Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 3 | -3/+3 |
| | |||||
* | libhydra: Remove empty unused library | Tobias Brunner | 2016-03-03 | 1 | -1/+0 |
| | |||||
* | duplicheck: Include required headers for FreeBSD | Denis Volpato Martins | 2016-03-03 | 1 | -0/+2 |
| | | | | Closes strongswan/strongswan#34. | ||||
* | plugins: Don't link with -rdynamic on Windows | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | |||||
* | libcharon: Use lib->ns instead of charon->name | Tobias Brunner | 2014-02-12 | 2 | -2/+2 |
| | |||||
* | stream-service: move CAP_CHOWN check from plugins to service constructor | Martin Willi | 2013-07-18 | 1 | -6/+0 |
| | | | | | A plugin service can be a TCP socket now, so it does not make much sense to strictly check for CAP_CHOWN. | ||||
* | duplicheck: use a stream service to accept client connections | Martin Willi | 2013-07-18 | 4 | -105/+146 |
| | | | | | | As we can't use SOCK_SEQPACKET over TCP, we now have to provide message boundaries ourselves. We do this by appending a 16-bit length header to each sent duplicate identity. | ||||
* | capabilities: Some plugins don't actually require capabilities at runtime | Tobias Brunner | 2013-07-18 | 1 | -1/+1 |
| | |||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -5/+7 |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
* | capabilities: CAP_CHOWN might be required by many plugins opening UNIX sockets | Tobias Brunner | 2013-06-25 | 1 | -0/+6 |
| | | | | | But as the sockets will be created with the user/group of the running process this might not be required as no change may be needed. | ||||
* | capabilities: Move global capabilities_t instance to libstrongswan | Tobias Brunner | 2013-06-25 | 1 | -2/+2 |
| | |||||
* | duplicheck: Use plugin features to register listener | Tobias Brunner | 2013-06-11 | 1 | -3/+29 |
| | |||||
* | duplicheck: track multiple IKE_SAs in checking state to avoid any races | Martin Willi | 2013-04-04 | 1 | -63/+123 |
| | | | | | | When two consequent duplicates have been detected, track state of each checking IKE_SA separately, avoiding potential race conditions between the active SA and the different SAs in checking state. | ||||
* | Raise alerts when enforcing IKE_SA unique policy | Martin Willi | 2012-12-19 | 1 | -0/+1 |
| | |||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 2 | -2/+2 |
| | |||||
* | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 1 | -1/+2 |
| | |||||
* | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 1 | -12/+3 |
| | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | ||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -1/+1 |
| | | | | Also fixes several whitespace errors. | ||||
* | Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵ | Martin Willi | 2012-03-20 | 1 | -2/+2 |
| | | | | encrypted | ||||
* | Option to enable duplicheck plugin fixed. | Tobias Brunner | 2011-05-26 | 1 | -1/+1 |
| | |||||
* | Use CRITICAL job priority class for long running dispatcher jobs | Martin Willi | 2011-05-16 | 1 | -2/+2 |
| | |||||
* | Added a (not yet implemented) plugin_t method to reload plugin configuration | Martin Willi | 2011-04-15 | 1 | -0/+1 |
| | |||||
* | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 1 | -0/+7 |
| | | | | over plugin_t | ||||
* | Added a strongswan.conf "enabled" option for duplicheck plugin | Martin Willi | 2011-03-17 | 1 | -0/+6 |
| | |||||
* | Update duplicheck entry during IKE rekeying | Martin Willi | 2011-02-28 | 1 | -2/+17 |
| | |||||
* | Remove entry from active duplicate list only if it was not in checking | Martin Willi | 2011-02-28 | 1 | -5/+10 |
| | |||||
* | Added an example application listening to duplicheck notifications | Martin Willi | 2011-02-28 | 3 | -0/+63 |
| | |||||
* | Notify duplicate detections over a UNIX sockets to listening applications | Martin Willi | 2011-02-28 | 6 | -5/+294 |
| | |||||
* | Added an advanced duplicate checking plugin with liveness check of old SA | Martin Willi | 2011-02-28 | 5 | -0/+409 |