Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove policies in kernel interfaces based on their priority. | Tobias Brunner | 2011-07-27 | 1 | -6/+7 |
| | | | | | | This allows to unroute a connection while the same connection is currently established. In this case both CHILD_SAs share the same reqid but the installed policies have different priorities. | ||||
* | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 10 | -12/+12 |
| | | | | Mostly found by 'codespell'. | ||||
* | Add the reqid to kernel_ipsec_t.del_policy. | Tobias Brunner | 2011-07-06 | 1 | -2/+2 |
| | |||||
* | pluto: Made helper functions in event_queue static. | Tobias Brunner | 2011-05-24 | 1 | -2/+2 |
| | |||||
* | pluto: Securely wipe quick mode keys from memory. | Thomas Egerer | 2011-05-10 | 1 | -67/+109 |
| | | | | | | | Keying material is derived in two separate steps for local and remote endpoint. This allows us to securely wipe local/remote secrets separately, too -- a precondition to wipe quick mode keys from memory in a secure fashion. | ||||
* | pluto: Securely wipe sensitive data from memory. | Thomas Egerer | 2011-05-10 | 1 | -13/+14 |
| | |||||
* | fixed loop error in parsing of OCSP basic responses | Andreas Steffen | 2011-04-26 | 1 | -1/+1 |
| | |||||
* | Cast size_t len arguments to %.*s to int | Martin Willi | 2011-04-20 | 1 | -2/+3 |
| | |||||
* | Added an esn parameter to the kernel interface add_sa functions | Martin Willi | 2011-04-20 | 1 | -3/+3 |
| | |||||
* | pluto: Replaced some strcpy usages with strncpy. | Tobias Brunner | 2011-04-19 | 1 | -2/+2 |
| | |||||
* | pluto: Make sure connection name is null-terminated during DPD restart. | Tobias Brunner | 2011-04-19 | 1 | -4/+5 |
| | |||||
* | pluto: Clarified parsing of long durations. | Tobias Brunner | 2011-04-19 | 1 | -1/+1 |
| | |||||
* | pluto: Avoid potential null-pointer dereference when checking CRLs. | Tobias Brunner | 2011-04-19 | 1 | -1/+2 |
| | |||||
* | pluto: from_state is strictly lower than STATE_IKE_ROOF. | Tobias Brunner | 2011-04-19 | 1 | -1/+1 |
| | |||||
* | Added a (not yet implemented) plugin_t method to reload plugin configuration | Martin Willi | 2011-04-15 | 1 | -0/+1 |
| | |||||
* | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 3 | -4/+13 |
| | | | | over plugin_t | ||||
* | Migrated remaining plugin_t implementations to INIT/METHOD macros | Martin Willi | 2011-04-15 | 1 | -6/+9 |
| | |||||
* | pluto: Fixed check for NAT-T keepalives. | Tobias Brunner | 2011-04-14 | 1 | -1/+1 |
| | |||||
* | pluto: Properly initialize constants. | Tobias Brunner | 2011-04-14 | 2 | -2/+7 |
| | |||||
* | pluto: Avoid hiding outer parameter. | Tobias Brunner | 2011-04-14 | 1 | -6/+6 |
| | |||||
* | pluto: Use %zu to print values of type size_t. | Tobias Brunner | 2011-04-14 | 1 | -2/+2 |
| | |||||
* | pluto: Fixed potential memory leak when processing requested virtual IPs. | Tobias Brunner | 2011-04-14 | 1 | -12/+13 |
| | |||||
* | pluto: Properly free buffer in error cases in read_packet. | Tobias Brunner | 2011-04-14 | 1 | -1/+4 |
| | |||||
* | Fix compiler warnings at creation of CRL cache filenames. | Tobias Brunner | 2011-04-14 | 1 | -2/+2 |
| | | | | | | This was not really a problem because ptr is the first member of a chunk_t and it contains a null-terminated string at that point. But it's clearer this way. | ||||
* | Fix "set nexthop to him when instantiating rightallowyes template with ↵ | Tobias Brunner | 2011-04-14 | 1 | -1/+1 |
| | | | | | | leftnexthop == right" This fixes commit 280f6b1ab2. | ||||
* | pluto: Properly initialize a.continuation. | Tobias Brunner | 2011-04-12 | 1 | -0/+1 |
| | |||||
* | pluto: Properly initialize ta.encrypter. | Tobias Brunner | 2011-04-12 | 1 | -1/+1 |
| | |||||
* | pluto: Fixed off by one error when reading private keys. | Tobias Brunner | 2011-04-12 | 1 | -1/+0 |
| | |||||
* | Removed unused variables. | Tobias Brunner | 2011-04-12 | 2 | -7/+3 |
| | |||||
* | pluto: Properly free secrets in error cases. | Tobias Brunner | 2011-02-10 | 1 | -2/+6 |
| | |||||
* | Some typos fixed. | Tobias Brunner | 2011-02-07 | 2 | -2/+2 |
| | |||||
* | Fixed whatis entry of pluto manpage. | Tobias Brunner | 2011-02-07 | 1 | -3/+3 |
| | |||||
* | Escape - in manpages when used as minus sign. | Tobias Brunner | 2011-02-07 | 1 | -2/+2 |
| | |||||
* | Use a generic getter for all numerical X.509 constraints | Martin Willi | 2011-01-05 | 2 | -3/+3 |
| | |||||
* | Simplified format of x509 CRL URI parsing/enumerator | Martin Willi | 2011-01-05 | 1 | -5/+5 |
| | |||||
* | Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for ↵ | Martin Willi | 2011-01-05 | 2 | -3/+3 |
| | | | | PolicyConstraints, too | ||||
* | Added support for CRL Issuers to x509 and OpenSSL plugins | Martin Willi | 2011-01-05 | 1 | -2/+2 |
| | |||||
* | implemented wrap around of registered IKEv1 algorithm names | Andreas Steffen | 2010-12-26 | 2 | -76/+60 |
| | |||||
* | Implemented Traffic Flow Confidentiality padding in kernel_interface | Martin Willi | 2010-12-20 | 1 | -3/+3 |
| | |||||
* | trace back crypto algorithms to the plugins that registered them | Andreas Steffen | 2010-12-18 | 3 | -131/+189 |
| | |||||
* | pluto: Fixed a regression introduced in f565d0c575. | Tobias Brunner | 2010-10-26 | 1 | -10/+12 |
| | | | | | Since scx_add could return a previously created smartcard object, using sc->last_cert to store the newly added certificate could lead to segfaults. | ||||
* | pluto: Locking fixed in cert_add. | Tobias Brunner | 2010-10-26 | 1 | -6/+7 |
| | |||||
* | payloads are not aligned to 4 byte boundaries | Andreas Steffen | 2010-10-25 | 1 | -1/+1 |
| | |||||
* | define state_story for STATE_UNDEFINED | Andreas Steffen | 2010-10-16 | 4 | -8/+6 |
| | |||||
* | fix segfault when reading certificate from smartcard | Egbert Koening | 2010-10-15 | 1 | -1/+2 |
| | |||||
* | pluto: Install inbound policies together with outbound policies. | Tobias Brunner | 2010-10-14 | 2 | -28/+7 |
| | | | | | This avoids an error message when uninstalling the policies and charon did it already like this. | ||||
* | fixed release of virtual IP for XAUTH identities | Andreas Steffen | 2010-09-26 | 1 | -2/+5 |
| | |||||
* | Moved man pages for config files to a separate directory. | Tobias Brunner | 2010-09-10 | 3 | -186/+1 |
| | |||||
* | fixed memory leak | Andreas Steffen | 2010-09-09 | 1 | -0/+1 |
| | |||||
* | Added a final flag to builder registration to enumerate the actually ↵ | Martin Willi | 2010-09-03 | 1 | -2/+2 |
| | | | | supported algorithms |