Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Bye bye Pluto! | Tobias Brunner | 2012-06-11 | 1 | -852/+0 |
| | | | | | Charon will take over IKEv1 duties from here. This also removes libfreeswan and whack. | ||||
* | Cache list of plugin names to further simplify its usage. | Tobias Brunner | 2012-01-19 | 1 | -13/+2 |
| | | | | Also helpful for ipsec statusall to avoid having to enumerate plugins. | ||||
* | Simplified logging of list of loaded plugins. | Tobias Brunner | 2012-01-19 | 1 | -13/+5 |
| | |||||
* | pluto: Use srand() to initialize the C library PRNG. | Tobias Brunner | 2012-01-04 | 1 | -0/+3 |
| | | | | Otherwise rekey and DPD times would always be the same after a restart. | ||||
* | Make sure the certificate cache is flushed when plugins are unloaded. | Tobias Brunner | 2011-12-15 | 1 | -0/+1 |
| | | | | | This avoids segmentation faults when plugins implementing cert_t are already unloaded when the cache is flushed during destruction. | ||||
* | pluto: CAP_NET_RAW seems to be required on Android even to open regular sockets. | Tobias Brunner | 2011-10-18 | 1 | -1/+7 |
| | |||||
* | pluto: Switch to user 'vpn' on Android. | Tobias Brunner | 2011-10-18 | 1 | -5/+16 |
| | |||||
* | pluto: Fixed usage of prctl. | Tobias Brunner | 2011-10-14 | 1 | -1/+1 |
| | |||||
* | pluto: Fixed include for control socket. | Tobias Brunner | 2011-10-14 | 1 | -0/+1 |
| | |||||
* | pluto: Option added to disable adns. | Tobias Brunner | 2011-10-14 | 1 | -2/+6 |
| | | | | This basically disables opportunistic encryption. | ||||
* | pluto: lwdnsq is not supported. | Tobias Brunner | 2011-10-14 | 1 | -4/+0 |
| | |||||
* | Plugin enumerator enumerates over loaded features, too | Martin Willi | 2011-10-14 | 1 | -1/+1 |
| | |||||
* | pluto: Check for processes with the PID stored in pluto.pid. | Tobias Brunner | 2011-09-28 | 1 | -43/+74 |
| | |||||
* | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 1 | -2/+3 |
| | | | | over plugin_t | ||||
* | pluto: Removed no_klips flag (--noklips option). | Tobias Brunner | 2010-09-02 | 1 | -6/+0 |
| | |||||
* | pluto: Added --debug-kernel as alias for --debug-klips. | Tobias Brunner | 2010-09-02 | 1 | -1/+2 |
| | |||||
* | pluto: Replaced DBG_KLIPS with DBG_KERNEL. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 |
| | |||||
* | pluto: Listen for kernel events via libhydra's kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -0/+1 |
| | |||||
* | pluto: Do not close all file descriptors on startup, just redirect stdin, ↵ | Tobias Brunner | 2010-09-02 | 1 | -16/+8 |
| | | | | | | | stdout and stderr to /dev/null. Otherwise the pipe used to synchronize pluto->events with the main thread would be closed. | ||||
* | Initialize the thread pool in pluto. | Tobias Brunner | 2010-09-02 | 1 | -0/+10 |
| | |||||
* | Adding support for the native Linux capabilities interface. | Tobias Brunner | 2010-06-15 | 1 | -11/+35 |
| | | | | | Note that this interface is deprecated and mainly added to support Android. Use libcap, if possible. | ||||
* | implemented xauth as a pluto plugin | Andreas Steffen | 2010-05-18 | 1 | -9/+8 |
| | |||||
* | Explicitly unload plugins before deinitializing libhydra and libstrongswan ↵ | Tobias Brunner | 2010-04-06 | 1 | -0/+1 |
| | | | | in pluto. | ||||
* | Replaced some DBG_LIB with more specific groups. | Tobias Brunner | 2010-04-06 | 1 | -1/+1 |
| | |||||
* | Adding DBG_LIB to all calls of libstrongswan's version of DBG*. | Tobias Brunner | 2010-04-06 | 1 | -1/+1 |
| | |||||
* | Store the name of the daemon that initialized libhydra to load ↵ | Tobias Brunner | 2010-04-06 | 1 | -1/+1 |
| | | | | daemon-specific settings. | ||||
* | Use whack_attribute in pluto to provide in-memory IP address pools. | Tobias Brunner | 2010-04-06 | 1 | -0/+3 |
| | | | | | The pools are configured by setting rightsourceip in ipsec.conf to a network in CIDR notation. | ||||
* | Init/deinit libhydra in charon and pluto. | Tobias Brunner | 2010-03-24 | 1 | -0/+9 |
| | |||||
* | renamed init_fetch() to fetch_initialize() | Andreas Steffen | 2010-02-02 | 1 | -1/+1 |
| | |||||
* | Join pluto's fetching thread instead of detaching it in order to avoid that ↵ | Tobias Brunner | 2010-02-02 | 1 | -1/+2 |
| | | | | the leak-detective reports a memleak. | ||||
* | use directory enumerator to load authcerts | Andreas Steffen | 2009-10-15 | 1 | -3/+3 |
| | |||||
* | moved .gitignore for pool | Andreas Steffen | 2009-10-15 | 1 | -2/+3 |
| | |||||
* | replaced struct id by identification_t | Andreas Steffen | 2009-10-10 | 1 | -3/+3 |
| | |||||
* | pluto now uses x509 plugin for attribute certificate handling | Andreas Steffen | 2009-10-05 | 1 | -3/+3 |
| | |||||
* | pass NULL to library_init() to load settings from default file | Martin Willi | 2009-09-10 | 1 | -1/+1 |
| | |||||
* | use NULL to load plugins from default plugin directory | Martin Willi | 2009-09-10 | 1 | -1/+1 |
| | |||||
* | remove spaces before tabs at the beginning of lines (^( )+\t) | Martin Willi | 2009-09-04 | 1 | -1/+1 |
| | |||||
* | removed trailing spaces ([[:space:]]+$) | Martin Willi | 2009-09-04 | 1 | -4/+4 |
| | |||||
* | handle plugin loading failures | Martin Willi | 2009-09-01 | 1 | -2/+5 |
| | |||||
* | streamlined file loading labels | Andreas Steffen | 2009-08-26 | 1 | -3/+3 |
| | |||||
* | moved builder hooks to a separate file | Martin Willi | 2009-08-26 | 1 | -0/+3 |
| | |||||
* | abort pluto or charon if initialization fails | Andreas Steffen | 2009-08-06 | 1 | -2/+5 |
| | |||||
* | streamlined integrity test output some more | Andreas Steffen | 2009-07-18 | 1 | -0/+2 |
| | |||||
* | advertise activated integrity tests | Andreas Steffen | 2009-07-18 | 1 | -0/+5 |
| | |||||
* | stop strongswan if integrity check of libstrongswan or daemon fails | Andreas Steffen | 2009-07-17 | 1 | -2/+2 |
| | |||||
* | deinit() library if integrity check fails | Martin Willi | 2009-06-22 | 1 | -0/+1 |
| | |||||
* | build and verify on disk file integrity of pluto and charon executables | Martin Willi | 2009-06-22 | 1 | -0/+7 |
| | |||||
* | removed obsolete INTEGRITY_TEST and fips signer code | Martin Willi | 2009-06-22 | 1 | -18/+0 |
| | | | | --enable-integrity-test now conditionally builds libchecksum | ||||
* | library initialization fails if libstrongswan checksum is invalid | Martin Willi | 2009-06-22 | 1 | -1/+4 |
| | |||||
* | consistent display of strongSwan version | Andreas Steffen | 2009-06-13 | 1 | -9/+6 |
| |