aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/Makefile.am
Commit message (Collapse)AuthorAgeFilesLines
...
* windows: Add utils_init/deinit functions to initialize Winsock2Martin Willi2014-06-041-0/+2
|
* backtrace: Add DbgHelp based Windows support for creating/printing backtracesMartin Willi2014-06-041-0/+5
|
* windows: Link libstrongswan against ws2_32.dllMartin Willi2014-06-041-0/+4
|
* windows: Add a common Windows header for platform specific wrappersMartin Willi2014-06-031-1/+1
| | | | | Include some more basic system headers in utils.h, so we can use that common header on the different platforms.
* settings: Add flex/bison based parser for strongswan.confTobias Brunner2014-05-151-1/+5
| | | | | | | | | | | This parser features several improvements over the existing one. For instance, quoted strings (with escape sequences), unlimited includes, relaxed newline handling (e.g. at the end of files or before/after { and }), and the difference between empty and unset values (key = vs. key = ""). It also complains a lot more about invalid syntax. The current one accepts pretty odd stuff (like settings or sections without name) without any errors or warnings.
* settings: Extract section and key/value pair types and helper functionsTobias Brunner2014-05-151-3/+7
| | | | This allows us to use them in the upcoming parser.
* parser-helper: Add utility class for flex/bison based parsersTobias Brunner2014-05-151-2/+3
|
* settings: Move to a separate folderTobias Brunner2014-05-151-6/+5
|
* acert: Implement a plugin finding, validating and evaluating attribute certsMartin Willi2014-03-311-0/+7
| | | | | | This validator checks for any attribute certificate it can find for validated end entity certificates and tries to extract group membership information used for connection authorization rules.
* x509: Integrate IETF attribute handling, and obsolete ietf_attributes_tMartin Willi2014-03-311-2/+1
| | | | | The ietf_attributes_t class is used for attribute certificates only these days, and integrating them to x509_ac_t simplifies things significantly.
* utils: Move thread-safe strerror replacement to a separate fileTobias Brunner2014-02-241-2/+4
| | | | | For some utils _GNU_SOURCE might be needed but that conflicts with the signature of strerror_r(3).
* unit-tests: Add facility to register testable functionsTobias Brunner2013-12-041-2/+2
| | | | | These can be defined in plugins, or other parts of the tested libraries. They can even be static.
* Prototype implementation of IKE key exchange via NTRU encryptionAndreas Steffen2013-11-271-0/+7
|
* unit-tests: Enable libstrongswan tests even if --enable-unit-tests not setMartin Willi2013-11-061-3/+1
| | | | | | As we don't depend on the check framework anymore, we can enable the unit tests by default. These are built/executed with "make check" only, so it makes no sense to disable them.
* iv-gen: Add missing header files to Makefile.amTobias Brunner2013-10-111-0/+1
|
* iv_gen: Add IV generator that allocates IVs sequentiallyTobias Brunner2013-10-111-1/+1
|
* iv_gen: Add IV generator that allocates IVs randomlyTobias Brunner2013-10-111-0/+1
| | | | Uses RNG_WEAK as the code currently does elsewhere to allocate IVs.
* crypto: Add generic interface for IV generatorsTobias Brunner2013-10-111-1/+1
|
* printf-hook-builtin: Add a new "builtin" backend using its own printf() routinesMartin Willi2013-10-111-1/+8
| | | | | | Overloads printf C library functions by a self-contained implementation, based on klibc. Does not yet feature all the required default formatters, including those for floating point values.
* printf-hook: Move glibc/vstr printf hook backends to separate filesMartin Willi2013-10-111-2/+9
|
* Build all shared libraries with -no-undefined and link them properlyTobias Brunner2013-09-121-0/+3
| | | | | | | | | | The flag is required to convince libtool on Cygwin to build DLLs. But on Windows these shared libraries can not have undefined symbols, so we have to link them explicitly to the libraries they reference. For plugins this is currently not done, so only the monolithic build is supported. The plugin loader wouldn't be able to load DLLs anyway, as it tries to load files that don't exist on Cygwin.
* stream: add a manager to dynamically register streams and servicesMartin Willi2013-07-181-2/+2
|
* stream: add a stream service class abstracting services using BSD socketsMartin Willi2013-07-181-0/+2
|
* stream: add a stream class abstracting BSD socketsMartin Willi2013-07-181-2/+2
| | | | | Currently only synchronous operation is supported, but this will be extended with asynchronous methods using the new watcher.
* watcher: add a centralized an generic facility to monitor file descriptorsMartin Willi2013-07-181-2/+2
|
* automake: replace INCLUDES by AM_CPPFLAGSMartin Willi2013-07-181-9/+11
| | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only.
* keychain: add a stub for a credential plugin using OS X Keychain ServicesMartin Willi2013-07-181-0/+7
|
* array: introduce an array collection storing elements very efficientlyMartin Willi2013-07-171-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Currently we use the very versatile linked-list collection to store elements with variable count. This is fine, but very inefficient: Due to the many methods in the linked list, on 64-bit platforms an empty list alone is more than 200 bytes. As we currently have about 50 lists per IKE_SA/CHILD_SA pair, this takes up to 10KB just for managing the empty lists. This is about the half of memory used by an IKE_SA/CHILD_SA pair, and obviously way too much. The new array type is not an object, but a collection of functions on an abstract type. The following lists are per IKE_SA and should be considered for a replacement with more efficient arrays (this uses load-testers on-demand created dynamic configurations, other scenarios have different lists): 14 -> ike_sa_create() @ src/libcharon/sa/ike_sa.c:2198 10 -> auth_cfg_create() @ src/libstrongswan/credentials/auth_cfg.c:1088 6 -> task_manager_v2_create() @ src/libcharon/sa/ikev2/task_manager_v2.c:1505 6 -> proposal_create() @ src/libcharon/config/proposal.c:592 5 -> peer_cfg_create() @ src/libcharon/config/peer_cfg.c:657 4 -> child_sa_create() @ src/libcharon/sa/child_sa.c:1090 2 -> child_cfg_create() @ src/libcharon/config/child_cfg.c:536 1 -> ike_cfg_create() @ src/libcharon/config/ike_cfg.c:330 1 -> put_connected_peers() @ src/libcharon/sa/ike_sa_manager.c:854
* Enable coverage report for libstrongswanTobias Brunner2013-06-111-1/+2
|
* Add test runner for unit tests in libstrongswanTobias Brunner2013-06-111-0/+7
|
* Add pkcs12 plugin which adds support for decoding PKCS#12 containersTobias Brunner2013-05-081-0/+7
|
* Move PKCS#12 key derivation to a separate fileTobias Brunner2013-05-081-1/+2
|
* Add implementation of the RC2 block cipher (RFC 2268)Tobias Brunner2013-05-081-0/+7
|
* Extract PKCS#5 handling from pkcs8 plugin to separate helper classTobias Brunner2013-05-081-2/+2
|
* Add sshkey plugin stub that will parse RFC 4253 public keysTobias Brunner2013-05-071-0/+7
|
* backtrace: add an alternative stack unwinding implementation using libunwindMartin Willi2013-05-061-1/+1
|
* Use the GEN silent rule when generating oid database with perlMartin Willi2013-05-061-0/+2
|
* Use the GEN silent rule when generating gperf filesMartin Willi2013-05-061-0/+1
|
* Implemented rr_set_t interfaceReto Guadagnini2013-02-191-1/+1
|
* Added unbound plugin implementing the resolver interface using libunboundReto Guadagnini2013-02-191-0/+7
|
* Added manager for DNS resolversReto Guadagnini2013-02-191-1/+2
|
* Added interface for DNS resolversReto Guadagnini2013-02-191-0/+2
|
* Add a rdrand plugin stub detecting availability of RDRAND instructionsMartin Willi2013-01-111-0/+7
|
* Move PKCS#9 attribute lists to pkcs7 plugin, as we currently use it there onlyMartin Willi2012-12-191-4/+2
|
* Remove unused monolithic PKCS#7 codeMartin Willi2012-12-191-2/+2
|
* Add a plugin stub for PKCS#7 containersMartin Willi2012-12-191-0/+7
|
* Add a generic interface for crypto containers and a more specific PKCS#7 ↵Martin Willi2012-12-191-0/+2
| | | | interface
* Moved utils.[ch] to utils folderTobias Brunner2012-10-241-2/+2
|
* Moved settings_t to utils folderTobias Brunner2012-10-241-4/+4
|
* Moved debug.[ch] to utils folderTobias Brunner2012-10-241-6/+7
|