Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | use a pluto specific credential builder to build pluto cert_t's | Martin Willi | 2009-08-26 | 6 | -22/+112 | |
| | ||||||
* | removed obsolete pgp private key parsing, done by libstrongswan | Martin Willi | 2009-08-26 | 3 | -92/+30 | |
| | ||||||
* | use libstrongswan for private key loading, whack callback to read passphrase | Martin Willi | 2009-08-26 | 1 | -20/+66 | |
| | ||||||
* | pass along X509 flags when loading PEM encoded data | Martin Willi | 2009-08-26 | 1 | -2/+11 | |
| | ||||||
* | make use of the pem helper plugin to load credentials | Martin Willi | 2009-08-26 | 11 | -244/+93 | |
| | ||||||
* | added file loading support to pem plugin, using mmap() | Martin Willi | 2009-08-26 | 1 | -15/+79 | |
| | ||||||
* | moved PEM parsing functionality to its own plugin | Martin Willi | 2009-08-26 | 11 | -11/+729 | |
| | ||||||
* | make boolean expression less enigmatic | Andreas Steffen | 2009-08-25 | 1 | -3/+3 | |
| | ||||||
* | set stroke connection flags to a clear TRUE/FALSE | Martin Willi | 2009-08-25 | 1 | -3/+3 | |
| | ||||||
* | disable lifetimes of allocated SPIs | Martin Willi | 2009-08-25 | 1 | -1/+11 | |
| | | | | | | | The default lifetime of 30 seconds is too short, as a tunnel setup may need several minutes if we have high packet loss. Instead of increasing the value, we disable lifetimes completely, as we handle the removal of such SAs from userland just fine. | |||||
* | remove incomplete SAs with PROTO_ESP | Martin Willi | 2009-08-25 | 1 | -0/+6 | |
| | ||||||
* | version bump to 4.3.5 | Andreas Steffen | 2009-08-18 | 2 | -1/+3 | |
| | ||||||
* | pruned OID tree | Andreas Steffen | 2009-08-18 | 3 | -16/+9 | |
| | ||||||
* | fixed wrong emailAddress OID introduced by revision c31687da | Andreas Steffen | 2009-08-18 | 1 | -3/+3 | |
| | ||||||
* | Fixing address resolution via getaddrinfo in libfreeswan.4.3.4 | Tobias Brunner | 2009-08-18 | 2 | -3/+31 | |
| | ||||||
* | check integrity of pool code file | Andreas Steffen | 2009-08-17 | 3 | -0/+14 | |
| | ||||||
* | integrity test of openac and scepclient code files | Andreas Steffen | 2009-08-17 | 4 | -0/+27 | |
| | ||||||
* | reinitialize print arguments | Andreas Steffen | 2009-08-17 | 2 | -5/+7 | |
| | ||||||
* | check success of library_init() | Andreas Steffen | 2009-08-14 | 3 | -4/+19 | |
| | ||||||
* | Replacing gethostbyname, gethostbyname2 and their _r variants with ↵ | Tobias Brunner | 2009-08-14 | 5 | -124/+123 | |
| | | | | getaddrinfo to increase portability. | |||||
* | OpenSolaris needs libsocket and libnsl for socket(). | Tobias Brunner | 2009-08-14 | 4 | -3/+4 | |
| | ||||||
* | Enable CMSG headers and macros on OpenSolaris. | Tobias Brunner | 2009-08-14 | 1 | -0/+4 | |
| | ||||||
* | Added define to get sigwait with two parameters on OpenSolaris. | Tobias Brunner | 2009-08-14 | 1 | -0/+2 | |
| | ||||||
* | sockio.h is required on OpenSolaris for SIOCGIFADDR. | Tobias Brunner | 2009-08-14 | 1 | -0/+4 | |
| | ||||||
* | Replaced the strange definitions of IN6ADDR_ANY_INIT and ↵ | Tobias Brunner | 2009-08-14 | 1 | -6/+7 | |
| | | | | IN6ADDR_LOOPBACK_INIT on OpenSolaris. | |||||
* | Defined some missing fixed-width int types on OpenSolaris. | Tobias Brunner | 2009-08-14 | 3 | -5/+15 | |
| | ||||||
* | LOG_AUTHPRIV is not defined on OpenSolaris. | Tobias Brunner | 2009-08-14 | 2 | -0/+8 | |
| | ||||||
* | OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the ↵ | Tobias Brunner | 2009-08-14 | 41 | -63/+63 | |
| | | | | enums mutex/condvar/rwlock_type_t. | |||||
* | We need to include alloca.h on OpenSolaris. | Tobias Brunner | 2009-08-14 | 1 | -0/+3 | |
| | ||||||
* | fixed 4.3 refactoring error | Andreas Steffen | 2009-08-11 | 1 | -1/+1 | |
| | ||||||
* | added -module -avoid-version LDFLAGS | Andreas Steffen | 2009-08-11 | 1 | -0/+1 | |
| | ||||||
* | prepare CAMELLIA_CCM ESP encryption | Andreas Steffen | 2009-08-10 | 3 | -0/+9 | |
| | ||||||
* | FreeBSD's libc does not support backtrace(), but libexecinfo optionally ↵ | Tobias Brunner | 2009-08-07 | 1 | -1/+1 | |
| | | | | replicates this function (and the other defined in execinfo.h). | |||||
* | set protocol to ESP for policies installed as a trap | Martin Willi | 2009-08-07 | 1 | -0/+4 | |
| | ||||||
* | fixed printf fromat for length limited string | Martin Willi | 2009-08-07 | 1 | -1/+1 | |
| | ||||||
* | %llu correctly prints u_int64_t | Andreas Steffen | 2009-08-07 | 2 | -5/+5 | |
| | ||||||
* | printing u_int64_t caused segfault on 32-bit platforms | Andreas Steffen | 2009-08-07 | 2 | -5/+5 | |
| | ||||||
* | do not set usetime if query_policy() fails | Andreas Steffen | 2009-08-07 | 1 | -2/+10 | |
| | ||||||
* | Use LONG_MAX instead of a hard-coded value. | Tobias Brunner | 2009-08-06 | 1 | -1/+5 | |
| | ||||||
* | FreeBSD returns the current policy use time only after specifying a hard ↵ | Tobias Brunner | 2009-08-06 | 1 | -1/+13 | |
| | | | | lifetime when installing the policy. | |||||
* | Fixed a race condition when querying stats of a child_sa in different order. | Tobias Brunner | 2009-08-06 | 5 | -61/+53 | |
| | ||||||
* | use SS_RC_FIRST and SS_RC_LAST | Andreas Steffen | 2009-08-06 | 2 | -2/+4 | |
| | ||||||
* | abort pluto or charon if initialization fails | Andreas Steffen | 2009-08-06 | 10 | -15/+37 | |
| | ||||||
* | Don't query the policy usetime if there was no traffic on the SA. | Tobias Brunner | 2009-08-06 | 1 | -38/+66 | |
| | | | | | This helps in cases where a policy is assigned to more than one SA. That is, SAs now should have different usetimes even if they use the same policy. | |||||
* | Reverted the interface changes introduced in 3f720dc7. | Tobias Brunner | 2009-08-06 | 5 | -35/+15 | |
| | ||||||
* | added support for ipsec.secrets "include" directive | Martin Willi | 2009-08-06 | 1 | -13/+81 | |
| | ||||||
* | Reversed the check for udp.h, fixes compilation on Linux. | Tobias Brunner | 2009-08-06 | 1 | -4/+4 | |
| | ||||||
* | activated CAMELLIA_CBC cipher in openssl plugin | Andreas Steffen | 2009-08-05 | 2 | -0/+20 | |
| | ||||||
* | support of SHA224-based certificate signatures | Andreas Steffen | 2009-08-05 | 18 | -3/+145 | |
| | ||||||
* | Enabling UDP encapsulation via setsockopt fails on Mac OS X (it is also not ↵ | Tobias Brunner | 2009-08-05 | 1 | -6/+10 | |
| | | | | required as this is done using sysctl). |