Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | The signature of keystore_get was changed with Android 2.x. | Tobias Brunner | 2010-06-22 | 1 | -2/+12 | |
| | ||||||
* | Avoid a segmentation fault if opening the Android control socket failed. | Tobias Brunner | 2010-06-22 | 1 | -1/+1 | |
| | ||||||
* | Allow to enable the kernel-pfkey plugin via Android.mk. | Tobias Brunner | 2010-06-22 | 1 | -0/+2 | |
| | ||||||
* | Fixing the PF_KEY kernel interface on Android. | Tobias Brunner | 2010-06-22 | 1 | -0/+2 | |
| | | | | In Android's in.h IPPROTO_COMP is not #defined but just an enum member. | |||||
* | Fixing compilation of the OpenSSL plugin if ENGINE support is disabled. | Tobias Brunner | 2010-06-22 | 2 | -2/+14 | |
| | | | | | That is, enable compilation if OpenSSL was configured with OPENSSL_NO_ENGINE. | |||||
* | Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled. | Tobias Brunner | 2010-06-22 | 4 | -3/+25 | |
| | | | | | That is, enable compilation if OpenSSL was configured with OPENSSL_NO_EC. | |||||
* | Ignore IKEv2 packets in pluto with any minor version | Martin Willi | 2010-06-22 | 1 | -1/+1 | |
| | ||||||
* | Accept IKE packets with any minor version in RAW socket | Martin Willi | 2010-06-22 | 1 | -6/+8 | |
| | ||||||
* | Fixed plugin checks in Android.mk files. | Tobias Brunner | 2010-06-22 | 2 | -4/+4 | |
| | ||||||
* | Don't fail with an error if an attribute that is to be deleted does not exist | Heiko Hund | 2010-06-18 | 1 | -2/+0 | |
| | ||||||
* | Fixed compiler warning. | Tobias Brunner | 2010-06-15 | 1 | -1/+1 | |
| | ||||||
* | Use vpn.dns* to store DNS servers (Android manages net.dns* using these). | Tobias Brunner | 2010-06-15 | 1 | -2/+2 | |
| | ||||||
* | Adding an interface that interacts with the Android Settings frontend. | Tobias Brunner | 2010-06-15 | 4 | -0/+326 | |
| | ||||||
* | Adding an Android specific credential set. | Tobias Brunner | 2010-06-15 | 5 | -1/+369 | |
| | ||||||
* | Adding an Android specific logger. | Tobias Brunner | 2010-06-15 | 4 | -3/+163 | |
| | ||||||
* | Adding support for the native Linux capabilities interface. | Tobias Brunner | 2010-06-15 | 2 | -19/+66 | |
| | | | | | Note that this interface is deprecated and mainly added to support Android. Use libcap, if possible. | |||||
* | Explicitly refer to LIBCAP in Makefiles. | Tobias Brunner | 2010-06-15 | 2 | -2/+2 | |
| | ||||||
* | Run as vpn user on Android. | Tobias Brunner | 2010-06-15 | 1 | -0/+8 | |
| | ||||||
* | Truncate the PID file so that even if we fail to unlink it, the daemon can ↵ | Tobias Brunner | 2010-06-15 | 1 | -11/+33 | |
| | | | | be restarted properly. | |||||
* | Explicitly include stdint.h for UINT64_MAX. | Tobias Brunner | 2010-06-15 | 1 | -0/+2 | |
| | | | | This is required on FreeBSD 8. | |||||
* | Check for SADB_X_NAT_T_NEW_MAPPING in PF_KEY kernel interface. | Tobias Brunner | 2010-06-15 | 1 | -4/+4 | |
| | | | | | FreeBSD 8 does not support SADB_X_NAT_T_NEW_MAPPING whereas Linux and the previous FreeBSD NAT-T patch both do. | |||||
* | Set the ports of all hosts installed via the PF_KEY kernel interface to zero. | Tobias Brunner | 2010-06-15 | 1 | -15/+37 | |
| | ||||||
* | refer to correct PLUTO_XAUTH_ID variable | Andreas Steffen | 2010-06-09 | 1 | -1/+1 | |
| | ||||||
* | rename environment variable to PLUTO_XAUTH_ID | Andreas Steffen | 2010-06-08 | 3 | -10/+11 | |
| | ||||||
* | do not destroy xauth_id if phase2 equals phase1 connection | Andreas Steffen | 2010-06-08 | 1 | -7/+4 | |
| | ||||||
* | make an optional XAUTH user ID available in the updown script | Andreas Steffen | 2010-06-08 | 3 | -1/+19 | |
| | ||||||
* | inherit XAUTH identities in Phase 2 | Heiko Hund | 2010-06-08 | 1 | -2/+22 | |
| | ||||||
* | Adding a basic unit test for hashtable_t. | Tobias Brunner | 2010-06-07 | 3 | -1/+114 | |
| | ||||||
* | Adding a remove_at method to the hash table. | Tobias Brunner | 2010-06-07 | 2 | -9/+36 | |
| | | | | This allows to remove key-value pairs while enumerating them. | |||||
* | Migrated hashtable_t to INIT/METHOD macros. | Tobias Brunner | 2010-06-07 | 1 | -59/+45 | |
| | ||||||
* | Add extra information in debug output for IKE_SA check{out, in} | Thomas Egerer | 2010-06-07 | 2 | -10/+27 | |
| | | | | | | | This output helps tracing checkout and checkin of IKE_SAs when there is more than one IKE_SAs with the same name. I also added the type of in-air-exchange to the debug output issued by the task_manager in case a task initiation is delayed, came in handy for me. | |||||
* | traffic_selector_t is gone into libstrongswan, migrate printf hook ↵ | Martin Willi | 2010-06-07 | 2 | -10/+8 | |
| | | | | registration, too. | |||||
* | Flush auth configs, create new keymat during SA reset | Martin Willi | 2010-06-07 | 1 | -12/+16 | |
| | ||||||
* | Recreate IKE_INIT/IKE_NATD/IKE_VENDOR tasks if we reset SA during IKE_AUTH | Martin Willi | 2010-06-07 | 1 | -0/+11 | |
| | ||||||
* | Reacquire keymat from new IKE_SA during task migration | Martin Willi | 2010-06-07 | 1 | -0/+1 | |
| | ||||||
* | Flush certificate cache on CA delete | Martin Willi | 2010-06-07 | 1 | -1/+2 | |
| | ||||||
* | Log non-empty task queues in statusall | Martin Willi | 2010-06-07 | 1 | -0/+31 | |
| | ||||||
* | Wrap task enumerator in ike_sa | Martin Willi | 2010-06-07 | 2 | -1/+16 | |
| | ||||||
* | Migrated ike_sa_t to INIT/METHOD macros | Martin Willi | 2010-06-07 | 1 | -407/+239 | |
| | ||||||
* | Added support for task enumeration in task_manager_t | Martin Willi | 2010-06-07 | 2 | -0/+38 | |
| | ||||||
* | Migrated task_manager_t to INIT/METHOD macros | Martin Willi | 2010-06-07 | 1 | -65/+45 | |
| | ||||||
* | Accept ARP requests with an ethernet trailer, but trim it | Martin Willi | 2010-06-03 | 1 | -2/+2 | |
| | ||||||
* | Added a EAP-SIM/AKA backend reading triplets/quintuplets from a SQL database | Martin Willi | 2010-06-02 | 11 | -0/+682 | |
| | ||||||
* | fixed configuration attribute type determination | Andreas Steffen | 2010-06-02 | 1 | -22/+15 | |
| | ||||||
* | Disable close action for a redundant CHILD_SA resulting from a rekey collision | Martin Willi | 2010-06-02 | 1 | -0/+5 | |
| | | | | | | | | If a rekey collision is detected, the winning peer of the nonce compare will delete the redundant CHILD_SA. The other peer should not enforce the close action on this CHILD, as it would reestablish the redundat CHILD_SA. Thanks to Thomas Egerer from secunet for pointing this out and the initial patchset. | |||||
* | Use wrapped getters for close/dpd action | Martin Willi | 2010-06-02 | 2 | -8/+10 | |
| | ||||||
* | Wrap getters for dpd/close action into CHILD_SA, allows us to override them | Martin Willi | 2010-06-02 | 2 | -0/+76 | |
| | ||||||
* | ipsec pool --statusattr [--hexout] outputs attribute values in correct ↵ | Andreas Steffen | 2010-06-01 | 4 | -41/+117 | |
| | | | | format if known | |||||
* | added unity_def_domain keyword tip ipsec pool | Andreas Steffen | 2010-05-31 | 1 | -0/+1 | |
| | ||||||
* | Added generated manpages to .gitignore | Martin Willi | 2010-05-31 | 3 | -0/+3 | |
| |