| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | android: Mitigate race condition on reauthentication | Tobias Brunner | 2013-03-01 | 1 | -0/+4 | |
| | | | | | | | | | If the TUN device gets recreated while another thread in handle_plain() has not yet called select(2) but already stored the file descriptor of the old TUN device in its FD set, select() will fail with EBADF. Fixes #301. | |||||
| * | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -1/+1 | |
| | | ||||||
| * | android: Implement kernel_net_t.get_interface via JNI | Tobias Brunner | 2013-01-14 | 3 | -5/+62 | |
| | | | | | | | This is now required to properly accept/install a virtual IP address. Fixes #275. | |||||
| * | android: Moved chunk_from_byte_array and byte_array_from_chunk helper functions | Tobias Brunner | 2013-01-14 | 2 | -24/+32 | |
| | | ||||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -1/+2 | |
| | | ||||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -1/+1 | |
| | | ||||||
| * | Install virtual IPs via interface name, and use an interface lookup where ↵ | Martin Willi | 2012-11-29 | 1 | -1/+1 | |
| | | | | | required | |||||
| * | Add an optional kernel-interface parameter to install IPs with a custom prefix | Martin Willi | 2012-11-29 | 1 | -1/+2 | |
| | | ||||||
| * | android: Properly handle exceptions when loading keys/certificates | Tobias Brunner | 2012-11-21 | 1 | -3/+3 | |
| | | ||||||
| * | android: Private key bug has been fixed with Android 4.2 | Tobias Brunner | 2012-11-19 | 1 | -1/+1 | |
| | | ||||||
| * | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 6 | -6/+6 | |
| | | ||||||
| * | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 | |
| | | ||||||
| * | Moved host_t and host_resolver_t to a new networking subfolder | Tobias Brunner | 2012-10-24 | 2 | -2/+2 | |
| | | ||||||
| * | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 | |
| | | ||||||
| * | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -1/+1 | |
| | | ||||||
| * | Reload logger configuration on SIGHUP | Tobias Brunner | 2012-10-18 | 1 | -22/+14 | |
| | | | | | | | Besides changing the configuration this allows to easily rotate log files. Also moved logger initialization back to daemon_t. | |||||
| * | Make syslog and file loggers configurable at runtime | Tobias Brunner | 2012-10-18 | 1 | -13/+3 | |
| | | ||||||
| * | Use a helper function to add milliseconds to timeval structs | Tobias Brunner | 2012-10-18 | 1 | -6/+1 | |
| | | ||||||
| * | android: Ignore if peer is unreachable when reestablishing an SA | Tobias Brunner | 2012-10-18 | 1 | -2/+7 | |
| | | ||||||
| * | android: Use a shorter timeout for retransmits | Tobias Brunner | 2012-10-18 | 1 | -1/+1 | |
| | | ||||||
| * | android: Use keyingtries=%forever and dpd|closeaction=restart | Tobias Brunner | 2012-10-18 | 1 | -3/+3 | |
| | | | | | | | | We also ignore the CHILD_SA_DOWN event. This should allow us to keep the connection up as long as the user does not manually disconnect. | |||||
| * | android: Handle unreachable peers via alert | Tobias Brunner | 2012-10-16 | 1 | -17/+5 | |
| | | ||||||
| * | android: Use 0.0.0.0/0 as local traffic selector | Tobias Brunner | 2012-10-16 | 1 | -1/+2 | |
| | | | | | | This is helpful if the responder also wants to tunnel e.g. multicast packages. | |||||
| * | android: Bypass/protect previously bypassed sockets if connectivity changes | Tobias Brunner | 2012-10-16 | 3 | -4/+30 | |
| | | ||||||
| * | android: Support for IPsec SA update added | Tobias Brunner | 2012-10-16 | 1 | -1/+2 | |
| | | ||||||
| * | android: Trigger roam events in case connectivity changes | Tobias Brunner | 2012-10-16 | 1 | -0/+63 | |
| | | ||||||
| * | android: Register NetworkManager as BroadcastReceiver and relay events via JNI | Tobias Brunner | 2012-10-16 | 3 | -6/+145 | |
| | | ||||||
| * | android: Determine source address dynamically | Tobias Brunner | 2012-10-16 | 5 | -23/+47 | |
| | | ||||||
| * | android: Added NetworkManager class which allows to retrieve a local IP address | Tobias Brunner | 2012-10-16 | 3 | -0/+197 | |
| | | ||||||
| * | android: Don't use the default ESP proposal as it includes unsupported ↵ | Tobias Brunner | 2012-10-16 | 1 | -1/+4 | |
| | | | | | algorithms | |||||
| * | android: Leak the private key reference on Jelly Bean to avoid a bug in the ↵ | Tobias Brunner | 2012-09-24 | 1 | -1/+10 | |
| | | | | | | | | | | framework A bug in the framework on Android Jelly Bean causes a SIGSEGV when the private key object returned from KeyChain.getPrivateKey is garbage collected. Leaking the global reference to that object prevents the garbage collection and thereby the crash. | |||||
| * | android: Added a global variable to check the current SDK version | Tobias Brunner | 2012-09-24 | 2 | -1/+26 | |
| | | ||||||
| * | android: Load the private key and certificates separately in android_creds_t | Tobias Brunner | 2012-09-24 | 2 | -31/+32 | |
| | | ||||||
| * | android: Added a method to get the user's private key via JNI | Tobias Brunner | 2012-09-24 | 2 | -1/+44 | |
| | | ||||||
| * | android: Added a JNI backed private key implementation | Tobias Brunner | 2012-09-24 | 3 | -0/+324 | |
| | | | | | | This is required because private keys are provided by an OpenSSL engine in Jelly Bean, which makes them inaccessible directly via getEncoding. | |||||
| * | android: Use AUTH_RULE_IDENTITY_LOOSE | Tobias Brunner | 2012-09-18 | 1 | -0/+1 | |
| | | ||||||
| * | android: Fix conversion of actual Unicode strings (i.e. bytes!=chars) | Tobias Brunner | 2012-09-17 | 1 | -5/+6 | |
| | | ||||||
| * | android: Properly handle reauthentication initiated by the client | Tobias Brunner | 2012-09-06 | 1 | -7/+42 | |
| | | ||||||
| * | Merge branch 'android-client-cert' | Tobias Brunner | 2012-09-04 | 7 | -40/+244 | |
| |\ | | | | | | | Introduces IKEv2 client certificate authentication for the Android App. | |||||
| | * | android: Native parts handle ikev2-cert VPN type | Tobias Brunner | 2012-08-31 | 3 | -16/+71 | |
| | | | ||||||
| | * | android: android_creds_t can provide a user's private key and certificate | Tobias Brunner | 2012-08-31 | 2 | -3/+89 | |
| | | | ||||||
| | * | android: Added JNI method to retrieve user certificate and private key | Tobias Brunner | 2012-08-31 | 2 | -13/+69 | |
| | | | | | | | | | | | To simplify things the private key, the user certificate and the CA certificates are all put into the same list. | |||||
| | * | android: Pass the type of VPN to the native parts | Tobias Brunner | 2012-08-31 | 1 | -4/+7 | |
| | | | ||||||
| | * | android: Make sure NULL jstrings are converted properly | Tobias Brunner | 2012-08-31 | 1 | -5/+8 | |
| | | | ||||||
| * | | Pass a list instead of a single virtual IP to attribute enumerators | Martin Willi | 2012-08-30 | 1 | -1/+1 | |
| | | | ||||||
| * | | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -1/+1 | |
| | | | ||||||
| * | | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -8/+22 | |
| |/ | ||||||
| * | Charon logs to a file in the App's data directory | Tobias Brunner | 2012-08-13 | 1 | -1/+36 | |
| | | ||||||
| * | Moved Java to C string conversion function to android_jni header file | Tobias Brunner | 2012-08-13 | 2 | -19/+23 | |
| | | ||||||
| * | Log charon version and uname() output, split libcharon and charon initialization | Tobias Brunner | 2012-08-13 | 1 | -2/+20 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |