Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | disable DPD and sending of cert requests in load-tester | Andreas Steffen | 2009-01-14 | 1 | -2/+2 | |
| | ||||||
* | hiding XFRM message names from netlink | Andreas Steffen | 2009-01-09 | 2 | -26/+30 | |
| | ||||||
* | renamed chunk | Andreas Steffen | 2009-01-09 | 1 | -2/+2 | |
| | ||||||
* | refactored DBG3 output of sent XFRM messages | Andreas Steffen | 2009-01-09 | 2 | -72/+41 | |
| | ||||||
* | DBG3 output of sent XFRM messages | Andreas Steffen | 2009-01-09 | 1 | -3/+74 | |
| | ||||||
* | fixed two bugs introduced by the stroke ip pool refactoring4.2.10 | Andreas Steffen | 2009-01-08 | 1 | -2/+9 | |
| | ||||||
* | increase nonce size to 32 bytes, required when using SHA384/512 PRFs | Martin Willi | 2008-12-31 | 1 | -1/+1 | |
| | ||||||
* | fixed a potential memory leak when reusing mobike task | Martin Willi | 2008-12-19 | 1 | -0/+4 | |
| | ||||||
* | RNG tests based on FIPS 140-1 | Martin Willi | 2008-12-18 | 3 | -2/+225 | |
| | ||||||
* | updated documentation | Martin Willi | 2008-12-17 | 2 | -137/+131 | |
| | | | | | some minor cleanups calloc does not need an additional memset(0) | |||||
* | improved IKE_SA uniqueness check | Tobias Brunner | 2008-12-16 | 4 | -89/+83 | |
| | ||||||
* | purge certificates after IKE_AUTH response has been built | Martin Willi | 2008-12-16 | 1 | -6/+8 | |
| | ||||||
* | reimplemented certificate cache: | Martin Willi | 2008-12-15 | 1 | -154/+220 | |
| | | | | | | | fixes unsafe certificate caching use fixed array instead of a list fine grained per-slot locking use cache hits for housekeeping | |||||
* | signal each entry condvar after enumeration, required if wait_for_entry is ↵ | Martin Willi | 2008-12-15 | 1 | -3/+19 | |
| | | | | called | |||||
* | do not respawn cancelled threads if we are shutting down | Martin Willi | 2008-12-12 | 1 | -1/+3 | |
| | ||||||
* | fixed possible deadlock in checkin_and_destroy | Martin Willi | 2008-12-12 | 1 | -2/+2 | |
| | ||||||
* | avoid DNS lookup if possible | Martin Willi | 2008-12-12 | 1 | -13/+10 | |
| | ||||||
* | execute events if difference is 0, prevents a busywait | Martin Willi | 2008-12-12 | 1 | -2/+3 | |
| | ||||||
* | load tester got a "shutdown_when_complete" option, allows performance test ↵ | Martin Willi | 2008-12-12 | 3 | -15/+51 | |
| | | | | using "time" | |||||
* | daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill | Martin Willi | 2008-12-12 | 2 | -8/+8 | |
| | ||||||
* | wait until all IKE_SAs are in-house before destroying them | Martin Willi | 2008-12-12 | 1 | -1/+1 | |
| | ||||||
* | address extensions refactored | Tobias Brunner | 2008-12-11 | 2 | -85/+52 | |
| | ||||||
* | fixing checkout of IKE SAs with only the initiator SPI | Tobias Brunner | 2008-12-10 | 1 | -1/+2 | |
| | ||||||
* | increasing the performance of checkout_duplicate by using a hash table. | Tobias Brunner | 2008-12-10 | 1 | -66/+244 | |
| | ||||||
* | initial size of 1 is nonsense | Tobias Brunner | 2008-12-10 | 1 | -1/+1 | |
| | ||||||
* | list assigned leases using "ipsec leases" | Martin Willi | 2008-12-10 | 5 | -4/+197 | |
| | ||||||
* | added IKE_SA established timer to "ipsec statusall" | Martin Willi | 2008-12-10 | 1 | -5/+17 | |
| | ||||||
* | fixed load-tester shared key lookup | Martin Willi | 2008-12-09 | 1 | -2/+2 | |
| | ||||||
* | purge auth_info when IKE_SA is established, releases cert memory | Martin Willi | 2008-12-09 | 3 | -2/+22 | |
| | ||||||
* | limit number of ADDITIONAL_IPV*_ADDR notifies | Martin Willi | 2008-12-09 | 1 | -4/+9 | |
| | ||||||
* | list pools and usage in ipsec statusall | Martin Willi | 2008-12-09 | 3 | -5/+29 | |
| | ||||||
* | extended stroke in-memory pool to use hash-tables | Martin Willi | 2008-12-09 | 2 | -58/+172 | |
| | | | | | supports online/offline leases properly reassign addresses to identities | |||||
* | require explicit enabling of load-testing plugin | Martin Willi | 2008-12-09 | 1 | -1/+9 | |
| | ||||||
* | generating different initiator identities, configs and certificates on the fly | Martin Willi | 2008-12-08 | 3 | -101/+213 | |
| | ||||||
* | basic x509 certificate generation | Martin Willi | 2008-12-08 | 3 | -1/+111 | |
| | ||||||
* | hashtable enumerator enumerates over both, key and values | Martin Willi | 2008-12-05 | 1 | -1/+1 | |
| | ||||||
* | pass identity to release_address(), allows providers to do a lookup by id | Martin Willi | 2008-12-05 | 7 | -11/+13 | |
| | ||||||
* | extended changeset [4753] | Andreas Steffen | 2008-12-04 | 1 | -1/+2 | |
| | ||||||
* | implemented the policy cache in kernel_netlink_ipsec_t with a hash table ↵ | Tobias Brunner | 2008-12-04 | 1 | -41/+54 | |
| | | | | instead of a linked list. | |||||
* | fixed copy-paste bug (double-free) | Martin Willi | 2008-12-04 | 1 | -1/+0 | |
| | ||||||
* | reset pointer for a clean destruction | Martin Willi | 2008-12-04 | 1 | -0/+1 | |
| | ||||||
* | handling peer_match with higher priority tan ike_match to select correct ↵ | Martin Willi | 2008-12-04 | 1 | -1/+1 | |
| | | | | config if IPs are equal | |||||
* | fixed double free of host in sadb_address2ts | Andreas Steffen | 2008-12-04 | 1 | -1/+0 | |
| | ||||||
* | add support for smartcards in charon by using the ENGINE API provided by ↵ | Tobias Brunner | 2008-12-03 | 1 | -7/+83 | |
| | | | | OpenSSL, based on patches by Michael Roßberg. | |||||
* | enable quoted tokens in the token enumerator | Tobias Brunner | 2008-12-03 | 1 | -0/+2 | |
| | ||||||
* | fixed compiler warning | Tobias Brunner | 2008-12-03 | 1 | -1/+1 | |
| | ||||||
* | fixed double free of host in selector2ts | Martin Willi | 2008-12-03 | 1 | -27/+24 | |
| | ||||||
* | use DBG_ANY to set all loglevels | Martin Willi | 2008-12-02 | 1 | -5/+2 | |
| | ||||||
* | some task queueing improvements: | Martin Willi | 2008-12-01 | 8 | -63/+186 | |
| | | | | | | | | - do not pass CHILD_SAs to task constructor, might not be valid anymore during execution (late lookup) - use sub-tasks to delete CHILD/IKE_SA after rekeying, as we want to execute the delete before additional queued tasks | |||||
* | re-established lost default auth sys_logger | Andreas Steffen | 2008-12-01 | 1 | -3/+15 | |
| |