23
|
* libimcv: No need to load AIK pubkey if AIK certificate is availableAndreas Steffen2016-08-311-13/+16
|
* swanctl: Document how DH groups in CHILD_SA proposals are appliedTobias Brunner2016-08-311-6/+13
| | | | References #1039.
* man: Update description of the esp keywordTobias Brunner2016-08-311-8/+19
| | | | | | | Clarifies how DH groups are applied, updates the proposal selection description and ESN can now also be configured for IKEv1. References #1039.
* padlock: Use builtin bswap32() to fix compilation on FreeBSDTobias Brunner2016-08-311-6/+5
| | | | Fixes #591.
* testing: Try to properly abort a test run after CTRL-CTobias Brunner2016-08-301-0/+15
| | | | | | | | | The run is aborted after the current scenario. Depending on which command was interrupted it might be necessary to press CTRL-C multiple times (e.g. if a later command depends on the interrupted one). This should fix HTML files and get us some proper console output after the run.
* testing: Report number of tests per subdirectory in main indexTobias Brunner2016-08-301-7/+22
|
* testing: Mount and serve testresults from the hostTobias Brunner2016-08-293-10/+8
| | | | | | | | This avoids having to copy testresults, makes results of cancelled runs browsable (runs may actually be followed live) and preserves old results when rebuilding guest images (e.g. when using the build-strongswan script). The number of consecutive test runs without any intermittent rebuild of the guest images is also not limited by the image size anymore.
* testing: Create a symlink to the testresults under a known path when ↵Tobias Brunner2016-08-292-0/+8
| | | | starting the environment
* testing: Serve images in testresults via mod_rewrite and not a symlinkTobias Brunner2016-08-293-1/+4
|
* conf: Extend description of charon.plugins.kernel-netlink.xfrm_acq_expiresTobias Brunner2016-08-291-5/+9
|
* proposal: Use proper list to get function pointer when adding custom parserThomas Egerer2016-08-291-1/+1
| | | | Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
* android: Add missing xof.c fileTobias Brunner2016-08-291-0/+1
| | | | Fixes #2093.
* xof: Add header to dev headersTobias Brunner2016-08-291-1/+2
|
* Version bump to 5.5.1dr25.5.1dr2Andreas Steffen2016-08-262-3/+3
|
* configure: Improve check for built-in __atomic_* functionsTobias Brunner2016-08-261-2/+13
| | | | | | | | | | | | | | With AC_SEARCH_LIBS() we don't succeed if the searched function is a built-in as the check uses the wrong signature so the built-in will not be applied (the warning issued by GCC is "conflicting types for built-in function '...'"). So even if not required, libatomic will be linked if it is found, which could be problematic if compiling on a separate host and the target host does not have libatomic installed. Also, some tests showed that it's more likely that __atomic_and_fetch() requires linking libatomic than __atomic_load_n() does. References #1533.
* travis: Add a workaround for a bug regarding libtool installed via HomebrewTobias Brunner2016-08-251-0/+2
|
* ikev1: Don't require AH mapping for integrity algorithm when generating proposalThomas Egerer2016-08-251-6/+9
| | | | Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
* libtpmtss: TCTI finalization call changedAndreas Steffen2016-08-251-1/+2
|
* conf: aikpub2.opt added to Makefile.amAndreas Steffen2016-08-251-0/+1
|
* pki: Allow to load CRLs from files in --verifyTobias Brunner2016-08-252-3/+21
|
* ikev1: Ignore the last two bytes of the Cisco Unity vendor IDTobias Brunner2016-08-241-0/+3
| | | | | | | | | These seem to indicate the major and minor version of the protocol, like e.g. for the DPD vendor ID. Some implementations seem to send versions other than 1.0 so we just ignore these for now when checking for known vendor IDs. Fixes #2088.
* utils: Fix definition of BYTE_ORDER with MinGWTobias Brunner2016-08-242-2/+6
|
* ikev1: Accept more than one certificate payload in aggressive modeTobias Brunner2016-08-171-2/+2
| | | | Fixes #2085.
* testing: Virtual IPs went missingAndreas Steffen2016-08-165-15/+17
|
* unit-tests: Removed unused variableAndreas Steffen2016-08-111-2/+0
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-03 05:49:44 +0000