Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | make max_message_size parameter consistent with similar options | Andreas Steffen | 2012-08-09 | 2 | -2/+2 | |
|/ | ||||||
* | Proper fallback if capability dropping is not available | Tobias Brunner | 2012-07-27 | 1 | -1/+2 | |
| | ||||||
* | Don't add ANY identity constraint to auth config, as XAuth rounds don't use one | Martin Willi | 2012-07-26 | 2 | -3/+15 | |
| | ||||||
* | Add an ipsec.conf leftgroups2 parameter for the second authentication round | Martin Willi | 2012-07-26 | 2 | -3/+6 | |
| | ||||||
* | Fix EAP-MSCHAPv2 master key derivation, broken with 87dd205b | Martin Willi | 2012-07-18 | 1 | -4/+12 | |
| | ||||||
* | Use centralized hasher names in coupling plugin | Martin Willi | 2012-07-17 | 1 | -20/+2 | |
| | ||||||
* | handled return values in tnc-pdp | Andreas Steffen | 2012-07-16 | 1 | -8/+17 | |
| | ||||||
* | Handle PRF failures in eap-aka-3gpp2 | Martin Willi | 2012-07-16 | 4 | -57/+124 | |
| | ||||||
* | Cleaned up memory management and return values for encryption payload | Martin Willi | 2012-07-16 | 1 | -1/+0 | |
| | ||||||
* | Add a return value to hasher_t.allocate_hash() | Martin Willi | 2012-07-16 | 3 | -24/+45 | |
| | ||||||
* | Add a return value to keymat_v1_t.{get,update,confirm}_iv | Martin Willi | 2012-07-16 | 2 | -9/+13 | |
| | ||||||
* | Add a return value to hasher_t.get_hash() | Martin Willi | 2012-07-16 | 2 | -3/+11 | |
| | ||||||
* | Add a return value to crypter_t.set_key() | Martin Willi | 2012-07-16 | 1 | -2/+2 | |
| | ||||||
* | Add a return value to crypter_t.encrypt | Martin Willi | 2012-07-16 | 1 | -1/+7 | |
| | ||||||
* | Check rng return value when generating identity in eap-simaka-reauth plugin | Tobias Brunner | 2012-07-16 | 1 | -4/+18 | |
| | ||||||
* | Check rng return value when generating pseudonym in eap-simaka-pseudonym plugin | Tobias Brunner | 2012-07-16 | 1 | -1/+10 | |
| | ||||||
* | Check rng return value when generating nonces in eap-aka plugin | Tobias Brunner | 2012-07-16 | 1 | -1/+4 | |
| | ||||||
* | Check rng return value when generating nonces in eap-sim plugin | Tobias Brunner | 2012-07-16 | 2 | -2/+8 | |
| | ||||||
* | Check rng return value when generating RAND in eap-aka-3gpp2 plugin | Tobias Brunner | 2012-07-16 | 1 | -2/+2 | |
| | ||||||
* | Check rng return value when generating challenges in eap-md5 and mschapv2 ↵ | Tobias Brunner | 2012-07-16 | 2 | -12/+12 | |
| | | | | plugins | |||||
* | Check rng return value when generating Transaction IDs in DHCP plugin | Tobias Brunner | 2012-07-16 | 1 | -1/+5 | |
| | ||||||
* | Add a return value to signer_t.set_key() | Martin Willi | 2012-07-16 | 1 | -3/+2 | |
| | ||||||
* | Add a return value to simaka_crypto_t.derive_keys_*() | Martin Willi | 2012-07-16 | 4 | -27/+59 | |
| | ||||||
* | Add a return value to radius_message_t.sign() | Martin Willi | 2012-07-16 | 2 | -11/+17 | |
| | ||||||
* | Add a return value to simaka_message_t.generate() | Martin Willi | 2012-07-16 | 4 | -85/+257 | |
| | ||||||
* | Don't modify the message string passed to logger, as it gets reused | Martin Willi | 2012-07-13 | 2 | -10/+11 | |
| | ||||||
* | updated Copyright info | Andreas Steffen | 2012-07-13 | 6 | -6/+6 | |
| | ||||||
* | restrict PA-TNC messages to maximum size | Andreas Steffen | 2012-07-12 | 4 | -12/+43 | |
| | ||||||
* | Avoid that any % characters (e.g. in %any) are evaluated when logging via stroke | Tobias Brunner | 2012-07-12 | 1 | -1/+1 | |
| | ||||||
* | removed unused variables | Andreas Steffen | 2012-07-11 | 1 | -2/+0 | |
| | ||||||
* | fixed logging of unsupported TNCCS version | Andreas Steffen | 2012-07-11 | 1 | -1/+1 | |
| | ||||||
* | PB-TNC Client sends empty CLOSE batch only in DECIDED state | Andreas Steffen | 2012-07-11 | 1 | -10/+23 | |
| | ||||||
* | have_recommendation() accepts NULL arguments | Andreas Steffen | 2012-07-11 | 1 | -4/+12 | |
| | ||||||
* | send empty SDATA batch if no recommendation is available yet, but in order ↵ | Andreas Steffen | 2012-07-11 | 4 | -3/+58 | |
| | | | | to avoid loops only if no empty CDATA batch was received | |||||
* | moved batch size calculation into pb_tnc_batch_t | Andreas Steffen | 2012-07-11 | 4 | -31/+50 | |
| | ||||||
* | make maximum PB-TNC batch size configurable | Andreas Steffen | 2012-07-11 | 1 | -2/+11 | |
| | ||||||
* | limit the size of a PB-TNC batch to the maximum EAP-TNC packet size | Andreas Steffen | 2012-07-11 | 10 | -88/+134 | |
| | ||||||
* | eliminate message length field in EAP-TNC | Andreas Steffen | 2012-07-11 | 2 | -2/+2 | |
| | ||||||
* | due to single fragment, total length does not have to be included | Andreas Steffen | 2012-07-11 | 1 | -3/+1 | |
| | ||||||
* | EAP-TNC does not support fragmentation | Andreas Steffen | 2012-07-11 | 1 | -12/+14 | |
| | ||||||
* | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 7 | -7/+13 | |
| | ||||||
* | IMCs and IMVs might depend on X.509 certificates or trusted public keys | Andreas Steffen | 2012-06-28 | 2 | -0/+4 | |
| | ||||||
* | Show some uname() info in "ipsec statusall" | Martin Willi | 2012-06-28 | 1 | -3/+10 | |
| | ||||||
* | Show remote EAP/XAuth identity in "statusall" on a separate line | Martin Willi | 2012-06-27 | 1 | -1/+12 | |
| | ||||||
* | Make rescheduling a job more predictable | Tobias Brunner | 2012-06-25 | 1 | -6/+1 | |
| | | | | | | | | | | | | | This avoids race conditions between calls to cancel() and jobs that like to be rescheduled. If jobs were able to reschedule themselves it would theoretically be possible that two worker threads have the same job assigned (the one currently executing the job and the one executing the same but rescheduled job if it already is time to execute it), this means that cancel() could be called twice for that job. Creating a new job based on the current one and reschedule that is also OK, but rescheduling itself is more efficient for jobs that need to be executed often. | |||||
* | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 14 | -150/+68 | |
| | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
* | Show EAP/XAuth identity in "ipsec status", if available | Martin Willi | 2012-06-25 | 1 | -1/+1 | |
| | ||||||
* | Fixed compile error because of charon->name in certexpire plugin. | Tobias Brunner | 2012-06-21 | 1 | -0/+1 | |
| | ||||||
* | Select requested virtual IP family based on remote TS, if no local TS available | Martin Willi | 2012-06-20 | 1 | -1/+12 | |
| | ||||||
* | Show what kind of *Swan we run in "ipsec status" | Martin Willi | 2012-06-14 | 1 | -3/+16 | |
| |