aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Merge branch 'attr-enum'Martin Willi2014-06-177-15/+104
|\ | | | | | | | | | | Introduces a handle_vips() hook very similar to assign_vips(), but for clients handling virtual IPs and other configuration attributes. Non-handled attributes are stored on the IKE_SA as well and can be enumerated.
| * bus: Add a handle_vips() hook invoked after handling configuration attributesMartin Willi2014-06-176-0/+53
| | | | | | | | | | | | | | | | | | Similar to assign_vips() used by a peer assigning virtual IPs to the other peer, the handle_vips() hook gets invoked on a peers after receiving attributes. On release of the same attributes the hook gets invoked again. This is useful to inspect handled attributes, as the ike_updown() hook is invoked after authentication, when attributes have not been handled yet.
| * ikev1: Invoke the assign_vips() bus hook for IKEv1 as wellMartin Willi2014-06-162-3/+7
| |
| * ike: Create an enumerator for (un-)handled configuration attributes on IKE_SAMartin Willi2014-06-162-0/+32
| |
| * ike: Store unhandled attributes on IKE_SA as wellMartin Willi2014-06-164-12/+12
|/
* Version bump to 5.2.0rc1Andreas Steffen2014-06-151-1/+1
|
* Mentioned first six swanctl scenarios in NEWS5.2.0dr6Andreas Steffen2014-06-141-0/+1
|
* Added swanctl/rw-psk-fqdn and swanctl/rw-psk-ipv4 scenariosAndreas Steffen2014-06-1422-0/+441
|
* Single-line --raw mode simplifies evaltest of swanctl scenariosAndreas Steffen2014-06-145-92/+16
|
* Split swanctl --raw mode into single-line and --pretty modeAndreas Steffen2014-06-1418-185/+310
|
* Added swanctl/ip-pool-db scenarioAndreas Steffen2014-06-1111-0/+246
|
* Updated strongTNC configurationAndreas Steffen2014-06-118-12/+15
|
* Added swanctl/ip-pool scenarioAndreas Steffen2014-06-1011-0/+231
|
* Allow multiple hash values in the file reference databaseAndreas Steffen2014-06-102-32/+60
|
* Added swanctl/rw-cert scenarioAndreas Steffen2014-06-1011-0/+216
|
* Added Android 4.3 and 4.4.3 to imv databaseAndreas Steffen2014-06-101-0/+24
|
* Define default swanctl credentials in hosts directoryAndreas Steffen2014-06-1030-4/+383
|
* Added missing units (s = seconds)Andreas Steffen2014-06-101-1/+1
|
* Fixes in SWID entity supportAndreas Steffen2014-06-082-19/+7
|
* Merge branch 'win-32bit'Martin Willi2014-06-0613-38/+68
|\ | | | | | | | | Fixes some issues when building 32-bit Windows binaries. Mostly related to the call API. Introduces a Travis 32-bit Windows build variant.
| * travis: Add a Windows 32-bit variant build testMartin Willi2014-06-062-6/+18
| |
| * windows: Link against psapi32Martin Willi2014-06-061-1/+1
| | | | | | | | | | On some version GetModuleFileNameEx/GetModuleInformation is in psapi32 instead of kernel32. We link to both libraries to make sure we have it.
| * backtrace: Use GetModuleInformation/GetModuleFileNameEx directly on Win32Martin Willi2014-06-061-2/+10
| | | | | | | | The K32 variants are actually needed on 64-bit only.
| * windows: Use WINAPI call convention for Windows API callbacksMartin Willi2014-06-068-23/+28
| | | | | | | | | | For x86_64 it does not actually matter, but for i686 builds the call convention is different with WINAPI.
| * windows: Do not check if having clock_gettime()Martin Willi2014-06-061-6/+11
|/ | | | | Windows does not have it, but libwinpthread has. If this library is available during build, it will be linked, which we prefer to avoid.
* Version bump to 5.2.0dr6Andreas Steffen2014-06-061-1/+1
|
* Ubuntu 14.04 updated to 3.13.0-29 kernelAndreas Steffen2014-06-061-1/+1
|
* Extended pt-tls-client PLUGINS listAndreas Steffen2014-06-061-1/+1
|
* Updated REST APIAndreas Steffen2014-06-062-7/+17
|
* android: Add all Android.mk files to the tarballTobias Brunner2014-06-063-1/+4
|
* Fixed typo in strongswan.confAndreas Steffen2014-06-051-1/+1
|
* NEWS: Introduce Windows supportMartin Willi2014-06-041-0/+8
|
* Merge branch 'win-fetcher'Martin Willi2014-06-0410-53/+678
|\ | | | | | | | | Implements a HTTP/HTTPS fetcher for the Windows platform using the native WinHTTP API.
| * travis: Build "all" tests without Windows HTTP fetcherMartin Willi2014-06-041-1/+1
| | | | | | | | | | We don't include it in the Windows build test either, as MinGW does not come with -lwinhttp.
| * pki: Support complex trustchain and revocation checking in --verifyMartin Willi2014-06-042-52/+90
| |
| * unit-tests: Zero-initialize chunk to avoid free on non-successful fetchMartin Willi2014-06-041-1/+1
| | | | | | | | | | If the fetch fails, the fetcher is not required to return an empty chunk. Avoid the resulting invalid free() by initializing data.ptr to NULL.
| * winhttp: Support basic authentication for URLs having credentialsMartin Willi2014-06-041-3/+23
| |
| * winhttp: Support new response code fetcher optionMartin Willi2014-06-041-0/+34
| |
| * winhttp: Implement a http(s) fetcher based on Microsofts WinHTTP APIMartin Willi2014-06-047-0/+533
|/
* Merge branch 'win-kernel'Martin Willi2014-06-0422-4/+4822
|\ | | | | | | | | | | | | Adds the kernel-iph and kernel-wfp kernel backends for the Windows platform. kernel-iph provides a networking backend using the IP Helper native Windows API, while the kernel-wfp backend implements an interface to the Windows Kernel IPsec layer using the Windows Filtering Platform API.
| * travis: Build "all" tests without Windows kernel backendsMartin Willi2014-06-041-1/+2
| |
| * kernel-wfp: Include Windows header patch for MinGW 4.8.1Martin Willi2014-06-042-0/+29
| |
| * kernel-wfp: Clone acquire traffic selectors only if they existMartin Willi2014-06-041-1/+3
| |
| * kernel-wfp: Install routes for trap policiesMartin Willi2014-06-041-3/+21
| |
| * kernel-wfp: Refactor route management to separate functionMartin Willi2014-06-041-39/+47
| |
| * kernel-wfp: Install tunnel mode policies to appropriate sub-layersMartin Willi2014-06-042-6/+22
| | | | | | | | | | While it is unclear if this has any effect at all, we prefer specific sublayers to install policies as suggested.
| * kernel-wfp: Declare GUIDs and auth/cipher configs missing in some MinGW buildsMartin Willi2014-06-041-0/+89
| |
| * kernel-wfp: Support multiple traffic selectors on tunnel mode SAsMartin Willi2014-06-041-36/+80
| |
| * child-sa: Pass the number of total policies tied to an SA to the kernelMartin Willi2014-06-042-0/+10
| | | | | | | | | | This will be useful if the kernel backend has to know how many policies follow an SA install, for example if it must install all policies concurrently.
| * kernel-iph: Implicitly enable IP forwarding when installing routesMartin Willi2014-06-041-0/+26
| |