Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | windows: Add utils_init/deinit functions to initialize Winsock2 | Martin Willi | 2014-06-04 | 1 | -0/+2 | |
| | ||||||
* | backtrace: Add DbgHelp based Windows support for creating/printing backtraces | Martin Willi | 2014-06-04 | 1 | -0/+5 | |
| | ||||||
* | windows: Link libstrongswan against ws2_32.dll | Martin Willi | 2014-06-04 | 1 | -0/+4 | |
| | ||||||
* | windows: Add a common Windows header for platform specific wrappers | Martin Willi | 2014-06-03 | 1 | -1/+1 | |
| | | | | | Include some more basic system headers in utils.h, so we can use that common header on the different platforms. | |||||
* | settings: Add flex/bison based parser for strongswan.conf | Tobias Brunner | 2014-05-15 | 1 | -1/+5 | |
| | | | | | | | | | | | This parser features several improvements over the existing one. For instance, quoted strings (with escape sequences), unlimited includes, relaxed newline handling (e.g. at the end of files or before/after { and }), and the difference between empty and unset values (key = vs. key = ""). It also complains a lot more about invalid syntax. The current one accepts pretty odd stuff (like settings or sections without name) without any errors or warnings. | |||||
* | settings: Extract section and key/value pair types and helper functions | Tobias Brunner | 2014-05-15 | 1 | -3/+7 | |
| | | | | This allows us to use them in the upcoming parser. | |||||
* | parser-helper: Add utility class for flex/bison based parsers | Tobias Brunner | 2014-05-15 | 1 | -2/+3 | |
| | ||||||
* | settings: Move to a separate folder | Tobias Brunner | 2014-05-15 | 1 | -6/+5 | |
| | ||||||
* | acert: Implement a plugin finding, validating and evaluating attribute certs | Martin Willi | 2014-03-31 | 1 | -0/+7 | |
| | | | | | | This validator checks for any attribute certificate it can find for validated end entity certificates and tries to extract group membership information used for connection authorization rules. | |||||
* | x509: Integrate IETF attribute handling, and obsolete ietf_attributes_t | Martin Willi | 2014-03-31 | 1 | -2/+1 | |
| | | | | | The ietf_attributes_t class is used for attribute certificates only these days, and integrating them to x509_ac_t simplifies things significantly. | |||||
* | utils: Move thread-safe strerror replacement to a separate file | Tobias Brunner | 2014-02-24 | 1 | -2/+4 | |
| | | | | | For some utils _GNU_SOURCE might be needed but that conflicts with the signature of strerror_r(3). | |||||
* | unit-tests: Add facility to register testable functions | Tobias Brunner | 2013-12-04 | 1 | -2/+2 | |
| | | | | | These can be defined in plugins, or other parts of the tested libraries. They can even be static. | |||||
* | Prototype implementation of IKE key exchange via NTRU encryption | Andreas Steffen | 2013-11-27 | 1 | -0/+7 | |
| | ||||||
* | unit-tests: Enable libstrongswan tests even if --enable-unit-tests not set | Martin Willi | 2013-11-06 | 1 | -3/+1 | |
| | | | | | | As we don't depend on the check framework anymore, we can enable the unit tests by default. These are built/executed with "make check" only, so it makes no sense to disable them. | |||||
* | iv-gen: Add missing header files to Makefile.am | Tobias Brunner | 2013-10-11 | 1 | -0/+1 | |
| | ||||||
* | iv_gen: Add IV generator that allocates IVs sequentially | Tobias Brunner | 2013-10-11 | 1 | -1/+1 | |
| | ||||||
* | iv_gen: Add IV generator that allocates IVs randomly | Tobias Brunner | 2013-10-11 | 1 | -0/+1 | |
| | | | | Uses RNG_WEAK as the code currently does elsewhere to allocate IVs. | |||||
* | crypto: Add generic interface for IV generators | Tobias Brunner | 2013-10-11 | 1 | -1/+1 | |
| | ||||||
* | printf-hook-builtin: Add a new "builtin" backend using its own printf() routines | Martin Willi | 2013-10-11 | 1 | -1/+8 | |
| | | | | | | Overloads printf C library functions by a self-contained implementation, based on klibc. Does not yet feature all the required default formatters, including those for floating point values. | |||||
* | printf-hook: Move glibc/vstr printf hook backends to separate files | Martin Willi | 2013-10-11 | 1 | -2/+9 | |
| | ||||||
* | Build all shared libraries with -no-undefined and link them properly | Tobias Brunner | 2013-09-12 | 1 | -0/+3 | |
| | | | | | | | | | | The flag is required to convince libtool on Cygwin to build DLLs. But on Windows these shared libraries can not have undefined symbols, so we have to link them explicitly to the libraries they reference. For plugins this is currently not done, so only the monolithic build is supported. The plugin loader wouldn't be able to load DLLs anyway, as it tries to load files that don't exist on Cygwin. | |||||
* | stream: add a manager to dynamically register streams and services | Martin Willi | 2013-07-18 | 1 | -2/+2 | |
| | ||||||
* | stream: add a stream service class abstracting services using BSD sockets | Martin Willi | 2013-07-18 | 1 | -0/+2 | |
| | ||||||
* | stream: add a stream class abstracting BSD sockets | Martin Willi | 2013-07-18 | 1 | -2/+2 | |
| | | | | | Currently only synchronous operation is supported, but this will be extended with asynchronous methods using the new watcher. | |||||
* | watcher: add a centralized an generic facility to monitor file descriptors | Martin Willi | 2013-07-18 | 1 | -2/+2 | |
| | ||||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -9/+11 | |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | |||||
* | keychain: add a stub for a credential plugin using OS X Keychain Services | Martin Willi | 2013-07-18 | 1 | -0/+7 | |
| | ||||||
* | array: introduce an array collection storing elements very efficiently | Martin Willi | 2013-07-17 | 1 | -1/+2 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | Currently we use the very versatile linked-list collection to store elements with variable count. This is fine, but very inefficient: Due to the many methods in the linked list, on 64-bit platforms an empty list alone is more than 200 bytes. As we currently have about 50 lists per IKE_SA/CHILD_SA pair, this takes up to 10KB just for managing the empty lists. This is about the half of memory used by an IKE_SA/CHILD_SA pair, and obviously way too much. The new array type is not an object, but a collection of functions on an abstract type. The following lists are per IKE_SA and should be considered for a replacement with more efficient arrays (this uses load-testers on-demand created dynamic configurations, other scenarios have different lists): 14 -> ike_sa_create() @ src/libcharon/sa/ike_sa.c:2198 10 -> auth_cfg_create() @ src/libstrongswan/credentials/auth_cfg.c:1088 6 -> task_manager_v2_create() @ src/libcharon/sa/ikev2/task_manager_v2.c:1505 6 -> proposal_create() @ src/libcharon/config/proposal.c:592 5 -> peer_cfg_create() @ src/libcharon/config/peer_cfg.c:657 4 -> child_sa_create() @ src/libcharon/sa/child_sa.c:1090 2 -> child_cfg_create() @ src/libcharon/config/child_cfg.c:536 1 -> ike_cfg_create() @ src/libcharon/config/ike_cfg.c:330 1 -> put_connected_peers() @ src/libcharon/sa/ike_sa_manager.c:854 | |||||
* | Enable coverage report for libstrongswan | Tobias Brunner | 2013-06-11 | 1 | -1/+2 | |
| | ||||||
* | Add test runner for unit tests in libstrongswan | Tobias Brunner | 2013-06-11 | 1 | -0/+7 | |
| | ||||||
* | Add pkcs12 plugin which adds support for decoding PKCS#12 containers | Tobias Brunner | 2013-05-08 | 1 | -0/+7 | |
| | ||||||
* | Move PKCS#12 key derivation to a separate file | Tobias Brunner | 2013-05-08 | 1 | -1/+2 | |
| | ||||||
* | Add implementation of the RC2 block cipher (RFC 2268) | Tobias Brunner | 2013-05-08 | 1 | -0/+7 | |
| | ||||||
* | Extract PKCS#5 handling from pkcs8 plugin to separate helper class | Tobias Brunner | 2013-05-08 | 1 | -2/+2 | |
| | ||||||
* | Add sshkey plugin stub that will parse RFC 4253 public keys | Tobias Brunner | 2013-05-07 | 1 | -0/+7 | |
| | ||||||
* | backtrace: add an alternative stack unwinding implementation using libunwind | Martin Willi | 2013-05-06 | 1 | -1/+1 | |
| | ||||||
* | Use the GEN silent rule when generating oid database with perl | Martin Willi | 2013-05-06 | 1 | -0/+2 | |
| | ||||||
* | Use the GEN silent rule when generating gperf files | Martin Willi | 2013-05-06 | 1 | -0/+1 | |
| | ||||||
* | Implemented rr_set_t interface | Reto Guadagnini | 2013-02-19 | 1 | -1/+1 | |
| | ||||||
* | Added unbound plugin implementing the resolver interface using libunbound | Reto Guadagnini | 2013-02-19 | 1 | -0/+7 | |
| | ||||||
* | Added manager for DNS resolvers | Reto Guadagnini | 2013-02-19 | 1 | -1/+2 | |
| | ||||||
* | Added interface for DNS resolvers | Reto Guadagnini | 2013-02-19 | 1 | -0/+2 | |
| | ||||||
* | Add a rdrand plugin stub detecting availability of RDRAND instructions | Martin Willi | 2013-01-11 | 1 | -0/+7 | |
| | ||||||
* | Move PKCS#9 attribute lists to pkcs7 plugin, as we currently use it there only | Martin Willi | 2012-12-19 | 1 | -4/+2 | |
| | ||||||
* | Remove unused monolithic PKCS#7 code | Martin Willi | 2012-12-19 | 1 | -2/+2 | |
| | ||||||
* | Add a plugin stub for PKCS#7 containers | Martin Willi | 2012-12-19 | 1 | -0/+7 | |
| | ||||||
* | Add a generic interface for crypto containers and a more specific PKCS#7 ↵ | Martin Willi | 2012-12-19 | 1 | -0/+2 | |
| | | | | interface | |||||
* | Moved utils.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 1 | -2/+2 | |
| | ||||||
* | Moved settings_t to utils folder | Tobias Brunner | 2012-10-24 | 1 | -4/+4 | |
| | ||||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 1 | -6/+7 | |
| |