aboutsummaryrefslogtreecommitdiffstats
path: root/src/stroke
Commit message (Collapse)AuthorAgeFilesLines
* starter: Add the correct keywords header file to EXTRA_DISTTobias Brunner2017-10-121-1/+1
| | | | | | | | | | | The fix for gperf in 0ae19f0ced8d added the generated header to EXTRA_DIST but that's already added to the distribution because it is contained in *_SOURCES, what was not added, though, was the .h.in file. Also fixes the reference to the header file in the .c rule here and for stroke in out-of-tree builds. Fixes: 0ae19f0ced8d ("configure: Fix gperf length parameter determination")
* configure: Fix gperf length parameter determinationTobias Brunner2017-10-023-4/+12
| | | | | | | | | | gperf is not actually a build dependency as the generated files are shipped in the tarball. So the type depends on the gperf version on the host that ran gperf and created the tarball, which might not be the same as that on the actual build host, and gperf might not even be installed there, leaving the type undetermined. Fixes: e0e43229736a ("configure: Detect type of length parameter for gperf generated function")
* configure: Detect type of length parameter for gperf generated functionTobias Brunner2017-09-191-1/+1
| | | | | Since 3.1 gperf uses size_t for the length parameter instead of an unsigned int.
* stroke: Make 96-bit truncation for SHA-256 configurableTobias Brunner2017-05-261-0/+1
|
* Use standard unsigned integer typesAndreas Steffen2016-03-241-16/+16
|
* stroke: Fix --utc option for list* commandsTobias Brunner2015-12-171-2/+7
| | | | Fixes: dcb168413fa3 ("stroke: Add --daemon option")
* Refactored certificate management for the vici and stroke interfaces5.4.0dr1Andreas Steffen2015-12-121-2/+2
|
* stroke: Add missing include for UINT16_MAXTobias Brunner2015-06-091-0/+1
| | | | | | Fixes the build on FreeBSD. Fixes #988.
* stroke: Dynamically resize stroke messagesTobias Brunner2015-05-222-143/+156
| | | | | | | The maximum size of a stroke message is currently 64k due to the 2 byte length field. Fixes #943.
* stroke: Double the stroke message string buffer sizeMartin Willi2015-02-061-1/+1
|
* stroke: Add --daemon optionTobias Brunner2014-06-191-124/+154
|
* stroke: Use stream abstraction to communicate with stroke pluginTobias Brunner2014-06-191-43/+23
| | | | | Without this changing charon.plugins.stroke.socket would not really work.
* starter: Add a replay_window connection optionMartin Willi2014-06-171-0/+1
|
* lib: Add global config namespaceTobias Brunner2014-02-121-1/+1
|
* android: Remove dependency on libvstrTobias Brunner2013-11-131-1/+0
|
* starter: Add an 'ah' keyword for Authentication Header Security AssociationsMartin Willi2013-10-111-0/+1
|
* stroke: re-enable modeconfig keywordMartin Willi2013-09-041-0/+1
|
* automake: replace INCLUDES by AM_CPPFLAGSMartin Willi2013-07-181-2/+3
| | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only.
* stroke: Add statusall-nb as alias for statusallnbTobias Brunner2013-06-212-1/+2
|
* stroke: Add non-blocking versions of up and downTobias Brunner2013-06-213-5/+23
| | | | | | stroke up-nb and stroke down-nb do not block until the command has finished. Instead, they return right after initiating the respective operation.
* stroke: add exportconn{cert,chain} commands in addition to exportx509Martin Willi2013-06-194-1/+15
| | | | | The new commands either export a single end entity certificate or the full trust chain for a specific connection name.
* Use the GEN silent rule when generating gperf filesMartin Willi2013-05-061-0/+1
|
* android: Remove/filter header files from LOCAL_SRC_FILESTobias Brunner2013-03-201-1/+3
| | | | This avoids huge warnings when building the native code.
* Merge branch 'stroke-counters'Martin Willi2013-03-184-9/+34
|\ | | | | | | | | Extend stroke counters functionality by connection specific counters, and a resetcounters command to reset the global or connection counters.
| * Add a "resetcounters" command to ipsec, clearing global or connection countersMartin Willi2013-03-154-10/+11
| |
| * Add connection name specific stroke countersMartin Willi2013-03-154-9/+33
| |
* | Merge branch 'opaque-ports'Martin Willi2013-03-012-1/+4
|\ \ | | | | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends.
| * | Pass complete port range over stroke interface for more flexibilityMartin Willi2013-02-212-1/+4
| |/
* / Add a ikedscp ipsec.conf option to set DSCP value on outgoing IKE packetsMartin Willi2013-02-061-0/+1
|/
* Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-241-0/+1
|
* stroke: Drop unneeded [MY|OTHER]_NETBITSReto Buerki2012-12-191-2/+2
|
* stroke: Enable install_policy in add_connection()Reto Buerki2012-12-191-0/+1
|
* Add a "ipsec listcounters" command to strokeMartin Willi2012-10-244-3/+8
|
* Support multiple addresses/pools in left/rightsourceipMartin Willi2012-08-301-1/+0
|
* Add a left/rightdns keyword to configure connection specific DNS attributesMartin Willi2012-08-211-0/+1
|
* Added ESP log group for libipsec log messages.Tobias Brunner2012-08-081-1/+1
|
* Add an ipsec.conf leftgroups2 parameter for the second authentication roundMartin Willi2012-07-261-0/+1
|
* implemented the right|leftallowany featureAndreas Steffen2012-06-081-0/+1
|
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-171-0/+1
|
* Merge branch 'ikev1'Martin Willi2012-05-022-7/+4
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c
| * Merge branch 'ikev1-clean' into ikev1-masterMartin Willi2012-03-202-7/+4
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins.
| | * Dropped support of deprecated authby=eap and eap= optionsMartin Willi2012-03-202-5/+0
| | |
| | * Added a "aggressive" ipsec.conf connection optionMartin Willi2012-03-201-0/+1
| | |
| | * Support an "any" IKE version for both IKEv1 or IKEv2Martin Willi2012-03-202-2/+2
| | |
| | * Pass ipsec.conf xauth_identity option via stroke to charon configurationsMartin Willi2012-03-201-0/+1
| | |
* | | added support for raw RSA public keys to strokeAndreas Steffen2012-04-301-0/+1
| | |
* | | Added stroke user-creds command, to set username/password for a connection.Tobias Brunner2012-04-174-1/+38
| | |
* | | Additional prompt keyword added to stroke.Tobias Brunner2012-04-171-1/+3
|/ /
* | Android 4 requires LOCAL_MODULE_TAGS to be set for all modules.Tobias Brunner2012-01-121-0/+2
| | | | | | | | | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically.
* | Added ASN debug group to log low-level encoding/decoding (ASN.1, X.509).Tobias Brunner2011-12-161-1/+1
| | | | | | | | | | This will allow us to remove quite some clutter from the LIB debug group for higher debug levels.