Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | daemon: Use separate method to set default loggers | Tobias Brunner | 2017-01-25 | 1 | -7/+4 |
| | | | | | This way it is not necessary to pass the same values to reload the loggers. | ||||
* | configure: Check for and explicitly link against -latomic | Martin Willi | 2016-06-14 | 1 | -1/+1 |
| | | | | | Some C libraries, such as uClibc, require an explicit link for some atomic functions. Check for any libatomic, and explcily link it. | ||||
* | peer-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -9/+11 |
| | |||||
* | child-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -10/+10 |
| | |||||
* | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -1/+1 |
| | |||||
* | libhydra: Remove empty unused library | Tobias Brunner | 2016-03-03 | 2 | -8/+0 |
| | |||||
* | sigwaitinfo() may fail with EINTR if interrupted by an unblocked signal not ↵ | Tobias Brunner | 2015-11-23 | 1 | -5/+4 |
| | | | | | | in the set Fixes #1213. | ||||
* | Replace usages of sigwait(3) with sigwaitinfo(2) | Tobias Brunner | 2015-10-29 | 1 | -7/+5 |
| | | | | | | | This is basically the same call, but it has the advantage of being supported by FreeBSD's valgrind, which sigwait() is not. References #1106. | ||||
* | controller: Optionally adhere to init limits also when initiating IKE_SAs | Tobias Brunner | 2015-08-21 | 1 | -1/+1 |
| | |||||
* | settings: Use strongswan.conf used during library initialization for reload | Martin Willi | 2014-09-22 | 1 | -4/+1 |
| | | | | | | | | Since 4b670a20 we require an explicit strongswan.conf to re-load configurations. However, the define was missing in the build, breaking SIGHUP based config reloading. Fixes #651. | ||||
* | Make sure getpass() is available | Tobias Brunner | 2014-05-29 | 1 | -1/+3 |
| | | | | It's not on Android for example. | ||||
* | ike: Add an additional but separate AEAD proposal to CHILD config | Martin Willi | 2014-05-16 | 1 | -0/+2 |
| | | | | | | | This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless. | ||||
* | ike: Add an additional but separate AEAD proposal to IKE config, if supported | Martin Willi | 2014-05-16 | 1 | -0/+1 |
| | |||||
* | enum: Return boolean result for enum_from_name() lookup | Martin Willi | 2014-05-16 | 1 | -3/+2 |
| | | | | | | | | | | | Handling the result for enum_from_name() is difficult, as checking for negative return values requires a cast if the enum type is unsigned. The new signature clearly differentiates lookup result from lookup value. Further, this actually allows to convert real -1 enum values, which could not be distinguished from "not-found" and the -1 return value. This also fixes several clang warnings where enums are unsigned. | ||||
* | settings: strongswan.conf must be loaded explicitly | Tobias Brunner | 2014-05-15 | 1 | -1/+4 |
| | |||||
* | libcharon: Remove unused charon->name | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | |||||
* | libhydra: Remove unused hydra->daemon | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | |||||
* | lib: Add global config namespace | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | |||||
* | charon-cmd: Request an IPv6 virtual IP if an IPv6 remote subnet given | Martin Willi | 2014-02-06 | 1 | -4/+23 |
| | |||||
* | charon-cmd: Document new proposal options in manpage | Martin Willi | 2014-02-06 | 1 | -0/+18 |
| | |||||
* | charon-cmd: Add --esp/--ah-proposal options to specify CHILD_SA proposals | Martin Willi | 2014-02-06 | 3 | -1/+43 |
| | |||||
* | charon-cmd: Add an --ike-proposal option to specify non-default IKE proposals | Martin Willi | 2014-02-06 | 3 | -1/+34 |
| | |||||
* | charon-cmd: Block SIGUSR1 on worker threads | Martin Willi | 2014-02-06 | 1 | -0/+1 |
| | | | | | | To properly shut down charon-cmd with leak reports, only the main thread should catch SIGUSR1 to shut down the application. Work threads should ignore SIGUSR1 to avoid any hard application termination. | ||||
* | Build generated man pages via configure script | Tobias Brunner | 2013-09-13 | 2 | -10/+3 |
| | |||||
* | ike: support multiple addresses, ranges and subnets in IKE address config | Martin Willi | 2013-09-04 | 1 | -2/+2 |
| | | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets. | ||||
* | peer-cfg: add a pull/push mode option to use with mode config | Martin Willi | 2013-09-04 | 1 | -1/+1 |
| | |||||
* | charon-cmd: support prompting for a PIN | Martin Willi | 2013-09-03 | 1 | -4/+8 |
| | | | | | To support a Password and PIN XAuth combo, additionally support multiple prompts for different credential types. | ||||
* | charon-cmd: add --eap-identity and --xauth-username options | Martin Willi | 2013-07-29 | 4 | -0/+37 |
| | |||||
* | Fix various API doc issues and typos | Tobias Brunner | 2013-07-18 | 2 | -1/+6 |
| | | | | Partially based on an old patch by Adrian-Ken Rueegsegger. | ||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -4/+2 |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
* | charon-cmd: Ignore generated man page | Tobias Brunner | 2013-07-01 | 1 | -0/+1 |
| | |||||
* | capabilities: Move global capabilities_t instance to libstrongswan | Tobias Brunner | 2013-06-25 | 1 | -3/+3 |
| | |||||
* | charon-cmd: Document auxiliary options | Tobias Brunner | 2013-06-21 | 1 | -0/+15 |
| | |||||
* | charon-cmd: Link strongswan.conf(5) and charon-cmd(8) man pages | Tobias Brunner | 2013-06-21 | 1 | -2/+24 |
| | |||||
* | charon-cmd: Use fixed number of character to align command descriptions | Tobias Brunner | 2013-06-21 | 1 | -16/+15 |
| | | | | | If the command and argument is longer than that write the first line of description to the following line. | ||||
* | charon-cmd: Shortened and fixed command descriptions | Tobias Brunner | 2013-06-21 | 1 | -2/+2 |
| | |||||
* | charon-cmd: Simplify usage output for authentication profiles | Tobias Brunner | 2013-06-21 | 1 | -11/+3 |
| | | | | The man page describes the min full. | ||||
* | charon-cmd: Add Aggressive Mode profiles to man page | Tobias Brunner | 2013-06-21 | 1 | -6/+10 |
| | |||||
* | charon-cmd: Add man page for charon-cmd(8) | Tobias Brunner | 2013-06-21 | 2 | -0/+123 |
| | |||||
* | charon-cmd: Add --debug argument to set the default log level | Tobias Brunner | 2013-06-21 | 3 | -2/+13 |
| | |||||
* | charon-cmd: Handle simple command line arguments like --help before the others | Tobias Brunner | 2013-06-21 | 1 | -3/+14 |
| | |||||
* | plugin-loader: Add method to print loaded plugins on a given log level | Tobias Brunner | 2013-06-21 | 1 | -0/+1 |
| | |||||
* | charon-cmd: use a copy of pid in initiate callback | Martin Willi | 2013-06-20 | 1 | -6/+7 |
| | | | | | When cancelling a connection that gets established, cmd_connection_t gets freed before terminate() is called. This results in kill()ing invalid PID. | ||||
* | charon-cmd: add IKEv1 aggressive mode profiles | Martin Willi | 2013-06-20 | 3 | -10/+35 |
| | |||||
* | charon-cmd: Add support for PKCS#12 files | Tobias Brunner | 2013-05-08 | 4 | -1/+52 |
| | |||||
* | charon-cmd: match_me/match_other are optional in callback credentials | Tobias Brunner | 2013-05-08 | 1 | -1/+8 |
| | |||||
* | charon-cmd: Request password for private keys | Tobias Brunner | 2013-05-08 | 1 | -0/+3 |
| | |||||
* | charon-cmd: Changed formatting of optional arguments in usage information | Tobias Brunner | 2013-05-08 | 1 | -8/+10 |
| | | | | Optional arguments have to be specified with = after the option. | ||||
* | charon-cmd: --agent optionally takes the path to an ssh-agent socket | Tobias Brunner | 2013-05-08 | 3 | -16/+24 |
| | | | | If not given it is read from the SSH_AUTH_SOCK environment variable. | ||||
* | charon-cmd: Stop processing options if an argument is missing or an option ↵ | Tobias Brunner | 2013-05-08 | 1 | -0/+3 |
| | | | | not recognized |