aboutsummaryrefslogtreecommitdiffstats
path: root/src/conftest
Commit message (Collapse)AuthorAgeFilesLines
* payload: Use common prefixes for all payload type identifiersMartin Willi2014-06-0413-29/+29
| | | | | The old identifiers did not use a proper namespace and often clashed with other defines.
* plugins: Don't link with -rdynamic on WindowsMartin Willi2014-06-041-1/+1
|
* ike: Add an additional but separate AEAD proposal to CHILD configMartin Willi2014-05-161-0/+2
| | | | | | | This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless.
* ike: Add an additional but separate AEAD proposal to IKE config, if supportedMartin Willi2014-05-161-0/+1
|
* enum: Return boolean result for enum_from_name() lookupMartin Willi2014-05-168-16/+8
| | | | | | | | | | | Handling the result for enum_from_name() is difficult, as checking for negative return values requires a cast if the enum type is unsigned. The new signature clearly differentiates lookup result from lookup value. Further, this actually allows to convert real -1 enum values, which could not be distinguished from "not-found" and the -1 return value. This also fixes several clang warnings where enums are unsigned.
* conftest: Use path_dirname()Tobias Brunner2014-02-241-1/+1
|
* libcharon: Remove unused charon->nameTobias Brunner2014-02-121-1/+1
|
* libhydra: Remove unused hydra->daemonTobias Brunner2014-02-121-1/+1
|
* lib: Add global config namespaceTobias Brunner2014-02-121-1/+1
|
* conftest: Don't load plugins incrementallyTobias Brunner2013-09-131-4/+6
| | | | | This is not supported by the plugin loader, so we simply combine the plugin lists and load them all at once.
* ike: support multiple addresses, ranges and subnets in IKE address configMartin Willi2013-09-041-2/+2
| | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
* peer-cfg: add a pull/push mode option to use with mode configMartin Willi2013-09-041-2/+2
|
* conftest: Fix hook constructor resolution via dlsym()Tobias Brunner2013-08-301-1/+3
| | | | | | | | AM_CPPFLAGS only takes preprocessor flags like -I or -D, so it did not forward -rdynamic to the linker (--export-dynamic), which meant that the symbols defined in the executable itself were not resolvable via dlsym(). Fixes #394.
* conftest: Disable reset_seq hook on systems other than LinuxTobias Brunner2013-08-211-0/+6
| | | | Fixes #386.
* automake: replace INCLUDES by AM_CPPFLAGSMartin Willi2013-07-181-6/+4
| | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only.
* plugin-loader: Removed unused path argument of load() methodTobias Brunner2013-06-281-1/+1
| | | | | Multiple additional search paths can be added with the add_path() method.
* plugin-loader: Add method to print loaded plugins on a given log levelTobias Brunner2013-06-211-0/+2
|
* Fixed Doxygen comments after scanning complete src directoryTobias Brunner2013-03-022-3/+3
|
* Merge branch 'opaque-ports'Martin Willi2013-03-011-2/+2
|\ | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends.
| * Use a complete port range in traffic_selector_create_from_{subnet,cidr}Martin Willi2013-02-211-2/+2
| |
* | Add a DSCP configuration value to IKE configsMartin Willi2013-02-061-1/+1
|/
* Add the ability to use a named pool for conftest configsTobias Brunner2013-01-212-4/+10
|
* Merge branch 'ikev1-fragmentation'Tobias Brunner2013-01-121-1/+2
|\ | | | | | | | | | | | | This adds support for the proprietary IKEv1 fragmentation extension. Conflicts: NEWS
| * Added an option that allows to force IKEv1 fragmentationTobias Brunner2013-01-121-1/+2
| |
| * Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-241-1/+1
| |
* | conftest: Add support for time_format and ike_name options in log sectionsThomas Klute2013-01-081-1/+18
| | | | | | | | | | | | Both options are well supported for normal operation but were completely ignored by conftest, which used hard coded defaults. File options are still missing but could be added in a similar way.
* | conftest: Fix log level settings for stdoutThomas Klute2013-01-081-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | This patch fixes bug #272 ("conftest ignores log settings for stdout"). http://wiki.strongswan.org/issues/272 According to the documentation of add_logger in src/libcharon/bus/bus.h, the relevant log levels of a logger are registered with the logging subsystem when adding the logger. If the log levels change later, the logger must be re-added to propagate the new settings. In conftest.c, the stdout logger is initialized and added before reading the logging settings, but wasn't re-added after reading the settings.
* | conftest: Make outgoing sequence number set by reset_seq configurableThomas Klute2013-01-082-8/+70
|/ | | | | | | | This is useful for certain test cases. Passing the sequence number to the callback requires a new struct that contains both the number and the xfrm_usersa_id. The new configuration parameter is called oseq in accordance with the kernel name, see the comment in the reset_cb callback function for details.
* Add missing CHILD_SA specific proposal keyword in conftest READMEMartin Willi2012-12-171-0/+1
|
* Fixed reading of configs in conftest utilityTobias Brunner2012-12-131-4/+4
|
* Make use of new CIDR string ts constructor where appropriateMartin Willi2012-10-241-8/+4
|
* Remove version argument on peer_cfg constructor, use ike_cfg version insteadMartin Willi2012-10-241-1/+1
|
* Add IKE version information to ike_cfg_tMartin Willi2012-10-241-1/+1
|
* Make syslog and file loggers configurable at runtimeTobias Brunner2012-10-181-10/+7
|
* Store loggers in conftest separately, not on charonTobias Brunner2012-10-182-6/+19
|
* Missed one in 3dcffed6Tobias Brunner2012-09-281-1/+1
|
* Make sure first argument is an int when using %.*s to print e.g. chunksTobias Brunner2012-09-281-1/+2
|
* The this->data member is never NULLTobias Brunner2012-09-282-2/+2
|
* Added possibility to register custom proposal keywordsTobias Brunner2012-09-131-2/+1
| | | | Keyword lookup and registration are handled via the new lib->proposal object.
* Removed len argument from proposal_get_token()Tobias Brunner2012-09-131-1/+1
| | | | Also use enumerators instead of lexparser.h to parse proposal strings.
* Support multiple address pools configured on a peer_cfgMartin Willi2012-08-301-1/+1
|
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-301-1/+1
|
* Initialize conftest with the same plugins as charonMartin Willi2012-07-162-2/+3
|
* Remove unused replay variable in conftests seq number reset hookMartin Willi2012-07-161-3/+0
|
* Update conftest to use splitted listener/logger interfacesMartin Willi2012-07-161-2/+2
|
* Add a return value to keymat_v2_t.get_auth_octets()Martin Willi2012-07-162-4/+13
|
* implemented the right|leftallowany featureAndreas Steffen2012-06-081-2/+2
|
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-171-1/+1
|
* Store the name of the binary using libcharon to enable specific settings.Tobias Brunner2012-05-031-1/+1
|
* Accept NULL auth_cfg_t passed to credential_manager_t.get_private()Martin Willi2012-03-201-4/+1
|