Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill | Martin Willi | 2008-12-12 | 1 | -8/+3 |
| | |||||
* | use DBG_ANY to set all loglevels | Martin Willi | 2008-12-02 | 1 | -5/+2 |
| | |||||
* | re-established lost default auth sys_logger | Andreas Steffen | 2008-12-01 | 1 | -3/+15 |
| | |||||
* | fixed compiler warnings issued by: | Martin Willi | 2008-11-11 | 1 | -1/+1 |
| | | | | | | gcc 4.3 curl.h gcc type-checking glibc with enabled FORTIFY_SOURCE checking | ||||
* | dynamic logging configuration through strongswan.conf | Martin Willi | 2008-11-11 | 1 | -26/+121 |
| | | | | fallback to existing ipsec.conf/stroke loglevel configuration | ||||
* | separated backtrace functionality from leak_detective, used in | Martin Willi | 2008-11-05 | 1 | -47/+9 |
| | | | | | | leak_detective mutex profiling signal handler | ||||
* | log loaded plugins at startup | Martin Willi | 2008-11-03 | 1 | -0/+20 |
| | |||||
* | reintegrated bus-refactoring branch | Martin Willi | 2008-10-14 | 1 | -21/+21 |
| | |||||
* | reintegrated two-sim branch providing SIM card plugin API | Martin Willi | 2008-10-10 | 1 | -0/+3 |
| | |||||
* | merging modularized kernel interface back to trunk | Tobias Brunner | 2008-09-25 | 1 | -0/+3 |
| | |||||
* | use libcap for capability dropping | Martin Willi | 2008-08-29 | 1 | -31/+24 |
| | | | | | optional, must be enabled --with-capabilities=libcap will be extended to support --with-capabilities=libcap2 | ||||
* | capability API to allow plugin-controlled capability set | Martin Willi | 2008-08-28 | 1 | -35/+29 |
| | |||||
* | fixed EAP-GTC secret lookup | Martin Willi | 2008-08-21 | 1 | -2/+9 |
| | | | | | improved error logging PAM authentication needs CAP_AUDIT_WRITE capability | ||||
* | fixed libstrongswan integrity test | Andreas Steffen | 2008-08-19 | 1 | -14/+14 |
| | |||||
* | introduced an additional bus->signal parameter for signal specific data | Martin Willi | 2008-07-18 | 1 | -1/+1 |
| | | | | added SIG_IKE/SIG_CHD macros for signal emitting | ||||
* | added %P printf handler for poposal_t | Martin Willi | 2008-06-12 | 1 | -0/+3 |
| | | | | added some proposal selection debugging code | ||||
* | correctly initialize the mediation and connection manager | Tobias Brunner | 2008-05-22 | 1 | -0/+4 |
| | |||||
* | added a fixup for addresses from shared libraries in segmentation fault handler | Tobias Brunner | 2008-05-19 | 1 | -1/+24 |
| | |||||
* | loading default modules depending on configure options | Martin Willi | 2008-05-16 | 1 | -2/+1 |
| | |||||
* | plugin load configuration in strongswan.conf | Martin Willi | 2008-05-15 | 1 | -14/+15 |
| | | | | | | some components accept a "component.load" option with a space separated list of plugins to load libcharon- plugins are now handled the same way as libstrongswan- plugins | ||||
* | replaced --with-gid/uid by --with-group/user | Martin Willi | 2008-05-08 | 1 | -11/+52 |
| | | | | | using named users, groups fixed capability dropping in pluto | ||||
* | using capset version 1 if a newer is available | Martin Willi | 2008-05-07 | 1 | -0/+6 |
| | |||||
* | respecting ipsec.conf cachecrls= option | Martin Willi | 2008-04-17 | 1 | -13/+0 |
| | |||||
* | splitted IKE_SA manager destroy to allow plugin interaction | Martin Willi | 2008-04-17 | 1 | -0/+4 |
| | |||||
* | added API for random number generators, served through credential factory | Martin Willi | 2008-04-15 | 1 | -13/+10 |
| | | | | ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random) | ||||
* | implementation of an CFG attribute framework, currently supporting virtual IPs | Martin Willi | 2008-04-09 | 1 | -2/+3 |
| | | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool | ||||
* | added ./configure option --with-strongswan-conf= | Martin Willi | 2008-04-07 | 1 | -1/+1 |
| | | | | defaults to /etc/strongswan.conf | ||||
* | replaced mutex in leak detective with thread scheduling | Tobias Brunner | 2008-04-03 | 1 | -1/+1 |
| | |||||
* | configure option in strongswan.conf for thread count | Martin Willi | 2008-04-03 | 1 | -1/+3 |
| | |||||
* | mediation extension adapted to the naming convention of the current version ↵ | Tobias Brunner | 2008-03-26 | 1 | -4/+4 |
| | | | | of the draft. note: the external interface (config, autotools) has not yet been changed | ||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -47/+50 |
| | |||||
* | socket_t implementation withouth raw sockets | Martin Willi | 2007-11-26 | 1 | -1/+1 |
| | | | | | | --disable-raw-socket configure option prevents charon/pluto to run in parallel | ||||
* | experimental P2P-NAT-T for IKEv2 merged back from branch | Tobias Brunner | 2007-10-03 | 1 | -2/+12 |
| | |||||
* | fixed stuid()/setgid() and error handling | Martin Willi | 2007-10-01 | 1 | -2/+12 |
| | |||||
* | changed inheritable capability set to the permitted one to execute firewall ↵ | Martin Willi | 2007-09-28 | 1 | -2/+1 |
| | | | | script with CAP_NET_ADMIN | ||||
* | refactored strongswan manager | Martin Willi | 2007-09-26 | 1 | -0/+3 |
| | | | | | | | | removed buggy request parsing code, use ClearSilvers CGI kit instead fixed CHILD_SA listing in manager (needs better design) using secure XML communication through unix sockets removed images with questionable (non-GPL) license | ||||
* | fixed shutdown order to prevent crash when kernel interface schedules events | Martin Willi | 2007-09-12 | 1 | -1/+1 |
| | |||||
* | correct debug4.1.6 | Andreas Steffen | 2007-09-02 | 1 | -3/+3 |
| | |||||
* | renamed integrity check to integrity test | Andreas Steffen | 2007-08-29 | 1 | -3/+3 |
| | |||||
* | fips_verify_hmac_signature() now returns a boolean status | Andreas Steffen | 2007-08-29 | 1 | -1/+1 |
| | |||||
* | changed interface of fips_verify_hmac_signature | Andreas Steffen | 2007-08-29 | 1 | -1/+1 |
| | |||||
* | started implementation of libstrongswan code integrity check | Andreas Steffen | 2007-08-29 | 1 | -4/+28 |
| | |||||
* | support of ipsec rereadsecrets for stroke | Andreas Steffen | 2007-08-10 | 1 | -1/+1 |
| | |||||
* | further fixed for mobike roaming | Martin Willi | 2007-06-25 | 1 | -0/+3 |
| | |||||
* | implemented address change notification (for MOBIKE) | Martin Willi | 2007-06-14 | 1 | -12/+0 |
| | | | | | implemented up to date address list cache to list interfaces | ||||
* | introduced callback_job: | Martin Willi | 2007-06-11 | 1 | -88/+72 |
| | | | | | | | | | | | | simple asynchronous method invocation use daemons thread pool for all threads proper cancellation and cleanups cancellation mechanism to dynamically unload multithreaded code unified event_queue and scheduler => scheduler unified job_queue and thread_pool => processor removed job_type_t, not really needed fixes here, there and everywhere | ||||
* | simplified capability dropping | Martin Willi | 2007-05-09 | 1 | -26/+17 |
| | |||||
* | properly implemented interface_managers initiate, terminte_[ike|child] | Martin Willi | 2007-05-09 | 1 | -1/+1 |
| | | | | | proper thread release when stroke is CTRL+C'ed fixed some permission issues | ||||
* | changing UID/GID after startup of pluto/charon | Martin Willi | 2007-05-07 | 1 | -7/+30 |
| | | | | added --with-uid/--with-gid configure option | ||||
* | reducing capabilities of the threads to a minimum | Martin Willi | 2007-05-03 | 1 | -7/+46 |
| | | | | | | proper flush of pending packets on daemon shutdown adding local address as gateway address in dynamic route |