aboutsummaryrefslogtreecommitdiffstats
path: root/src/frontends/android/jni/libandroidbridge
Commit message (Collapse)AuthorAgeFilesLines
...
* android: Add support for ECDSA private keysTobias Brunner2014-07-221-24/+99
| | | | With 4.4.4 these work fine now.
* android: Remove unused hash argument from getTrustedCertificates()Tobias Brunner2014-07-221-2/+2
|
* kernel-interface: Add a replay_window parameter to add_sa()Martin Willi2014-06-171-2/+3
|
* ike: Add an additional but separate AEAD proposal to IKE config, if supportedMartin Willi2014-05-161-0/+1
|
* android: Don't limit number to packets during EAP-TTLSTobias Brunner2014-02-181-0/+2
|
* libcharon: Remove unused charon->nameTobias Brunner2014-02-121-1/+1
|
* libhydra: Remove unused hydra->daemonTobias Brunner2014-02-121-1/+1
|
* lib: Add global config namespaceTobias Brunner2014-02-121-1/+1
|
* android: Remove dependency on libvstrTobias Brunner2013-11-131-1/+0
|
* kernel: Use a time_t to report use time in query_policy()Martin Willi2013-10-111-1/+1
|
* kernel: Use a time_t to report use time in query_sa()Martin Willi2013-10-111-1/+1
|
* android: Properly handle failures while initializing charonTobias Brunner2013-09-231-6/+7
|
* android: Fix compilation after PTS header files were movedTobias Brunner2013-09-041-4/+4
|
* ike: support multiple addresses, ranges and subnets in IKE address configMartin Willi2013-09-041-2/+2
| | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
* peer-cfg: add a pull/push mode option to use with mode configMartin Willi2013-09-041-1/+1
|
* android: Add device ID in BeginHandshakeTobias Brunner2013-07-081-0/+2
|
* android: Add new VpnType to enable BYOD featuresTobias Brunner2013-07-081-3/+9
|
* android: Use a different set of plugins if BYOD features are enabledTobias Brunner2013-07-082-7/+22
|
* android: Handle and store IETF remediation instructionsTobias Brunner2013-07-083-0/+59
|
* android: Add state of IMC to VpnStateService and update it via JNITobias Brunner2013-07-083-1/+74
|
* android: Handle TCG file measurement related attributes using PTSTobias Brunner2013-07-081-5/+119
|
* android: Android IMC state provides a Platform Trust Service (PTS) instanceTobias Brunner2013-07-082-0/+20
|
* android: Provide a public interface for Android IMC stateTobias Brunner2013-07-082-25/+40
|
* android: Define IMC functions static and with lower-case namesTobias Brunner2013-07-081-32/+32
|
* android: Add measurement collector for ITA SettingsTobias Brunner2013-07-081-1/+4
|
* android: Handle ITA PA-TNC attributesTobias Brunner2013-07-081-0/+18
|
* android: Overload for getMeasurement() that takes a String array as argumentTobias Brunner2013-07-081-10/+70
|
* android: Add measurement collector for Port FilterTobias Brunner2013-07-081-1/+2
| | | | This collector reports all listening TCP and UDP sockets/ports.
* android: Add a generic handler for PA-TNC attribute requestsTobias Brunner2013-07-081-62/+90
| | | | | The idea is that the Android IMC will return attributes in their binary encoding. This keeps the JNI interface to the IMC pretty simple.
* android: Added a Java part to the Android IMCTobias Brunner2013-07-082-12/+70
|
* android: Don't attempt loading IMCs from /etc/tnc_configTobias Brunner2013-07-081-0/+2
|
* android: Build libpts and init/deinit libpts in BYOD IMCTobias Brunner2013-07-082-1/+7
|
* android: Added a sample IMC that sends some dummy OS dataTobias Brunner2013-07-087-3/+657
|
* android: Disable listening on IPv6Tobias Brunner2013-07-051-0/+4
| | | | | As we have to use UDP encapsulation and the Linux kernel currently does not support that this avoids issues with dual-stack gateways.
* plugin-loader: Add method to print loaded plugins on a given log levelTobias Brunner2013-06-211-0/+1
|
* android: Forward initiator flag to libipsec when adding IPsec SATobias Brunner2013-06-131-2/+2
|
* kernel-interface: add an exchange initiator parameter to add_sa()Martin Willi2013-06-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This new flag gives the kernel-interface a hint how it should priorize the use of newly installed SAs during rekeying. Consider the following rekey procedure in IKEv2: Initiator --- Responder I1 -------CREATE-------> R1 I2 <------CREATE-------- -------DELETE-------> R2 I3 <------DELETE-------- SAs are always handled as pairs, the following happens at the SA level: * Initiator starts the exchange at I1 * Responder installs new SA pair at R1 * Initiator installs new SA pair at I2 * Responder removes old SA pair at R2 * Initiator removes old SA pair at I3 This makes sure SAs get installed/removed overlapping during rekeying. However, to avoid any packet loss, it is crucial that the new outbound SA gets activated at the correct position: * as exchange initiator, in I2 * as exchange responder, in R2 This should guarantee that we don't use the new outbound SA before the peer could install its corresponding inbound SA. The new parameter allows the kernel backend to install the new SA with appropriate priorities, i.e. it should: * as exchange inititator, have the new outbound SA installed with higher priority than the old SA * as exchange responder, have the new outbound SA installed with lower priority than the old SA While we could split up the SA installation at the responder, this approach has another advantage: it allows the kernel backend to switch SAs based on other criteria, for example when receiving traffic on the new inbound SA.
* kernel-interface: query SAD for last use time if SPD query didn't yield oneMartin Willi2013-05-061-1/+1
|
* android: Use stronger ESP proposal including AES-GCMTobias Brunner2013-05-031-0/+6
|
* android: Remove unused methods on NetworkManager/network_manager_tTobias Brunner2013-05-032-94/+1
|
* android: Ignore interface 'lo'Tobias Brunner2013-05-031-2/+4
| | | | | Android adds a default route via 'lo' if no connectivity is available causing charon to send packets via lo and triggering DPD.
* android: Repurpose android-net to simply handle connectivity eventsTobias Brunner2013-05-033-59/+34
| | | | | | Using the events by NetworkManager/ConnectivityManager to trigger roam events instead of the events generated by the kernel-netlink plugin the noise level is much lower.
* android: Replace android-net plugin with kernel-netlinkTobias Brunner2013-05-031-2/+7
| | | | | Virtual IPs are not handled by the kernel-netlink plugin and tun devices are ignored.
* android: Set strongswan.conf options before initializing other librariesTobias Brunner2013-05-031-36/+44
|
* android: Remove/filter header files from LOCAL_SRC_FILESTobias Brunner2013-03-201-10/+10
| | | | This avoids huge warnings when building the native code.
* android: Request and install an IPv6 DNS serverTobias Brunner2013-03-202-9/+17
|
* android: Also request a virtual IPv6 address and propose IPv6 TSTobias Brunner2013-03-202-19/+23
| | | | | This allows IPv6 over IPv4 but falls back nicely if we don't get a virtual IPv6 (or IPv4) address.
* kernel_ipsec_t.query_sa() additionally returns the number of processed packetsMartin Willi2013-03-141-1/+2
|
* android: Add support for combined certificate and EAP authenticationTobias Brunner2013-03-071-27/+50
| | | | | | This uses RFC 4739 multiple authentication rounds to first authenticate the client with a certificate followed by an EAP authentication round with username and password.
* Fixed Doxygen comments after scanning complete src directoryTobias Brunner2013-03-024-4/+4
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-02 07:07:31 +0000