aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins/whitelist
Commit message (Collapse)AuthorAgeFilesLines
* Change interface for enumerator_create_filter() callbackTobias Brunner2017-05-261-8/+13
| | | | | This avoids the unportable 5 pointer hack, but requires enumerating in the callback.
* libhydra: Remove empty unused libraryTobias Brunner2016-03-031-1/+0
|
* whitelist: Use hash() method so DNs with different string types matchTobias Brunner2015-08-061-1/+1
| | | | | | | | | | strongSwan uses PrintableString when encoding DNs from strings (if the character set permits it, otherwise T61String is currently used) but certificates might be encoded with UTF8String even for simple ASCII strings. By ignoring this string type when hashing RDNs we make sure the same hash results in this case as long as the actual string values are the same. Fixes #991.
* plugins: Don't link with -rdynamic on WindowsMartin Willi2014-06-041-1/+1
|
* libcharon: Use lib->ns instead of charon->nameTobias Brunner2014-02-122-2/+2
|
* whitelist: Read multiple commands until client closes connectionMartin Willi2013-10-291-30/+28
| | | | | This restores the same behavior we had before e11c02c8, and fixes the whitelist add/remove-from command.
* whitelist: Fix compilation on FreeBSDTobias Brunner2013-07-311-0/+2
|
* stream-service: move CAP_CHOWN check from plugins to service constructorMartin Willi2013-07-181-6/+0
| | | | | A plugin service can be a TCP socket now, so it does not make much sense to strictly check for CAP_CHOWN.
* whitelist: use a read-copy when listing entriesMartin Willi2013-07-181-19/+44
| | | | | While this requires a little more overhead, we can free the lock should the stream block, allowing other threads to add/remove entries.
* whitelist: fix error handling when creating the socket failsMartin Willi2013-07-181-0/+6
|
* whitelist: use a stream service to accept client connectionsMartin Willi2013-07-183-121/+106
| | | | | Use SOCK_STREAM, as we don't have SOCK_SEQPACKET on TCP. To have network transparency, the message now uses network byte order.
* capabilities: Some plugins don't actually require capabilities at runtimeTobias Brunner2013-07-181-1/+1
|
* automake: replace INCLUDES by AM_CPPFLAGSMartin Willi2013-07-181-5/+7
| | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only.
* capabilities: CAP_CHOWN might be required by many plugins opening UNIX socketsTobias Brunner2013-06-251-0/+6
| | | | | But as the sockets will be created with the user/group of the running process this might not be required as no change may be needed.
* capabilities: Move global capabilities_t instance to libstrongswanTobias Brunner2013-06-251-2/+2
|
* whitelist: Use plugin features to register listenerTobias Brunner2013-06-111-4/+29
|
* Moved data structures to new collections subfolderTobias Brunner2012-10-241-1/+1
|
* Refactored heavily #ifdefd capability code to its own libstrongswan classMartin Willi2012-07-041-1/+2
|
* Centralized thread cancellation in processor_tTobias Brunner2012-06-251-9/+3
| | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation.
* whitelist: Make sure listed IDs are null-terminated.Tobias Brunner2012-05-181-0/+1
|
* Use name from initialization to access settings in libcharon.Tobias Brunner2012-05-031-1/+1
| | | | Also fixes several whitespace errors.
* Use CRITICAL job priority class for long running dispatcher jobsMartin Willi2011-05-161-2/+2
|
* fixed whitelist enablingAndreas Steffen2011-05-141-2/+3
|
* Disable whitelist plugin by defaultMartin Willi2011-05-121-1/+1
|
* Added a (not yet implemented) plugin_t method to reload plugin configurationMartin Willi2011-04-151-0/+1
|
* Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵Martin Willi2011-04-151-0/+7
| | | | over plugin_t
* Increase whitelist message identity buffer to 128 bytesMartin Willi2011-03-231-1/+1
|
* Added strongswan.conf and runtime option to enable/disable whitelist pluginMartin Willi2011-03-175-1/+43
|
* Added a whitelist command line utility to control whitelist pluginMartin Willi2011-02-283-0/+184
|
* Added a UNIX socket based control backend to whitelist pluginMartin Willi2011-02-285-2/+337
|
* Implemented a in-memory peer identity whitelist pluginMartin Willi2011-02-285-0/+402