tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Add stroke message type counters	Martin Willi	2012-10-24	1	-0/+75
\|
*	Add stroke counters for invalid IKE messages	Martin Willi	2012-10-24	1	-0/+27
\|
*	Add stroke CHILD_SA rekeying counter	Martin Willi	2012-10-24	1	-0/+12
\|
*	Add stroke IKE rekey counters	Martin Willi	2012-10-24	1	-0/+26
\|
*	Raise a bus alert when IKE message body parsing fails	Martin Willi	2012-10-24	3	-0/+7
\|
*	Raise a bus alert when IKE message header parsing fails	Martin Willi	2012-10-24	2	-0/+3
\|
*	Raise a bus alert when a received message contains unknown SPIs	Martin Willi	2012-10-24	2	-0/+6
\|
*	Define stroke counter types to implement	Martin Willi	2012-10-24	2	-0/+86
\|
*	Add a stub for IKE event counters in stroke	Martin Willi	2012-10-24	4	-0/+112
\|
*	Add a load-tester option to define the IKE version to use for testing	Martin Willi	2012-10-24	1	-2/+9
\|
*	Remove peer_cfg IKE version matching, as it is done in ike_cfg matching	Martin Willi	2012-10-24	1	-22/+3
\|
*	Respect IKE version while selecting an ike_cfg as responder	Martin Willi	2012-10-24	4	-13/+38
\|
*	Remove version argument on peer_cfg constructor, use ike_cfg version instead	Martin Willi	2012-10-24	11	-23/+15
\|
*	Add IKE version information to ike_cfg_t	Martin Willi	2012-10-24	11	-22/+52
\|
*	Move ike_version_t definition from peer_cfg_t to ike_cfg_t	Martin Willi	2012-10-24	4	-24/+24
\|
*	Handle type of first EAP-RADIUS response more sophisticated	Tobias Brunner	2012-10-18	1	-3/+18
\|
*	Update routed connections in trap manager	Tobias Brunner	2012-10-18	1	-37/+39
\| \| \| \| \| \|	Before this change, modified configs that have been updated with ipsec reload, could properly be started manually, but the old config would get used if triggered via trap policies.
*	Reload logger configuration on SIGHUP	Tobias Brunner	2012-10-18	3	-37/+369
\| \| \| \| \| \|	Besides changing the configuration this allows to easily rotate log files. Also moved logger initialization back to daemon_t.
*	Make syslog and file loggers configurable at runtime	Tobias Brunner	2012-10-18	4	-21/+157
\|
*	Resolve hosts by DNS name in separate threads so we can cancel them	Tobias Brunner	2012-10-18	1	-1/+2
\| \| \| \| \| \| \| \| \| \|	getaddrinfo(3) may block a long time so proper termination of the daemon may block if DNS servers are not reachable. getaddrinfo(3) is an optional cancellation point in posix threads so it might still block a shutdown but at least on Android (with the signal based pthread_cancel implementation) it works, on Linux starter will kill charon anyway after a while.
*	Added a new alert that is raised if peer does not respond to initial IKE message	Tobias Brunner	2012-10-16	2	-0/+4
\|
*	Remove unused this parameter to load_issuer_cert/key(), as it is uninitialized	Martin Willi	2012-10-16	1	-4/+4
\|
*	Generate a load-tester certificate only for DN or subjectAltName identities	Martin Willi	2012-10-16	1	-7/+17
\|
*	Add a load-tester initiator_match option to match custom initiator_id	Martin Willi	2012-10-16	1	-2/+15
\|
*	Encode non-DN load-tester identities as subjectAltNames	Martin Willi	2012-10-16	1	-1/+16
\|
*	Add a load-tester digest option for issuing peer certificates	Martin Willi	2012-10-16	1	-1/+16
\|
*	Load a multiple load-tester CA certificates from a directory	Martin Willi	2012-10-16	1	-4/+63
\|
*	Added load-tester options to read issuing CA certificate and key from files	Martin Willi	2012-10-16	1	-7/+45
\|
*	Fixed compilation of android_handler_t	Tobias Brunner	2012-10-11	1	-0/+1
\|
*	Fix leak of PINs from ipsec.secrets	Martin Willi	2012-10-09	1	-1/+2
\|
*	allow has_noskip_flag to contain TRUE_OR_FALSE	Andreas Steffen	2012-10-07	1	-1/+1
\|
*	test first and up in the outer while loop	Andreas Steffen	2012-10-07	1	-5/+1
\|
*	Ensure UNSUPPORTED_CRITICAL_PAYLOAD notify contains correct payload type	Tobias Brunner	2012-09-28	1	-0/+1
\|
*	Missed one in 6c10cece	Tobias Brunner	2012-09-28	1	-0/+2
\|
*	Request is never NULL when responding with an INFORMATIONAL message	Tobias Brunner	2012-09-28	1	-1/+1
\|
*	Completed state handling in isakmp_cert_pre	Tobias Brunner	2012-09-28	1	-0/+4
\| \| \| \|	Should not be a problem, but makes static analyzers happy.
*	Added missing continue statement in ha socket error handling	Tobias Brunner	2012-09-28	1	-0/+1
\|
*	Fixed snprintf check in tnc-ifmap plugin	Tobias Brunner	2012-09-28	1	-1/+1
\|
*	Use %x to print uint32 as long ints are 64-bit long on x64 Linux	Tobias Brunner	2012-09-28	1	-1/+1
\|
*	Make sure first argument is an int when using %.*s to print e.g. chunks	Tobias Brunner	2012-09-28	6	-21/+22
\|
*	Avoid memory leak when sending RADIUS accounting start message failed	Tobias Brunner	2012-09-28	1	-1/+1
\|
*	Correctly initialize payload length of encrypted payload	Tobias Brunner	2012-09-28	1	-1/+1
\|
*	The eap argument of send_response is never NULL	Tobias Brunner	2012-09-28	1	-13/+11
\|
*	Properly initialize sockaddr_in struct in fast and dhcp plugins	Tobias Brunner	2012-09-28	1	-4/+7
\|
*	Clarified error message if enabling UDP decapsulation fails	Tobias Brunner	2012-09-27	2	-2/+4
\|
*	IKE_AUTH_LIFETIME task is not defined if IKEv2 is disabled	Tobias Brunner	2012-09-25	1	-1/+4
\| \| \| \|	Fixes #229.
*	Don't check interface of inbound message if interfaces are not filtered	Tobias Brunner	2012-09-24	1	-2/+3
\| \| \| \| \|	We don't have a proper kernel-net interface on Android yet, so the check for a usable interface does not work there.
*	Made IP address enumeration more flexible	Tobias Brunner	2012-09-21	5	-5/+5
\| \| \| \|	Also added an option to enumerate addresses on ignored interfaces.
*	Drop packets received on ignored interfaces	Tobias Brunner	2012-09-21	1	-2/+12
\|
*	Make it easy to check if an address is locally usable via changed ↵	Tobias Brunner	2012-09-21	2	-18/+9
\| \| \| \|	get_interface() method