| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | Fixed additional typos in comments and log messages. | Tobias Brunner | 2012-01-12 | 2 | -3/+3 | |
| | | | ||||||
| * | | Implemented TLS session resumption both as client and as server | Martin Willi | 2011-12-31 | 3 | -5/+7 | |
| | | | ||||||
| * | | Make number of concurrently handled stroke messages configurable. | Tobias Brunner | 2011-12-29 | 1 | -2/+9 | |
| | | | ||||||
| * | | Limit the number of concurrently handled stroke messages. | Tobias Brunner | 2011-12-29 | 1 | -18/+104 | |
| | | | | | | | | | This avoids clogging the thread pool with potentially blocking jobs. | |||||
| * | | Fix deadlock in trap_manager_t during acquire. | Tobias Brunner | 2011-12-23 | 1 | -28/+43 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also fixes a TOCTOU issue regarding the use of entry_t.pending. The deadlock was caused because the rwlock was being locked while waiting for an IKE_SA. Triggering the deadlock was a bit tricky, here is the description by Thomas Egerer (the reporter of this issue): " The deadlock occurs when the following happens (in the given order): a) an IKE_SA is built and a thread is processing the IKE_AUTH request, which can take a bit longer when a smartcard is involved. This causes the ike_sa_manager to lock a particular IKE_SA exclusively. b) an acquire is triggered which causes the rwlock in the trap_manager to be read-locked, the subsequent call to ike_sa_manager->checkout_by_config has to wait until a) unlocks it's ike_sa. c) a child_cfg contained in the peer_cfg belonging to the ike_sa a) has locked is routed causes the child_configs contained in the peer config to be locked by c) while the actual routing code within trap_manager tries to writelock it's rwlock. That's about it. As soon as a) finishes authentication of the peer and tries to find a matching child sa it will try to lock the child configs of the peer config which is not possible since it has been locked by c). Thread | Resource locked | Resource desired -------+--------------------------------+-------------------------------- (a) | ike_sa in ike_sa_manager | child_cfgs of peer_cfg | | (b) | rwlock in trap-manager (read) | ike_sa in ike_sa_manager | | (c) | child_cfgs of peer_cfg | rwlock in trap-manager (write) " With this patch thread (b) now does not hold the lock while waiting for the IKE_SA. Thus (c) can get the write lock, and (a) can subsequently lock the mutex in the peer_cfg which then finally allows (b) to checkout the IKE_SA. | |||||
| * | | Fixed flush() method of trap_manager_t. | Tobias Brunner | 2011-12-23 | 1 | -3/+9 | |
| | | | | | | | | | | | A segmentation fault could have happened during destruction of the trap manager after calling flush(). | |||||
| * | | Make sure the certificate cache is flushed when plugins are unloaded. | Tobias Brunner | 2011-12-15 | 1 | -0/+2 | |
| | | | | | | | | | | | This avoids segmentation faults when plugins implementing cert_t are already unloaded when the cache is flushed during destruction. | |||||
| * | | Added missing libsimaka files to Android.mk. | Tobias Brunner | 2011-12-14 | 1 | -0/+2 | |
| | | | ||||||
| * | | Destroy mediation managers before unloading plugins. | Tobias Brunner | 2011-12-14 | 1 | -4/+4 | |
| | | | ||||||
| * | | implemented IMC/IMV ReceiveMessageLong functions | Andreas Steffen | 2011-12-09 | 1 | -0/+2 | |
| | | | ||||||
| * | | added IMC/IMV support for send_message_long() and reserve_additional_id() ↵ | Andreas Steffen | 2011-12-09 | 3 | -10/+20 | |
| | | | | | | | | | functions | |||||
| * | | implemented IF-IMC/IMV 1.3 attributes | Andreas Steffen | 2011-12-08 | 3 | -20/+224 | |
| | | | ||||||
| * | | added TNC_TNCC_GetAttribute() and TNC_TNCC_SetAttribute() functions | Andreas Steffen | 2011-12-08 | 3 | -8/+59 | |
| | | | ||||||
| * | | added TNC_IMC_ReceiveMessageLong() and TNC_IMV_ReceiveMessageLong() support | Andreas Steffen | 2011-12-08 | 6 | -51/+100 | |
| | | | ||||||
| * | | fixed typo in function name | Andreas Steffen | 2011-12-08 | 1 | -1/+1 | |
| | | | ||||||
| * | | added TNC_TNCS_ReserveAdditionalIMVID() function | Andreas Steffen | 2011-12-07 | 3 | -4/+102 | |
| | | | ||||||
| * | | return with TNC_RESULT_SUCCESS | Andreas Steffen | 2011-12-07 | 1 | -4/+5 | |
| | | | ||||||
| * | | added TNC_TNCC_ReserveAdditionalIMCID() function | Andreas Steffen | 2011-12-07 | 3 | -3/+99 | |
| | | | ||||||
| * | | added TNC_TNCC_SendMessageLong() and TNC_TNCS_SendMessageLong() functions | Andreas Steffen | 2011-12-07 | 7 | -45/+102 | |
| | | | ||||||
| * | | corrected function name in error message | Andreas Steffen | 2011-12-07 | 2 | -2/+2 | |
| | | | ||||||
| * | | added TNC_TNCC_ReportMessageTypesLong() and ↵ | Andreas Steffen | 2011-12-06 | 7 | -47/+336 | |
| | | | | | | | | | TNC_TNCS_ReportMessageTypesLong() messages | |||||
| * | | upgraded IF-IMC/IMV inteface definitions to version 1.3 | Andreas Steffen | 2011-12-04 | 2 | -4/+0 | |
| | | | ||||||
| * | | Reversed unintended commit | Sansar Choinyambuu | 2011-11-28 | 2 | -2/+2 | |
| | | | ||||||
| * | | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 2 | -2/+2 | |
| | | | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function | |||||
| * | | Reversed unintended commit | Sansar Choinyambuu | 2011-11-28 | 2 | -2/+2 | |
| | | | ||||||
| * | | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 2 | -2/+2 | |
| | | | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function | |||||
| * | | Fixed check for log groups when debug_t is unsigned. | Tobias Brunner | 2011-11-25 | 1 | -1/+1 | |
| | | | | | | | | | The range and signedness of enum types is up to the compiler. | |||||
| * | | Fixed proposal numbering check in sa_payload | Martin Willi | 2011-11-21 | 1 | -10/+0 | |
| | | | ||||||
| * | | Fix unaligned aliasing warning in raw socket | Martin Willi | 2011-11-17 | 1 | -5/+4 | |
| |/ | ||||||
| * | Fixed monolithic build of libcharon with libtnccs enabled. | Tobias Brunner | 2011-11-08 | 1 | -0/+7 | |
| | | ||||||
| * | Correctly refer to tnc-tnccs plugin when building monolithically. | Tobias Brunner | 2011-11-08 | 1 | -1/+1 | |
| | | ||||||
| * | Revert "fixed integrity tests of plugins using libtls or libtnccs" | Tobias Brunner | 2011-11-08 | 10 | -6/+18 | |
| | | | | | | This reverts commit b597ac4a4cbcd9197b886d743c75d58293264580 (not completely). | |||||
| * | Revert "fixed integrity tests of plugins using libsimaka" | Tobias Brunner | 2011-11-08 | 8 | -0/+8 | |
| | | | | | | | | | This reverts commit 8c42f16deeeffa1ae305b18306b0796f49c9922c. Conflicts: src/charon/Makefile.am | |||||
| * | Syntax error in sqlite.sql fixed. | Tobias Brunner | 2011-11-04 | 1 | -1/+1 | |
| | | ||||||
| * | fixed integrity tests of plugins using libsimaka | Andreas Steffen | 2011-11-04 | 8 | -8/+0 | |
| | | ||||||
| * | Change order of destroy/get_ref function calls | Thomas Egerer | 2011-11-04 | 1 | -1/+1 | |
| | | | | | | Since DESTROY_IF might destroy the peer_cfg, a get_ref on a freed object is subject to fail. | |||||
| * | fixed integrity tests of plugins using libtls or libtnccs | Andreas Steffen | 2011-11-02 | 11 | -18/+23 | |
| | | ||||||
| * | Some Doxygen fixes. | Tobias Brunner | 2011-10-28 | 2 | -3/+2 | |
| | | ||||||
| * | Cosmetics | Andreas Steffen | 2011-10-26 | 1 | -1/+2 | |
| | | ||||||
| * | Don't link to tnc libraries on Android as no tnc plugins are currently enabled. | Tobias Brunner | 2011-10-25 | 1 | -1/+1 | |
| | | ||||||
| * | Build libtnccs on Android. | Tobias Brunner | 2011-10-25 | 1 | -6/+1 | |
| | | ||||||
| * | share some code between IMC and IMV managers | Andreas Steffen | 2011-10-25 | 2 | -224/+34 | |
| | | ||||||
| * | removed unneeded includes | Andreas Steffen | 2011-10-25 | 2 | -4/+0 | |
| | | ||||||
| * | refactored TNC framework | Andreas Steffen | 2011-10-25 | 39 | -901/+663 | |
| | | ||||||
| * | moved imv_manager to libtnccs | Andreas Steffen | 2011-10-25 | 11 | -508/+78 | |
| | | ||||||
| * | moved imc_manager to libtnccs | Andreas Steffen | 2011-10-25 | 17 | -372/+145 | |
| | | ||||||
| * | Log if charon failed to establish a CHILD_SA but keeps the IKE_SA up. | Tobias Brunner | 2011-10-21 | 1 | -0/+4 | |
| | | ||||||
| * | The load-tester plugin does not support SAD/SPD flushing. | Tobias Brunner | 2011-10-21 | 1 | -0/+2 | |
| | | ||||||
| * | Fixed indention in load-tester kernel interface. | Tobias Brunner | 2011-10-21 | 1 | -28/+28 | |
| | | ||||||
| * | Add features support to tnccs plugins | Andreas Steffen | 2011-10-20 | 5 | -23/+107 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |