Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | parallelized trust chain verification | Martin Willi | 2008-04-16 | 3 | -38/+148 | |
| | | | | | | temporary imported certificates are thread-local only read-write locking on credential manager credential sets must be thread-save now | |||||
* | optimized half-open IKE_SA lookup (no checkout) | Martin Willi | 2008-04-16 | 1 | -3/+13 | |
| | ||||||
* | disable DPD if dpddelay is set but dpdaction=none | Martin Willi | 2008-04-16 | 1 | -0/+5 | |
| | ||||||
* | updated sql plugin to respect config changes | Martin Willi | 2008-04-15 | 3 | -32/+50 | |
| | ||||||
* | disabled SQL logging by default, as tests scenarios do not have a logging table | Martin Willi | 2008-04-15 | 1 | -1/+1 | |
| | ||||||
* | fixed build of smp plugin | Martin Willi | 2008-04-15 | 1 | -5/+5 | |
| | ||||||
* | build plugins after daemon/libstrongswan | Martin Willi | 2008-04-15 | 1 | -1/+1 | |
| | ||||||
* | added API for random number generators, served through credential factory | Martin Willi | 2008-04-15 | 13 | -115/+100 | |
| | | | | ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random) | |||||
* | implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater | Martin Willi | 2008-04-14 | 7 | -8/+179 | |
| | | | | additionally supports a "keep" value to keep the old IKE_SA | |||||
* | ike_sa_manager enumerable, not iterable | Martin Willi | 2008-04-14 | 10 | -113/+131 | |
| | ||||||
* | added close_action as a seperate config option to dpd_action | Martin Willi | 2008-04-14 | 7 | -32/+72 | |
| | ||||||
* | fixed jumping IKE_SA unique ids | Martin Willi | 2008-04-14 | 1 | -28/+53 | |
| | ||||||
* | fixed rightsourceip=%config scenarios | Martin Willi | 2008-04-14 | 3 | -42/+67 | |
| | ||||||
* | fixed disabling the sending of cert requests | Andreas Steffen | 2008-04-13 | 1 | -1/+1 | |
| | ||||||
* | using dpd actions to enforce connection state | Martin Willi | 2008-04-11 | 12 | -239/+264 | |
| | | | | dpd actions a per child-, not peer ike-sa | |||||
* | enabling acquire for mediated connections | Tobias Brunner | 2008-04-10 | 6 | -146/+51 | |
| | ||||||
* | enabling reauthentication on mediation connections | Tobias Brunner | 2008-04-10 | 2 | -3/+30 | |
| | ||||||
* | fixing a problem if the mediation server initiates the rekeying | Tobias Brunner | 2008-04-10 | 3 | -2/+18 | |
| | ||||||
* | mediation connections should now properly rekey | Tobias Brunner | 2008-04-09 | 3 | -11/+45 | |
| | ||||||
* | implemented a simple attribute provider for stroke | Martin Willi | 2008-04-09 | 4 | -0/+398 | |
| | ||||||
* | implementation of an CFG attribute framework, currently supporting virtual IPs | Martin Willi | 2008-04-09 | 12 | -84/+387 | |
| | | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool | |||||
* | signature in connectivity checks is now built with the message id in network ↵ | Tobias Brunner | 2008-04-08 | 1 | -1/+4 | |
| | | | | byte order | |||||
* | printing the checklist, two bugfixes | Tobias Brunner | 2008-04-08 | 1 | -2/+24 | |
| | ||||||
* | connect manager: restart the sender if it is not running anymore | Tobias Brunner | 2008-04-08 | 1 | -6/+19 | |
| | ||||||
* | better logging for chunks in connect manager | Tobias Brunner | 2008-04-08 | 1 | -12/+12 | |
| | ||||||
* | refactored callback data in connect manager | Tobias Brunner | 2008-04-08 | 1 | -48/+24 | |
| | ||||||
* | fast finishing connectivity checks on the initiators side | Tobias Brunner | 2008-04-07 | 1 | -53/+99 | |
| | ||||||
* | corrected the logging for retransmissions of connectivity checks | Tobias Brunner | 2008-04-07 | 1 | -6/+8 | |
| | ||||||
* | changed how retransmissions of connectivity checks are sent | Tobias Brunner | 2008-04-07 | 1 | -16/+10 | |
| | ||||||
* | fixing another memory leak | Tobias Brunner | 2008-04-07 | 1 | -0/+1 | |
| | ||||||
* | use cert->equals() to filter out equal certificates in seperate instances | Martin Willi | 2008-04-07 | 1 | -1/+1 | |
| | ||||||
* | try to cache the same instance of equal certificates | Martin Willi | 2008-04-07 | 1 | -4/+17 | |
| | ||||||
* | fixed bad cleanup which results in segfault if no issuer cert found, fixes #43 | Martin Willi | 2008-04-07 | 1 | -1/+0 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2008-04-07 | 1 | -2/+2 | |
| | ||||||
* | added ./configure option --with-strongswan-conf= | Martin Willi | 2008-04-07 | 1 | -1/+1 | |
| | | | | defaults to /etc/strongswan.conf | |||||
* | log shared secret with debug level 4 | Andreas Steffen | 2008-04-06 | 1 | -1/+1 | |
| | ||||||
* | default is hostaccess=no | Andreas Steffen | 2008-04-06 | 2 | -2/+2 | |
| | ||||||
* | and another | Tobias Brunner | 2008-04-03 | 1 | -0/+1 | |
| | ||||||
* | fixed two other memory leaks | Tobias Brunner | 2008-04-03 | 4 | -8/+6 | |
| | ||||||
* | replaced mutex in leak detective with thread scheduling | Tobias Brunner | 2008-04-03 | 1 | -1/+1 | |
| | ||||||
* | thread locking for sender and processor optimized | Tobias Brunner | 2008-04-03 | 3 | -22/+43 | |
| | ||||||
* | configure option in strongswan.conf for thread count | Martin Willi | 2008-04-03 | 2 | -3/+5 | |
| | ||||||
* | updated test data to use correct encoding data | Martin Willi | 2008-04-03 | 1 | -3/+4 | |
| | ||||||
* | demoted more notify debug messages to level 24.2.0 | Andreas Steffen | 2008-04-02 | 2 | -3/+3 | |
| | ||||||
* | fixing some memory leaks | Tobias Brunner | 2008-04-02 | 4 | -4/+31 | |
| | ||||||
* | securing total_threads with the mutex while destroying the processor | Tobias Brunner | 2008-04-02 | 1 | -0/+2 | |
| | ||||||
* | generate debug output if ocsp response does not contain status information ↵ | Andreas Steffen | 2008-04-02 | 2 | -3/+4 | |
| | | | | for a given certificate | |||||
* | fixed med_db test | Martin Willi | 2008-04-02 | 1 | -1/+1 | |
| | ||||||
* | updated mediation database to public key authentication | Martin Willi | 2008-04-02 | 10 | -62/+409 | |
| | | | | | | added mysql table definition, test data testcase | |||||
* | fixed compile warnings | Martin Willi | 2008-04-02 | 1 | -1/+0 | |
| |