Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Show some uname() info in "ipsec statusall" | Martin Willi | 2012-06-28 | 1 | -3/+10 | |
| | ||||||
* | Show remote EAP/XAuth identity in "statusall" on a separate line | Martin Willi | 2012-06-27 | 1 | -1/+12 | |
| | ||||||
* | Make rescheduling a job more predictable | Tobias Brunner | 2012-06-25 | 1 | -6/+1 | |
| | | | | | | | | | | | | | This avoids race conditions between calls to cancel() and jobs that like to be rescheduled. If jobs were able to reschedule themselves it would theoretically be possible that two worker threads have the same job assigned (the one currently executing the job and the one executing the same but rescheduled job if it already is time to execute it), this means that cancel() could be called twice for that job. Creating a new job based on the current one and reschedule that is also OK, but rescheduling itself is more efficient for jobs that need to be executed often. | |||||
* | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 14 | -150/+68 | |
| | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
* | Show EAP/XAuth identity in "ipsec status", if available | Martin Willi | 2012-06-25 | 1 | -1/+1 | |
| | ||||||
* | Fixed compile error because of charon->name in certexpire plugin. | Tobias Brunner | 2012-06-21 | 1 | -0/+1 | |
| | ||||||
* | Select requested virtual IP family based on remote TS, if no local TS available | Martin Willi | 2012-06-20 | 1 | -1/+12 | |
| | ||||||
* | Show what kind of *Swan we run in "ipsec status" | Martin Willi | 2012-06-14 | 1 | -3/+16 | |
| | ||||||
* | Use proper defines for IPV6_PKTINFO on Mac OS X Lion and newer. | Tobias Brunner | 2012-06-13 | 1 | -0/+2 | |
| | ||||||
* | Added signature scheme options left/rightauth | Martin Willi | 2012-06-12 | 1 | -11/+99 | |
| | ||||||
* | certificate_t->issued_by takes an argument to receive signature scheme | Martin Willi | 2012-06-12 | 2 | -3/+3 | |
| | ||||||
* | added missing parameter in get_my_addr() and get_other_addr() calls | Andreas Steffen | 2012-06-09 | 1 | -2/+4 | |
| | ||||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 10 | -23/+41 | |
| | ||||||
* | Show expiration time of rekeyed CHILD_SAs in statusall | Martin Willi | 2012-06-05 | 1 | -1/+6 | |
| | ||||||
* | list IKEv1 Aggressive Mode in ipsec statusall | Andreas Steffen | 2012-05-23 | 1 | -2/+9 | |
| | ||||||
* | whitelist: Make sure listed IDs are null-terminated. | Tobias Brunner | 2012-05-18 | 1 | -0/+1 | |
| | ||||||
* | List registered nonce generators in statusall output. | Tobias Brunner | 2012-05-18 | 1 | -2/+18 | |
| | ||||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 10 | -11/+28 | |
| | ||||||
* | Register load-tester faked kernel interface before other kernel interfaces | Martin Willi | 2012-05-14 | 1 | -8/+9 | |
| | ||||||
* | Load tester can enforce a local IP to use | Martin Willi | 2012-05-14 | 1 | -2/+9 | |
| | ||||||
* | Add plugin features support to load-tester plugin | Martin Willi | 2012-05-14 | 1 | -48/+76 | |
| | ||||||
* | Fixed #include in tnc-ifmap plugin. | Tobias Brunner | 2012-05-07 | 1 | -0/+1 | |
| | ||||||
* | missing references to daemon.h | Andreas Steffen | 2012-05-05 | 4 | -0/+6 | |
| | ||||||
* | fixed feature dependencies for CERT_TRUSTED_PUBKEY | Andreas Steffen | 2012-05-05 | 1 | -0/+2 | |
| | ||||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 43 | -183/+236 | |
| | | | | Also fixes several whitespace errors. | |||||
* | Integrate nm plugin directly in charon-nm. | Tobias Brunner | 2012-05-03 | 9 | -1812/+0 | |
| | ||||||
* | display (soft) same as (not loaded) | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | ||||||
* | charon is now an IKE daemon | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | ||||||
* | stroke plugin sdepends on building CERT_ANY certificates | Martin Willi | 2012-05-03 | 1 | -0/+1 | |
| | ||||||
* | updated tnc-pdp plugin for 5.0.0 | Andreas Steffen | 2012-05-02 | 3 | -4/+4 | |
| | ||||||
* | Loggers specify what log messages they want to receive during registration. | Tobias Brunner | 2012-05-02 | 5 | -32/+42 | |
| | | | | | | | This also allows us to generate the log message only once for all loggers that need it (avoids calls to custom printf specifier callbacks). To update the log levels loggers can simply be registered again. | |||||
* | Ensure that multi-line log messages are not torn apart. | Tobias Brunner | 2012-05-02 | 1 | -1/+10 | |
| | ||||||
* | Use a separate interface for loggers. | Tobias Brunner | 2012-05-02 | 6 | -22/+20 | |
| | | | | | | | | The new interface does not allow loggers to unregister themselves from the bus. This allows us to use a rwlock_t for them. The latter also means that loggers can now be called concurrently by multiple threads. | |||||
* | Add plugin features support to stroke plugin | Martin Willi | 2012-05-02 | 1 | -7/+34 | |
| | ||||||
* | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 53 | -210/+1372 | |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| * | Fixed Android null terminated password fixup in xauth-eap | Martin Willi | 2012-04-26 | 1 | -2/+2 | |
| | | ||||||
| * | Fix null-terminated XAuth passwords, as sent by Android 4 | Martin Willi | 2012-03-22 | 2 | -0/+8 | |
| | | ||||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 53 | -210/+1364 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | * | Store the major IKE version on ike_sa_id_t. | Tobias Brunner | 2012-03-20 | 2 | -3/+6 | |
| | | | ||||||
| | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -4/+1 | |
| | | | ||||||
| | * | Added support for authby/xauth_server legacy options | Martin Willi | 2012-03-20 | 1 | -42/+1 | |
| | | | ||||||
| | * | Adopt children after syncing a rekeyed IKEv1 SA | Martin Willi | 2012-03-20 | 1 | -0/+6 | |
| | | | ||||||
| | * | Synchronize IKEv1 DPD sequence numbers | Martin Willi | 2012-03-20 | 1 | -0/+30 | |
| | | | ||||||
| | * | Sync remote virtual IP for IKEv1 SAs | Martin Willi | 2012-03-20 | 1 | -0/+13 | |
| | | | ||||||
| | * | Sync new IKE_SA condition/extension flags | Martin Willi | 2012-03-20 | 2 | -2/+10 | |
| | | | ||||||
| | * | Added support for Phase1 IV synchronization to HA plugin | Martin Willi | 2012-03-20 | 5 | -27/+129 | |
| | | | ||||||
| | * | Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵ | Martin Willi | 2012-03-20 | 4 | -7/+8 | |
| | | | | | | | | | | | | encrypted | |||||
| | * | Create IKEv1 keymat hasher explicitly on sync | Martin Willi | 2012-03-20 | 1 | -3/+6 | |
| | | | ||||||
| | * | Added support to sync IKEv1 SAs key material in HA plugin | Martin Willi | 2012-03-20 | 4 | -10/+95 | |
| | | | ||||||
| | * | Pass IKEv1 specific keymat to ike_keys hook | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | |