| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | PEM loading plugin features depend on the same feature, they are helpers only | Martin Willi | 2012-05-02 | 1 | -0/+17 | |
| | | ||||||
| * | Don't depend on a feature that has a dependency to the same feauture during ↵ | Martin Willi | 2012-05-02 | 1 | -1/+2 | |
| | | | | | unload | |||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 19 | -165/+361 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 19 | -165/+359 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | chunk_equals_ptr added to compare chunks given as pointers. | Tobias Brunner | 2012-03-20 | 1 | -0/+9 | |
| | | | | ||||||
| | | * | Use a single set of FDs for all random plugin RNG instances | Martin Willi | 2012-03-20 | 3 | -36/+89 | |
| | | | | ||||||
| | | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -26/+32 | |
| | | | | ||||||
| | | * | Fixed create_shared_enumerator method description | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 3 | -17/+73 | |
| | | | | ||||||
| | | * | Added missing XAuth plugin feature enum names | Martin Willi | 2012-03-20 | 2 | -4/+6 | |
| | | | | ||||||
| | | * | Fixed fix for XAuth plugin feature matching | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Fix XAuth plugin feature matching | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added support for iKEIntermediate X.509 extended key usage flag. | Tobias Brunner | 2012-03-20 | 3 | -6/+19 | |
| | | | | | | | | | | | | | Mac OS X requires server certificates to have this flag set. | |||||
| | | * | Some whitespace fixes. | Tobias Brunner | 2012-03-20 | 2 | -26/+26 | |
| | | | | ||||||
| | | * | Added an XAUTH identity to use or require for XAuth authentication | Martin Willi | 2012-03-20 | 2 | -0/+11 | |
| | | | | ||||||
| | | * | Stop checking once a key size constraint is not fulfilled | Martin Willi | 2012-03-20 | 1 | -0/+3 | |
| | | | | ||||||
| | | * | Fixed IKEv1 prf+ keymat expansion beyond 320 bits | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Remove executable flag from source code files | Martin Willi | 2012-03-20 | 1 | -0/+0 | |
| | | | | ||||||
| | | * | Free list after removing the last local credential set, fixes a leak report | Martin Willi | 2012-03-20 | 1 | -0/+5 | |
| | | | | ||||||
| | | * | Remove unused status type | Martin Willi | 2012-03-20 | 1 | -5/+0 | |
| | | | | ||||||
| | | * | Added missing XAuth auth_class enum name | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | | ||||||
| | | * | Be less verbose if plugin dependecy not satisfied | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | Added auth_cfg option to select XAUTH backend to use | Martin Willi | 2012-03-20 | 3 | -2/+14 | |
| | | | | ||||||
| | | * | Use a string to identify xauth backends, no need for integer types | Martin Willi | 2012-03-20 | 4 | -110/+4 | |
| | | | | ||||||
| | | * | Use a second authentication config to configure XAUTH authentication | Martin Willi | 2012-03-20 | 1 | -4/+2 | |
| | | | | ||||||
| | | * | Replace xauth_request task with a new stub where we reimplement it | Martin Willi | 2012-03-20 | 1 | -2/+2 | |
| | | | | ||||||
| | | * | Added status code to status_t | Clavister OpenSource | 2012-03-20 | 1 | -0/+5 | |
| | | | | | | | | | | | | | New status_t enum to allow packets to be sent to peer in task_manager->process | |||||
| | | * | Implement htoun/untoh64 with potentially faster htobe64/be64toh macros, if ↵ | Martin Willi | 2012-03-20 | 1 | -0/+14 | |
| | | | | | | | | | | | | | available | |||||
| | | * | fixed copy-and-paste error | Andreas Steffen | 2012-03-20 | 1 | -1/+1 | |
| | | | | ||||||
| | | * | extended bio_reader and bio_writer to handle u_int64_t | Andreas Steffen | 2012-03-20 | 5 | -0/+84 | |
| | | | | ||||||
| | | * | IKEv1 XAuth: Added a "NULL" XAuth plugin which sends a hardcoded user/pass, ↵ | Clavister OpenSource | 2012-03-20 | 2 | -6/+10 | |
| | | | | | | | | | | | | | and blindly accepts whatever user/pass is sent it. Changed the xauth_request task to use this new plugin. Add --enable-xauth-null to your configure line to build with the new plugin. | |||||
| | | * | IKEv1 XAuth: Added plugin support for XAuth, which allows us to have plugins ↵ | Clavister OpenSource | 2012-03-20 | 2 | -0/+20 | |
| | | | | | | | | | | | | | to talk to servers with different quirks for XAuth authentication. | |||||
| | | * | IKEv1 XAuth: Add XAuth defines for plugin types. | Clavister OpenSource | 2012-03-20 | 3 | -1/+102 | |
| | | | | ||||||
| | | * | Revert "IKEv1 XAuth: Added new MIGRATE status type to status_t." | Clavister OpenSource | 2012-03-20 | 1 | -6/+0 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit b57df8310a867a0a65abf17279bf1b6e6bb2f5d3. Conflicts: src/libcharon/sa/task_manager_v1.c | |||||
| | | * | Compiler warning fixed in prf_plus_t. | Tobias Brunner | 2012-03-20 | 1 | -5/+5 | |
| | | | | ||||||
| | | * | Map auth_class to auth method and IKEv1 proposal attribute | Martin Willi | 2012-03-20 | 1 | -0/+2 | |
| | | | | ||||||
| | | * | IKEv1 XAuth: Added new MIGRATE status type to status_t. | Clavister OpenSource | 2012-03-20 | 1 | -0/+6 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | When a task returns this status from a build or process method, it is a signal to the task manager that it should treat it as if the task returned SUCCESS. Additionally it will migrate all remaining tasks from the current queue to a different one, calling swap_initiator for each applicable task. Finally, the task manager will call "initiate", if applicable, to kick off tasks in the "queued_tasks" queue. Task queue relocation mapping: passive_tasks moves to queued_tasks (which is then fed to active by the initiate call). active_tasks moves to passive_tasks | |||||
| | | * | IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle ↵ | Clavister OpenSource | 2012-03-20 | 1 | -0/+2 | |
| | | | | | | | | | | | | | XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response. | |||||
| | | * | Extended PRF+ by a non-counting variant as used by IKEv1 | Martin Willi | 2012-03-20 | 2 | -63/+48 | |
| | | | | ||||||
| | | * | ts.get_subnet() returns TRUE if the selector actually is a subnet | Martin Willi | 2012-03-20 | 2 | -3/+6 | |
| | | | | ||||||
| * | | | added missing whitespace | Andreas Steffen | 2012-04-30 | 2 | -1/+2 | |
| | | | | ||||||
| * | | | Properly initialize optional subject in PEM builder. | Tobias Brunner | 2012-04-30 | 1 | -1/+1 | |
| | | | | ||||||
| * | | | added support for raw RSA public keys to stroke | Andreas Steffen | 2012-04-30 | 1 | -9/+24 | |
| | | | | ||||||
| * | | | CERT_TRUSTED_PUBKEY stores notBefore, notAfter and subject information | Andreas Steffen | 2012-04-25 | 1 | -7/+41 | |
| | | | | ||||||
| * | | | Removed auth_cfg_t.replace_value() and replaced usages with add(). | Tobias Brunner | 2012-04-18 | 2 | -76/+35 | |
| | | | | | | | | | | | | | | | | replace_value() was used to replace identities. Since for these the latest is now returned by get(), adding the new identity with add() is sufficient. | |||||
| * | | | Changed the order and semantics of rules we expect only once in auth_cfg_t. | Tobias Brunner | 2012-04-18 | 2 | -114/+212 | |
| | | | | | | | | | | | | | | | | | | | | | | These rules are now inserted at the front of the internal list, this allows to retrieve the rule added last with get(). For other rules the order in which they are added is maintained (this allows to properly enumerate them). | |||||
| * | | | Added a simple method to replace the value of a rule in auth_cfg_t. | Tobias Brunner | 2012-04-16 | 2 | -32/+74 | |
| | | | | ||||||
| * | | | Make AES-CMAC actually usable for IKEv2. | Tobias Brunner | 2012-04-04 | 1 | -0/+1 | |
| | | | | ||||||
| * | | | represent 0 as a single byte | Andreas Steffen | 2012-04-03 | 1 | -5/+1 | |
| | | | | ||||||
| * | | | moved chunk_skip_zero to chunk.h | Andreas Steffen | 2012-04-03 | 1 | -0/+18 | |
| | | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |