aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan
Commit message (Collapse)AuthorAgeFilesLines
...
* Parse empty string as ID_ANYTobias Brunner2013-06-111-2/+3
|
* Added tests for utils/utils.[ch]Tobias Brunner2013-06-111-0/+375
|
* Allow memstr() to be called with NULL argumentsTobias Brunner2013-06-111-1/+6
|
* Removed unused clalloc() functionTobias Brunner2013-06-112-18/+0
|
* timeval_add_ms() fixedTobias Brunner2013-06-111-1/+1
| | | | 1000000us are exactly 1s so.
* Additional tests for chunk_tTobias Brunner2013-06-111-2/+625
|
* Also capture coverage data for tests but filter them from the resultTobias Brunner2013-06-111-1/+1
| | | | Otherwise calls from test cases to static inline functions are not captured.
* Add tests for lib->get|setTobias Brunner2013-06-114-1/+61
|
* Remove dead code in token enumeratorTobias Brunner2013-06-111-12/+2
| | | | | | Since we always search for the nearest separator (and strip them from the front of the next token) there can't be any separators left at the end of a token.
* Additional and improved enumerator_t testsTobias Brunner2013-06-111-4/+219
|
* Test remove and remove_at of hashtable_t if all items are in the same bucketTobias Brunner2013-06-111-5/+54
|
* Add test cases for invoke_* and clone_* of linked_list_tTobias Brunner2013-06-111-0/+144
|
* Improve tests for linked_list_t.replace()Tobias Brunner2013-06-111-2/+18
|
* Add additional tests for linked_list_tTobias Brunner2013-06-111-0/+51
|
* Improved test for linked_list_t.insert_before()Tobias Brunner2013-06-111-3/+3
|
* Enable coverage report for libstrongswanTobias Brunner2013-06-112-1/+3
|
* Use proper type for enumerator_t/linked_list_t testsTobias Brunner2013-06-112-10/+18
| | | | Worked with -O2 but not with -O0.
* Converted test for recursive mutex_tTobias Brunner2013-06-114-1/+113
|
* Randomly allocate chunk_hash() key during first useTobias Brunner2013-06-111-1/+46
| | | | This avoids hash flooding attacks.
* Replace chunk_hash() with output from chunk_mac()Tobias Brunner2013-06-112-75/+31
| | | | | | | The quality is way better, the calculation is a bit slower though. The key is statically initialized to zero, which will be changed later to prevent hash flooding.
* Adding chunk_mac() which calculates a 64-bit MAC using SipHash-2-4Tobias Brunner2013-06-113-3/+246
|
* Converted tests for chunk_tTobias Brunner2013-06-114-1/+91
|
* Converted and added tests for hashtable_tTobias Brunner2013-06-114-1/+298
|
* Converted tests for identification_tTobias Brunner2013-06-114-1/+215
|
* Add tests combining linked_list_t and enumeratorsTobias Brunner2013-06-114-1/+308
|
* Some minor Doxygen fixes for linked_list_tTobias Brunner2013-06-111-2/+5
|
* Add basic tests for linked_list_tTobias Brunner2013-06-114-1/+288
|
* Redirect test runner output to stderrTobias Brunner2013-06-111-0/+4
| | | | This allows redirecting stdout of 'make check' to /dev/null.
* Add tests for enumerator_tTobias Brunner2013-06-114-1/+196
|
* Add test runner for unit tests in libstrongswanTobias Brunner2013-06-115-0/+83
|
* Added missing string for full-length HMAC-SHA512 signerTobias Brunner2013-06-101-0/+1
|
* Strictly memwipe_check() for magic only in the affected bufferMartin Willi2013-06-051-25/+8
| | | | | | | Passing back the buffer address we memwipe() is not ideal, as it could, in theory, change the behavior of the compiler and not-optimize memwipe(). But as checking a larger stack is very difficult for different architectures and compilers, we do it nonetheless for now.
* Allow memwipe() to be called with NULL argumentTobias Brunner2013-05-271-0/+4
|
* openssl: add support for IP addr blocks in X.509 certificatesMichael Rossberg2013-05-241-1/+115
|
* host-resolver: don't try to resolve a plain v4 address to an IPv6 addressVolker RĂ¼melin2013-05-161-3/+17
| | | | | Suppress 'Address family for hostname not supported' errors if a IPv6 client connects in a mixed IPv4/IPv6 environment.
* traffic-selector: inet_pton is successful only if it returns 1Martin Willi2013-05-161-23/+17
|
* capabilities: leak-detective using dlsym() does not need CAP_SYS_NICE anymoreMartin Willi2013-05-151-6/+0
|
* capabilities: initialize supplementary groups only when doing a setuid()Martin Willi2013-05-151-1/+1
|
* af-alg: fix number of signers after adding untruncated HMAC-SHA-512 (1f2a34d6)Martin Willi2013-05-151-1/+1
|
* openssl: Only warn about unavailable FIPS mode if the user requested itTobias Brunner2013-05-081-1/+1
|
* openssl: Cleanup thread specific error bufferTobias Brunner2013-05-081-5/+38
|
* openssl: Don't use deprecated CRYPTO_set_id_callback() with OpenSSL >= 1.0.0Tobias Brunner2013-05-081-17/+29
|
* openssl: Add PKCS#12 parsing via OpenSSLTobias Brunner2013-05-084-0/+307
|
* openssl: Properly cleanup OpenSSL libraryTobias Brunner2013-05-082-9/+7
|
* PEM plugin loads PKCS#12 containers from (DER-encoded) filesTobias Brunner2013-05-083-0/+24
| | | | | It is not actually able to handle PEM encoded PKCS#12 files produced by OpenSSL.
* Remove pluto specific certificate typesTobias Brunner2013-05-083-14/+1
|
* Add support for untruncated HMAC-SHA-512Tobias Brunner2013-05-085-1/+13
|
* Also support 128-bit RC2Tobias Brunner2013-05-081-1/+2
|
* Add pkcs12 plugin which adds support for decoding PKCS#12 containersTobias Brunner2013-05-0810-1/+803
|
* Function added to convert a hash algorithm to an HMAC integrity algorithmTobias Brunner2013-05-082-0/+77
|