Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fixed Doxygen comments after scanning complete src directory | Tobias Brunner | 2013-03-02 | 2 | -3/+3 |
| | |||||
* | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -2/+2 |
|\ | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| * | Use a complete port range in traffic_selector_create_from_{subnet,cidr} | Martin Willi | 2013-02-21 | 1 | -2/+2 |
| | | |||||
* | | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -1/+1 |
|/ | |||||
* | Add the ability to use a named pool for conftest configs | Tobias Brunner | 2013-01-21 | 2 | -4/+10 |
| | |||||
* | Merge branch 'ikev1-fragmentation' | Tobias Brunner | 2013-01-12 | 1 | -1/+2 |
|\ | | | | | | | | | | | | | This adds support for the proprietary IKEv1 fragmentation extension. Conflicts: NEWS | ||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -1/+2 |
| | | |||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -1/+1 |
| | | |||||
* | | conftest: Add support for time_format and ike_name options in log sections | Thomas Klute | 2013-01-08 | 1 | -1/+18 |
| | | | | | | | | | | | | Both options are well supported for normal operation but were completely ignored by conftest, which used hard coded defaults. File options are still missing but could be added in a similar way. | ||||
* | | conftest: Fix log level settings for stdout | Thomas Klute | 2013-01-08 | 1 | -0/+3 |
| | | | | | | | | | | | | | | | | | | | | | | | | This patch fixes bug #272 ("conftest ignores log settings for stdout"). http://wiki.strongswan.org/issues/272 According to the documentation of add_logger in src/libcharon/bus/bus.h, the relevant log levels of a logger are registered with the logging subsystem when adding the logger. If the log levels change later, the logger must be re-added to propagate the new settings. In conftest.c, the stdout logger is initialized and added before reading the logging settings, but wasn't re-added after reading the settings. | ||||
* | | conftest: Make outgoing sequence number set by reset_seq configurable | Thomas Klute | 2013-01-08 | 2 | -8/+70 |
|/ | | | | | | | | This is useful for certain test cases. Passing the sequence number to the callback requires a new struct that contains both the number and the xfrm_usersa_id. The new configuration parameter is called oseq in accordance with the kernel name, see the comment in the reset_cb callback function for details. | ||||
* | Add missing CHILD_SA specific proposal keyword in conftest README | Martin Willi | 2012-12-17 | 1 | -0/+1 |
| | |||||
* | Fixed reading of configs in conftest utility | Tobias Brunner | 2012-12-13 | 1 | -4/+4 |
| | |||||
* | Make use of new CIDR string ts constructor where appropriate | Martin Willi | 2012-10-24 | 1 | -8/+4 |
| | |||||
* | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Make syslog and file loggers configurable at runtime | Tobias Brunner | 2012-10-18 | 1 | -10/+7 |
| | |||||
* | Store loggers in conftest separately, not on charon | Tobias Brunner | 2012-10-18 | 2 | -6/+19 |
| | |||||
* | Missed one in 3dcffed6 | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
| | |||||
* | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 1 | -1/+2 |
| | |||||
* | The this->data member is never NULL | Tobias Brunner | 2012-09-28 | 2 | -2/+2 |
| | |||||
* | Added possibility to register custom proposal keywords | Tobias Brunner | 2012-09-13 | 1 | -2/+1 |
| | | | | Keyword lookup and registration are handled via the new lib->proposal object. | ||||
* | Removed len argument from proposal_get_token() | Tobias Brunner | 2012-09-13 | 1 | -1/+1 |
| | | | | Also use enumerators instead of lexparser.h to parse proposal strings. | ||||
* | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | |||||
* | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | |||||
* | Initialize conftest with the same plugins as charon | Martin Willi | 2012-07-16 | 2 | -2/+3 |
| | |||||
* | Remove unused replay variable in conftests seq number reset hook | Martin Willi | 2012-07-16 | 1 | -3/+0 |
| | |||||
* | Update conftest to use splitted listener/logger interfaces | Martin Willi | 2012-07-16 | 1 | -2/+2 |
| | |||||
* | Add a return value to keymat_v2_t.get_auth_octets() | Martin Willi | 2012-07-16 | 2 | -4/+13 |
| | |||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -2/+2 |
| | |||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -1/+1 |
| | |||||
* | Store the name of the binary using libcharon to enable specific settings. | Tobias Brunner | 2012-05-03 | 1 | -1/+1 |
| | |||||
* | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -4/+1 |
| | |||||
* | Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵ | Martin Willi | 2012-03-20 | 21 | -81/+87 |
| | | | | encrypted | ||||
* | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | |||||
* | Separated libcharon/sa directory with ikev1 and ikev2 subfolders | Martin Willi | 2012-03-20 | 2 | -2/+2 |
| | |||||
* | Cleanup CERT payload constructors | Martin Willi | 2012-03-20 | 2 | -3/+3 |
| | |||||
* | Added not-yet used sa_payload parameters used in IKEv1 | Martin Willi | 2012-03-20 | 3 | -5/+3 |
| | |||||
* | Fixed conftests after extending CERT payload. | Tobias Brunner | 2012-03-20 | 2 | -3/+3 |
| | |||||
* | Moved version specific keymat functions to specific interfaces. | Tobias Brunner | 2012-03-20 | 2 | -4/+6 |
| | |||||
* | Don't clone chunk in message.get_packet_data | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | |||||
* | Added IKEv1 support to notify payload | Martin Willi | 2012-03-20 | 2 | -2/+2 |
| | |||||
* | Add a payload.get_header_length() method, remove header length definitions | Martin Willi | 2012-03-20 | 1 | -1/+4 |
| | |||||
* | Simplify signature of get_encoding_rules(), make all rules static | Martin Willi | 2012-03-20 | 1 | -3/+2 |
| | |||||
* | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 |
| | | | | Replaced all those magic numbers. | ||||
* | Allow creation of message_t objects for IKEv1 packets. | Tobias Brunner | 2012-03-20 | 2 | -2/+2 |
| | |||||
* | Extend sa_payload for IKEv1 support | Martin Willi | 2012-03-20 | 3 | -3/+5 |
| | |||||
* | bus->listen() and the controller wrappers accept a timeout to wait for callbacks | Martin Willi | 2011-08-26 | 1 | -3/+4 |
| | |||||
* | Replaced ike_sa_t.create_child_sa_iterator with enumerator. | Tobias Brunner | 2011-07-06 | 1 | -8/+6 |
| | | | | | This required two new methods on ike_sa_t. One returns the number of CHILD_SAs and one allows to remove a CHILD_SA. | ||||
* | Added a non-blocking, skipping variant of IKE_SA enumerator | Martin Willi | 2011-05-16 | 1 | -5/+10 |
| |