aboutsummaryrefslogtreecommitdiffstats
path: root/src/starter
Commit message (Collapse)AuthorAgeFilesLines
...
* starter: Remove unneeded starter_exec function.Tobias Brunner2012-06-115-78/+4
|
* implemented the right|leftallowany featureAndreas Steffen2012-06-081-0/+1
|
* starter: Go back to single threaded mode.Tobias Brunner2012-06-082-22/+7
| | | | | Mixing multiple threads and fork(2) wasn't a very good idea it seems. At least in some environments this caused strange side-effects.
* starter: Only handle SIGCHLD asynchronously and the rest in pselect(2).Tobias Brunner2012-06-061-8/+17
|
* starter: (De-)Initialize logging when forking.Tobias Brunner2012-06-051-0/+2
|
* starter: Close open file descriptors when forking daemons.Tobias Brunner2012-06-042-0/+2
|
* starter: Changed signal handling now that starter is multi-threaded.Tobias Brunner2012-06-042-15/+57
|
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-172-1/+2
|
* starter: Initialize thread pool so kernel events are consumed.Tobias Brunner2012-05-151-0/+9
|
* Explicitly cast from strict_t to crl_policy_tMartin Willi2012-05-141-1/+1
|
* Merge branch 'ikev1'Martin Willi2012-05-027-75/+58
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c
| * Merge branch 'ikev1-clean' into ikev1-masterMartin Willi2012-03-207-75/+58
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins.
| | * Dropped support of deprecated authby=eap and eap= optionsMartin Willi2012-03-205-38/+1
| | |
| | * Added support for authby/xauth_server legacy optionsMartin Willi2012-03-201-20/+39
| | |
| | * Added a "aggressive" ipsec.conf connection optionMartin Willi2012-03-205-0/+5
| | |
| | * Support an "any" IKE version for both IKEv1 or IKEv2Martin Willi2012-03-202-4/+5
| | |
| | * Pass ipsec.conf xauth_identity option via stroke to charon configurationsMartin Willi2012-03-201-0/+1
| | |
| | * Do not ignore configs for IKEv1 in charon anymoreMartin Willi2012-03-202-13/+7
| | |
* | | added support for raw RSA public keys to strokeAndreas Steffen2012-04-301-0/+1
|/ /
* | Use correct time_t variables to store ARG_TIME optionsMartin Willi2012-01-182-4/+4
| |
* | Starter depends on whack/stroke on Android.Tobias Brunner2012-01-121-0/+5
| | | | | | | | | | With this change whack and stroke get installed automatically if starter is enabled.
* | Android 4 requires LOCAL_MODULE_TAGS to be set for all modules.Tobias Brunner2012-01-121-0/+2
| | | | | | | | | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically.
* | Fixed bug at checking error code from file statSansar Choinyambuu2011-11-281-0/+351
| |
* | Fixed compiler warnings regarding enum comparison.Tobias Brunner2011-11-251-1/+1
| | | | | | | | | | | | | | | | | | Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity.
* | Added missing Android.mk files to distribution.Tobias Brunner2011-11-221-1/+1
|/
* Fix DNS error handling for keyexchange=ike.Mirko Parthey2011-10-251-1/+1
| | | | | | starter fails to load a connection when a peer's DNS name is temporarily unresolvable and keyexchange=ike was specified, which defaults to IKEv2. The connection loads just fine in case of keyexchange=ikev2.
* starter: Android.mk updated to use kernel-netlink via libhydra.Tobias Brunner2011-10-211-2/+3
|
* starter: Use kernel interfaces to flush SAD and SPD.Tobias Brunner2011-10-213-15/+8
| | | | | This now supports platforms where neither 'ip xfrm' nor 'setkey' are available (like Android).
* starter: Load plugins specific to starter.Tobias Brunner2011-10-212-0/+9
|
* starter: INFO_FILE is not used anymore.Tobias Brunner2011-10-212-2/+0
|
* starter: Only try to start pluto on Android if it is actually enabled.Tobias Brunner2011-10-141-1/+5
|
* starter: Close open file descriptors after forking.Tobias Brunner2011-10-131-1/+5
| | | | | This avoids problems with Android's adb which leaves several file descriptors open when executing processes.
* starter: Only create self-signed certificate if scepclient is built.Tobias Brunner2011-10-122-38/+46
|
* Build starter on Android.Tobias Brunner2011-10-112-1/+36
|
* starter: Updated gitignores after LEX/YACC change.Tobias Brunner2011-10-101-1/+4
|
* starter: Use automake LEX/YACC automatisms.Tobias Brunner2011-10-108-19/+12
|
* starter: fallback include handling without glob(3).Tobias Brunner2011-10-101-41/+65
|
* starter: Check for processes with PIDs stored in pid files.Tobias Brunner2011-09-281-6/+39
|
* Support resolution of "allow_any" DNS names in charon (%hostname)Martin Willi2011-09-021-4/+1
|
* starter passes unresolved DNS names to charonMartin Willi2011-08-294-68/+82
| | | | Based on an initial patch by Mirko Parthey.
* Verify that executables are available and set (pluto|charon)start accordingly.Tobias Brunner2011-08-111-0/+30
| | | | | | | | Some distributions enable both daemons but then distribute the executables in two separate packages. If only one package is installed but both daemons are enabled in ipsec.conf, starter will try to start the non existing daemon over and over again, and will each time readd the configs to the other daemon.
* pluto: --debug-kernel aliasing was not fully complete.Tobias Brunner2011-08-022-0/+2
|
* implemented PASS and DROP shunt policiesAndreas Steffen2011-06-282-14/+19
|
* Add a closeaction ipsec.conf keyword to configure close actionMartin Willi2011-06-075-0/+6
|
* Fix some warnings triggered by gcc 4.6 -Wunused-but-set-variableMartin Willi2011-05-191-2/+0
|
* IKEv2 was only partially the default for connections with auto=route and ↵Tobias Brunner2011-04-271-2/+2
| | | | | | | | auto=start. Connections with auto=route and auto=start that did not have keyexchange=ikev2 explicitly specified did get added to charon, but did not get routed or started by charon.
* starter: Make sure interface name is null-terminated.Tobias Brunner2011-04-191-0/+1
|
* Clearly mark switch cases that fall through.Tobias Brunner2011-04-191-0/+1
|
* In scanf the maxmium length of %s does not include the null-terminator.Tobias Brunner2011-04-141-1/+1
|
* starter_conn_t.id is an unsigned long.Tobias Brunner2011-04-141-1/+1
|