tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Show some uname() info during charon startup	Martin Willi	2012-06-28	1	-1/+8
\|
*	charon automatically removes virtual interfaces	Andreas Steffen	2012-06-28	7	-14/+0
\|
*	libcharon also requires kernel interfaces and a socket implementation	Tobias Brunner	2012-06-27	1	-0/+3
\|
*	Defer quick mode initiation if we expect a mode config request	Martin Willi	2012-06-27	1	-1/+20
\|
*	Queue a mode config task as responder if we need a virtual IP	Martin Willi	2012-06-27	2	-4/+16
\|
*	Add basic support for XAuth responder authentication	Martin Willi	2012-06-27	2	-8/+10
\|
*	Map XAuth responder authentication methods between IKEv1 and IKEv2	Martin Willi	2012-06-27	1	-1/+13
\|
*	Show remote EAP/XAuth identity in "statusall" on a separate line	Martin Willi	2012-06-27	1	-1/+12
\|
*	gcrypt: Register SHA1 first as HASH_PREFERRED depends on it	Tobias Brunner	2012-06-27	1	-1/+1
\|
*	Use static plugin features in libcharon to define essential dependencies	Tobias Brunner	2012-06-27	2	-1/+11
\|
*	Use static plugin features in charon-nm	Tobias Brunner	2012-06-27	3	-22/+37
\|
*	Ignore a received %any virtual IP for installation	Martin Willi	2012-06-26	1	-1/+2
\|
*	Mask the configured mark value to ensure it is in range	Tobias Brunner	2012-06-26	1	-0/+2
\|
*	Some updates in ipsec.conf(5) for 5.0.0	Tobias Brunner	2012-06-26	1	-36/+50
\|
*	Added MAC wrappers to Android.mk	Tobias Brunner	2012-06-26	1	-0/+3
\|
*	Also build charon's IKEv1 implementation on Android	Tobias Brunner	2012-06-26	2	-0/+24
\|
*	Build nonce plugin on Android	Tobias Brunner	2012-06-26	2	-1/+4
\|
*	Missing source file added to libcharon's Android.mk	Tobias Brunner	2012-06-26	1	-0/+1
\|
*	scepclient: Added support to build it on Android	Tobias Brunner	2012-06-26	3	-4/+46
\|
*	Added support for the curl plugin on Android	Tobias Brunner	2012-06-26	2	-0/+7
\|
*	Avoid SIGSEGV during shutdown if charon is not started as root	Tobias Brunner	2012-06-25	1	-2/+2
\|
*	NEWS about thread pool updates added	Tobias Brunner	2012-06-25	1	-0/+7
\|
*	Make rescheduling a job more predictable	Tobias Brunner	2012-06-25	4	-49/+90
\| \| \| \| \| \| \| \| \| \| \| \| \|	This avoids race conditions between calls to cancel() and jobs that like to be rescheduled. If jobs were able to reschedule themselves it would theoretically be possible that two worker threads have the same job assigned (the one currently executing the job and the one executing the same but rescheduled job if it already is time to execute it), this means that cancel() could be called twice for that job. Creating a new job based on the current one and reschedule that is also OK, but rescheduling itself is more efficient for jobs that need to be executed often.
*	Centralized thread cancellation in processor_t	Tobias Brunner	2012-06-25	31	-475/+261
\| \| \| \| \| \| \| \| \| \|	This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation.
*	Give processor_t more control over the lifecycle of a job	Tobias Brunner	2012-06-25	26	-169/+236
\| \| \| \| \| \| \| \| \| \| \|	Jobs are now destroyed by the processor, but they are allowed to reschedule themselves. That is, parts of the reschedule functionality already provided by callback_job_t is moved to the processor. Not yet fully supported is JOB_REQUEUE_DIRECT and canceling jobs. Note: job_t.destroy() is now called not only for queued jobs but also after execution or cancellation of jobs. job_t.status can be used to decide what to do in said method.
*	Added a method to plugin_loader_t to add 'static' plugin features	Tobias Brunner	2012-06-25	2	-0/+115
\| \| \| \| \| \| \| \|	This allows daemons and other components to register plugin features like those provided by plugins (following the same lifecycle). The added features are internally handled like they were added by a plugin.
*	Make sure that all features of critical plugins are loaded	Tobias Brunner	2012-06-25	1	-5/+64
\|
*	Added an option to rename the ipsec script during installation	Tobias Brunner	2012-06-25	7	-40/+64
\| \| \| \| \| \| \|	Also rename the man page and adjust all references in the script, the man page and other files. Closes #194.
*	Removed -o argument when creating .../ipsec.d with install	Tobias Brunner	2012-06-25	1	-1/+1
\| \| \| \|	This should have been removed with 2b52d5cb41.
*	Updated ipsec script man page after removing pluto	Tobias Brunner	2012-06-25	1	-85/+71
\|
*	Use mac_t and PRF and signer wrappers in cmac plugin	Tobias Brunner	2012-06-25	8	-443/+82
\|
*	Use mac_t and PRF and signer wrappers in xcbc plugin	Tobias Brunner	2012-06-25	8	-452/+91
\|
*	Make the hmac_t interface a generic interface for message authentication codes	Tobias Brunner	2012-06-25	11	-132/+131
\|
*	Simplified creation of PRFs and signers in openssl and hmac plugins	Tobias Brunner	2012-06-25	2	-136/+10
\|
*	Function to convert PRFs to hash algorithms added	Tobias Brunner	2012-06-25	2	-0/+39
\|
*	hasher_algorithm_from_integrity() optionally returns truncation length	Tobias Brunner	2012-06-25	3	-7/+45
\|
*	Use simple wrappers for HMAC based PRF and signer in openssl plugin	Tobias Brunner	2012-06-25	8	-562/+132
\|
*	Use simple wrappers for HMAC based PRF and signer in hmac plugin	Tobias Brunner	2012-06-25	8	-524/+127
\|
*	Simple wrappers for HMAC based prf_t and signer_t implementations added	Tobias Brunner	2012-06-25	6	-0/+395
\|
*	Refactored OpenSSL based HMAC implementation	Tobias Brunner	2012-06-25	5	-173/+382
\|
*	Adding OpenSSL HMAC signer functions to openssl plugin	Aleksandr Grinberg	2012-06-25	4	-1/+322
\|
*	Adding OpenSSL HMAC pseudo random functions to openssl plugin	Aleksandr Grinberg	2012-06-25	4	-1/+245
\|
*	Adding OpenSSL random number functions to openssl plugin	Aleksandr Grinberg	2012-06-25	4	-1/+159
\|
*	Fixed IPv6 source address lookup	Tobias Brunner	2012-06-25	1	-5/+43
\| \| \| \| \| \| \| \| \| \| \| \| \|	Because Linux kernels prior to 3.0 do not support RTA_PREFSRC for IPv6 routes we didn't use NLM_F_DUMP to get all routes. Still routes installed with policies are installed also for IPv6. So since only one route is returned without DUMP, and we ignore all routes from our own routing table, no source address was found during roaming if DST of the installed route included the IKE peer. With newer kernels we can now use DUMP as we did for IPv4 already, for older kernels we do so if our own routes are installed in a separate routing table, otherwise we still use GET.
*	updated default configuration of UML hosts to 5.0.0	Andreas Steffen	2012-06-25	14	-72/+19
\|
*	added charon.cisco_unity to strongswan.conf.5 man page	Andreas Steffen	2012-06-25	1	-0/+3
\|
*	support Cisco Unity VID	Andreas Steffen	2012-06-25	2	-3/+11
\|
*	Enable xauth-generic by default but don't build it if IKEv1 is disabled	Tobias Brunner	2012-06-25	1	-1/+5
\|
*	Remove CREDITS from distribution	Tobias Brunner	2012-06-25	1	-1/+1
\|
*	The AUTHORS file is required by automake	Tobias Brunner	2012-06-25	1	-0/+0
\|