| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Add a return value to signer_t.allocate_signature() | Martin Willi | 2012-07-16 | 1 | -1/+2 | |
| | | ||||||
| * | Add a return value to aead_t.set_key() | Martin Willi | 2012-07-16 | 2 | -2/+4 | |
| | | ||||||
| * | Add a return value to aead_t.encrypt() | Martin Willi | 2012-07-16 | 2 | -2/+4 | |
| | | ||||||
| * | Added PLUGIN_NOOP to separate PLUGIN_PROVIDE from previous CALLBACK/REGISTER ↵ | Tobias Brunner | 2012-07-12 | 2 | -9/+19 | |
| | | | | | entries | |||||
| * | openssl: Ensure the thread ID is never zero | Tobias Brunner | 2012-07-03 | 1 | -1/+3 | |
| | | | | | | | This might otherwise cause problems because OpenSSL tries to lock mutexes recursively if it assumes the lock is held by a different thread e.g. during FIPS initialization. | |||||
| * | Removed superfluous remove_hasher() call in md5 plugin | Tobias Brunner | 2012-06-29 | 1 | -2/+0 | |
| | | ||||||
| * | gcrypt: Register SHA1 first as HASH_PREFERRED depends on it | Tobias Brunner | 2012-06-27 | 1 | -1/+1 | |
| | | ||||||
| * | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 1 | -17/+3 | |
| | | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
| * | Added a method to plugin_loader_t to add 'static' plugin features | Tobias Brunner | 2012-06-25 | 2 | -0/+115 | |
| | | | | | | | | | This allows daemons and other components to register plugin features like those provided by plugins (following the same lifecycle). The added features are internally handled like they were added by a plugin. | |||||
| * | Make sure that all features of critical plugins are loaded | Tobias Brunner | 2012-06-25 | 1 | -5/+64 | |
| | | ||||||
| * | Use mac_t and PRF and signer wrappers in cmac plugin | Tobias Brunner | 2012-06-25 | 8 | -443/+82 | |
| | | ||||||
| * | Use mac_t and PRF and signer wrappers in xcbc plugin | Tobias Brunner | 2012-06-25 | 8 | -452/+91 | |
| | | ||||||
| * | Make the hmac_t interface a generic interface for message authentication codes | Tobias Brunner | 2012-06-25 | 5 | -59/+59 | |
| | | ||||||
| * | Simplified creation of PRFs and signers in openssl and hmac plugins | Tobias Brunner | 2012-06-25 | 2 | -136/+10 | |
| | | ||||||
| * | Use simple wrappers for HMAC based PRF and signer in openssl plugin | Tobias Brunner | 2012-06-25 | 8 | -562/+132 | |
| | | ||||||
| * | Use simple wrappers for HMAC based PRF and signer in hmac plugin | Tobias Brunner | 2012-06-25 | 8 | -524/+127 | |
| | | ||||||
| * | Refactored OpenSSL based HMAC implementation | Tobias Brunner | 2012-06-25 | 5 | -173/+382 | |
| | | ||||||
| * | Adding OpenSSL HMAC signer functions to openssl plugin | Aleksandr Grinberg | 2012-06-25 | 4 | -1/+322 | |
| | | ||||||
| * | Adding OpenSSL HMAC pseudo random functions to openssl plugin | Aleksandr Grinberg | 2012-06-25 | 4 | -1/+245 | |
| | | ||||||
| * | Adding OpenSSL random number functions to openssl plugin | Aleksandr Grinberg | 2012-06-25 | 4 | -1/+159 | |
| | | ||||||
| * | Add signature schemes to auth_cfg during trustchain validation | Martin Willi | 2012-06-12 | 1 | -2/+2 | |
| | | ||||||
| * | certificate_t->issued_by takes an argument to receive signature scheme | Martin Willi | 2012-06-12 | 10 | -15/+57 | |
| | | ||||||
| * | Fixed return values of several functions (e.g. return FALSE for pointer types). | Tobias Brunner | 2012-05-31 | 5 | -7/+7 | |
| | | ||||||
| * | Fix boolean return value if an empty RSA signature is detected in gmp plugin | Martin Willi | 2012-05-31 | 1 | -1/+1 | |
| | | | | | Fixes CVE-2012-2388. | |||||
| * | Fixed check for loaded plugins with feature types that are not compared exactly. | Tobias Brunner | 2012-05-24 | 1 | -25/+13 | |
| | | | | | | Previously e.g. RNGs with weaker strength would have overwritten stronger ones. | |||||
| * | Use a hashtable to check for already loaded plugin features. | Tobias Brunner | 2012-05-23 | 1 | -20/+37 | |
| | | ||||||
| * | Hash function for plugin features added. | Tobias Brunner | 2012-05-23 | 2 | -0/+68 | |
| | | ||||||
| * | pkcs8: Initialize salt and IV properly. | Tobias Brunner | 2012-05-18 | 1 | -1/+1 | |
| | | ||||||
| * | Add nonce plugin implementation | Adrian-Ken Rueegsegger | 2012-05-18 | 5 | -0/+264 | |
| | | | | | | | | This nonce generator uses an RNG to generate nonces. The RNG quality is currently set to RNG_WEAK which is the same value used in IKE init. The plugin is enabled and thus built by default. | |||||
| * | Add nonce generator interface | Adrian-Ken Rueegsegger | 2012-05-18 | 2 | -0/+20 | |
| | | | | | | | | Nonce generators (nonce_gen_t) can be used to get or allocate nonces. Users can request nonce generators from the crypto factory while nonce plugins register/remove themselves to/from the crypto factory. | |||||
| * | fixed feature dependencies for CERT_TRUSTED_PUBKEY | Andreas Steffen | 2012-05-05 | 1 | -0/+5 | |
| | | ||||||
| * | If we load new features from a plugin, restart loading from first plugin | Martin Willi | 2012-05-03 | 1 | -0/+4 | |
| | | ||||||
| * | Building CERT_ANY through PEM requires either a CERT_X509 or a CERT_PGP builder | Martin Willi | 2012-05-03 | 1 | -1/+2 | |
| | | ||||||
| * | Certificate decoding soft-depends on public key decoding of specific types | Martin Willi | 2012-05-02 | 2 | -0/+6 | |
| | | ||||||
| * | PEM loading plugin features depend on the same feature, they are helpers only | Martin Willi | 2012-05-02 | 1 | -0/+17 | |
| | | ||||||
| * | Don't depend on a feature that has a dependency to the same feauture during ↵ | Martin Willi | 2012-05-02 | 1 | -1/+2 | |
| | | | | | unload | |||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 7 | -55/+137 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 7 | -55/+137 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Use a single set of FDs for all random plugin RNG instances | Martin Willi | 2012-03-20 | 3 | -36/+89 | |
| | | | | ||||||
| | | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added missing XAuth plugin feature enum names | Martin Willi | 2012-03-20 | 2 | -4/+6 | |
| | | | | ||||||
| | | * | Fixed fix for XAuth plugin feature matching | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Fix XAuth plugin feature matching | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added support for iKEIntermediate X.509 extended key usage flag. | Tobias Brunner | 2012-03-20 | 1 | -6/+14 | |
| | | | | | | | | | | | | | Mac OS X requires server certificates to have this flag set. | |||||
| | | * | Some whitespace fixes. | Tobias Brunner | 2012-03-20 | 1 | -22/+22 | |
| | | | | ||||||
| | | * | Be less verbose if plugin dependecy not satisfied | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added auth_cfg option to select XAUTH backend to use | Martin Willi | 2012-03-20 | 1 | -2/+2 | |
| | | | | ||||||
| | | * | Use a string to identify xauth backends, no need for integer types | Martin Willi | 2012-03-20 | 1 | -4/+3 | |
| | | | | ||||||
| | | * | IKEv1 XAuth: Added plugin support for XAuth, which allows us to have plugins ↵ | Clavister OpenSource | 2012-03-20 | 2 | -0/+20 | |
| | | | | | | | | | | | | | to talk to servers with different quirks for XAuth authentication. | |||||
| * | | | added missing whitespace | Andreas Steffen | 2012-04-30 | 2 | -1/+2 | |
| | | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |