aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* use a pluto specific credential builder to build pluto cert_t'sMartin Willi2009-08-266-22/+112
|
* removed obsolete pgp private key parsing, done by libstrongswanMartin Willi2009-08-263-92/+30
|
* use libstrongswan for private key loading, whack callback to read passphraseMartin Willi2009-08-261-20/+66
|
* pass along X509 flags when loading PEM encoded dataMartin Willi2009-08-261-2/+11
|
* make use of the pem helper plugin to load credentialsMartin Willi2009-08-2611-244/+93
|
* added file loading support to pem plugin, using mmap()Martin Willi2009-08-261-15/+79
|
* moved PEM parsing functionality to its own pluginMartin Willi2009-08-2611-11/+729
|
* make boolean expression less enigmaticAndreas Steffen2009-08-251-3/+3
|
* set stroke connection flags to a clear TRUE/FALSEMartin Willi2009-08-251-3/+3
|
* disable lifetimes of allocated SPIsMartin Willi2009-08-251-1/+11
| | | | | | | The default lifetime of 30 seconds is too short, as a tunnel setup may need several minutes if we have high packet loss. Instead of increasing the value, we disable lifetimes completely, as we handle the removal of such SAs from userland just fine.
* remove incomplete SAs with PROTO_ESPMartin Willi2009-08-251-0/+6
|
* version bump to 4.3.5Andreas Steffen2009-08-182-1/+3
|
* pruned OID treeAndreas Steffen2009-08-183-16/+9
|
* fixed wrong emailAddress OID introduced by revision c31687daAndreas Steffen2009-08-181-3/+3
|
* Fixing address resolution via getaddrinfo in libfreeswan.4.3.4Tobias Brunner2009-08-182-3/+31
|
* check integrity of pool code fileAndreas Steffen2009-08-173-0/+14
|
* integrity test of openac and scepclient code filesAndreas Steffen2009-08-174-0/+27
|
* reinitialize print argumentsAndreas Steffen2009-08-172-5/+7
|
* check success of library_init()Andreas Steffen2009-08-143-4/+19
|
* Replacing gethostbyname, gethostbyname2 and their _r variants with ↵Tobias Brunner2009-08-145-124/+123
| | | | getaddrinfo to increase portability.
* OpenSolaris needs libsocket and libnsl for socket().Tobias Brunner2009-08-144-3/+4
|
* Enable CMSG headers and macros on OpenSolaris.Tobias Brunner2009-08-141-0/+4
|
* Added define to get sigwait with two parameters on OpenSolaris.Tobias Brunner2009-08-141-0/+2
|
* sockio.h is required on OpenSolaris for SIOCGIFADDR.Tobias Brunner2009-08-141-0/+4
|
* Replaced the strange definitions of IN6ADDR_ANY_INIT and ↵Tobias Brunner2009-08-141-6/+7
| | | | IN6ADDR_LOOPBACK_INIT on OpenSolaris.
* Defined some missing fixed-width int types on OpenSolaris.Tobias Brunner2009-08-143-5/+15
|
* LOG_AUTHPRIV is not defined on OpenSolaris.Tobias Brunner2009-08-142-0/+8
|
* OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the ↵Tobias Brunner2009-08-1441-63/+63
| | | | enums mutex/condvar/rwlock_type_t.
* We need to include alloca.h on OpenSolaris.Tobias Brunner2009-08-141-0/+3
|
* fixed 4.3 refactoring errorAndreas Steffen2009-08-111-1/+1
|
* added -module -avoid-version LDFLAGSAndreas Steffen2009-08-111-0/+1
|
* prepare CAMELLIA_CCM ESP encryptionAndreas Steffen2009-08-103-0/+9
|
* FreeBSD's libc does not support backtrace(), but libexecinfo optionally ↵Tobias Brunner2009-08-071-1/+1
| | | | replicates this function (and the other defined in execinfo.h).
* set protocol to ESP for policies installed as a trapMartin Willi2009-08-071-0/+4
|
* fixed printf fromat for length limited stringMartin Willi2009-08-071-1/+1
|
* %llu correctly prints u_int64_tAndreas Steffen2009-08-072-5/+5
|
* printing u_int64_t caused segfault on 32-bit platformsAndreas Steffen2009-08-072-5/+5
|
* do not set usetime if query_policy() failsAndreas Steffen2009-08-071-2/+10
|
* Use LONG_MAX instead of a hard-coded value.Tobias Brunner2009-08-061-1/+5
|
* FreeBSD returns the current policy use time only after specifying a hard ↵Tobias Brunner2009-08-061-1/+13
| | | | lifetime when installing the policy.
* Fixed a race condition when querying stats of a child_sa in different order.Tobias Brunner2009-08-065-61/+53
|
* use SS_RC_FIRST and SS_RC_LASTAndreas Steffen2009-08-062-2/+4
|
* abort pluto or charon if initialization failsAndreas Steffen2009-08-0610-15/+37
|
* Don't query the policy usetime if there was no traffic on the SA.Tobias Brunner2009-08-061-38/+66
| | | | | This helps in cases where a policy is assigned to more than one SA. That is, SAs now should have different usetimes even if they use the same policy.
* Reverted the interface changes introduced in 3f720dc7.Tobias Brunner2009-08-065-35/+15
|
* added support for ipsec.secrets "include" directiveMartin Willi2009-08-061-13/+81
|
* Reversed the check for udp.h, fixes compilation on Linux.Tobias Brunner2009-08-061-4/+4
|
* activated CAMELLIA_CBC cipher in openssl pluginAndreas Steffen2009-08-052-0/+20
|
* support of SHA224-based certificate signaturesAndreas Steffen2009-08-0518-3/+145
|
* Enabling UDP encapsulation via setsockopt fails on Mac OS X (it is also not ↵Tobias Brunner2009-08-051-6/+10
| | | | required as this is done using sysctl).