Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Version bump to 5.2.0 | Andreas Steffen | 2014-07-08 | 1 | -1/+1 |
| | |||||
* | conf: Document swanctl options | Tobias Brunner | 2014-06-30 | 1 | -0/+1 |
| | |||||
* | conf: Document aikgen options | Tobias Brunner | 2014-06-30 | 1 | -0/+1 |
| | |||||
* | autoconf: Replace --disable-tools option with --disable-scepclient | Tobias Brunner | 2014-06-30 | 1 | -7/+7 |
| | | | | | Since using a separate option for pki this was the only tool that was still enabled by that option. | ||||
* | Remove kernel-klips plugin | Tobias Brunner | 2014-06-19 | 1 | -4/+0 |
| | |||||
* | starter: Add tests for ipsec.conf parser | Tobias Brunner | 2014-06-19 | 1 | -0/+1 |
| | |||||
* | Version bump to 5.2.0rc1 | Andreas Steffen | 2014-06-15 | 1 | -1/+1 |
| | |||||
* | windows: Do not check if having clock_gettime() | Martin Willi | 2014-06-06 | 1 | -6/+11 |
| | | | | | Windows does not have it, but libwinpthread has. If this library is available during build, it will be linked, which we prefer to avoid. | ||||
* | Version bump to 5.2.0dr6 | Andreas Steffen | 2014-06-06 | 1 | -1/+1 |
| | |||||
* | pki: Support complex trustchain and revocation checking in --verify | Martin Willi | 2014-06-04 | 1 | -4/+4 |
| | |||||
* | winhttp: Implement a http(s) fetcher based on Microsofts WinHTTP API | Martin Willi | 2014-06-04 | 1 | -0/+4 |
| | |||||
* | kernel-iph: Add a stub for a Windows IP Helper based networking backend | Martin Willi | 2014-06-04 | 1 | -0/+4 |
| | |||||
* | kernel-wfp: Add a stub for a Windows Filtering Platform based IPsec backend | Martin Willi | 2014-06-04 | 1 | -0/+4 |
| | |||||
* | socket-win: Implement a Windows socket plugin using Winsock2 | Martin Willi | 2014-06-04 | 1 | -0/+4 |
| | |||||
* | windows: Compile with -mno-ms-bitfields if option not set explicitly | Martin Willi | 2014-06-04 | 1 | -0/+5 |
| | | | | | -mms-bitfields is the default in newer MinGWs, but it breaks __attribute__((packed)). | ||||
* | configure: Fix attribute((packed)) test when using -Werror | Martin Willi | 2014-06-04 | 1 | -1/+2 |
| | |||||
* | configure: Mark conftest variable as unused to pass test with -Werror | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | | | | | When using -Werror, the warning for the unused variable would let the test fail, even if in6addr_any is available. | ||||
* | configure: Don't use -rdynamic with the LLVM toolchain | Martin Willi | 2014-06-04 | 1 | -1/+20 |
| | |||||
* | pki: Provide a fallback if strptime() not supported | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | | | | | For simplicity, we support the default pki datetime format only, but optionally accept four digit years for longer lifetimes. | ||||
* | configure: Separate pki from --disable-tools | Martin Willi | 2014-06-04 | 1 | -2/+5 |
| | | | | While pki builds and runs just fine on Windows, this is not true for scepclient. | ||||
* | configure: Check if __attribute__((packed)) works as expected | Martin Willi | 2014-06-04 | 1 | -0/+11 |
| | | | | | | | | This is really hard to detect if not, and is not unlikely. If -mms-bitfields is given, the attribute does not work. Even worse, that switch is by default on with GCC/MinGW 4.7+ for Windows targets. http://gcc.gnu.org/bugzilla/show_bug.cgi?id=52991 | ||||
* | bus: Build syslog logger depending on syslog() availability | Martin Willi | 2014-06-04 | 1 | -1/+7 |
| | |||||
* | mysql: Add Windows support | Martin Willi | 2014-06-04 | 1 | -5/+11 |
| | | | | | | As the mysql_config script is not available for Windows, we use a hardcoded library name and no additional CFLAGS. This builds fine against the binary MySQL Connector/C distribution. | ||||
* | charon-svc: Implement a Windows IKE service using libcharon | Martin Willi | 2014-06-04 | 1 | -3/+6 |
| | | | | | The resulting binary can be either run as Windows service or directly as console application. | ||||
* | filelog: Ignore flush_line option if setlinebuf() not supported | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | |||||
* | charon: Don't use syslog() if not supported | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | |||||
* | windows: Never link to libpthread | Martin Willi | 2014-06-04 | 1 | -0/+1 |
| | |||||
* | openssl: Check and link against libeay32 instead of libcrypto on Windows | Martin Willi | 2014-06-04 | 1 | -3/+12 |
| | | | | Most Windows OpenSSL builds come with the crypto library named libeay32. | ||||
* | plugins: Don't link with -rdynamic on Windows | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | |||||
* | backtrace: Add DbgHelp based Windows support for creating/printing backtraces | Martin Willi | 2014-06-04 | 1 | -0/+2 |
| | |||||
* | configure.ac: Define USE_WINDOWS for Automake when building for Windows | Martin Willi | 2014-06-03 | 1 | -0/+13 |
| | |||||
* | Check for libjson | Andreas Steffen | 2014-05-31 | 1 | -0/+5 |
| | |||||
* | Version bump to 5.2.0dr5 | Andreas Steffen | 2014-05-31 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.2.0dr4 | Andreas Steffen | 2014-05-14 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.2.0dr35.2.0dr3 | Andreas Steffen | 2014-05-12 | 1 | -1/+1 |
| | |||||
* | swanctl: Add a swanctl command overview manpage | Martin Willi | 2014-05-07 | 1 | -0/+1 |
| | |||||
* | swanctl: Generate swanctl.conf(5) man page | Tobias Brunner | 2014-05-07 | 1 | -0/+2 |
| | |||||
* | swanctl: Use a ./configure-able swanctl base directory | Martin Willi | 2014-05-07 | 1 | -0/+1 |
| | |||||
* | swanctl: Add a stub for a vici based configuration and control utility | Martin Willi | 2014-05-07 | 1 | -0/+7 |
| | |||||
* | vici: Add a plugin stub for the "Versatile IKE Control Interface" plugin | Martin Willi | 2014-05-07 | 1 | -0/+4 |
| | |||||
* | utils: Enable __atomic* built-ins based on the GCC version | Tobias Brunner | 2014-05-04 | 1 | -19/+0 |
| | | | | | | | | | | | This solves a problem with GNAT when compiling charon-tkm as __atomic* built-ins are only provided in GCC 4.7 and newer. Currently GNAT 4.6 and GCC 4.7.2 is shipped with Debian wheezy (stable), as used in the testing environment. So while the configure script correctly detected the __atomic* built-ins, and defined HAVE_GCC_ATOMIC_OPERATIONS, this define turned out to be incorrect when charon-tkm was later built with GNAT. | ||||
* | aikgen generates AIK private/public key pairs | Andreas Steffen | 2014-05-03 | 1 | -16/+21 |
| | | | | | | aikgen outputs a binary AIK private key blob and the AIK public key. Optionally the Identity Request encrypted with the public key of the Privacy CA can be output. | ||||
* | Version bump to 5.2.0dr2 | Andreas Steffen | 2014-04-27 | 1 | -1/+1 |
| | |||||
* | utils: Use GCC's __atomic built-ins if available | Tobias Brunner | 2014-04-24 | 1 | -5/+23 |
| | | | | | | | | These are available since GCC 4.7 and will eventually replace the __sync operations. They support the memory model defined by C++11. For instance, by using __ATOMIC_RELAXED for some operations on the reference counters we can avoid memory barriers, which are required by __sync operations (whose memory model essentially is __ATOMIC_SEQ_CST). | ||||
* | Version bump to 5.2.0dr1 | Andreas Steffen | 2014-04-15 | 1 | -1/+1 |
| | |||||
* | Version bump to 5.1.35.1.3 | Andreas Steffen | 2014-04-14 | 1 | -1/+1 |
| | |||||
* | tls: Create a unit-test runner | Martin Willi | 2014-04-01 | 1 | -0/+1 |
| | |||||
* | openac: Remove obsolete openac utility | Martin Willi | 2014-03-31 | 1 | -23/+20 |
| | | | | The same functionality is now provided by the pki --acert subcommand. | ||||
* | acert: Implement a plugin finding, validating and evaluating attribute certs | Martin Willi | 2014-03-31 | 1 | -0/+4 |
| | | | | | | This validator checks for any attribute certificate it can find for validated end entity certificates and tries to extract group membership information used for connection authorization rules. | ||||
* | pki: Add acert and extend pki/print manpages | Martin Willi | 2014-03-31 | 1 | -0/+1 |
| |