| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Fixed return value of controller_t functions if callback returns FALSE. | Tobias Brunner | 2012-05-02 | 2 | -10/+11 | |
| | | ||||||
| * | Removed remaining parts of controller_t.listen() implementation. | Tobias Brunner | 2012-05-02 | 1 | -39/+9 | |
| | | ||||||
| * | Remove obsolete bus_t.listen() method. | Tobias Brunner | 2012-05-02 | 2 | -82/+7 | |
| | | ||||||
| * | Implement wait_for_listener in controller_t with semaphores. | Tobias Brunner | 2012-05-02 | 1 | -53/+17 | |
| | | | | | This eliminates even the slightest chance of a deadlock. | |||||
| * | Implement bus_t.listen() directly in controller_t (the only user). | Tobias Brunner | 2012-05-02 | 1 | -12/+110 | |
| | | | | | This will hopefully allow us to later simplify bus_t. | |||||
| * | Add plugin features support to stroke plugin | Martin Willi | 2012-05-02 | 1 | -7/+34 | |
| | | ||||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 237 | -4656/+21302 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Fixed Android null terminated password fixup in xauth-eap | Martin Willi | 2012-04-26 | 1 | -2/+2 | |
| | | | ||||||
| | * | Fix iteration through half-open IKE_SA table | Martin Willi | 2012-04-16 | 1 | -0/+1 | |
| | | | ||||||
| | * | Added another bunch of commonly used IKEv1 NATT vendor IDs | Martin Willi | 2012-04-04 | 1 | -1/+19 | |
| | | | ||||||
| | * | Fix null-terminated XAuth passwords, as sent by Android 4 | Martin Willi | 2012-03-22 | 2 | -0/+8 | |
| | | | ||||||
| | * | Store authentication info of a XAUTH round on IKE_SA | Martin Willi | 2012-03-22 | 1 | -0/+16 | |
| | | | ||||||
| | * | Added a getter for CHILD_SA marks | Martin Willi | 2012-03-22 | 2 | -0/+19 | |
| | | | ||||||
| | * | Define a special XFRM mark_t.value that dynamically uses the CHILD_SA reqid | Martin Willi | 2012-03-22 | 1 | -0/+9 | |
| | | | ||||||
| | * | Reply with received configuration payload identifier in Mode Config | Martin Willi | 2012-03-20 | 1 | -0/+8 | |
| | | | ||||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 235 | -4647/+21219 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Properly handle retransmitted initial IKE messages. | Tobias Brunner | 2012-03-20 | 1 | -58/+74 | |
| | | | | | | | | | | | | | | | | | | | This change allows to properly handle retransmits of initial IKE messages when we've already processed them (i.e. our response is now resent immediately). | |||||
| | | * | Implemented table of init hashes without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -30/+30 | |
| | | | | ||||||
| | | * | Implemented table of connected peers without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -63/+75 | |
| | | | | ||||||
| | | * | Implemented table of half open IKE_SAs without linked_list_t. | Tobias Brunner | 2012-03-20 | 1 | -52/+47 | |
| | | | | ||||||
| | | * | Don't use linked_list_t for buckets in main IKE_SA hash table. | Tobias Brunner | 2012-03-20 | 1 | -57/+82 | |
| | | | | ||||||
| | | * | Fixed deadlock if checkin_and_destroy is called during shutdown. | Tobias Brunner | 2012-03-20 | 1 | -0/+10 | |
| | | | | ||||||
| | | * | Do not clone hashes of initial IKE messages when storing them in the hash table. | Tobias Brunner | 2012-03-20 | 1 | -7/+6 | |
| | | | | ||||||
| | | * | Store IKEv2 IKE_SAs by local SPI in the IKE_SA manager hash table. | Tobias Brunner | 2012-03-20 | 1 | -2/+13 | |
| | | | | | | | | | | | | | | | | For IKEv1 the previous behavior of always using the initiator's SPI as key is maintained. | |||||
| | | * | Added separate hashtable for hashes of initial IKE messages. | Tobias Brunner | 2012-03-20 | 1 | -64/+139 | |
| | | | | | | | | | | | | | This does not require us to do a lookup for an SA by SPI first. | |||||
| | | * | Store the major IKE version on ike_sa_id_t. | Tobias Brunner | 2012-03-20 | 7 | -32/+60 | |
| | | | | ||||||
| | | * | Implemented handling of UNITY_LOAD_BALANCE as reauthentication. | Tobias Brunner | 2012-03-20 | 2 | -3/+28 | |
| | | | | ||||||
| | | * | Check if we actually have a packet before retransmitting it | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Parse IKEv1 Cisco Load Balancing notify (can't act on it yet). | Tobias Brunner | 2012-03-20 | 3 | -4/+27 | |
| | | | | ||||||
| | | * | Fixed transform numbering in IKEv1 proposal. | Tobias Brunner | 2012-03-20 | 1 | -0/+1 | |
| | | | | ||||||
| | | * | Compiler warning fixed. | Tobias Brunner | 2012-03-20 | 1 | -2/+6 | |
| | | | | ||||||
| | | * | Use correct enum values to detect three message tasks for retransmission | Martin Willi | 2012-03-20 | 1 | -2/+2 | |
| | | | | ||||||
| | | * | Trigger DPD not before IKE_SA state gets updated | Martin Willi | 2012-03-20 | 1 | -13/+15 | |
| | | | | ||||||
| | | * | Fix mapping of IKEv1 encapsulation mode | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Use UDP encapsulation even in non-NAT situation if initiator requests it | Martin Willi | 2012-03-20 | 1 | -13/+14 | |
| | | | | ||||||
| | | * | Support inactivity timeout in IKEv1 CHILD_SAs | Martin Willi | 2012-03-20 | 1 | -1/+24 | |
| | | | | ||||||
| | | * | Use a dedicated PRF for HASH/SIG payloads using ECDSA specific hasher | Martin Willi | 2012-03-20 | 1 | -14/+37 | |
| | | | | ||||||
| | | * | Select public key auth method by checking what key we have | Martin Willi | 2012-03-20 | 2 | -4/+99 | |
| | | | | ||||||
| | | * | Support ECDSA signatures in IKEv1 pubkey authenticator | Martin Willi | 2012-03-20 | 3 | -18/+32 | |
| | | | | ||||||
| | | * | Exchange certificates when using IKEv1 ECDSA authentication | Martin Willi | 2012-03-20 | 2 | -0/+6 | |
| | | | | ||||||
| | | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -4/+1 | |
| | | | | ||||||
| | | * | Support encoding of IKEv1 ECDSA proposals | Martin Willi | 2012-03-20 | 1 | -6/+16 | |
| | | | | ||||||
| | | * | Added support for authby/xauth_server legacy options | Martin Willi | 2012-03-20 | 1 | -42/+1 | |
| | | | | ||||||
| | | * | Renamed CONFIGURATION_ATTRIBUTE_LENGTH to streamline it with other ATTRIBUTE ↵ | Martin Willi | 2012-03-20 | 5 | -10/+10 | |
| | | | | | | | | | | | | | rules | |||||
| | | * | Use ATTRIBUTE_VALUE rule in configuration attribute to parse it with correct ↵ | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | | | | | | | | | | length | |||||
| | | * | Don't re-resolve addresses during initiate if they have already been set | Martin Willi | 2012-03-20 | 1 | -1/+5 | |
| | | | | ||||||
| | | * | Adopt children after syncing a rekeyed IKEv1 SA | Martin Willi | 2012-03-20 | 3 | -2/+10 | |
| | | | | ||||||
| | | * | Synchronize IKEv1 DPD sequence numbers | Martin Willi | 2012-03-20 | 1 | -0/+30 | |
| | | | | ||||||
| | | * | Setting message ID on task manager sets DPD sequence numbers in IKEv1 | Martin Willi | 2012-03-20 | 2 | -2/+12 | |
| | | | | ||||||
| | | * | Update state before triggering DPD, as we cancel it if PASSIVE | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |