Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | starter: Remove unneeded starter_exec function. | Tobias Brunner | 2012-06-11 | 5 | -78/+4 | |
| | ||||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -0/+1 | |
| | ||||||
* | starter: Go back to single threaded mode. | Tobias Brunner | 2012-06-08 | 2 | -22/+7 | |
| | | | | | Mixing multiple threads and fork(2) wasn't a very good idea it seems. At least in some environments this caused strange side-effects. | |||||
* | starter: Only handle SIGCHLD asynchronously and the rest in pselect(2). | Tobias Brunner | 2012-06-06 | 1 | -8/+17 | |
| | ||||||
* | starter: (De-)Initialize logging when forking. | Tobias Brunner | 2012-06-05 | 1 | -0/+2 | |
| | ||||||
* | starter: Close open file descriptors when forking daemons. | Tobias Brunner | 2012-06-04 | 2 | -0/+2 | |
| | ||||||
* | starter: Changed signal handling now that starter is multi-threaded. | Tobias Brunner | 2012-06-04 | 2 | -15/+57 | |
| | ||||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 2 | -1/+2 | |
| | ||||||
* | starter: Initialize thread pool so kernel events are consumed. | Tobias Brunner | 2012-05-15 | 1 | -0/+9 | |
| | ||||||
* | Explicitly cast from strict_t to crl_policy_t | Martin Willi | 2012-05-14 | 1 | -1/+1 | |
| | ||||||
* | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 7 | -75/+58 | |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 7 | -75/+58 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | * | Dropped support of deprecated authby=eap and eap= options | Martin Willi | 2012-03-20 | 5 | -38/+1 | |
| | | | ||||||
| | * | Added support for authby/xauth_server legacy options | Martin Willi | 2012-03-20 | 1 | -20/+39 | |
| | | | ||||||
| | * | Added a "aggressive" ipsec.conf connection option | Martin Willi | 2012-03-20 | 5 | -0/+5 | |
| | | | ||||||
| | * | Support an "any" IKE version for both IKEv1 or IKEv2 | Martin Willi | 2012-03-20 | 2 | -4/+5 | |
| | | | ||||||
| | * | Pass ipsec.conf xauth_identity option via stroke to charon configurations | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Do not ignore configs for IKEv1 in charon anymore | Martin Willi | 2012-03-20 | 2 | -13/+7 | |
| | | | ||||||
* | | | added support for raw RSA public keys to stroke | Andreas Steffen | 2012-04-30 | 1 | -0/+1 | |
|/ / | ||||||
* | | Use correct time_t variables to store ARG_TIME options | Martin Willi | 2012-01-18 | 2 | -4/+4 | |
| | | ||||||
* | | Starter depends on whack/stroke on Android. | Tobias Brunner | 2012-01-12 | 1 | -0/+5 | |
| | | | | | | | | | | With this change whack and stroke get installed automatically if starter is enabled. | |||||
* | | Android 4 requires LOCAL_MODULE_TAGS to be set for all modules. | Tobias Brunner | 2012-01-12 | 1 | -0/+2 | |
| | | | | | | | | | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically. | |||||
* | | Fixed bug at checking error code from file stat | Sansar Choinyambuu | 2011-11-28 | 1 | -0/+351 | |
| | | ||||||
* | | Fixed compiler warnings regarding enum comparison. | Tobias Brunner | 2011-11-25 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | | Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity. | |||||
* | | Added missing Android.mk files to distribution. | Tobias Brunner | 2011-11-22 | 1 | -1/+1 | |
|/ | ||||||
* | Fix DNS error handling for keyexchange=ike. | Mirko Parthey | 2011-10-25 | 1 | -1/+1 | |
| | | | | | | starter fails to load a connection when a peer's DNS name is temporarily unresolvable and keyexchange=ike was specified, which defaults to IKEv2. The connection loads just fine in case of keyexchange=ikev2. | |||||
* | starter: Android.mk updated to use kernel-netlink via libhydra. | Tobias Brunner | 2011-10-21 | 1 | -2/+3 | |
| | ||||||
* | starter: Use kernel interfaces to flush SAD and SPD. | Tobias Brunner | 2011-10-21 | 3 | -15/+8 | |
| | | | | | This now supports platforms where neither 'ip xfrm' nor 'setkey' are available (like Android). | |||||
* | starter: Load plugins specific to starter. | Tobias Brunner | 2011-10-21 | 2 | -0/+9 | |
| | ||||||
* | starter: INFO_FILE is not used anymore. | Tobias Brunner | 2011-10-21 | 2 | -2/+0 | |
| | ||||||
* | starter: Only try to start pluto on Android if it is actually enabled. | Tobias Brunner | 2011-10-14 | 1 | -1/+5 | |
| | ||||||
* | starter: Close open file descriptors after forking. | Tobias Brunner | 2011-10-13 | 1 | -1/+5 | |
| | | | | | This avoids problems with Android's adb which leaves several file descriptors open when executing processes. | |||||
* | starter: Only create self-signed certificate if scepclient is built. | Tobias Brunner | 2011-10-12 | 2 | -38/+46 | |
| | ||||||
* | Build starter on Android. | Tobias Brunner | 2011-10-11 | 2 | -1/+36 | |
| | ||||||
* | starter: Updated gitignores after LEX/YACC change. | Tobias Brunner | 2011-10-10 | 1 | -1/+4 | |
| | ||||||
* | starter: Use automake LEX/YACC automatisms. | Tobias Brunner | 2011-10-10 | 8 | -19/+12 | |
| | ||||||
* | starter: fallback include handling without glob(3). | Tobias Brunner | 2011-10-10 | 1 | -41/+65 | |
| | ||||||
* | starter: Check for processes with PIDs stored in pid files. | Tobias Brunner | 2011-09-28 | 1 | -6/+39 | |
| | ||||||
* | Support resolution of "allow_any" DNS names in charon (%hostname) | Martin Willi | 2011-09-02 | 1 | -4/+1 | |
| | ||||||
* | starter passes unresolved DNS names to charon | Martin Willi | 2011-08-29 | 4 | -68/+82 | |
| | | | | Based on an initial patch by Mirko Parthey. | |||||
* | Verify that executables are available and set (pluto|charon)start accordingly. | Tobias Brunner | 2011-08-11 | 1 | -0/+30 | |
| | | | | | | | | Some distributions enable both daemons but then distribute the executables in two separate packages. If only one package is installed but both daemons are enabled in ipsec.conf, starter will try to start the non existing daemon over and over again, and will each time readd the configs to the other daemon. | |||||
* | pluto: --debug-kernel aliasing was not fully complete. | Tobias Brunner | 2011-08-02 | 2 | -0/+2 | |
| | ||||||
* | implemented PASS and DROP shunt policies | Andreas Steffen | 2011-06-28 | 2 | -14/+19 | |
| | ||||||
* | Add a closeaction ipsec.conf keyword to configure close action | Martin Willi | 2011-06-07 | 5 | -0/+6 | |
| | ||||||
* | Fix some warnings triggered by gcc 4.6 -Wunused-but-set-variable | Martin Willi | 2011-05-19 | 1 | -2/+0 | |
| | ||||||
* | IKEv2 was only partially the default for connections with auto=route and ↵ | Tobias Brunner | 2011-04-27 | 1 | -2/+2 | |
| | | | | | | | | auto=start. Connections with auto=route and auto=start that did not have keyexchange=ikev2 explicitly specified did get added to charon, but did not get routed or started by charon. | |||||
* | starter: Make sure interface name is null-terminated. | Tobias Brunner | 2011-04-19 | 1 | -0/+1 | |
| | ||||||
* | Clearly mark switch cases that fall through. | Tobias Brunner | 2011-04-19 | 1 | -0/+1 | |
| | ||||||
* | In scanf the maxmium length of %s does not include the null-terminator. | Tobias Brunner | 2011-04-14 | 1 | -1/+1 | |
| | ||||||
* | starter_conn_t.id is an unsigned long. | Tobias Brunner | 2011-04-14 | 1 | -1/+1 | |
| |