| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Log to a malloc()ed buffer if the on-stack buffer is not large enough | Martin Willi | 2012-07-13 | 1 | -3/+23 | |
| | | ||||||
| * | Pass opaque data to printf hooks and print_in_hook() | Martin Willi | 2012-07-13 | 2 | -15/+15 | |
| | | ||||||
| * | Simplify NAT-D payload creation if UDP encapsulation is forced | Tobias Brunner | 2012-07-13 | 1 | -2/+2 | |
| | | | | | | We don't need any address lookups in that case as the content of the payload is generated randomly anyway. | |||||
| * | updated Copyright info | Andreas Steffen | 2012-07-13 | 6 | -6/+6 | |
| | | ||||||
| * | restrict PA-TNC messages to maximum size | Andreas Steffen | 2012-07-12 | 4 | -12/+43 | |
| | | ||||||
| * | Avoid that any % characters (e.g. in %any) are evaluated when logging via stroke | Tobias Brunner | 2012-07-12 | 1 | -1/+1 | |
| | | ||||||
| * | removed unused variables | Andreas Steffen | 2012-07-11 | 1 | -2/+0 | |
| | | ||||||
| * | fixed logging of unsupported TNCCS version | Andreas Steffen | 2012-07-11 | 1 | -1/+1 | |
| | | ||||||
| * | PB-TNC Client sends empty CLOSE batch only in DECIDED state | Andreas Steffen | 2012-07-11 | 1 | -10/+23 | |
| | | ||||||
| * | have_recommendation() accepts NULL arguments | Andreas Steffen | 2012-07-11 | 1 | -4/+12 | |
| | | ||||||
| * | send empty SDATA batch if no recommendation is available yet, but in order ↵ | Andreas Steffen | 2012-07-11 | 4 | -3/+58 | |
| | | | | | to avoid loops only if no empty CDATA batch was received | |||||
| * | moved batch size calculation into pb_tnc_batch_t | Andreas Steffen | 2012-07-11 | 4 | -31/+50 | |
| | | ||||||
| * | make maximum PB-TNC batch size configurable | Andreas Steffen | 2012-07-11 | 1 | -2/+11 | |
| | | ||||||
| * | limit the size of a PB-TNC batch to the maximum EAP-TNC packet size | Andreas Steffen | 2012-07-11 | 10 | -88/+134 | |
| | | ||||||
| * | eliminate message length field in EAP-TNC | Andreas Steffen | 2012-07-11 | 2 | -2/+2 | |
| | | ||||||
| * | due to single fragment, total length does not have to be included | Andreas Steffen | 2012-07-11 | 1 | -3/+1 | |
| | | ||||||
| * | EAP-TNC does not support fragmentation | Andreas Steffen | 2012-07-11 | 1 | -12/+14 | |
| | | ||||||
| * | Send cert request based on peers configured authentication class | Martin Willi | 2012-07-10 | 1 | -3/+30 | |
| | | ||||||
| * | Don't send CERTREQs when initiating aggressive mode PSK | Martin Willi | 2012-07-09 | 1 | -0/+4 | |
| | | ||||||
| * | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 10 | -123/+19 | |
| | | ||||||
| * | Use spin locks to update IKE_SAs in controller_t | Tobias Brunner | 2012-07-04 | 1 | -4/+38 | |
| | | | | | | | This ensures the listeners don't miss any events after the SAs have been checked out in the asynchronously executed jobs. This is a matter of memory visibility and not primary a matter of exclusive access. | |||||
| * | Fixed job handling in controller_t | Tobias Brunner | 2012-07-04 | 1 | -110/+128 | |
| | | | | | Also IKE_SAs are now checked out in the jobs and not before. | |||||
| * | As a responder, don't start a TRANSACTION request if we expect one from the ↵ | Martin Willi | 2012-06-29 | 2 | -2/+4 | |
| | | | | | initiator | |||||
| * | IMCs and IMVs might depend on X.509 certificates or trusted public keys | Andreas Steffen | 2012-06-28 | 2 | -0/+4 | |
| | | ||||||
| * | Show some uname() info in "ipsec statusall" | Martin Willi | 2012-06-28 | 1 | -3/+10 | |
| | | ||||||
| * | libcharon also requires kernel interfaces and a socket implementation | Tobias Brunner | 2012-06-27 | 1 | -0/+3 | |
| | | ||||||
| * | Defer quick mode initiation if we expect a mode config request | Martin Willi | 2012-06-27 | 1 | -1/+20 | |
| | | ||||||
| * | Queue a mode config task as responder if we need a virtual IP | Martin Willi | 2012-06-27 | 2 | -4/+16 | |
| | | ||||||
| * | Add basic support for XAuth responder authentication | Martin Willi | 2012-06-27 | 2 | -8/+10 | |
| | | ||||||
| * | Map XAuth responder authentication methods between IKEv1 and IKEv2 | Martin Willi | 2012-06-27 | 1 | -1/+13 | |
| | | ||||||
| * | Show remote EAP/XAuth identity in "statusall" on a separate line | Martin Willi | 2012-06-27 | 1 | -1/+12 | |
| | | ||||||
| * | Use static plugin features in libcharon to define essential dependencies | Tobias Brunner | 2012-06-27 | 1 | -1/+10 | |
| | | ||||||
| * | Ignore a received %any virtual IP for installation | Martin Willi | 2012-06-26 | 1 | -1/+2 | |
| | | ||||||
| * | Also build charon's IKEv1 implementation on Android | Tobias Brunner | 2012-06-26 | 1 | -0/+23 | |
| | | ||||||
| * | Missing source file added to libcharon's Android.mk | Tobias Brunner | 2012-06-26 | 1 | -0/+1 | |
| | | ||||||
| * | Make rescheduling a job more predictable | Tobias Brunner | 2012-06-25 | 2 | -12/+5 | |
| | | | | | | | | | | | | | | This avoids race conditions between calls to cancel() and jobs that like to be rescheduled. If jobs were able to reschedule themselves it would theoretically be possible that two worker threads have the same job assigned (the one currently executing the job and the one executing the same but rescheduled job if it already is time to execute it), this means that cancel() could be called twice for that job. Creating a new job based on the current one and reschedule that is also OK, but rescheduling itself is more efficient for jobs that need to be executed often. | |||||
| * | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 18 | -182/+97 | |
| | | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
| * | Give processor_t more control over the lifecycle of a job | Tobias Brunner | 2012-06-25 | 20 | -64/+60 | |
| | | | | | | | | | | | | Jobs are now destroyed by the processor, but they are allowed to reschedule themselves. That is, parts of the reschedule functionality already provided by callback_job_t is moved to the processor. Not yet fully supported is JOB_REQUEUE_DIRECT and canceling jobs. Note: job_t.destroy() is now called not only for queued jobs but also after execution or cancellation of jobs. job_t.status can be used to decide what to do in said method. | |||||
| * | support Cisco Unity VID | Andreas Steffen | 2012-06-25 | 2 | -3/+11 | |
| | | ||||||
| * | Enforce uniqueids=keep based on XAuth identity | Martin Willi | 2012-06-25 | 1 | -0/+6 | |
| | | ||||||
| * | Don't send XAUTH_OK if a hook prevents SA to establish | Martin Willi | 2012-06-25 | 1 | -4/+14 | |
| | | ||||||
| * | Enforce uniqueids=keep only for non-XAuth Main/Agressive Modes | Martin Willi | 2012-06-25 | 2 | -28/+28 | |
| | | ||||||
| * | Show EAP/XAuth identity in "ipsec status", if available | Martin Willi | 2012-06-25 | 1 | -1/+1 | |
| | | ||||||
| * | Use XAuth/EAP remote identity for uniqueness check | Martin Willi | 2012-06-25 | 3 | -4/+6 | |
| | | ||||||
| * | Add missing XAuth name variable when complaining about missing XAuth backend | Martin Willi | 2012-06-25 | 1 | -1/+1 | |
| | | ||||||
| * | Fix SIGSEGV if kernel install fails during Quick Mode as responder. | Tobias Brunner | 2012-06-22 | 1 | -4/+8 | |
| | | ||||||
| * | Fixed compile error because of charon->name in certexpire plugin. | Tobias Brunner | 2012-06-21 | 1 | -0/+1 | |
| | | ||||||
| * | Select requested virtual IP family based on remote TS, if no local TS available | Martin Willi | 2012-06-20 | 1 | -1/+12 | |
| | | ||||||
| * | Adopt children as XAuth initiator (which is IKE responder) | Martin Willi | 2012-06-14 | 1 | -2/+2 | |
| | | ||||||
| * | Show what kind of *Swan we run in "ipsec status" | Martin Willi | 2012-06-14 | 1 | -3/+16 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |