aboutsummaryrefslogtreecommitdiffstats
path: root/src/conftest
Commit message (Collapse)AuthorAgeFilesLines
* conftest: Don't load plugins incrementallyTobias Brunner2013-09-131-4/+6
| | | | | This is not supported by the plugin loader, so we simply combine the plugin lists and load them all at once.
* ike: support multiple addresses, ranges and subnets in IKE address configMartin Willi2013-09-041-2/+2
| | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
* peer-cfg: add a pull/push mode option to use with mode configMartin Willi2013-09-041-2/+2
|
* conftest: Fix hook constructor resolution via dlsym()Tobias Brunner2013-08-301-1/+3
| | | | | | | | AM_CPPFLAGS only takes preprocessor flags like -I or -D, so it did not forward -rdynamic to the linker (--export-dynamic), which meant that the symbols defined in the executable itself were not resolvable via dlsym(). Fixes #394.
* conftest: Disable reset_seq hook on systems other than LinuxTobias Brunner2013-08-211-0/+6
| | | | Fixes #386.
* automake: replace INCLUDES by AM_CPPFLAGSMartin Willi2013-07-181-6/+4
| | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only.
* plugin-loader: Removed unused path argument of load() methodTobias Brunner2013-06-281-1/+1
| | | | | Multiple additional search paths can be added with the add_path() method.
* plugin-loader: Add method to print loaded plugins on a given log levelTobias Brunner2013-06-211-0/+2
|
* Fixed Doxygen comments after scanning complete src directoryTobias Brunner2013-03-022-3/+3
|
* Merge branch 'opaque-ports'Martin Willi2013-03-011-2/+2
|\ | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends.
| * Use a complete port range in traffic_selector_create_from_{subnet,cidr}Martin Willi2013-02-211-2/+2
| |
* | Add a DSCP configuration value to IKE configsMartin Willi2013-02-061-1/+1
|/
* Add the ability to use a named pool for conftest configsTobias Brunner2013-01-212-4/+10
|
* Merge branch 'ikev1-fragmentation'Tobias Brunner2013-01-121-1/+2
|\ | | | | | | | | | | | | This adds support for the proprietary IKEv1 fragmentation extension. Conflicts: NEWS
| * Added an option that allows to force IKEv1 fragmentationTobias Brunner2013-01-121-1/+2
| |
| * Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-241-1/+1
| |
* | conftest: Add support for time_format and ike_name options in log sectionsThomas Klute2013-01-081-1/+18
| | | | | | | | | | | | Both options are well supported for normal operation but were completely ignored by conftest, which used hard coded defaults. File options are still missing but could be added in a similar way.
* | conftest: Fix log level settings for stdoutThomas Klute2013-01-081-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | This patch fixes bug #272 ("conftest ignores log settings for stdout"). http://wiki.strongswan.org/issues/272 According to the documentation of add_logger in src/libcharon/bus/bus.h, the relevant log levels of a logger are registered with the logging subsystem when adding the logger. If the log levels change later, the logger must be re-added to propagate the new settings. In conftest.c, the stdout logger is initialized and added before reading the logging settings, but wasn't re-added after reading the settings.
* | conftest: Make outgoing sequence number set by reset_seq configurableThomas Klute2013-01-082-8/+70
|/ | | | | | | | This is useful for certain test cases. Passing the sequence number to the callback requires a new struct that contains both the number and the xfrm_usersa_id. The new configuration parameter is called oseq in accordance with the kernel name, see the comment in the reset_cb callback function for details.
* Add missing CHILD_SA specific proposal keyword in conftest READMEMartin Willi2012-12-171-0/+1
|
* Fixed reading of configs in conftest utilityTobias Brunner2012-12-131-4/+4
|
* Make use of new CIDR string ts constructor where appropriateMartin Willi2012-10-241-8/+4
|
* Remove version argument on peer_cfg constructor, use ike_cfg version insteadMartin Willi2012-10-241-1/+1
|
* Add IKE version information to ike_cfg_tMartin Willi2012-10-241-1/+1
|
* Make syslog and file loggers configurable at runtimeTobias Brunner2012-10-181-10/+7
|
* Store loggers in conftest separately, not on charonTobias Brunner2012-10-182-6/+19
|
* Missed one in 3dcffed6Tobias Brunner2012-09-281-1/+1
|
* Make sure first argument is an int when using %.*s to print e.g. chunksTobias Brunner2012-09-281-1/+2
|
* The this->data member is never NULLTobias Brunner2012-09-282-2/+2
|
* Added possibility to register custom proposal keywordsTobias Brunner2012-09-131-2/+1
| | | | Keyword lookup and registration are handled via the new lib->proposal object.
* Removed len argument from proposal_get_token()Tobias Brunner2012-09-131-1/+1
| | | | Also use enumerators instead of lexparser.h to parse proposal strings.
* Support multiple address pools configured on a peer_cfgMartin Willi2012-08-301-1/+1
|
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-301-1/+1
|
* Initialize conftest with the same plugins as charonMartin Willi2012-07-162-2/+3
|
* Remove unused replay variable in conftests seq number reset hookMartin Willi2012-07-161-3/+0
|
* Update conftest to use splitted listener/logger interfacesMartin Willi2012-07-161-2/+2
|
* Add a return value to keymat_v2_t.get_auth_octets()Martin Willi2012-07-162-4/+13
|
* implemented the right|leftallowany featureAndreas Steffen2012-06-081-2/+2
|
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-171-1/+1
|
* Store the name of the binary using libcharon to enable specific settings.Tobias Brunner2012-05-031-1/+1
|
* Accept NULL auth_cfg_t passed to credential_manager_t.get_private()Martin Willi2012-03-201-4/+1
|
* Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵Martin Willi2012-03-2021-81/+87
| | | | encrypted
* Added an aggressive mode peer_cfg optionMartin Willi2012-03-201-1/+1
|
* Separated libcharon/sa directory with ikev1 and ikev2 subfoldersMartin Willi2012-03-202-2/+2
|
* Cleanup CERT payload constructorsMartin Willi2012-03-202-3/+3
|
* Added not-yet used sa_payload parameters used in IKEv1Martin Willi2012-03-203-5/+3
|
* Fixed conftests after extending CERT payload.Tobias Brunner2012-03-202-3/+3
|
* Moved version specific keymat functions to specific interfaces.Tobias Brunner2012-03-202-4/+6
|
* Don't clone chunk in message.get_packet_dataMartin Willi2012-03-201-1/+1
|
* Added IKEv1 support to notify payloadMartin Willi2012-03-202-2/+2
|