Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | conftest: Don't load plugins incrementally | Tobias Brunner | 2013-09-13 | 1 | -4/+6 |
| | | | | | This is not supported by the plugin loader, so we simply combine the plugin lists and load them all at once. | ||||
* | ike: support multiple addresses, ranges and subnets in IKE address config | Martin Willi | 2013-09-04 | 1 | -2/+2 |
| | | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets. | ||||
* | peer-cfg: add a pull/push mode option to use with mode config | Martin Willi | 2013-09-04 | 1 | -2/+2 |
| | |||||
* | conftest: Fix hook constructor resolution via dlsym() | Tobias Brunner | 2013-08-30 | 1 | -1/+3 |
| | | | | | | | | AM_CPPFLAGS only takes preprocessor flags like -I or -D, so it did not forward -rdynamic to the linker (--export-dynamic), which meant that the symbols defined in the executable itself were not resolvable via dlsym(). Fixes #394. | ||||
* | conftest: Disable reset_seq hook on systems other than Linux | Tobias Brunner | 2013-08-21 | 1 | -0/+6 |
| | | | | Fixes #386. | ||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -6/+4 |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
* | plugin-loader: Removed unused path argument of load() method | Tobias Brunner | 2013-06-28 | 1 | -1/+1 |
| | | | | | Multiple additional search paths can be added with the add_path() method. | ||||
* | plugin-loader: Add method to print loaded plugins on a given log level | Tobias Brunner | 2013-06-21 | 1 | -0/+2 |
| | |||||
* | Fixed Doxygen comments after scanning complete src directory | Tobias Brunner | 2013-03-02 | 2 | -3/+3 |
| | |||||
* | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -2/+2 |
|\ | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| * | Use a complete port range in traffic_selector_create_from_{subnet,cidr} | Martin Willi | 2013-02-21 | 1 | -2/+2 |
| | | |||||
* | | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -1/+1 |
|/ | |||||
* | Add the ability to use a named pool for conftest configs | Tobias Brunner | 2013-01-21 | 2 | -4/+10 |
| | |||||
* | Merge branch 'ikev1-fragmentation' | Tobias Brunner | 2013-01-12 | 1 | -1/+2 |
|\ | | | | | | | | | | | | | This adds support for the proprietary IKEv1 fragmentation extension. Conflicts: NEWS | ||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -1/+2 |
| | | |||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -1/+1 |
| | | |||||
* | | conftest: Add support for time_format and ike_name options in log sections | Thomas Klute | 2013-01-08 | 1 | -1/+18 |
| | | | | | | | | | | | | Both options are well supported for normal operation but were completely ignored by conftest, which used hard coded defaults. File options are still missing but could be added in a similar way. | ||||
* | | conftest: Fix log level settings for stdout | Thomas Klute | 2013-01-08 | 1 | -0/+3 |
| | | | | | | | | | | | | | | | | | | | | | | | | This patch fixes bug #272 ("conftest ignores log settings for stdout"). http://wiki.strongswan.org/issues/272 According to the documentation of add_logger in src/libcharon/bus/bus.h, the relevant log levels of a logger are registered with the logging subsystem when adding the logger. If the log levels change later, the logger must be re-added to propagate the new settings. In conftest.c, the stdout logger is initialized and added before reading the logging settings, but wasn't re-added after reading the settings. | ||||
* | | conftest: Make outgoing sequence number set by reset_seq configurable | Thomas Klute | 2013-01-08 | 2 | -8/+70 |
|/ | | | | | | | | This is useful for certain test cases. Passing the sequence number to the callback requires a new struct that contains both the number and the xfrm_usersa_id. The new configuration parameter is called oseq in accordance with the kernel name, see the comment in the reset_cb callback function for details. | ||||
* | Add missing CHILD_SA specific proposal keyword in conftest README | Martin Willi | 2012-12-17 | 1 | -0/+1 |
| | |||||
* | Fixed reading of configs in conftest utility | Tobias Brunner | 2012-12-13 | 1 | -4/+4 |
| | |||||
* | Make use of new CIDR string ts constructor where appropriate | Martin Willi | 2012-10-24 | 1 | -8/+4 |
| | |||||
* | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Make syslog and file loggers configurable at runtime | Tobias Brunner | 2012-10-18 | 1 | -10/+7 |
| | |||||
* | Store loggers in conftest separately, not on charon | Tobias Brunner | 2012-10-18 | 2 | -6/+19 |
| | |||||
* | Missed one in 3dcffed6 | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
| | |||||
* | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 1 | -1/+2 |
| | |||||
* | The this->data member is never NULL | Tobias Brunner | 2012-09-28 | 2 | -2/+2 |
| | |||||
* | Added possibility to register custom proposal keywords | Tobias Brunner | 2012-09-13 | 1 | -2/+1 |
| | | | | Keyword lookup and registration are handled via the new lib->proposal object. | ||||
* | Removed len argument from proposal_get_token() | Tobias Brunner | 2012-09-13 | 1 | -1/+1 |
| | | | | Also use enumerators instead of lexparser.h to parse proposal strings. | ||||
* | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | |||||
* | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | |||||
* | Initialize conftest with the same plugins as charon | Martin Willi | 2012-07-16 | 2 | -2/+3 |
| | |||||
* | Remove unused replay variable in conftests seq number reset hook | Martin Willi | 2012-07-16 | 1 | -3/+0 |
| | |||||
* | Update conftest to use splitted listener/logger interfaces | Martin Willi | 2012-07-16 | 1 | -2/+2 |
| | |||||
* | Add a return value to keymat_v2_t.get_auth_octets() | Martin Willi | 2012-07-16 | 2 | -4/+13 |
| | |||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -2/+2 |
| | |||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -1/+1 |
| | |||||
* | Store the name of the binary using libcharon to enable specific settings. | Tobias Brunner | 2012-05-03 | 1 | -1/+1 |
| | |||||
* | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -4/+1 |
| | |||||
* | Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵ | Martin Willi | 2012-03-20 | 21 | -81/+87 |
| | | | | encrypted | ||||
* | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | |||||
* | Separated libcharon/sa directory with ikev1 and ikev2 subfolders | Martin Willi | 2012-03-20 | 2 | -2/+2 |
| | |||||
* | Cleanup CERT payload constructors | Martin Willi | 2012-03-20 | 2 | -3/+3 |
| | |||||
* | Added not-yet used sa_payload parameters used in IKEv1 | Martin Willi | 2012-03-20 | 3 | -5/+3 |
| | |||||
* | Fixed conftests after extending CERT payload. | Tobias Brunner | 2012-03-20 | 2 | -3/+3 |
| | |||||
* | Moved version specific keymat functions to specific interfaces. | Tobias Brunner | 2012-03-20 | 2 | -4/+6 |
| | |||||
* | Don't clone chunk in message.get_packet_data | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | |||||
* | Added IKEv1 support to notify payload | Martin Willi | 2012-03-20 | 2 | -2/+2 |
| |