| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | peer-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -3/+7 |
| | | |||||
| * | child-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -9/+7 |
| | | |||||
| * | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 10 | -15/+15 |
| | | |||||
| * | libhydra: Remove empty unused library | Tobias Brunner | 2016-03-03 | 2 | -10/+0 |
| | | |||||
| * | libhydra: Move kernel interface to libcharon | Tobias Brunner | 2016-03-03 | 1 | -1/+0 |
| | | | | | This moves hydra->kernel_interface to charon->kernel. | ||||
| * | sigwaitinfo() may fail with EINTR if interrupted by an unblocked signal not ↵ | Tobias Brunner | 2015-11-23 | 1 | -1/+1 |
| | | | | | | | in the set Fixes #1213. | ||||
| * | conftest: Add configuration option to report milliseconds in file logger | Tobias Brunner | 2015-11-09 | 1 | -2/+4 |
| | | |||||
| * | file-logger: Add option to print milliseconds within the current second ↵ | Tobias Brunner | 2015-11-09 | 1 | -2/+2 |
| | | | | | | | | | after timestamp For this to look right time_format should end with %S or %T. Closes strongswan/strongswan#18. | ||||
| * | Replace usages of sigwait(3) with sigwaitinfo(2) | Tobias Brunner | 2015-10-29 | 1 | -1/+1 |
| | | | | | | | | This is basically the same call, but it has the advantage of being supported by FreeBSD's valgrind, which sigwait() is not. References #1106. | ||||
| * | controller: Optionally adhere to init limits also when initiating IKE_SAs | Tobias Brunner | 2015-08-21 | 1 | -1/+1 |
| | | |||||
| * | kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqid | Martin Willi | 2015-02-20 | 1 | -6/+8 |
| | | |||||
| * | controller: Use the CHILD_SA unique_id to terminate CHILD_SAs | Martin Willi | 2015-02-20 | 1 | -1/+1 |
| | | |||||
| * | ike: Rename encryption_payload to encrypted_payload | Tobias Brunner | 2014-10-10 | 1 | -1/+1 |
| | | |||||
| * | kernel-netlink: Define netlink buffer as an union having a netlink header | Martin Willi | 2014-09-24 | 1 | -1/+1 |
| | | | | | | This allows us to streamline the netlink buffers, and avoid extensive casting. | ||||
| * | autoconf: Replace --disable-tools option with --disable-scepclient | Tobias Brunner | 2014-06-30 | 1 | -1/+1 |
| | | | | | | Since using a separate option for pki this was the only tool that was still enabled by that option. | ||||
| * | payload: Use common prefixes for all payload type identifiers | Martin Willi | 2014-06-04 | 13 | -29/+29 |
| | | | | | | The old identifiers did not use a proper namespace and often clashed with other defines. | ||||
| * | plugins: Don't link with -rdynamic on Windows | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | | |||||
| * | ike: Add an additional but separate AEAD proposal to CHILD config | Martin Willi | 2014-05-16 | 1 | -0/+2 |
| | | | | | | | | This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless. | ||||
| * | ike: Add an additional but separate AEAD proposal to IKE config, if supported | Martin Willi | 2014-05-16 | 1 | -0/+1 |
| | | |||||
| * | enum: Return boolean result for enum_from_name() lookup | Martin Willi | 2014-05-16 | 8 | -16/+8 |
| | | | | | | | | | | | | Handling the result for enum_from_name() is difficult, as checking for negative return values requires a cast if the enum type is unsigned. The new signature clearly differentiates lookup result from lookup value. Further, this actually allows to convert real -1 enum values, which could not be distinguished from "not-found" and the -1 return value. This also fixes several clang warnings where enums are unsigned. | ||||
| * | conftest: Use path_dirname() | Tobias Brunner | 2014-02-24 | 1 | -1/+1 |
| | | |||||
| * | libcharon: Remove unused charon->name | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | | |||||
| * | libhydra: Remove unused hydra->daemon | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | | |||||
| * | lib: Add global config namespace | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | | |||||
| * | conftest: Don't load plugins incrementally | Tobias Brunner | 2013-09-13 | 1 | -4/+6 |
| | | | | | | This is not supported by the plugin loader, so we simply combine the plugin lists and load them all at once. | ||||
| * | ike: support multiple addresses, ranges and subnets in IKE address config | Martin Willi | 2013-09-04 | 1 | -2/+2 |
| | | | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets. | ||||
| * | peer-cfg: add a pull/push mode option to use with mode config | Martin Willi | 2013-09-04 | 1 | -2/+2 |
| | | |||||
| * | conftest: Fix hook constructor resolution via dlsym() | Tobias Brunner | 2013-08-30 | 1 | -1/+3 |
| | | | | | | | | | AM_CPPFLAGS only takes preprocessor flags like -I or -D, so it did not forward -rdynamic to the linker (--export-dynamic), which meant that the symbols defined in the executable itself were not resolvable via dlsym(). Fixes #394. | ||||
| * | conftest: Disable reset_seq hook on systems other than Linux | Tobias Brunner | 2013-08-21 | 1 | -0/+6 |
| | | | | | Fixes #386. | ||||
| * | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -6/+4 |
| | | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
| * | plugin-loader: Removed unused path argument of load() method | Tobias Brunner | 2013-06-28 | 1 | -1/+1 |
| | | | | | | Multiple additional search paths can be added with the add_path() method. | ||||
| * | plugin-loader: Add method to print loaded plugins on a given log level | Tobias Brunner | 2013-06-21 | 1 | -0/+2 |
| | | |||||
| * | Fixed Doxygen comments after scanning complete src directory | Tobias Brunner | 2013-03-02 | 2 | -3/+3 |
| | | |||||
| * | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -2/+2 |
| |\ | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| | * | Use a complete port range in traffic_selector_create_from_{subnet,cidr} | Martin Willi | 2013-02-21 | 1 | -2/+2 |
| | | | |||||
| * | | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -1/+1 |
| |/ | |||||
| * | Add the ability to use a named pool for conftest configs | Tobias Brunner | 2013-01-21 | 2 | -4/+10 |
| | | |||||
| * | Merge branch 'ikev1-fragmentation' | Tobias Brunner | 2013-01-12 | 1 | -1/+2 |
| |\ | | | | | | | | | | | | | This adds support for the proprietary IKEv1 fragmentation extension. Conflicts: NEWS | ||||
| | * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -1/+2 |
| | | | |||||
| | * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -1/+1 |
| | | | |||||
| * | | conftest: Add support for time_format and ike_name options in log sections | Thomas Klute | 2013-01-08 | 1 | -1/+18 |
| | | | | | | | | | | | | | Both options are well supported for normal operation but were completely ignored by conftest, which used hard coded defaults. File options are still missing but could be added in a similar way. | ||||
| * | | conftest: Fix log level settings for stdout | Thomas Klute | 2013-01-08 | 1 | -0/+3 |
| | | | | | | | | | | | | | | | | | | | | | | | | | This patch fixes bug #272 ("conftest ignores log settings for stdout"). http://wiki.strongswan.org/issues/272 According to the documentation of add_logger in src/libcharon/bus/bus.h, the relevant log levels of a logger are registered with the logging subsystem when adding the logger. If the log levels change later, the logger must be re-added to propagate the new settings. In conftest.c, the stdout logger is initialized and added before reading the logging settings, but wasn't re-added after reading the settings. | ||||
| * | | conftest: Make outgoing sequence number set by reset_seq configurable | Thomas Klute | 2013-01-08 | 2 | -8/+70 |
| |/ | | | | | | | | This is useful for certain test cases. Passing the sequence number to the callback requires a new struct that contains both the number and the xfrm_usersa_id. The new configuration parameter is called oseq in accordance with the kernel name, see the comment in the reset_cb callback function for details. | ||||
| * | Add missing CHILD_SA specific proposal keyword in conftest README | Martin Willi | 2012-12-17 | 1 | -0/+1 |
| | | |||||
| * | Fixed reading of configs in conftest utility | Tobias Brunner | 2012-12-13 | 1 | -4/+4 |
| | | |||||
| * | Make use of new CIDR string ts constructor where appropriate | Martin Willi | 2012-10-24 | 1 | -8/+4 |
| | | |||||
| * | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | | |||||
| * | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | | |||||
| * | Make syslog and file loggers configurable at runtime | Tobias Brunner | 2012-10-18 | 1 | -10/+7 |
| | | |||||
| * | Store loggers in conftest separately, not on charon | Tobias Brunner | 2012-10-18 | 2 | -6/+19 |
| | | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |