tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Version bump to 5.2.0dr4	Andreas Steffen	2014-05-14	1	-1/+1
\|
*	Version bump to 5.2.0dr35.2.0dr3	Andreas Steffen	2014-05-12	1	-1/+1
\|
*	swanctl: Add a swanctl command overview manpage	Martin Willi	2014-05-07	1	-0/+1
\|
*	swanctl: Generate swanctl.conf(5) man page	Tobias Brunner	2014-05-07	1	-0/+2
\|
*	swanctl: Use a ./configure-able swanctl base directory	Martin Willi	2014-05-07	1	-0/+1
\|
*	swanctl: Add a stub for a vici based configuration and control utility	Martin Willi	2014-05-07	1	-0/+7
\|
*	vici: Add a plugin stub for the "Versatile IKE Control Interface" plugin	Martin Willi	2014-05-07	1	-0/+4
\|
*	utils: Enable __atomic* built-ins based on the GCC version	Tobias Brunner	2014-05-04	1	-19/+0
\| \| \| \| \| \| \| \| \| \| \|	This solves a problem with GNAT when compiling charon-tkm as __atomic* built-ins are only provided in GCC 4.7 and newer. Currently GNAT 4.6 and GCC 4.7.2 is shipped with Debian wheezy (stable), as used in the testing environment. So while the configure script correctly detected the __atomic* built-ins, and defined HAVE_GCC_ATOMIC_OPERATIONS, this define turned out to be incorrect when charon-tkm was later built with GNAT.
*	aikgen generates AIK private/public key pairs	Andreas Steffen	2014-05-03	1	-16/+21
\| \| \| \| \| \|	aikgen outputs a binary AIK private key blob and the AIK public key. Optionally the Identity Request encrypted with the public key of the Privacy CA can be output.
*	Version bump to 5.2.0dr2	Andreas Steffen	2014-04-27	1	-1/+1
\|
*	utils: Use GCC's __atomic built-ins if available	Tobias Brunner	2014-04-24	1	-5/+23
\| \| \| \| \| \| \| \|	These are available since GCC 4.7 and will eventually replace the __sync operations. They support the memory model defined by C++11. For instance, by using __ATOMIC_RELAXED for some operations on the reference counters we can avoid memory barriers, which are required by __sync operations (whose memory model essentially is __ATOMIC_SEQ_CST).
*	Version bump to 5.2.0dr1	Andreas Steffen	2014-04-15	1	-1/+1
\|
*	Version bump to 5.1.35.1.3	Andreas Steffen	2014-04-14	1	-1/+1
\|
*	tls: Create a unit-test runner	Martin Willi	2014-04-01	1	-0/+1
\|
*	openac: Remove obsolete openac utility	Martin Willi	2014-03-31	1	-23/+20
\| \| \| \|	The same functionality is now provided by the pki --acert subcommand.
*	acert: Implement a plugin finding, validating and evaluating attribute certs	Martin Willi	2014-03-31	1	-0/+4
\| \| \| \| \| \|	This validator checks for any attribute certificate it can find for validated end entity certificates and tries to extract group membership information used for connection authorization rules.
*	pki: Add acert and extend pki/print manpages	Martin Willi	2014-03-31	1	-0/+1
\|
*	Version bump to 5.1.3rc1	Andreas Steffen	2014-03-26	1	-1/+1
\|
*	configure: Add an option to select a specific printf hook implementation	Tobias Brunner	2014-03-20	1	-20/+35
\|
*	configure: Add an option to enable all optional features/plugins	Tobias Brunner	2014-03-20	1	-1/+14
\| \| \| \|	This has probably no real practical use, but it simplifies testing.
*	configure: Reorder and group feature options	Tobias Brunner	2014-03-20	1	-93/+106
\|
*	Version bump to 5.1.3dr1	Andreas Steffen	2014-03-07	1	-1/+1
\|
*	configure: Fix autoreconf with older autotools	Tobias Brunner	2014-03-03	1	-2/+1
\| \| \| \| \| \| \| \|	Older autoconf versions (e.g. on CentOS 6.5) produce an empty else block for the removed empty argument, which the shell then trips over when executing ./configure. Fixes #536.
*	Version bump to 5.1.2	Andreas Steffen	2014-02-27	1	-1/+1
\|
*	utils: Add memrchr(3) replacement for platforms that don't support it	Tobias Brunner	2014-02-26	1	-1/+1
\| \| \| \|	For instance, on Mac OS X memrchr(3) is not provided by the C library.
*	Version bump to 5.1.2rc2	Andreas Steffen	2014-02-17	1	-1/+1
\|
*	conf: Only install config snippets for enabled components	Tobias Brunner	2014-02-12	1	-1/+20
\|
*	conf: Split strongswan.conf(5) man page and use generated snippet	Tobias Brunner	2014-02-12	1	-1/+2
\|
*	conf: Generate strongswan.conf(5) man page in different directory	Tobias Brunner	2014-02-12	1	-1/+1
\|
*	conf: Generate and install config sippets for option descriptions	Tobias Brunner	2014-02-12	1	-0/+1
\| \| \| \| \|	The strongswan.d directory is also created relative to the configured location of strongswan.conf.
*	conf: Install strongswan.conf template from a separate directory	Tobias Brunner	2014-02-12	1	-0/+1
\|
*	array: Add fallback for qsort_r using thread-local value	Tobias Brunner	2014-02-12	1	-1/+1
\| \| \| \|	Cygwin for example does not support qsort_r.
*	array: Add array_sort function	Tobias Brunner	2014-02-12	1	-0/+37
\|
*	chunk: Provide a fallback chunk_map() if mmap is not available	Martin Willi	2014-01-23	1	-1/+1
\|
*	configure: Add -Wno-format-security to default CFLAGS	Tobias Brunner	2014-01-23	1	-1/+1
\| \| \| \| \| \|	Either due to a change in Ubuntu 13.10 or GCC 4.8 -Wno-format has no effect if -Wformat-security is enabled (which it is on Ubuntu) so we also disable the latter by default.
*	Version bump to 5.1.2rc1	Andreas Steffen	2014-01-16	1	-1/+1
\|
*	Version bump to 5.1.2dr3	Andreas Steffen	2014-01-13	1	-1/+1
\|
*	Version bump to 5.1.2dr25.1.2.dr2	Andreas Steffen	2013-12-06	1	-1/+1
\|
*	charon-tkm: Abort if gprbuild binary is not found	Reto Buerki	2013-12-04	1	-0/+3
\|
*	Prototype implementation of IKE key exchange via NTRU encryption	Andreas Steffen	2013-11-27	1	-0/+4
\|
*	configure: Remove obsolete --enable-unit-tests option	Tobias Brunner	2013-11-27	1	-12/+0
\|
*	Version bump to 5.1.2dr1	Andreas Steffen	2013-11-19	1	-1/+1
\|
*	android: Remove dependency on libvstr	Tobias Brunner	2013-11-13	1	-1/+1
\|
*	automake: Don't use parallel test harness being the default with automake 1.13	Martin Willi	2013-11-06	1	-1/+11
\| \| \| \| \|	We have no need for the parallel test harness, and we prefer to have the output of make check on the console
*	Version bump to 5.1.1	Andreas Steffen	2013-10-31	1	-1/+1
\|
*	utils: Provide a fmemopen(3) fallback using BSD funopen()	Martin Willi	2013-10-24	1	-0/+1
\|
*	kernel-netlink: Check existence of linux/fib_rules.h, don't include it in ↵	Tobias Brunner	2013-10-18	1	-1/+1
\| \| \| \| \| \|	distribution This reverts commit b0761f1f0a5abd225edc291c8285f99a538e6a66.
*	dnscert: Add DNS CERT support for pubkey authentication	Ruslan N. Marchenko	2013-10-11	1	-0/+4
\| \| \| \| \| \| \| \| \| \| \|	Add DNSSEC protected CERT RR delivered certificate authentication. The new dnscert plugin is based on the ipseckey plugin and relies on the existing PEM decoder as well as x509 and PGP parsers. As such the plugin expects PEM encoded PKIX(x509) or PGP(GPG) certificate payloads. The plugin is targeted to improve interoperability with Racoon, which supports this type of authentication, ignoring in-stream certificates and using only DNS provided certificates for FQDN IDs.
*	pool: Move the pool utility to its own directory in src	Tobias Brunner	2013-10-11	1	-0/+1
\|
*	printf-hook-builtin: Add a new "builtin" backend using its own printf() routines	Martin Willi	2013-10-11	1	-1/+7
\| \| \| \| \| \|	Overloads printf C library functions by a self-contained implementation, based on klibc. Does not yet feature all the required default formatters, including those for floating point values.