tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	openssl: RAND_pseudo_bytes() returns 0 if bytes are not cryptographically strong	Martin Willi	2013-07-04	1	-9/+6
\| \| \| \|	For our purposes with RNG_WEAK this is fine, so accept a zero return value.
*	processor: Simplified the main loop	Tobias Brunner	2013-06-28	1	-109/+127
\|
*	processor: Don't hold the lock while destroying jobs	Tobias Brunner	2013-06-28	1	-38/+66
\| \| \| \| \| \|	If a lock is held when queue_job() is called and the same lock is required during the destruction of a job, holding the internal lock in the processor while calling destroy() could result in a deadlock.
*	integrity-checker: Use chunk_hash_static() to calculate checksums	Tobias Brunner	2013-06-28	1	-7/+2
\|
*	chunk: Add predictable hash function	Tobias Brunner	2013-06-28	3	-2/+86
\| \| \| \| \|	Since chunk_hash() is randomized its output is not predictable, that is, it is only within the same process.
*	plugin-loader: Removed unused path argument of load() method	Tobias Brunner	2013-06-28	3	-13/+9
\| \| \| \| \|	Multiple additional search paths can be added with the add_path() method.
*	integrity-checker: Fix checksum calculation after randomizing chunk_hash()	Tobias Brunner	2013-06-27	1	-2/+7
\|
*	unit-tests: Print loaded plugins	Tobias Brunner	2013-06-27	1	-0/+1
\|
*	unit-tests: RSA key generation might take longer than 4 seconds	Tobias Brunner	2013-06-27	1	-0/+1
\| \| \| \| \|	Check uses a default timeout of 4 seconds for each test case, generating keys of 6 different key sizes might take longer than that.
*	tests: Properly load plugins from build directory	Tobias Brunner	2013-06-27	1	-7/+2
\| \| \| \| \| \|	Calling load() incrementally does not really work as dependencies wouldn't be resolved properly if a required feature was to be provided by a plugin that is loaded later with a separate call to load().
*	plugin-loader: Method added to provide additional search paths for plugins	Tobias Brunner	2013-06-27	2	-10/+66
\|
*	capabilities: Return effective UID/GID if user did not configure anything	Tobias Brunner	2013-06-25	1	-2/+2
\|
*	capabilities: Report effective UID/GID after dropping capabilities	Tobias Brunner	2013-06-25	1	-1/+1
\|
*	capabilities: Handle CAP_CHOWN specially as it might not be required	Tobias Brunner	2013-06-25	2	-2/+63
\|
*	capabilities: Check effective UID as fallback if capabilities are not supported	Tobias Brunner	2013-06-25	1	-1/+1
\|
*	dhcp: Require CAP_NET_BIND_SERVICE and CAP_NET_RAW to open/bind sockets	Tobias Brunner	2013-06-25	1	-0/+3
\|
*	socket-default: Require CAP_NET_BIND_SERVICE for ports < 1024	Tobias Brunner	2013-06-25	1	-1/+4
\| \| \| \| \|	Since we don't know which ports are used with socket-dynamic we can't demand the capability there, but it might still be required.
*	capabilities: Only plugins that require CAP_NET_ADMIN demand it	Tobias Brunner	2013-06-25	1	-0/+4
\| \| \| \|	The daemon as such does not require this capability.
*	capabilities: Move global capabilities_t instance to libstrongswan	Tobias Brunner	2013-06-25	3	-2/+10
\|
*	capabilities: Ensure required capabilities are actually held by the process/user	Tobias Brunner	2013-06-25	2	-4/+58
\|
*	tun-device: Packets sent over utun devices on Mac OS X have the protocol ↵	Tobias Brunner	2013-06-21	1	-0/+11
\| \| \| \|	family prepended
*	tun-device: Avoid opening /dev/tunX multiple times (e.g. on FreeBSD)	Tobias Brunner	2013-06-21	1	-2/+6
\|
*	printf-hook: Avoid double-free when freeing Vstr config	Tobias Brunner	2013-06-21	1	-1/+0
\| \| \| \| \| \| \|	Thread-specific objects get freed when the thread value object is destroyed (wasn't the case earlier, i.e. before 2b19dd35), which may cause the second call to vstr_free_conf() to fail in an assert in Vstr (depending on how it was built).
*	plugin-loader: Move logging of failed features to status()	Tobias Brunner	2013-06-21	1	-7/+11
\| \| \| \| \| \| \| \| \|	Still log an error message if critical features fail, as loaded plugins/features are not logged in that case. This way loaded plugins are printed before failed features and the relation is easier to make for users. It also allows programs to log this message on a different level.
*	plugin-loader: Add method to print loaded plugins on a given log level	Tobias Brunner	2013-06-21	2	-0/+18
\|
*	plugin-loader: Collect statistics while loading features, print them in case ↵	Tobias Brunner	2013-06-21	1	-69/+40
\| \| \| \| \| \| \|	features failed to load There is no need to explicitly search for failed features in critical plugins as this is now detected while loading the features.
*	plugin-loader: Use different log level if failed feature is in critical plugin	Tobias Brunner	2013-06-21	1	-2/+16
\|
*	plugin-loader: Log message when failing to load plugin	Tobias Brunner	2013-06-21	1	-0/+8
\|
*	plugin-loader: Reduce verbosity while loading plugins	Tobias Brunner	2013-06-21	1	-4/+4
\|
*	leak-detective: (re-)whitelist some OpenSSL functions	Martin Willi	2013-06-21	1	-0/+5
\| \| \| \| \| \| \|	Some static allocations in plugins won't get freed, because in the test case process the plugins are not destroyed. If a plugin would clean up allocations done while just using the plugin, these show up as leak in the child process, letting tests fail.
*	unit-tests: load plugins in test-runner from build directory	Martin Willi	2013-06-21	2	-1/+30
\|
*	unit-tests: link test-runner against -lpthread	Martin Willi	2013-06-21	1	-0/+1
\|
*	unit-tests: add RSA test cases, very similar to ECDSA	Martin Willi	2013-06-21	4	-1/+400
\|
*	unit-tests: test with /dev/urandom if random plugin is in use	Martin Willi	2013-06-21	1	-0/+6
\|
*	unit-tests: test supported ECDSA schemes only	Martin Willi	2013-06-21	1	-0/+14
\|
*	Move test-runners has_feature() function to plugin loader	Martin Willi	2013-06-21	3	-32/+40
\|
*	unit-tests: enforce CET/CEST timezone to properly test non-UTC time formatting	Martin Willi	2013-06-21	1	-0/+6
\|
*	unit-tests: don't use ck_assert() to test a cleared chunk, as it allocates data	Martin Willi	2013-06-21	1	-3/+10
\| \| \| \|	The new allocation might be in the freed area, affecting the test result.
*	unit-tests: define 64-bit constats with ULL, fixing compiler warning on 32-bit	Martin Willi	2013-06-21	1	-2/+2
\|
*	unit-tests: test some zeroed ECDSA signatures that never should succeed	Martin Willi	2013-06-21	1	-0/+63
\|
*	unit-tests: perform signing/validation with keys ECDSA keys generated or loaded	Martin Willi	2013-06-21	1	-0/+47
\|
*	unit-tests: add an ECDSA test case loading keys	Martin Willi	2013-06-21	1	-0/+61
\|
*	unit-tests: perform a first ECDSA test case if ECDSA is supported	Martin Willi	2013-06-21	4	-1/+58
\|
*	unit-tests: add a helper function checking if a plugin feature is available	Martin Willi	2013-06-21	1	-0/+32
\|
*	unit-tests: add a test case checking if all test vectors have been passed	Martin Willi	2013-06-21	4	-1/+44
\|
*	crypto-factory: count the number of test vector failures during registration	Martin Willi	2013-06-21	2	-30/+73
\|
*	unit-tests: load all libstrongswan plugins in test-runner	Martin Willi	2013-06-21	2	-0/+7
\|
*	pubkey: Improve comparison of raw public key certificate objects	Tobias Brunner	2013-06-21	1	-1/+11
\|
*	backtrace: use backtrace_symbols() only if we have backtrace() and dladdr() ↵	Martin Willi	2013-06-19	1	-5/+16
\| \| \| \|	fails
*	utils: Remove volatile qualifier from refcount_t typedef	Tobias Brunner	2013-06-19	1	-2/+1
\| \| \| \| \|	It's not really required anymore (if it ever was) and may cause compiler warnings when using the non atomic versions of ref_get/ref_put.