| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Avoid a race condition when reloading secrets from ipsec.secrets | Tobias Brunner | 2013-03-20 | 1 | -18/+25 |
| | | | | | | | | With the previous implementation that cleared the secrets in the active credential set and then loaded the secrets, IKE SA establishment would fail (as initiator or responder) if secrets are concurrently reloaded and the required secret was not yet loaded. | ||||
| * | Don't try to mmap() empty ipsec.secret files | Martin Willi | 2013-03-19 | 1 | -1/+5 |
| | | |||||
| * | Use proper buffer sizes for parse_smartcard() | Tobias Brunner | 2013-01-24 | 1 | -7/+10 |
| | | |||||
| * | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | | |||||
| * | Use explicit, larger buffer sizes for smartcard keyids and modules | Martin Willi | 2012-10-24 | 1 | -8/+8 |
| | | |||||
| * | Support loading cacert certificates in ipsec.conf ca sections from smartcard | Martin Willi | 2012-10-24 | 1 | -19/+37 |
| | | |||||
| * | Refactored stroke smartcard token parsing, support module and slot in ↵ | Martin Willi | 2012-10-24 | 1 | -62/+101 |
| | | | | | leftcert option | ||||
| * | Load ipsec.conf %smartcard leftcerts with pkcs11 builder | Martin Willi | 2012-10-24 | 1 | -8/+20 |
| | | |||||
| * | Fix leak of PINs from ipsec.secrets | Martin Willi | 2012-10-09 | 1 | -1/+2 |
| | | |||||
| * | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 1 | -1/+1 |
| | | |||||
| * | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -1/+2 |
| | | | | | Also fixes several whitespace errors. | ||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 1 | -4/+4 |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | ||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 1 | -4/+4 |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | ||||
| | | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 1 | -4/+4 |
| | | | | |||||
| * | | | added support for raw RSA public keys to stroke | Andreas Steffen | 2012-04-30 | 1 | -0/+73 |
| | | | | |||||
| * | | | Added method to add additional shared secrets to stroke_cred_t. | Tobias Brunner | 2012-04-17 | 1 | -1/+8 |
| |/ / | |||||
| * / | Added an option to load CA certificates without CA basic constraint. | Tobias Brunner | 2012-02-01 | 1 | -4/+34 |
| |/ | | | | | | Enabling this option treats all certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA certificates even if they do not contain a CA basic constraint. | ||||
| * | Added fallback to ipsec.secrets parser if glob(3) is not available. | Tobias Brunner | 2011-10-11 | 1 | -11/+22 |
| | | |||||
| * | Migrated stroke_cred_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-03 | 1 | -40/+32 |
| | | |||||
| * | Cast size_t len arguments to %.*s to int | Martin Willi | 2011-04-20 | 1 | -5/+6 |
| | | |||||
| * | Use strncpy when reading smartcard keyids from ipsec.secrets. | Tobias Brunner | 2011-04-19 | 1 | -1/+1 |
| | | |||||
| * | Proper cleanup if IDs in ipsec.secrets cannot be parsed. | Tobias Brunner | 2011-04-14 | 1 | -0/+2 |
| | | |||||
| * | Fix compiler warnings at creation of CRL cache filenames. | Tobias Brunner | 2011-04-14 | 1 | -1/+1 |
| | | | | | | | This was not really a problem because ptr is the first member of a chunk_t and it contains a null-terminated string at that point. But it's clearer this way. | ||||
| * | Refactored stroke_cred_t to use mem_cred_t. | Tobias Brunner | 2010-12-03 | 1 | -378/+30 |
| | | |||||
| * | Avoid calling globfree twice on failure. | Tobias Brunner | 2010-12-03 | 1 | -1/+0 |
| | | |||||
| * | Respect key types in stroke key/certificate backend | Martin Willi | 2010-09-02 | 1 | -15/+24 |
| | | |||||
| * | Fixed loading of secrets with IDs. | Tobias Brunner | 2010-08-04 | 1 | -1/+1 |
| | | | | | | Since the ID string is manually terminated by a null character, write permission is required for the mmapped ipsec.secrets. | ||||
| * | Fixed loading of private keys without password. | Tobias Brunner | 2010-08-04 | 1 | -1/+1 |
| | | | | | | The chunk storing the password was not correctly initialized, resulting in a segmentation fault when no password was specified in ipsec.secrets. | ||||
| * | Pass type of requested key in the callback credential set | Martin Willi | 2010-08-04 | 1 | -1/+12 |
| | | |||||
| * | Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use ↵ | Martin Willi | 2010-08-04 | 1 | -37/+77 |
| | | | | | credential sets | ||||
| * | Use credential sets to load smartcard keys | Martin Willi | 2010-08-04 | 1 | -29/+82 |
| | | |||||
| * | Implemented a callback based credential set, currently for shared keys only | Martin Willi | 2010-08-04 | 1 | -61/+39 |
| | | |||||
| * | mmap() ipsec.secrets instead malloc(), proper error checking | Martin Willi | 2010-08-04 | 1 | -18/+30 |
| | | |||||
| * | Splitted up the load_secrets() function | Martin Willi | 2010-08-04 | 1 | -263/+301 |
| | | |||||
| * | %prompt support for smartcard PIN via "ipsec secrets" | Martin Willi | 2010-08-04 | 1 | -28/+95 |
| | | |||||
| * | Pass the PKCS11 keyid as chunk, not as string | Martin Willi | 2010-08-04 | 1 | -3/+6 |
| | | |||||
| * | Reuse generic passphrase build part, not a dedicated PIN part | Martin Willi | 2010-08-04 | 1 | -7/+4 |
| | | |||||
| * | Support module names in %smartcard specifier, streamlined smartcard building | Martin Willi | 2010-08-04 | 1 | -12/+51 |
| | | |||||
| * | Support different encoding types in certificate.get_encoding() | Martin Willi | 2010-07-13 | 1 | -3/+5 |
| | | |||||
| * | Added generic implementations for crl_is_newer/certificate_is_newer | Martin Willi | 2010-05-21 | 1 | -1/+1 |
| | | |||||
| * | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 1 | -0/+1175 |
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |