Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | RSA_check_key() may return -1 if it fails | Martin Willi | 2013-04-10 | 1 | -2/+2 |
| | |||||
* | RAND_bytes/RAND_pseudo_bytes returns -1 if it is not supported by RAND method | Martin Willi | 2013-04-10 | 1 | -1/+1 |
| | |||||
* | Check return value of ECDSA_Verify() correctly | Martin Willi | 2013-04-10 | 1 | -1/+1 |
| | |||||
* | eap-radius: Add an option to exclude ports from Called/Calling-Station-Id | Martin Willi | 2013-04-10 | 2 | -9/+37 |
| | |||||
* | version bump to 5.0.4dr1 | Andreas Steffen | 2013-04-09 | 1 | -1/+1 |
| | |||||
* | fixed another printf statement | Andreas Steffen | 2013-04-09 | 1 | -3/+1 |
| | |||||
* | fixed printf statements | Andreas Steffen | 2013-04-08 | 2 | -10/+29 |
| | |||||
* | emit a single assig_vips bus message for all VIPs | Andreas Steffen | 2013-04-06 | 8 | -62/+57 |
| | |||||
* | ifmap plugin subscribes to assing_vip bus signal | Andreas Steffen | 2013-04-06 | 7 | -2/+135 |
| | |||||
* | Added missing sasl Doxygen group | Tobias Brunner | 2013-04-05 | 1 | -0/+3 |
| | |||||
* | unity: Check IKE_SA in only after enumerating virtual IPs | Tobias Brunner | 2013-04-05 | 1 | -2/+1 |
| | |||||
* | fixed configure options5.0.3 | Andreas Steffen | 2013-04-04 | 1 | -0/+2 |
| | |||||
* | cleaned up XML code in tnccs-11 plugin | Andreas Steffen | 2013-04-04 | 13 | -92/+95 |
| | |||||
* | duplicheck: track multiple IKE_SAs in checking state to avoid any races | Martin Willi | 2013-04-04 | 1 | -63/+123 |
| | | | | | | When two consequent duplicates have been detected, track state of each checking IKE_SA separately, avoiding potential race conditions between the active SA and the different SAs in checking state. | ||||
* | fixed memory leak | Andreas Steffen | 2013-04-03 | 1 | -1/+1 |
| | |||||
* | properly handle orphaned renewSession jobs | Andreas Steffen | 2013-04-03 | 5 | -24/+102 |
| | |||||
* | support chunked HTTP responses | Andreas Steffen | 2013-04-03 | 4 | -140/+370 |
| | |||||
* | implemented periodic IF-MAP RenewSession request | Andreas Steffen | 2013-04-03 | 7 | -2/+185 |
| | |||||
* | Refactor check_for_rekeyed_child() in quick_mode task | Martin Willi | 2013-04-03 | 1 | -18/+24 |
| | |||||
* | Reuse reqid of an existing Quick Mode, even if it has been rekeyed | Martin Willi | 2013-04-03 | 1 | -1/+2 |
| | | | | | | If two peers rekey Quick Modes at the same time, the original Quick Mode is in REKEYING state and hence the requid is not reused. This is required though, as two identical policies won't work if they have different requids. | ||||
* | List all stroke counters when "all" is given, and report if connection not known | Martin Willi | 2013-04-03 | 1 | -30/+88 |
| | |||||
* | Defer CHILD_SA rekeying if allocating an SPI fails | Martin Willi | 2013-04-03 | 2 | -12/+26 |
| | |||||
* | Accept a certificate/key pair to use client authentication in tls_test | Martin Willi | 2013-04-02 | 1 | -7/+52 |
| | |||||
* | version bump to 5.0.3 | Andreas Steffen | 2013-04-02 | 1 | -1/+1 |
| | |||||
* | allow retrieval of private keys from other credential sets | Andreas Steffen | 2013-04-02 | 2 | -9/+26 |
| | |||||
* | improve checking of sent and received http messages | Andreas Steffen | 2013-04-02 | 1 | -3/+7 |
| | |||||
* | Updated strongswan.conf(5) man page | Tobias Brunner | 2013-04-01 | 1 | -10/+42 |
| | |||||
* | Load raw keys before possibly destroying the identity | Tobias Brunner | 2013-04-01 | 1 | -12/+11 |
| | | | | | | | | If no identity (or %any) is configured the identification_t object is destroyed and an invalid object was associated with the created pubkey certificate. Actually using %any does not work as the certificate would not match when the client later provides an identity. | ||||
* | ipseckey: Use proper daemon name for enable option | Tobias Brunner | 2013-04-01 | 1 | -1/+1 |
| | |||||
* | Properly handle situation if no resolver plugins are loaded | Tobias Brunner | 2013-04-01 | 2 | -4/+7 |
| | |||||
* | fixed capability metadata | Andreas Steffen | 2013-03-31 | 1 | -1/+2 |
| | |||||
* | fix start of wpa_supplicant | Andreas Steffen | 2013-03-31 | 3 | -6/+21 |
| | |||||
* | updated strongswan.conf man page for tn_ifmap plugin | Andreas Steffen | 2013-03-31 | 1 | -12/+12 |
| | |||||
* | renamed tnc_ifmap2 plugin to tnc_ifmap | Andreas Steffen | 2013-03-31 | 12 | -185/+185 |
| | |||||
* | removed obsoleted tnc_ifmap plugin | Andreas Steffen | 2013-03-31 | 9 | -1358/+0 |
| | |||||
* | implemented http basic authentication | Andreas Steffen | 2013-03-31 | 3 | -46/+80 |
| | |||||
* | parse IF-MAP server URI | Andreas Steffen | 2013-03-31 | 3 | -41/+105 |
| | |||||
* | implemented publish_enforcement_report and endSession methods | Andreas Steffen | 2013-03-30 | 1 | -6/+58 |
| | |||||
* | implemented publish_ike_sa method | Andreas Steffen | 2013-03-30 | 1 | -6/+252 |
| | |||||
* | ifmap message type is known | Andreas Steffen | 2013-03-30 | 3 | -12/+7 |
| | |||||
* | implemented publish_device_ip method | Andreas Steffen | 2013-03-30 | 1 | -13/+132 |
| | |||||
* | added IF-MAP SOAP error handling | Andreas Steffen | 2013-03-30 | 1 | -9/+32 |
| | |||||
* | created tnc_ifmap2_soap_msg class | Andreas Steffen | 2013-03-29 | 4 | -220/+343 |
| | |||||
* | implement NewSession and PurgePublisher messages using the libxml2 library | Andreas Steffen | 2013-03-29 | 4 | -82/+268 |
| | |||||
* | set up a new IF-MAP session | Andreas Steffen | 2013-03-29 | 10 | -0/+888 |
| | |||||
* | fixed typo | Andreas Steffen | 2013-03-27 | 1 | -1/+1 |
| | |||||
* | Fixed Doxygen comment in eap_radius plugin | Tobias Brunner | 2013-03-27 | 1 | -2/+3 |
| | |||||
* | Fix detection and use of netinet/ip6.h on FreeBSD | Tobias Brunner | 2013-03-27 | 2 | -1/+6 |
| | |||||
* | Don't set USE_ATTR_SQL when the sql plugin is enabled only | Tobias Brunner | 2013-03-27 | 1 | -1/+1 |
| | |||||
* | Make some private functions in plugins static | Tobias Brunner | 2013-03-27 | 2 | -5/+5 |
| | | | | Fixes monolithic build. |