Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | payload: Use common prefixes for all payload type identifiers | Martin Willi | 2014-06-04 | 13 | -29/+29 |
| | | | | | The old identifiers did not use a proper namespace and often clashed with other defines. | ||||
* | plugins: Don't link with -rdynamic on Windows | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | |||||
* | ike: Add an additional but separate AEAD proposal to CHILD config | Martin Willi | 2014-05-16 | 1 | -0/+2 |
| | | | | | | | This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless. | ||||
* | ike: Add an additional but separate AEAD proposal to IKE config, if supported | Martin Willi | 2014-05-16 | 1 | -0/+1 |
| | |||||
* | enum: Return boolean result for enum_from_name() lookup | Martin Willi | 2014-05-16 | 8 | -16/+8 |
| | | | | | | | | | | | Handling the result for enum_from_name() is difficult, as checking for negative return values requires a cast if the enum type is unsigned. The new signature clearly differentiates lookup result from lookup value. Further, this actually allows to convert real -1 enum values, which could not be distinguished from "not-found" and the -1 return value. This also fixes several clang warnings where enums are unsigned. | ||||
* | conftest: Use path_dirname() | Tobias Brunner | 2014-02-24 | 1 | -1/+1 |
| | |||||
* | libcharon: Remove unused charon->name | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | |||||
* | libhydra: Remove unused hydra->daemon | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | |||||
* | lib: Add global config namespace | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | |||||
* | conftest: Don't load plugins incrementally | Tobias Brunner | 2013-09-13 | 1 | -4/+6 |
| | | | | | This is not supported by the plugin loader, so we simply combine the plugin lists and load them all at once. | ||||
* | ike: support multiple addresses, ranges and subnets in IKE address config | Martin Willi | 2013-09-04 | 1 | -2/+2 |
| | | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets. | ||||
* | peer-cfg: add a pull/push mode option to use with mode config | Martin Willi | 2013-09-04 | 1 | -2/+2 |
| | |||||
* | conftest: Fix hook constructor resolution via dlsym() | Tobias Brunner | 2013-08-30 | 1 | -1/+3 |
| | | | | | | | | AM_CPPFLAGS only takes preprocessor flags like -I or -D, so it did not forward -rdynamic to the linker (--export-dynamic), which meant that the symbols defined in the executable itself were not resolvable via dlsym(). Fixes #394. | ||||
* | conftest: Disable reset_seq hook on systems other than Linux | Tobias Brunner | 2013-08-21 | 1 | -0/+6 |
| | | | | Fixes #386. | ||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -6/+4 |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
* | plugin-loader: Removed unused path argument of load() method | Tobias Brunner | 2013-06-28 | 1 | -1/+1 |
| | | | | | Multiple additional search paths can be added with the add_path() method. | ||||
* | plugin-loader: Add method to print loaded plugins on a given log level | Tobias Brunner | 2013-06-21 | 1 | -0/+2 |
| | |||||
* | Fixed Doxygen comments after scanning complete src directory | Tobias Brunner | 2013-03-02 | 2 | -3/+3 |
| | |||||
* | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -2/+2 |
|\ | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| * | Use a complete port range in traffic_selector_create_from_{subnet,cidr} | Martin Willi | 2013-02-21 | 1 | -2/+2 |
| | | |||||
* | | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -1/+1 |
|/ | |||||
* | Add the ability to use a named pool for conftest configs | Tobias Brunner | 2013-01-21 | 2 | -4/+10 |
| | |||||
* | Merge branch 'ikev1-fragmentation' | Tobias Brunner | 2013-01-12 | 1 | -1/+2 |
|\ | | | | | | | | | | | | | This adds support for the proprietary IKEv1 fragmentation extension. Conflicts: NEWS | ||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -1/+2 |
| | | |||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -1/+1 |
| | | |||||
* | | conftest: Add support for time_format and ike_name options in log sections | Thomas Klute | 2013-01-08 | 1 | -1/+18 |
| | | | | | | | | | | | | Both options are well supported for normal operation but were completely ignored by conftest, which used hard coded defaults. File options are still missing but could be added in a similar way. | ||||
* | | conftest: Fix log level settings for stdout | Thomas Klute | 2013-01-08 | 1 | -0/+3 |
| | | | | | | | | | | | | | | | | | | | | | | | | This patch fixes bug #272 ("conftest ignores log settings for stdout"). http://wiki.strongswan.org/issues/272 According to the documentation of add_logger in src/libcharon/bus/bus.h, the relevant log levels of a logger are registered with the logging subsystem when adding the logger. If the log levels change later, the logger must be re-added to propagate the new settings. In conftest.c, the stdout logger is initialized and added before reading the logging settings, but wasn't re-added after reading the settings. | ||||
* | | conftest: Make outgoing sequence number set by reset_seq configurable | Thomas Klute | 2013-01-08 | 2 | -8/+70 |
|/ | | | | | | | | This is useful for certain test cases. Passing the sequence number to the callback requires a new struct that contains both the number and the xfrm_usersa_id. The new configuration parameter is called oseq in accordance with the kernel name, see the comment in the reset_cb callback function for details. | ||||
* | Add missing CHILD_SA specific proposal keyword in conftest README | Martin Willi | 2012-12-17 | 1 | -0/+1 |
| | |||||
* | Fixed reading of configs in conftest utility | Tobias Brunner | 2012-12-13 | 1 | -4/+4 |
| | |||||
* | Make use of new CIDR string ts constructor where appropriate | Martin Willi | 2012-10-24 | 1 | -8/+4 |
| | |||||
* | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Make syslog and file loggers configurable at runtime | Tobias Brunner | 2012-10-18 | 1 | -10/+7 |
| | |||||
* | Store loggers in conftest separately, not on charon | Tobias Brunner | 2012-10-18 | 2 | -6/+19 |
| | |||||
* | Missed one in 3dcffed6 | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
| | |||||
* | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 1 | -1/+2 |
| | |||||
* | The this->data member is never NULL | Tobias Brunner | 2012-09-28 | 2 | -2/+2 |
| | |||||
* | Added possibility to register custom proposal keywords | Tobias Brunner | 2012-09-13 | 1 | -2/+1 |
| | | | | Keyword lookup and registration are handled via the new lib->proposal object. | ||||
* | Removed len argument from proposal_get_token() | Tobias Brunner | 2012-09-13 | 1 | -1/+1 |
| | | | | Also use enumerators instead of lexparser.h to parse proposal strings. | ||||
* | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | |||||
* | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | |||||
* | Initialize conftest with the same plugins as charon | Martin Willi | 2012-07-16 | 2 | -2/+3 |
| | |||||
* | Remove unused replay variable in conftests seq number reset hook | Martin Willi | 2012-07-16 | 1 | -3/+0 |
| | |||||
* | Update conftest to use splitted listener/logger interfaces | Martin Willi | 2012-07-16 | 1 | -2/+2 |
| | |||||
* | Add a return value to keymat_v2_t.get_auth_octets() | Martin Willi | 2012-07-16 | 2 | -4/+13 |
| | |||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -2/+2 |
| | |||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -1/+1 |
| | |||||
* | Store the name of the binary using libcharon to enable specific settings. | Tobias Brunner | 2012-05-03 | 1 | -1/+1 |
| | |||||
* | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -4/+1 |
| |