Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | | Added stroke user-creds command, to set username/password for a connection. | Tobias Brunner | 2012-04-17 | 3 | -1/+166 | |
| | | | ||||||
* | | | Added method to add additional shared secrets to stroke_cred_t. | Tobias Brunner | 2012-04-17 | 2 | -2/+20 | |
| | | | ||||||
* | | | Typo fixed. | Tobias Brunner | 2012-04-17 | 1 | -1/+1 | |
| | | | ||||||
* | | | remove leading zero in ASN.1 encoded serial numbers | Andreas Steffen | 2012-04-05 | 1 | -2/+2 | |
| | | | ||||||
* | | | moved chunk_skip_zero to chunk.h | Andreas Steffen | 2012-04-03 | 1 | -2/+3 | |
|/ / | ||||||
* | | Fixed crash and locking issues while unrouting connections via stroke | Martin Willi | 2012-03-13 | 1 | -7/+8 | |
| | | ||||||
* | | Added an option to load CA certificates without CA basic constraint. | Tobias Brunner | 2012-02-01 | 1 | -4/+34 | |
| | | | | | | | | | | | | Enabling this option treats all certificates in ipsec.d/cacerts and ipsec.conf ca sections as CA certificates even if they do not contain a CA basic constraint. | |||||
* | | Cache list of plugin names to further simplify its usage. | Tobias Brunner | 2012-01-19 | 1 | -5/+3 | |
| | | | | | | | | Also helpful for ipsec statusall to avoid having to enumerate plugins. | |||||
* | | Simplified logging of list of loaded plugins. | Tobias Brunner | 2012-01-19 | 1 | -9/+4 | |
| | | ||||||
* | | Make number of concurrently handled stroke messages configurable. | Tobias Brunner | 2011-12-29 | 1 | -2/+9 | |
| | | ||||||
* | | Limit the number of concurrently handled stroke messages. | Tobias Brunner | 2011-12-29 | 1 | -18/+104 | |
| | | | | | | | | This avoids clogging the thread pool with potentially blocking jobs. | |||||
* | | Fixed check for log groups when debug_t is unsigned. | Tobias Brunner | 2011-11-25 | 1 | -1/+1 | |
|/ | | | | The range and signedness of enum types is up to the compiler. | |||||
* | Cosmetics | Andreas Steffen | 2011-10-26 | 1 | -1/+2 | |
| | ||||||
* | Added a listplugins stroke command to show plugin features | Martin Willi | 2011-10-14 | 1 | -0/+55 | |
| | ||||||
* | Plugin enumerator enumerates over loaded features, too | Martin Willi | 2011-10-14 | 1 | -1/+1 | |
| | ||||||
* | Include library.h in plugin.h | Martin Willi | 2011-10-14 | 1 | -0/+1 | |
| | ||||||
* | Removed unneeded include. | Tobias Brunner | 2011-10-11 | 1 | -1/+0 | |
| | | | | This is not available on Android and redirects to <fcntl.h> on Ubuntu. | |||||
* | Added fallback to ipsec.secrets parser if glob(3) is not available. | Tobias Brunner | 2011-10-11 | 1 | -11/+22 | |
| | ||||||
* | Migrated stroke_cred_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-03 | 1 | -40/+32 | |
| | ||||||
* | Migrated stroke_socket_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-03 | 1 | -6/+8 | |
| | ||||||
* | bus->listen() and the controller wrappers accept a timeout to wait for callbacks | Martin Willi | 2011-08-26 | 1 | -8/+8 | |
| | ||||||
* | fixed esn type | Andreas Steffen | 2011-07-20 | 1 | -2/+2 | |
| | ||||||
* | added log and status output for ESN | Andreas Steffen | 2011-07-16 | 1 | -0/+7 | |
| | ||||||
* | Replaced more complex iterator usages. | Tobias Brunner | 2011-07-06 | 1 | -14/+9 | |
| | ||||||
* | Replaced ike_sa_t.create_child_sa_iterator with enumerator. | Tobias Brunner | 2011-07-06 | 2 | -13/+12 | |
| | | | | | This required two new methods on ike_sa_t. One returns the number of CHILD_SAs and one allows to remove a CHILD_SA. | |||||
* | implemented PASS and DROP shunt policies | Andreas Steffen | 2011-06-28 | 3 | -11/+75 | |
| | ||||||
* | Properly print time differences. | Tobias Brunner | 2011-06-07 | 1 | -2/+2 | |
| | | | | time_t is not necessarily of type int. | |||||
* | Use proper printf specifiers to print u_int64_t and uintptr_t. | Tobias Brunner | 2011-06-07 | 1 | -4/+5 | |
| | ||||||
* | Fix compilation with GCC 4.6. | Laurent Bigonville | 2011-06-07 | 1 | -1/+1 | |
| | ||||||
* | Add a closeaction ipsec.conf keyword to configure close action | Martin Willi | 2011-06-07 | 2 | -17/+23 | |
| | ||||||
* | Use CRITICAL job priority class for long running dispatcher jobs | Martin Willi | 2011-05-16 | 1 | -4/+4 | |
| | ||||||
* | Show total and half-open SA count in statusall | Martin Willi | 2011-05-16 | 1 | -1/+6 | |
| | ||||||
* | Show how many threads are active in each class in statusall | Martin Willi | 2011-05-16 | 1 | -3/+8 | |
| | ||||||
* | Added a statusallnb stroke command to show status non-blocking | Martin Willi | 2011-05-16 | 3 | -7/+13 | |
| | ||||||
* | Added a non-blocking, skipping variant of IKE_SA enumerator | Martin Willi | 2011-05-16 | 2 | -5/+10 | |
| | ||||||
* | Processor job scheduling respects job priority classes | Martin Willi | 2011-05-16 | 1 | -4/+8 | |
| | ||||||
* | Added a stroke memusage command to show memory usage | Martin Willi | 2011-05-16 | 1 | -0/+15 | |
| | ||||||
* | Cast size_t len arguments to %.*s to int | Martin Willi | 2011-04-20 | 2 | -6/+7 | |
| | ||||||
* | Use strncpy when reading smartcard keyids from ipsec.secrets. | Tobias Brunner | 2011-04-19 | 1 | -1/+1 | |
| | ||||||
* | Added a (not yet implemented) plugin_t method to reload plugin configuration | Martin Willi | 2011-04-15 | 1 | -0/+1 | |
| | ||||||
* | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 2 | -4/+12 | |
| | | | | over plugin_t | |||||
* | Proper cleanup if IDs in ipsec.secrets cannot be parsed. | Tobias Brunner | 2011-04-14 | 1 | -0/+2 | |
| | ||||||
* | Fix compiler warnings at creation of CRL cache filenames. | Tobias Brunner | 2011-04-14 | 1 | -1/+1 | |
| | | | | | | This was not really a problem because ptr is the first member of a chunk_t and it contains a null-terminated string at that point. But it's clearer this way. | |||||
* | Fixed check for member of stroke_msg_t in pop_string. | Tobias Brunner | 2011-04-13 | 1 | -1/+1 | |
| | | | | | | Because of the cast to char** the length of the message was multiplied by sizeof(char*), i.e. 4 or 8 bytes (depending on the architecture) instead of by 1 (sizeof(char)). | |||||
* | initiate or route all child configs if they have different names from their ↵ | Andreas Steffen | 2011-03-04 | 1 | -27/+68 | |
| | | | | parent peer config | |||||
* | initiate or route child configs which don't have a peer config of the same name | Andreas Steffen | 2011-03-01 | 1 | -32/+86 | |
| | ||||||
* | put DN in double quotes | Andreas Steffen | 2011-03-01 | 1 | -1/+1 | |
| | ||||||
* | [hopefully] fixed pathlen problem on ARM platforms | Andreas Steffen | 2011-02-10 | 1 | -2/+2 | |
| | ||||||
* | replaced ipsec up %startall command by start_action job | Andreas Steffen | 2011-02-09 | 1 | -59/+0 | |
| | ||||||
* | Added support for trustchain key strength checking to rightauth option | Martin Willi | 2011-01-07 | 1 | -2/+13 | |
| |