tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	unit-tests: Add mock nonce generator	Tobias Brunner	2016-06-17	3	-0/+129
\| \| \| \| \|	We don't make the full nonces configurable but only the first byte, which should be enough to force a nonce to be smaller than others.
*	unit-tests: Make message asserts more flexible	Tobias Brunner	2016-06-17	2	-26/+106
\|
*	unit-tests: Add another CHILD_SA delete collision	Tobias Brunner	2016-06-17	1	-1/+56
\|
*	unit-tests: Register mock DH implementation as static plugin feature	Tobias Brunner	2016-06-17	1	-0/+11
\|
*	unit-tests: Add mock DH implementation that's basically a noop	Tobias Brunner	2016-06-17	3	-0/+125
\| \| \| \| \|	If the openssl plugin is built DH isn't that much of an overhead as ecp256 is used, but the default MODP group is now modp3072.
*	unit-tests: Make IKE SPIs predictable	Tobias Brunner	2016-06-17	1	-0/+14
\|
*	unit-tests: Call methods on IKE_SAs in their context	Tobias Brunner	2016-06-17	3	-9/+18
\|
*	unit-tests: Add a unit test for CHILD_SA DELETE collisions	Tobias Brunner	2016-06-17	3	-0/+149
\|
*	unit-tests: Add asserts against hooks on listener_t and messages captured there	Tobias Brunner	2016-06-17	3	-0/+364
\|
*	unit-tests: Add asserts against SAs (e.g. their states)	Tobias Brunner	2016-06-17	2	-0/+56
\|
*	unit-tests: Add separate test runner to test IKEv2 exchanges	Tobias Brunner	2016-06-17	3	-4/+100
\| \| \| \|	This allows proper initialization of the daemon and the helper object.
*	unit-tests: Add helper class/object to test IKE exchanges	Tobias Brunner	2016-06-17	3	-0/+331
\|
*	unit-tests: Add mock kernel_ipsec_t implementation for unit tests	Tobias Brunner	2016-06-17	3	-0/+165
\| \| \| \|	Provides predictable sequential SPIs.
*	unit-tests: Add mock sender_t implementation for unit testing	Tobias Brunner	2016-06-17	4	-0/+153
\| \| \| \| \|	This allows to retrieve packets sent by an IKE_SA and pass it to another IKE_SA directly via process_message().
*	unit-tests: Don't unload plugins before calling libcharon_deinit()	Tobias Brunner	2016-06-17	1	-3/+0
\| \| \| \| \| \| \|	libcharon_deinit() already calls all the functions we called manually. Unloading the plugins will not work if charon->initialize() is called as charon's static plugin features would already be unloaded before the destroyed members are accessed in destroy() to flush them.
*	Use standard unsigned integer types	Andreas Steffen	2016-03-24	1	-4/+4
\|
*	libhydra: Remove empty unused library	Tobias Brunner	2016-03-03	2	-5/+0
\|
*	ike-cfg: Add unit tests for ike_cfg_get_family() helper	Tobias Brunner	2015-07-27	3	-0/+120
\|
*	unit-tests: Add a IKEv2 message encryption test case	Martin Willi	2015-07-12	3	-0/+140
\| \| \| \| \|	It uses the ChaCha20Poly1305 test vectors from draft-ietf-ipsecme-chacha20-poly1305-06.
*	unit-tests: Forward variable argument list in TEST_SUITE_DEPEND	Martin Willi	2015-07-12	1	-2/+2
\| \| \| \| \|	For some plugin features, such as crypters or AEADs, we have some additional feature arguments, such as the key size.
*	unit-tests: Load libstrongswan plugins in libcharon tests	Martin Willi	2015-07-12	2	-0/+16
\|
*	mem-pool: Pass the remote IKE address, to re-acquire() an address during reauth	Martin Willi	2015-02-20	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \|	With make-before-break IKEv2 re-authentication, virtual IP addresses must be assigned overlapping to the same peer. With the remote IKE address, the backend can detect re-authentication attempts by comparing the remote host address and port. This allows proper reassignment of the virtual IP if it is re-requested. This change removes the mem-pool.reassign_online option, as it is obsolete now. IPs get automatically reassigned if a peer re-requests the same address, and additionally connects from the same address and port.
*	attributes: Move the configuration attributes framework to libcharon	Martin Willi	2015-02-20	3	-0/+233
\|
*	libcharon: Add a test runner	Martin Willi	2015-02-20	4	-0/+91