aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan
Commit message (Collapse)AuthorAgeFilesLines
* ported some hard-to-merge cherries back to trunk :-/Martin Willi2008-11-123-22/+42
| | | | | shame, svn, shame: this was ways to complicated we should consider a switch to git...
* fixed compiler warnings issued by:Martin Willi2008-11-113-10/+35
| | | | | | gcc 4.3 curl.h gcc type-checking glibc with enabled FORTIFY_SOURCE checking
* merging kernel_klips plugin back into trunkTobias Brunner2008-11-111-1/+1
|
* whitelisting localtime_rMartin Willi2008-11-101-0/+1
|
* fixed leak in host_create_from_string("%any")Martin Willi2008-11-101-3/+4
|
* settings section enumerationMartin Willi2008-11-072-34/+136
| | | | printf style key lookup
* use of host_create_any() for %any addressAndreas Steffen2008-11-071-4/+8
|
* fixed leakMartin Willi2008-11-061-3/+7
| | | | fixed build if !HAVE_BACKTRACE
* use read-write locks in crypto factory for parallelizationMartin Willi2008-11-051-42/+42
|
* wrapped all pthread_rwlock_t in profilable rwlock_tMartin Willi2008-11-053-18/+34
|
* wrapped rwlock with profiling supportMartin Willi2008-11-052-63/+199
|
* threshhold and ./configure option for lock profilerMartin Willi2008-11-052-6/+15
|
* separated backtrace functionality from leak_detective, used inMartin Willi2008-11-056-151/+294
| | | | | | leak_detective mutex profiling signal handler
* proper cleanup of openssl locking codeMartin Willi2008-11-051-7/+13
|
* fixed iterator regression introduced in [4577]Martin Willi2008-11-051-0/+1
|
* replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variantMartin Willi2008-11-051-13/+12
|
* get rid of unused iterator hook functionsMartin Willi2008-11-052-127/+7
|
* got rid of deprecated create_iterator_locked()Martin Willi2008-11-056-41/+7
|
* simple mutex profilerMartin Willi2008-11-051-0/+70
|
* support of %any address stringAndreas Steffen2008-11-051-47/+35
|
* handle 0.0.0.0 string and af == AF_INET6Andreas Steffen2008-11-051-1/+1
|
* OpenSSL requires a signature length of exactly RSA_size()Martin Willi2008-11-041-5/+3
|
* removed superfluous get_other_public_value in diffie_hellman_t interfaceMartin Willi2008-11-044-76/+4
|
* fixed bignum export if BN_num_bytes() != DH_size()Martin Willi2008-11-042-45/+54
|
* fixed memleakMartin Willi2008-11-041-8/+11
|
* added locking mechanism for multithreaded use of OpenSSLMartin Willi2008-11-031-0/+117
|
* removed accidently checked in debug codeMartin Willi2008-11-031-1/+0
|
* reverted 4541, does not fix the problemMartin Willi2008-11-031-0/+8
|
* removed 0-byte truncation, fixes random Openssl RSA signature verification ↵Martin Willi2008-10-311-7/+0
| | | | failures
* fixed crash in openssl signature verification if sizeof(size_t) != ↵Martin Willi2008-10-311-1/+3
| | | | sizeof(int) (64bit)
* reverted changeset 4529:Martin Willi2008-10-301-2/+1
| | | | | Camellia is 22 in IKEv1, but not-yet defined in IKEv2 in IKEv2, 22 is reserved for AES-XTS
* added Camellia CBC to list of encryption algorithmsAndreas Steffen2008-10-301-1/+2
|
* prf handles zero-length allocations gracefulMartin Willi2008-10-291-3/+10
|
* refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 keyAndreas Steffen2008-10-283-27/+62
|
* remove unused local DH_EXPONENT_ENTROPY definitionAndreas Steffen2008-10-271-2/+0
|
* use 512 bits of entropy for secret DH exponentsAndreas Steffen2008-10-263-1/+9
|
* fixed perl oid generationMartin Willi2008-10-161-2/+2
|
* condvar->wait() can handle recursive mutexMartin Willi2008-10-161-20/+76
|
* merging kernel_pfkey plugin back from kernel-interface branchTobias Brunner2008-10-143-9/+15
|
* implemented ipsec listalgs as a stroke commandAndreas Steffen2008-10-081-1/+1
|
* get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 ↵Andreas Steffen2008-10-081-1/+1
| | | | hash consistent with the IKEv2 keyid philosophy
* Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtypeAndreas Steffen2008-10-082-4/+24
|
* fixed builder_cancel macro to return NULL on failed buildMartin Willi2008-10-062-1/+15
|
* using signed return value for read()Martin Willi2008-09-301-1/+2
|
* fixed DH value range testingMartin Willi2008-09-171-1/+1
|
* checking mpz_export return value properlyMartin Willi2008-09-173-8/+28
| | | | fixes a potential DoS attack if a DH value of zero gets processed
* stroke parses and lists AC groupsAndreas Steffen2008-09-172-4/+11
|
* time values in strongswan.conf can be optionally specified in days (d), ↵Andreas Steffen2008-09-042-4/+50
| | | | hours (h), minutes (m), or seconds (s)
* agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific ↵Martin Willi2008-09-041-18/+68
| | | | private key from the agent
* libstrongswan agent plugin to use ssh-agent for RSA signaturesMartin Willi2008-09-026-0/+710
|