| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | display (soft) same as (not loaded) | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | | ||||||
| * | charon is now an IKE daemon | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | | ||||||
| * | stroke plugin sdepends on building CERT_ANY certificates | Martin Willi | 2012-05-03 | 1 | -0/+1 | |
| | | ||||||
| * | Updated Android.mk for 5.0 (no IKEv1 support yet). | Tobias Brunner | 2012-05-03 | 1 | -25/+33 | |
| | | ||||||
| * | updated tnc-pdp plugin for 5.0.0 | Andreas Steffen | 2012-05-02 | 3 | -4/+4 | |
| | | ||||||
| * | Loggers specify what log messages they want to receive during registration. | Tobias Brunner | 2012-05-02 | 13 | -163/+328 | |
| | | | | | | | | This also allows us to generate the log message only once for all loggers that need it (avoids calls to custom printf specifier callbacks). To update the log levels loggers can simply be registered again. | |||||
| * | Ensure that multi-line log messages are not torn apart. | Tobias Brunner | 2012-05-02 | 3 | -1/+30 | |
| | | ||||||
| * | Use a separate interface for loggers. | Tobias Brunner | 2012-05-02 | 16 | -291/+279 | |
| | | | | | | | | | The new interface does not allow loggers to unregister themselves from the bus. This allows us to use a rwlock_t for them. The latter also means that loggers can now be called concurrently by multiple threads. | |||||
| * | Use a separate list and mutex for loggers. | Tobias Brunner | 2012-05-02 | 3 | -73/+168 | |
| | | | | | | | | | | | | This avoids deadlocks caused by extensive listener_t implementations which might want to acquire a lock which is currently held by another thread wanting to log messages. Since the latter requires that thread to acquire the same lock the initial thread currently holds this previously resulted in a deadlock. With this change logging messages does not require threads to acquire the main lock in bus_t and thus avoids the deadlock. | |||||
| * | Fixed return value of controller_t functions if callback returns FALSE. | Tobias Brunner | 2012-05-02 | 2 | -10/+11 | |
| | | ||||||
| * | Removed remaining parts of controller_t.listen() implementation. | Tobias Brunner | 2012-05-02 | 1 | -39/+9 | |
| | | ||||||
| * | Remove obsolete bus_t.listen() method. | Tobias Brunner | 2012-05-02 | 2 | -82/+7 | |
| | | ||||||
| * | Implement wait_for_listener in controller_t with semaphores. | Tobias Brunner | 2012-05-02 | 1 | -53/+17 | |
| | | | | | This eliminates even the slightest chance of a deadlock. | |||||
| * | Implement bus_t.listen() directly in controller_t (the only user). | Tobias Brunner | 2012-05-02 | 1 | -12/+110 | |
| | | | | | This will hopefully allow us to later simplify bus_t. | |||||
| * | Add plugin features support to stroke plugin | Martin Willi | 2012-05-02 | 1 | -7/+34 | |
| | | ||||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 237 | -4656/+21302 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Fixed Android null terminated password fixup in xauth-eap | Martin Willi | 2012-04-26 | 1 | -2/+2 | |
| | | | ||||||
| | * | Fix iteration through half-open IKE_SA table | Martin Willi | 2012-04-16 | 1 | -0/+1 | |
| | | | ||||||
| | * | Added another bunch of commonly used IKEv1 NATT vendor IDs | Martin Willi | 2012-04-04 | 1 | -1/+19 | |
| | | | ||||||
| | * | Fix null-terminated XAuth passwords, as sent by Android 4 | Martin Willi | 2012-03-22 | 2 | -0/+8 | |
| | | | ||||||
| | * | Store authentication info of a XAUTH round on IKE_SA | Martin Willi | 2012-03-22 | 1 | -0/+16 | |
| | | | ||||||
| | * | Added a getter for CHILD_SA marks | Martin Willi | 2012-03-22 | 2 | -0/+19 | |
| | | | ||||||
| | * | Define a special XFRM mark_t.value that dynamically uses the CHILD_SA reqid | Martin Willi | 2012-03-22 | 1 | -0/+9 | |
| | | | ||||||
| | * | Reply with received configuration payload identifier in Mode Config | Martin Willi | 2012-03-20 | 1 | -0/+8 | |
| | | | ||||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 235 | -4647/+21219 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Properly handle retransmitted initial IKE messages. | Tobias Brunner | 2012-03-20 | 1 | -58/+74 | |
| | | | | | | | | | | | | | | | | | | | This change allows to properly handle retransmits of initial IKE messages when we've already processed them (i.e. our response is now resent immediately). | |||||
| | | * | Implemented table of init hashes without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -30/+30 | |
| | | | | ||||||
| | | * | Implemented table of connected peers without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -63/+75 | |
| | | | | ||||||
| | | * | Implemented table of half open IKE_SAs without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -52/+47 | |
| | | | | ||||||
| | | * | Don't use linked_list_t for buckets in main IKE_SA hash table. | Tobias Brunner | 2012-03-20 | 1 | -57/+82 | |
| | | | | ||||||
| | | * | Fixed deadlock if checkin_and_destroy is called during shutdown. | Tobias Brunner | 2012-03-20 | 1 | -0/+10 | |
| | | | | ||||||
| | | * | Do not clone hashes of initial IKE messages when storing them in the hash table. | Tobias Brunner | 2012-03-20 | 1 | -7/+6 | |
| | | | | ||||||
| | | * | Store IKEv2 IKE_SAs by local SPI in the IKE_SA manager hash table. | Tobias Brunner | 2012-03-20 | 1 | -2/+13 | |
| | | | | | | | | | | | | | | | | For IKEv1 the previous behavior of always using the initiator's SPI as key is maintained. | |||||
| | | * | Added separate hashtable for hashes of initial IKE messages. | Tobias Brunner | 2012-03-20 | 1 | -64/+139 | |
| | | | | | | | | | | | | | This does not require us to do a lookup for an SA by SPI first. | |||||
| | | * | Store the major IKE version on ike_sa_id_t. | Tobias Brunner | 2012-03-20 | 7 | -32/+60 | |
| | | | | ||||||
| | | * | Implemented handling of UNITY_LOAD_BALANCE as reauthentication. | Tobias Brunner | 2012-03-20 | 2 | -3/+28 | |
| | | | | ||||||
| | | * | Check if we actually have a packet before retransmitting it | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Parse IKEv1 Cisco Load Balancing notify (can't act on it yet). | Tobias Brunner | 2012-03-20 | 3 | -4/+27 | |
| | | | | ||||||
| | | * | Fixed transform numbering in IKEv1 proposal. | Tobias Brunner | 2012-03-20 | 1 | -0/+1 | |
| | | | | ||||||
| | | * | Compiler warning fixed. | Tobias Brunner | 2012-03-20 | 1 | -2/+6 | |
| | | | | ||||||
| | | * | Use correct enum values to detect three message tasks for retransmission | Martin Willi | 2012-03-20 | 1 | -2/+2 | |
| | | | | ||||||
| | | * | Trigger DPD not before IKE_SA state gets updated | Martin Willi | 2012-03-20 | 1 | -13/+15 | |
| | | | | ||||||
| | | * | Fix mapping of IKEv1 encapsulation mode | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Use UDP encapsulation even in non-NAT situation if initiator requests it | Martin Willi | 2012-03-20 | 1 | -13/+14 | |
| | | | | ||||||
| | | * | Support inactivity timeout in IKEv1 CHILD_SAs | Martin Willi | 2012-03-20 | 1 | -1/+24 | |
| | | | | ||||||
| | | * | Use a dedicated PRF for HASH/SIG payloads using ECDSA specific hasher | Martin Willi | 2012-03-20 | 1 | -14/+37 | |
| | | | | ||||||
| | | * | Select public key auth method by checking what key we have | Martin Willi | 2012-03-20 | 2 | -4/+99 | |
| | | | | ||||||
| | | * | Support ECDSA signatures in IKEv1 pubkey authenticator | Martin Willi | 2012-03-20 | 3 | -18/+32 | |
| | | | | ||||||
| | | * | Exchange certificates when using IKEv1 ECDSA authentication | Martin Willi | 2012-03-20 | 2 | -0/+6 | |
| | | | | ||||||
| | | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -4/+1 | |
| | | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |