Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Change interface for enumerator_create_filter() callback | Tobias Brunner | 2017-05-26 | 1 | -8/+13 |
| | | | | | This avoids the unportable 5 pointer hack, but requires enumerating in the callback. | ||||
* | libhydra: Remove empty unused library | Tobias Brunner | 2016-03-03 | 1 | -1/+0 |
| | |||||
* | whitelist: Use hash() method so DNs with different string types match | Tobias Brunner | 2015-08-06 | 1 | -1/+1 |
| | | | | | | | | | | strongSwan uses PrintableString when encoding DNs from strings (if the character set permits it, otherwise T61String is currently used) but certificates might be encoded with UTF8String even for simple ASCII strings. By ignoring this string type when hashing RDNs we make sure the same hash results in this case as long as the actual string values are the same. Fixes #991. | ||||
* | plugins: Don't link with -rdynamic on Windows | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | |||||
* | libcharon: Use lib->ns instead of charon->name | Tobias Brunner | 2014-02-12 | 2 | -2/+2 |
| | |||||
* | whitelist: Read multiple commands until client closes connection | Martin Willi | 2013-10-29 | 1 | -30/+28 |
| | | | | | This restores the same behavior we had before e11c02c8, and fixes the whitelist add/remove-from command. | ||||
* | whitelist: Fix compilation on FreeBSD | Tobias Brunner | 2013-07-31 | 1 | -0/+2 |
| | |||||
* | stream-service: move CAP_CHOWN check from plugins to service constructor | Martin Willi | 2013-07-18 | 1 | -6/+0 |
| | | | | | A plugin service can be a TCP socket now, so it does not make much sense to strictly check for CAP_CHOWN. | ||||
* | whitelist: use a read-copy when listing entries | Martin Willi | 2013-07-18 | 1 | -19/+44 |
| | | | | | While this requires a little more overhead, we can free the lock should the stream block, allowing other threads to add/remove entries. | ||||
* | whitelist: fix error handling when creating the socket fails | Martin Willi | 2013-07-18 | 1 | -0/+6 |
| | |||||
* | whitelist: use a stream service to accept client connections | Martin Willi | 2013-07-18 | 3 | -121/+106 |
| | | | | | Use SOCK_STREAM, as we don't have SOCK_SEQPACKET on TCP. To have network transparency, the message now uses network byte order. | ||||
* | capabilities: Some plugins don't actually require capabilities at runtime | Tobias Brunner | 2013-07-18 | 1 | -1/+1 |
| | |||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -5/+7 |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
* | capabilities: CAP_CHOWN might be required by many plugins opening UNIX sockets | Tobias Brunner | 2013-06-25 | 1 | -0/+6 |
| | | | | | But as the sockets will be created with the user/group of the running process this might not be required as no change may be needed. | ||||
* | capabilities: Move global capabilities_t instance to libstrongswan | Tobias Brunner | 2013-06-25 | 1 | -2/+2 |
| | |||||
* | whitelist: Use plugin features to register listener | Tobias Brunner | 2013-06-11 | 1 | -4/+29 |
| | |||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 1 | -1/+2 |
| | |||||
* | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 1 | -9/+3 |
| | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | ||||
* | whitelist: Make sure listed IDs are null-terminated. | Tobias Brunner | 2012-05-18 | 1 | -0/+1 |
| | |||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -1/+1 |
| | | | | Also fixes several whitespace errors. | ||||
* | Use CRITICAL job priority class for long running dispatcher jobs | Martin Willi | 2011-05-16 | 1 | -2/+2 |
| | |||||
* | fixed whitelist enabling | Andreas Steffen | 2011-05-14 | 1 | -2/+3 |
| | |||||
* | Disable whitelist plugin by default | Martin Willi | 2011-05-12 | 1 | -1/+1 |
| | |||||
* | Added a (not yet implemented) plugin_t method to reload plugin configuration | Martin Willi | 2011-04-15 | 1 | -0/+1 |
| | |||||
* | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 1 | -0/+7 |
| | | | | over plugin_t | ||||
* | Increase whitelist message identity buffer to 128 bytes | Martin Willi | 2011-03-23 | 1 | -1/+1 |
| | |||||
* | Added strongswan.conf and runtime option to enable/disable whitelist plugin | Martin Willi | 2011-03-17 | 5 | -1/+43 |
| | |||||
* | Added a whitelist command line utility to control whitelist plugin | Martin Willi | 2011-02-28 | 3 | -0/+184 |
| | |||||
* | Added a UNIX socket based control backend to whitelist plugin | Martin Willi | 2011-02-28 | 5 | -2/+337 |
| | |||||
* | Implemented a in-memory peer identity whitelist plugin | Martin Willi | 2011-02-28 | 5 | -0/+402 |