Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Merge branch 'attr-enum' | Martin Willi | 2014-06-17 | 7 | -15/+104 | |
|\ | | | | | | | | | | | Introduces a handle_vips() hook very similar to assign_vips(), but for clients handling virtual IPs and other configuration attributes. Non-handled attributes are stored on the IKE_SA as well and can be enumerated. | |||||
| * | bus: Add a handle_vips() hook invoked after handling configuration attributes | Martin Willi | 2014-06-17 | 6 | -0/+53 | |
| | | | | | | | | | | | | | | | | | | Similar to assign_vips() used by a peer assigning virtual IPs to the other peer, the handle_vips() hook gets invoked on a peers after receiving attributes. On release of the same attributes the hook gets invoked again. This is useful to inspect handled attributes, as the ike_updown() hook is invoked after authentication, when attributes have not been handled yet. | |||||
| * | ikev1: Invoke the assign_vips() bus hook for IKEv1 as well | Martin Willi | 2014-06-16 | 2 | -3/+7 | |
| | | ||||||
| * | ike: Create an enumerator for (un-)handled configuration attributes on IKE_SA | Martin Willi | 2014-06-16 | 2 | -0/+32 | |
| | | ||||||
| * | ike: Store unhandled attributes on IKE_SA as well | Martin Willi | 2014-06-16 | 4 | -12/+12 | |
|/ | ||||||
* | Version bump to 5.2.0rc1 | Andreas Steffen | 2014-06-15 | 1 | -1/+1 | |
| | ||||||
* | Mentioned first six swanctl scenarios in NEWS5.2.0dr6 | Andreas Steffen | 2014-06-14 | 1 | -0/+1 | |
| | ||||||
* | Added swanctl/rw-psk-fqdn and swanctl/rw-psk-ipv4 scenarios | Andreas Steffen | 2014-06-14 | 22 | -0/+441 | |
| | ||||||
* | Single-line --raw mode simplifies evaltest of swanctl scenarios | Andreas Steffen | 2014-06-14 | 5 | -92/+16 | |
| | ||||||
* | Split swanctl --raw mode into single-line and --pretty mode | Andreas Steffen | 2014-06-14 | 18 | -185/+310 | |
| | ||||||
* | Added swanctl/ip-pool-db scenario | Andreas Steffen | 2014-06-11 | 11 | -0/+246 | |
| | ||||||
* | Updated strongTNC configuration | Andreas Steffen | 2014-06-11 | 8 | -12/+15 | |
| | ||||||
* | Added swanctl/ip-pool scenario | Andreas Steffen | 2014-06-10 | 11 | -0/+231 | |
| | ||||||
* | Allow multiple hash values in the file reference database | Andreas Steffen | 2014-06-10 | 2 | -32/+60 | |
| | ||||||
* | Added swanctl/rw-cert scenario | Andreas Steffen | 2014-06-10 | 11 | -0/+216 | |
| | ||||||
* | Added Android 4.3 and 4.4.3 to imv database | Andreas Steffen | 2014-06-10 | 1 | -0/+24 | |
| | ||||||
* | Define default swanctl credentials in hosts directory | Andreas Steffen | 2014-06-10 | 30 | -4/+383 | |
| | ||||||
* | Added missing units (s = seconds) | Andreas Steffen | 2014-06-10 | 1 | -1/+1 | |
| | ||||||
* | Fixes in SWID entity support | Andreas Steffen | 2014-06-08 | 2 | -19/+7 | |
| | ||||||
* | Merge branch 'win-32bit' | Martin Willi | 2014-06-06 | 13 | -38/+68 | |
|\ | | | | | | | | | Fixes some issues when building 32-bit Windows binaries. Mostly related to the call API. Introduces a Travis 32-bit Windows build variant. | |||||
| * | travis: Add a Windows 32-bit variant build test | Martin Willi | 2014-06-06 | 2 | -6/+18 | |
| | | ||||||
| * | windows: Link against psapi32 | Martin Willi | 2014-06-06 | 1 | -1/+1 | |
| | | | | | | | | | | On some version GetModuleFileNameEx/GetModuleInformation is in psapi32 instead of kernel32. We link to both libraries to make sure we have it. | |||||
| * | backtrace: Use GetModuleInformation/GetModuleFileNameEx directly on Win32 | Martin Willi | 2014-06-06 | 1 | -2/+10 | |
| | | | | | | | | The K32 variants are actually needed on 64-bit only. | |||||
| * | windows: Use WINAPI call convention for Windows API callbacks | Martin Willi | 2014-06-06 | 8 | -23/+28 | |
| | | | | | | | | | | For x86_64 it does not actually matter, but for i686 builds the call convention is different with WINAPI. | |||||
| * | windows: Do not check if having clock_gettime() | Martin Willi | 2014-06-06 | 1 | -6/+11 | |
|/ | | | | | Windows does not have it, but libwinpthread has. If this library is available during build, it will be linked, which we prefer to avoid. | |||||
* | Version bump to 5.2.0dr6 | Andreas Steffen | 2014-06-06 | 1 | -1/+1 | |
| | ||||||
* | Ubuntu 14.04 updated to 3.13.0-29 kernel | Andreas Steffen | 2014-06-06 | 1 | -1/+1 | |
| | ||||||
* | Extended pt-tls-client PLUGINS list | Andreas Steffen | 2014-06-06 | 1 | -1/+1 | |
| | ||||||
* | Updated REST API | Andreas Steffen | 2014-06-06 | 2 | -7/+17 | |
| | ||||||
* | android: Add all Android.mk files to the tarball | Tobias Brunner | 2014-06-06 | 3 | -1/+4 | |
| | ||||||
* | Fixed typo in strongswan.conf | Andreas Steffen | 2014-06-05 | 1 | -1/+1 | |
| | ||||||
* | NEWS: Introduce Windows support | Martin Willi | 2014-06-04 | 1 | -0/+8 | |
| | ||||||
* | Merge branch 'win-fetcher' | Martin Willi | 2014-06-04 | 10 | -53/+678 | |
|\ | | | | | | | | | Implements a HTTP/HTTPS fetcher for the Windows platform using the native WinHTTP API. | |||||
| * | travis: Build "all" tests without Windows HTTP fetcher | Martin Willi | 2014-06-04 | 1 | -1/+1 | |
| | | | | | | | | | | We don't include it in the Windows build test either, as MinGW does not come with -lwinhttp. | |||||
| * | pki: Support complex trustchain and revocation checking in --verify | Martin Willi | 2014-06-04 | 2 | -52/+90 | |
| | | ||||||
| * | unit-tests: Zero-initialize chunk to avoid free on non-successful fetch | Martin Willi | 2014-06-04 | 1 | -1/+1 | |
| | | | | | | | | | | If the fetch fails, the fetcher is not required to return an empty chunk. Avoid the resulting invalid free() by initializing data.ptr to NULL. | |||||
| * | winhttp: Support basic authentication for URLs having credentials | Martin Willi | 2014-06-04 | 1 | -3/+23 | |
| | | ||||||
| * | winhttp: Support new response code fetcher option | Martin Willi | 2014-06-04 | 1 | -0/+34 | |
| | | ||||||
| * | winhttp: Implement a http(s) fetcher based on Microsofts WinHTTP API | Martin Willi | 2014-06-04 | 7 | -0/+533 | |
|/ | ||||||
* | Merge branch 'win-kernel' | Martin Willi | 2014-06-04 | 22 | -4/+4822 | |
|\ | | | | | | | | | | | | | Adds the kernel-iph and kernel-wfp kernel backends for the Windows platform. kernel-iph provides a networking backend using the IP Helper native Windows API, while the kernel-wfp backend implements an interface to the Windows Kernel IPsec layer using the Windows Filtering Platform API. | |||||
| * | travis: Build "all" tests without Windows kernel backends | Martin Willi | 2014-06-04 | 1 | -1/+2 | |
| | | ||||||
| * | kernel-wfp: Include Windows header patch for MinGW 4.8.1 | Martin Willi | 2014-06-04 | 2 | -0/+29 | |
| | | ||||||
| * | kernel-wfp: Clone acquire traffic selectors only if they exist | Martin Willi | 2014-06-04 | 1 | -1/+3 | |
| | | ||||||
| * | kernel-wfp: Install routes for trap policies | Martin Willi | 2014-06-04 | 1 | -3/+21 | |
| | | ||||||
| * | kernel-wfp: Refactor route management to separate function | Martin Willi | 2014-06-04 | 1 | -39/+47 | |
| | | ||||||
| * | kernel-wfp: Install tunnel mode policies to appropriate sub-layers | Martin Willi | 2014-06-04 | 2 | -6/+22 | |
| | | | | | | | | | | While it is unclear if this has any effect at all, we prefer specific sublayers to install policies as suggested. | |||||
| * | kernel-wfp: Declare GUIDs and auth/cipher configs missing in some MinGW builds | Martin Willi | 2014-06-04 | 1 | -0/+89 | |
| | | ||||||
| * | kernel-wfp: Support multiple traffic selectors on tunnel mode SAs | Martin Willi | 2014-06-04 | 1 | -36/+80 | |
| | | ||||||
| * | child-sa: Pass the number of total policies tied to an SA to the kernel | Martin Willi | 2014-06-04 | 2 | -0/+10 | |
| | | | | | | | | | | This will be useful if the kernel backend has to know how many policies follow an SA install, for example if it must install all policies concurrently. | |||||
| * | kernel-iph: Implicitly enable IP forwarding when installing routes | Martin Willi | 2014-06-04 | 1 | -0/+26 | |
| | |