Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | ported some hard-to-merge cherries back to trunk :-/ | Martin Willi | 2008-11-12 | 3 | -22/+42 |
| | | | | | shame, svn, shame: this was ways to complicated we should consider a switch to git... | ||||
* | fixed compiler warnings issued by: | Martin Willi | 2008-11-11 | 3 | -10/+35 |
| | | | | | | gcc 4.3 curl.h gcc type-checking glibc with enabled FORTIFY_SOURCE checking | ||||
* | merging kernel_klips plugin back into trunk | Tobias Brunner | 2008-11-11 | 1 | -1/+1 |
| | |||||
* | whitelisting localtime_r | Martin Willi | 2008-11-10 | 1 | -0/+1 |
| | |||||
* | fixed leak in host_create_from_string("%any") | Martin Willi | 2008-11-10 | 1 | -3/+4 |
| | |||||
* | settings section enumeration | Martin Willi | 2008-11-07 | 2 | -34/+136 |
| | | | | printf style key lookup | ||||
* | use of host_create_any() for %any address | Andreas Steffen | 2008-11-07 | 1 | -4/+8 |
| | |||||
* | fixed leak | Martin Willi | 2008-11-06 | 1 | -3/+7 |
| | | | | fixed build if !HAVE_BACKTRACE | ||||
* | use read-write locks in crypto factory for parallelization | Martin Willi | 2008-11-05 | 1 | -42/+42 |
| | |||||
* | wrapped all pthread_rwlock_t in profilable rwlock_t | Martin Willi | 2008-11-05 | 3 | -18/+34 |
| | |||||
* | wrapped rwlock with profiling support | Martin Willi | 2008-11-05 | 2 | -63/+199 |
| | |||||
* | threshhold and ./configure option for lock profiler | Martin Willi | 2008-11-05 | 2 | -6/+15 |
| | |||||
* | separated backtrace functionality from leak_detective, used in | Martin Willi | 2008-11-05 | 6 | -151/+294 |
| | | | | | | leak_detective mutex profiling signal handler | ||||
* | proper cleanup of openssl locking code | Martin Willi | 2008-11-05 | 1 | -7/+13 |
| | |||||
* | fixed iterator regression introduced in [4577] | Martin Willi | 2008-11-05 | 1 | -0/+1 |
| | |||||
* | replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant | Martin Willi | 2008-11-05 | 1 | -13/+12 |
| | |||||
* | get rid of unused iterator hook functions | Martin Willi | 2008-11-05 | 2 | -127/+7 |
| | |||||
* | got rid of deprecated create_iterator_locked() | Martin Willi | 2008-11-05 | 6 | -41/+7 |
| | |||||
* | simple mutex profiler | Martin Willi | 2008-11-05 | 1 | -0/+70 |
| | |||||
* | support of %any address string | Andreas Steffen | 2008-11-05 | 1 | -47/+35 |
| | |||||
* | handle 0.0.0.0 string and af == AF_INET6 | Andreas Steffen | 2008-11-05 | 1 | -1/+1 |
| | |||||
* | OpenSSL requires a signature length of exactly RSA_size() | Martin Willi | 2008-11-04 | 1 | -5/+3 |
| | |||||
* | removed superfluous get_other_public_value in diffie_hellman_t interface | Martin Willi | 2008-11-04 | 4 | -76/+4 |
| | |||||
* | fixed bignum export if BN_num_bytes() != DH_size() | Martin Willi | 2008-11-04 | 2 | -45/+54 |
| | |||||
* | fixed memleak | Martin Willi | 2008-11-04 | 1 | -8/+11 |
| | |||||
* | added locking mechanism for multithreaded use of OpenSSL | Martin Willi | 2008-11-03 | 1 | -0/+117 |
| | |||||
* | removed accidently checked in debug code | Martin Willi | 2008-11-03 | 1 | -1/+0 |
| | |||||
* | reverted 4541, does not fix the problem | Martin Willi | 2008-11-03 | 1 | -0/+8 |
| | |||||
* | removed 0-byte truncation, fixes random Openssl RSA signature verification ↵ | Martin Willi | 2008-10-31 | 1 | -7/+0 |
| | | | | failures | ||||
* | fixed crash in openssl signature verification if sizeof(size_t) != ↵ | Martin Willi | 2008-10-31 | 1 | -1/+3 |
| | | | | sizeof(int) (64bit) | ||||
* | reverted changeset 4529: | Martin Willi | 2008-10-30 | 1 | -2/+1 |
| | | | | | Camellia is 22 in IKEv1, but not-yet defined in IKEv2 in IKEv2, 22 is reserved for AES-XTS | ||||
* | added Camellia CBC to list of encryption algorithms | Andreas Steffen | 2008-10-30 | 1 | -1/+2 |
| | |||||
* | prf handles zero-length allocations graceful | Martin Willi | 2008-10-29 | 1 | -3/+10 |
| | |||||
* | refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key | Andreas Steffen | 2008-10-28 | 3 | -27/+62 |
| | |||||
* | remove unused local DH_EXPONENT_ENTROPY definition | Andreas Steffen | 2008-10-27 | 1 | -2/+0 |
| | |||||
* | use 512 bits of entropy for secret DH exponents | Andreas Steffen | 2008-10-26 | 3 | -1/+9 |
| | |||||
* | fixed perl oid generation | Martin Willi | 2008-10-16 | 1 | -2/+2 |
| | |||||
* | condvar->wait() can handle recursive mutex | Martin Willi | 2008-10-16 | 1 | -20/+76 |
| | |||||
* | merging kernel_pfkey plugin back from kernel-interface branch | Tobias Brunner | 2008-10-14 | 3 | -9/+15 |
| | |||||
* | implemented ipsec listalgs as a stroke command | Andreas Steffen | 2008-10-08 | 1 | -1/+1 |
| | |||||
* | get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 ↵ | Andreas Steffen | 2008-10-08 | 1 | -1/+1 |
| | | | | hash consistent with the IKEv2 keyid philosophy | ||||
* | Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype | Andreas Steffen | 2008-10-08 | 2 | -4/+24 |
| | |||||
* | fixed builder_cancel macro to return NULL on failed build | Martin Willi | 2008-10-06 | 2 | -1/+15 |
| | |||||
* | using signed return value for read() | Martin Willi | 2008-09-30 | 1 | -1/+2 |
| | |||||
* | fixed DH value range testing | Martin Willi | 2008-09-17 | 1 | -1/+1 |
| | |||||
* | checking mpz_export return value properly | Martin Willi | 2008-09-17 | 3 | -8/+28 |
| | | | | fixes a potential DoS attack if a DH value of zero gets processed | ||||
* | stroke parses and lists AC groups | Andreas Steffen | 2008-09-17 | 2 | -4/+11 |
| | |||||
* | time values in strongswan.conf can be optionally specified in days (d), ↵ | Andreas Steffen | 2008-09-04 | 2 | -4/+50 |
| | | | | hours (h), minutes (m), or seconds (s) | ||||
* | agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific ↵ | Martin Willi | 2008-09-04 | 1 | -18/+68 |
| | | | | private key from the agent | ||||
* | libstrongswan agent plugin to use ssh-agent for RSA signatures | Martin Willi | 2008-09-02 | 6 | -0/+710 |
| |