Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Add a return value to hasher_t.allocate_hash() | Martin Willi | 2012-07-16 | 3 | -24/+45 | |
| | ||||||
* | Add a return value to keymat_v1_t.{get,update,confirm}_iv | Martin Willi | 2012-07-16 | 2 | -9/+13 | |
| | ||||||
* | Add a return value to hasher_t.get_hash() | Martin Willi | 2012-07-16 | 2 | -3/+11 | |
| | ||||||
* | Add a return value to crypter_t.set_key() | Martin Willi | 2012-07-16 | 1 | -2/+2 | |
| | ||||||
* | Add a return value to crypter_t.encrypt | Martin Willi | 2012-07-16 | 1 | -1/+7 | |
| | ||||||
* | Check rng return value when generating identity in eap-simaka-reauth plugin | Tobias Brunner | 2012-07-16 | 1 | -4/+18 | |
| | ||||||
* | Check rng return value when generating pseudonym in eap-simaka-pseudonym plugin | Tobias Brunner | 2012-07-16 | 1 | -1/+10 | |
| | ||||||
* | Check rng return value when generating nonces in eap-aka plugin | Tobias Brunner | 2012-07-16 | 1 | -1/+4 | |
| | ||||||
* | Check rng return value when generating nonces in eap-sim plugin | Tobias Brunner | 2012-07-16 | 2 | -2/+8 | |
| | ||||||
* | Check rng return value when generating RAND in eap-aka-3gpp2 plugin | Tobias Brunner | 2012-07-16 | 1 | -2/+2 | |
| | ||||||
* | Check rng return value when generating challenges in eap-md5 and mschapv2 ↵ | Tobias Brunner | 2012-07-16 | 2 | -12/+12 | |
| | | | | plugins | |||||
* | Check rng return value when generating Transaction IDs in DHCP plugin | Tobias Brunner | 2012-07-16 | 1 | -1/+5 | |
| | ||||||
* | Add a return value to signer_t.set_key() | Martin Willi | 2012-07-16 | 1 | -3/+2 | |
| | ||||||
* | Add a return value to simaka_crypto_t.derive_keys_*() | Martin Willi | 2012-07-16 | 4 | -27/+59 | |
| | ||||||
* | Add a return value to radius_message_t.sign() | Martin Willi | 2012-07-16 | 2 | -11/+17 | |
| | ||||||
* | Add a return value to simaka_message_t.generate() | Martin Willi | 2012-07-16 | 4 | -85/+257 | |
| | ||||||
* | Don't modify the message string passed to logger, as it gets reused | Martin Willi | 2012-07-13 | 2 | -10/+11 | |
| | ||||||
* | updated Copyright info | Andreas Steffen | 2012-07-13 | 6 | -6/+6 | |
| | ||||||
* | restrict PA-TNC messages to maximum size | Andreas Steffen | 2012-07-12 | 4 | -12/+43 | |
| | ||||||
* | Avoid that any % characters (e.g. in %any) are evaluated when logging via stroke | Tobias Brunner | 2012-07-12 | 1 | -1/+1 | |
| | ||||||
* | removed unused variables | Andreas Steffen | 2012-07-11 | 1 | -2/+0 | |
| | ||||||
* | fixed logging of unsupported TNCCS version | Andreas Steffen | 2012-07-11 | 1 | -1/+1 | |
| | ||||||
* | PB-TNC Client sends empty CLOSE batch only in DECIDED state | Andreas Steffen | 2012-07-11 | 1 | -10/+23 | |
| | ||||||
* | have_recommendation() accepts NULL arguments | Andreas Steffen | 2012-07-11 | 1 | -4/+12 | |
| | ||||||
* | send empty SDATA batch if no recommendation is available yet, but in order ↵ | Andreas Steffen | 2012-07-11 | 4 | -3/+58 | |
| | | | | to avoid loops only if no empty CDATA batch was received | |||||
* | moved batch size calculation into pb_tnc_batch_t | Andreas Steffen | 2012-07-11 | 4 | -31/+50 | |
| | ||||||
* | make maximum PB-TNC batch size configurable | Andreas Steffen | 2012-07-11 | 1 | -2/+11 | |
| | ||||||
* | limit the size of a PB-TNC batch to the maximum EAP-TNC packet size | Andreas Steffen | 2012-07-11 | 10 | -88/+134 | |
| | ||||||
* | eliminate message length field in EAP-TNC | Andreas Steffen | 2012-07-11 | 2 | -2/+2 | |
| | ||||||
* | due to single fragment, total length does not have to be included | Andreas Steffen | 2012-07-11 | 1 | -3/+1 | |
| | ||||||
* | EAP-TNC does not support fragmentation | Andreas Steffen | 2012-07-11 | 1 | -12/+14 | |
| | ||||||
* | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 7 | -7/+13 | |
| | ||||||
* | IMCs and IMVs might depend on X.509 certificates or trusted public keys | Andreas Steffen | 2012-06-28 | 2 | -0/+4 | |
| | ||||||
* | Show some uname() info in "ipsec statusall" | Martin Willi | 2012-06-28 | 1 | -3/+10 | |
| | ||||||
* | Show remote EAP/XAuth identity in "statusall" on a separate line | Martin Willi | 2012-06-27 | 1 | -1/+12 | |
| | ||||||
* | Make rescheduling a job more predictable | Tobias Brunner | 2012-06-25 | 1 | -6/+1 | |
| | | | | | | | | | | | | | This avoids race conditions between calls to cancel() and jobs that like to be rescheduled. If jobs were able to reschedule themselves it would theoretically be possible that two worker threads have the same job assigned (the one currently executing the job and the one executing the same but rescheduled job if it already is time to execute it), this means that cancel() could be called twice for that job. Creating a new job based on the current one and reschedule that is also OK, but rescheduling itself is more efficient for jobs that need to be executed often. | |||||
* | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 14 | -150/+68 | |
| | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
* | Show EAP/XAuth identity in "ipsec status", if available | Martin Willi | 2012-06-25 | 1 | -1/+1 | |
| | ||||||
* | Fixed compile error because of charon->name in certexpire plugin. | Tobias Brunner | 2012-06-21 | 1 | -0/+1 | |
| | ||||||
* | Select requested virtual IP family based on remote TS, if no local TS available | Martin Willi | 2012-06-20 | 1 | -1/+12 | |
| | ||||||
* | Show what kind of *Swan we run in "ipsec status" | Martin Willi | 2012-06-14 | 1 | -3/+16 | |
| | ||||||
* | Use proper defines for IPV6_PKTINFO on Mac OS X Lion and newer. | Tobias Brunner | 2012-06-13 | 1 | -0/+2 | |
| | ||||||
* | Added signature scheme options left/rightauth | Martin Willi | 2012-06-12 | 1 | -11/+99 | |
| | ||||||
* | certificate_t->issued_by takes an argument to receive signature scheme | Martin Willi | 2012-06-12 | 2 | -3/+3 | |
| | ||||||
* | added missing parameter in get_my_addr() and get_other_addr() calls | Andreas Steffen | 2012-06-09 | 1 | -2/+4 | |
| | ||||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 10 | -23/+41 | |
| | ||||||
* | Show expiration time of rekeyed CHILD_SAs in statusall | Martin Willi | 2012-06-05 | 1 | -1/+6 | |
| | ||||||
* | list IKEv1 Aggressive Mode in ipsec statusall | Andreas Steffen | 2012-05-23 | 1 | -2/+9 | |
| | ||||||
* | whitelist: Make sure listed IDs are null-terminated. | Tobias Brunner | 2012-05-18 | 1 | -0/+1 | |
| | ||||||
* | List registered nonce generators in statusall output. | Tobias Brunner | 2012-05-18 | 1 | -2/+18 | |
| |