| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | PKCS#11 library search using keyid uses a fallback to look for certificates | Martin Willi | 2012-10-24 | 1 | -4/+8 | |
| | | ||||||
| * | Add a strongswan.conf option to disable loading of all certificates from a ↵ | Martin Willi | 2012-10-24 | 1 | -6/+11 | |
| | | | | | pkcs11 module | |||||
| * | Explicit pkcs11 certificate loading can enforce a module and a slot | Martin Willi | 2012-10-24 | 2 | -4/+21 | |
| | | ||||||
| * | Be less verbose if loading PKCS#11 certificate fails | Martin Willi | 2012-10-24 | 1 | -6/+1 | |
| | | ||||||
| * | Add a builder to load specific pkcs11 certificates by keyid | Martin Willi | 2012-10-24 | 3 | -0/+115 | |
| | | ||||||
| * | If no pkcs11 public key for a private key found, search for a certificate | Martin Willi | 2012-10-24 | 1 | -4/+53 | |
| | | ||||||
| * | Move pkcs11 public key lookup function declaration to header file | Martin Willi | 2012-10-24 | 3 | -20/+18 | |
| | | ||||||
| * | Add proposal keywords to explicitly specify PRF algorithms | Martin Willi | 2012-10-24 | 1 | -0/+8 | |
| | | ||||||
| * | Support field with specifiers in %N printf hook | Martin Willi | 2012-10-24 | 1 | -5/+7 | |
| | | ||||||
| * | Added an option to reload certificates from PKCS#11 tokens on SIGHUP | Tobias Brunner | 2012-10-18 | 1 | -0/+16 | |
| | | ||||||
| * | Copy the name of pkcs11_library_t objects | Tobias Brunner | 2012-10-18 | 2 | -2/+3 | |
| | | | | | | Strings returned by settings_t.create_section_enumerator will be freed when the config is reloaded. | |||||
| * | Use a shortcut to resolve numeric IP addresses (no need for separate threads) | Tobias Brunner | 2012-10-18 | 1 | -0/+33 | |
| | | ||||||
| * | Use native threads in host resolver so that it works even if processor has ↵ | Tobias Brunner | 2012-10-18 | 1 | -45/+77 | |
| | | | | | no threads | |||||
| * | Terminate unused resolver threads after a timeout | Tobias Brunner | 2012-10-18 | 3 | -9/+35 | |
| | | ||||||
| * | Only create more threads if needed in host_resolver_t | Tobias Brunner | 2012-10-18 | 1 | -1/+9 | |
| | | ||||||
| * | Use a helper function to add milliseconds to timeval structs | Tobias Brunner | 2012-10-18 | 3 | -13/+18 | |
| | | ||||||
| * | Resolve hosts by DNS name in separate threads so we can cancel them | Tobias Brunner | 2012-10-18 | 7 | -49/+371 | |
| | | | | | | | | | | | getaddrinfo(3) may block a long time so proper termination of the daemon may block if DNS servers are not reachable. getaddrinfo(3) is an optional cancellation point in posix threads so it might still block a shutdown but at least on Android (with the signal based pthread_cancel implementation) it works, on Linux starter will kill charon anyway after a while. | |||||
| * | check length of hex-encoded IV | Andreas Steffen | 2012-10-07 | 1 | -2/+5 | |
| | | ||||||
| * | added some new SHA-512 OIDs | Andreas Steffen | 2012-10-03 | 1 | -0/+2 | |
| | | ||||||
| * | Include all dev headers, even if they are configuration specific | Martin Willi | 2012-10-02 | 1 | -5/+4 | |
| | | ||||||
| * | Fixed RNG crypto tester | Tobias Brunner | 2012-09-28 | 1 | -11/+9 | |
| | | ||||||
| * | Make static analyzers happy when parsing hosts from sockaddr_t | Tobias Brunner | 2012-09-28 | 1 | -2/+4 | |
| | | ||||||
| * | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 5 | -10/+12 | |
| | | ||||||
| * | Initialize g and p in create_dh factory method | Tobias Brunner | 2012-09-28 | 1 | -1/+1 | |
| | | ||||||
| * | Properly initialize chunk for extension OID when parsing CRLs | Tobias Brunner | 2012-09-28 | 1 | -1/+1 | |
| | | ||||||
| * | Properly cleanup varargs in LDAP fetcher's set_option() | Tobias Brunner | 2012-09-28 | 1 | -3/+4 | |
| | | ||||||
| * | Properly cleanup varargs in enumerators of both SQL backends | Tobias Brunner | 2012-09-28 | 2 | -0/+2 | |
| | | ||||||
| * | Documentation about some time values clarified | Tobias Brunner | 2012-09-24 | 1 | -1/+1 | |
| | | ||||||
| * | Properly handle thread cancelation in rwlock_condvar_t | Tobias Brunner | 2012-09-21 | 1 | -15/+20 | |
| | | ||||||
| * | Added a condvar implementation that works with rwlock_t | Tobias Brunner | 2012-09-21 | 3 | -4/+220 | |
| | | ||||||
| * | Avoid calculating the hash if hashtable is empty | Tobias Brunner | 2012-09-21 | 1 | -0/+5 | |
| | | ||||||
| * | Avoid memset in is_anyaddr() | Tobias Brunner | 2012-09-21 | 1 | -6/+2 | |
| | | ||||||
| * | Make streq() and strcaseeq() static inline functions so they can be used as ↵ | Tobias Brunner | 2012-09-21 | 1 | -25/+31 | |
| | | | | | callbacks | |||||
| * | Add a linked list constructor taking items from a vararg list | Martin Willi | 2012-09-18 | 2 | -2/+33 | |
| | | ||||||
| * | Fix Doxygen comment for proposal_keywords_t | Tobias Brunner | 2012-09-18 | 1 | -1/+1 | |
| | | | | | Two dots seem to mark the end of a list. | |||||
| * | Fix equality comparison of auth_cfg_t | Tobias Brunner | 2012-09-18 | 1 | -2/+16 | |
| | | | | | | | | We previously only confirmed that rules contained in the first config are also contained in the second, but since the number of rules does not have to be equal, it might be that the second config contains rules that the first one doesn't. | |||||
| * | Add AUTH_RULE_IDENTITY_LOOSE which allows to use IDr loosely as initiator | Tobias Brunner | 2012-09-18 | 2 | -0/+26 | |
| | | | | | | | If it is set on an auth config IDr will not be sent, and later the configured identity will not only be checked against the returned IDr, but also against other identities contained in the responder's certificate. | |||||
| * | Added algorithm lookup via kernel_interface_t to the various kernel interfaces | Tobias Brunner | 2012-09-13 | 2 | -3/+5 | |
| | | ||||||
| * | Added possibility to register custom proposal keywords | Tobias Brunner | 2012-09-13 | 5 | -12/+180 | |
| | | | | | Keyword lookup and registration are handled via the new lib->proposal object. | |||||
| * | Removed len argument from proposal_get_token() | Tobias Brunner | 2012-09-13 | 2 | -4/+3 | |
| | | | | | Also use enumerators instead of lexparser.h to parse proposal strings. | |||||
| * | Make arguments for enumerator_create_token|directory const | Tobias Brunner | 2012-09-13 | 2 | -7/+10 | |
| | | ||||||
| * | Moved proposal_keywords to proposal_keywords_static | Francois ten Krooden | 2012-09-13 | 7 | -34/+131 | |
| | | | | | Added new proposal keywords with function to reference the static keywords. | |||||
| * | Allow calls to set_address() for any host-sized TS, not only dynamic ones | Tobias Brunner | 2012-09-12 | 1 | -1/+1 | |
| | | | | | | This fixes CHILD_SA updates (e.g. due to MOBIKE), which were broken since 4cb0783. | |||||
| * | Don't return a subset for a dynamic TS unless set_address has been called | Martin Willi | 2012-09-11 | 1 | -1/+5 | |
| | | ||||||
| * | Add a linked list constructor initializing from an enumerator | Martin Willi | 2012-09-11 | 2 | -0/+27 | |
| | | ||||||
| * | Add strongswan.conf runtime options for /dev/[u]random files | Martin Willi | 2012-09-10 | 1 | -2/+7 | |
| | | | | | Fixes #221. | |||||
| * | Merge branch 'android-client-cert' | Tobias Brunner | 2012-09-04 | 1 | -0/+2 | |
| |\ | | | | | | | Introduces IKEv2 client certificate authentication for the Android App. | |||||
| | * | android: Enable pkcs8 plugin | Tobias Brunner | 2012-08-31 | 1 | -0/+2 | |
| | | | ||||||
| * | | Merge branch 'eap-client-select' | Tobias Brunner | 2012-08-31 | 2 | -14/+101 | |
| |\ \ | | | | | | | | | | | | | | | | This brings support for EAP-Nak payloads on the client (to select a specific or supported method), and the server (via the eap-dynamic plugin which selects a method supported/requested by the client). | |||||
| | * | | Added eap-dynamic plugin which can proxy any other EAP method | Tobias Brunner | 2012-08-31 | 2 | -1/+2 | |
| | | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |