aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* fixed 4.3 refactoring errorAndreas Steffen2009-08-111-1/+1
|
* added -module -avoid-version LDFLAGSAndreas Steffen2009-08-111-0/+1
|
* prepare CAMELLIA_CCM ESP encryptionAndreas Steffen2009-08-103-0/+9
|
* FreeBSD's libc does not support backtrace(), but libexecinfo optionally ↵Tobias Brunner2009-08-071-1/+1
| | | | replicates this function (and the other defined in execinfo.h).
* set protocol to ESP for policies installed as a trapMartin Willi2009-08-071-0/+4
|
* fixed printf fromat for length limited stringMartin Willi2009-08-071-1/+1
|
* %llu correctly prints u_int64_tAndreas Steffen2009-08-072-5/+5
|
* printing u_int64_t caused segfault on 32-bit platformsAndreas Steffen2009-08-072-5/+5
|
* do not set usetime if query_policy() failsAndreas Steffen2009-08-071-2/+10
|
* Use LONG_MAX instead of a hard-coded value.Tobias Brunner2009-08-061-1/+5
|
* FreeBSD returns the current policy use time only after specifying a hard ↵Tobias Brunner2009-08-061-1/+13
| | | | lifetime when installing the policy.
* Fixed a race condition when querying stats of a child_sa in different order.Tobias Brunner2009-08-065-61/+53
|
* use SS_RC_FIRST and SS_RC_LASTAndreas Steffen2009-08-062-2/+4
|
* abort pluto or charon if initialization failsAndreas Steffen2009-08-0610-15/+37
|
* Don't query the policy usetime if there was no traffic on the SA.Tobias Brunner2009-08-061-38/+66
| | | | | This helps in cases where a policy is assigned to more than one SA. That is, SAs now should have different usetimes even if they use the same policy.
* Reverted the interface changes introduced in 3f720dc7.Tobias Brunner2009-08-065-35/+15
|
* added support for ipsec.secrets "include" directiveMartin Willi2009-08-061-13/+81
|
* Reversed the check for udp.h, fixes compilation on Linux.Tobias Brunner2009-08-061-4/+4
|
* activated CAMELLIA_CBC cipher in openssl pluginAndreas Steffen2009-08-052-0/+20
|
* support of SHA224-based certificate signaturesAndreas Steffen2009-08-0518-3/+145
|
* Enabling UDP encapsulation via setsockopt fails on Mac OS X (it is also not ↵Tobias Brunner2009-08-051-6/+10
| | | | required as this is done using sysctl).
* output number of transmitted bytes in closing CHILD_SA statementAndreas Steffen2009-08-041-1/+5
|
* FreeBSD only reports a policy's usetime if a lifetime has been specified ↵Tobias Brunner2009-08-041-0/+7
| | | | when the policy was added (we only specify a lifetime on the SA, not on the policy).
* FreeBSD and Mac OS X both set the sequence number of an SADB_X_SPDGET ↵Tobias Brunner2009-08-041-5/+16
| | | | response to zero, we accept that for now.
* parse RDNs in multiple SEQUENCEs in all SETs of a DNMartin Willi2009-08-031-16/+24
|
* compare IKE config when reusing an existing IKE_SA to initiate a CHILD_SAMartin Willi2009-08-031-8/+13
|
* fixed dereferencing bug caused by bool type redefinitionAndreas Steffen2009-08-021-17/+51
|
* implemented query_sa() for PFKEYv2Andreas Steffen2009-08-021-2/+53
|
* corrected interface definitionAndreas Steffen2009-07-311-1/+1
|
* update usetime only if usebytes increaseAndreas Steffen2009-07-304-14/+73
|
* display transmitted bytes per SAAndreas Steffen2009-07-3010-19/+203
|
* Handling of unsupported policy directions (FWD) fixed.Tobias Brunner2009-07-301-1/+19
|
* Enabling NAT-T on Mac OS X using the private SADB_X_EXT_NATT flag and ↵Tobias Brunner2009-07-301-5/+45
| | | | sadb_sa_2 struct.
* Configure the NAT-T port via sysctl on Mac OS X to enable handling of ↵Tobias Brunner2009-07-301-0/+15
| | | | incoming UDP encapsulated ESP packets in the kernel.
* Make accept(2) and recvfrom(2) cancellation points on Mac OS X.Tobias Brunner2009-07-302-0/+28
|
* fixe KW_END_FIRST..KW_END_LAST keyword rangeAndreas Steffen2009-07-281-0/+5
|
* improved DPD error messageAndreas Steffen2009-07-221-1/+2
|
* added file and segment lengths to checksum.cAndreas Steffen2009-07-213-21/+59
|
* version bump to 4.3.4Andreas Steffen2009-07-212-1/+3
|
* filter objects for segment checksumming by dlpi_name, excludes rare false ↵Martin Willi2009-07-211-1/+8
| | | | positives
* enumerate executable sections only to build checksumMartin Willi2009-07-211-2/+1
|
* announce integrity testing only onceMartin Willi2009-07-211-1/+0
|
* Fixed installation of config files in out-of-tree builds.Tobias Brunner2009-07-202-2/+2
|
* Use the numerical UID/GID to install the config files and create the ipsec.d ↵Tobias Brunner2009-07-202-11/+11
| | | | directories.
* streamlined integrity test output some moreAndreas Steffen2009-07-183-5/+6
|
* advertise activated integrity testsAndreas Steffen2009-07-181-0/+5
|
* added strongswan-2.8.11 and strongswan-4.2.17 VIDsAndreas Steffen2009-07-172-3/+7
|
* fix test vector error outputAndreas Steffen2009-07-171-11/+11
|
* stop strongswan if integrity check of libstrongswan or daemon failsAndreas Steffen2009-07-178-25/+49
|
* streamlined debug output of integrity testsAndreas Steffen2009-07-173-19/+33
|