Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | Added a method to bio_writer_t that allows to skip a number of bytes | Tobias Brunner | 2012-08-08 | 2 | -0/+24 | |
| | | | | | | | | | | A chunk pointing to the skipped bytes is returned, allowing users of bio_writer_t to write/copy data to the skipped bytes themselves. | |||||
| * | Added a method to bio_writer_t that allows to extract the internal buffer | Tobias Brunner | 2012-08-08 | 2 | -0/+29 | |
| | | ||||||
| * | Added methods to bio_reader_t to read data from end of buffer | Tobias Brunner | 2012-08-08 | 2 | -24/+204 | |
| | | ||||||
* | | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 5 | -9/+29 | |
|\| | | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket. | |||||
| * | Added ESP log group for libipsec log messages. | Tobias Brunner | 2012-08-08 | 2 | -0/+4 | |
| | | ||||||
| * | Make path to Android OpenSSL headers configurable. | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | ||||||
| * | Don't require STRONGSWAN_CONF to be defined. | Tobias Brunner | 2012-08-08 | 1 | -2/+9 | |
| | | ||||||
| * | Don't require PLUGINDIR to be defined. | Tobias Brunner | 2012-08-08 | 1 | -6/+15 | |
| | | | | | | | | If it is not available, we just load monolithically built plugins. | |||||
* | | Avoid problems with Doxygen by adding warn_unused_result attribute at the ↵ | Tobias Brunner | 2012-08-11 | 9 | -61/+57 | |
| | | | | | | | | end of method signatures | |||||
* | | Add warn_unused_result attributes to rng_(get|allocate)_bytes_not_zero | Tobias Brunner | 2012-08-11 | 1 | -5/+6 | |
| | | | | | | | | Also fixed Doxygen comments. | |||||
* | | If _POSIX_SPIN_LOCKS is defined as -1, it is not available | Martin Willi | 2012-08-10 | 1 | -0/+4 | |
| | | ||||||
* | | If vstr printf functions are #defined, undef them before redefinition | Martin Willi | 2012-08-10 | 1 | -0/+31 | |
| | | | | | | | | | | At least Mountain Lion seems to have them #defined to secure _chk variants. | |||||
* | | Add getspnam_r() to leak detective whitelist | Martin Willi | 2012-08-10 | 1 | -0/+1 | |
|/ | ||||||
* | PEM loading soft-depends on MD5 only, as unencrypted files don't need MD5 | Martin Willi | 2012-08-03 | 1 | -4/+4 | |
| | | | | Fixes #211. | |||||
* | Implemented recursive mutex without thread-specific counter | Tobias Brunner | 2012-08-03 | 1 | -23/+17 | |
| | ||||||
* | Use a single thread-specific value for our custom rwlock_t implementation | Tobias Brunner | 2012-08-03 | 1 | -50/+67 | |
| | | | | | | The pthread implementation on Android currently only supports 64 different thread-specific values per process, which we hit easily when every rwlock_t requires one. | |||||
* | Move MODP_CUSTOM va_arg fetching out of loop | Martin Willi | 2012-08-02 | 1 | -15/+11 | |
| | | | | It seems problematic at least on PPC with gcc 4.3, fixes #208. | |||||
* | Proper fallback if capability dropping is not available | Tobias Brunner | 2012-07-27 | 1 | -1/+1 | |
| | ||||||
* | Show which group would be required when failing in constraint check | Martin Willi | 2012-07-26 | 1 | -8/+10 | |
| | ||||||
* | Add a SHA1 test vector forcing padding over block boundary | Martin Willi | 2012-07-18 | 2 | -0/+7 | |
| | ||||||
* | Use centralized hasher names in openssl plugin | Martin Willi | 2012-07-17 | 2 | -73/+10 | |
| | ||||||
* | Add short names for hasher algorithms | Martin Willi | 2012-07-17 | 2 | -0/+18 | |
| | ||||||
* | Support void return values in OpenSSL 0.9.8 HMAC functions | Martin Willi | 2012-07-17 | 1 | -17/+28 | |
| | ||||||
* | Test reset() of hasher in crypto tester | Martin Willi | 2012-07-16 | 1 | -1/+9 | |
| | ||||||
* | Refactored error handling in crypto tester | Martin Willi | 2012-07-16 | 1 | -95/+114 | |
| | ||||||
* | Set a key before benching PRFs | Martin Willi | 2012-07-16 | 1 | -1/+8 | |
| | ||||||
* | Resetting OpenSSL HMAC with NULL key reuses existing key | Martin Willi | 2012-07-16 | 1 | -11/+2 | |
| | ||||||
* | Make sure HMAC_Init is called before HMAC_Update, fixes crash | Martin Willi | 2012-07-16 | 1 | -0/+5 | |
| | ||||||
* | Check and forward syscall errors in AF_ALG | Martin Willi | 2012-07-16 | 6 | -52/+71 | |
| | ||||||
* | Add a return value to hasher_t.reset() | Martin Willi | 2012-07-16 | 12 | -51/+74 | |
| | ||||||
* | Add a return value to hasher_t.allocate_hash() | Martin Willi | 2012-07-16 | 27 | -95/+114 | |
| | ||||||
* | Add a return value to hasher_t.get_hash() | Martin Willi | 2012-07-16 | 14 | -59/+103 | |
| | ||||||
* | Add a return value to crypter_t.set_key() | Martin Willi | 2012-07-16 | 18 | -42/+49 | |
| | ||||||
* | Add a return value to crypter_t.decrypt() | Martin Willi | 2012-07-16 | 13 | -27/+55 | |
| | ||||||
* | Add a return value to crypter_t.encrypt | Martin Willi | 2012-07-16 | 16 | -134/+204 | |
| | ||||||
* | Identation fixes, warn about unused nonce_gen return values | Martin Willi | 2012-07-16 | 1 | -2/+4 | |
| | ||||||
* | Add a return value to mac_t.set_key() | Martin Willi | 2012-07-16 | 7 | -14/+26 | |
| | ||||||
* | Add a return value to mac_t.get_bytes() | Martin Willi | 2012-07-16 | 7 | -41/+38 | |
| | ||||||
* | Check rng return value when seeding OpenSSL RNG | Tobias Brunner | 2012-07-16 | 1 | -1/+5 | |
| | ||||||
* | Check rng return value when generating DH secret in gcrypt plugin | Tobias Brunner | 2012-07-16 | 1 | -2/+2 | |
| | ||||||
* | Check rng return value when generating DH secrets and primes in gmp plugin | Tobias Brunner | 2012-07-16 | 3 | -13/+19 | |
| | ||||||
* | Wrapper functions added to generate non-zero random bytes | Tobias Brunner | 2012-07-16 | 2 | -0/+68 | |
| | ||||||
* | Check rng return value when generating OCSP nonces | Tobias Brunner | 2012-07-16 | 1 | -7/+7 | |
| | ||||||
* | Check rng return value when generating key and IV in PKCS#7 wrapper | Tobias Brunner | 2012-07-16 | 1 | -2/+14 | |
| | ||||||
* | Check rng return value in crypto tester | Tobias Brunner | 2012-07-16 | 1 | -15/+17 | |
| | ||||||
* | Relay rng return value in nonce plugin | Tobias Brunner | 2012-07-16 | 1 | -4/+2 | |
| | ||||||
* | RNGs' get_bytes and allocate_bytes return boolean | Tobias Brunner | 2012-07-16 | 6 | -21/+39 | |
| | ||||||
* | Nonce: Let get_nonce, allocate_nonce return boolean | Reto Buerki | 2012-07-16 | 2 | -4/+8 | |
| | ||||||
* | Add a return value to prf_t.set_key() | Martin Willi | 2012-07-16 | 8 | -12/+35 | |
| | ||||||
* | Add a return value to prf_t.allocate_bytes() | Martin Willi | 2012-07-16 | 7 | -21/+21 | |
| |