| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| | * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 19 | -29/+67 | |
| | | | ||||||
| | * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 23 | -28/+59 | |
| | | | ||||||
| | * | Include source port in init hash for fragmented messages | Tobias Brunner | 2012-12-24 | 1 | -1/+8 | |
| | | | ||||||
| | * | Add an option to en-/disable IKE fragmentation | Tobias Brunner | 2012-12-24 | 2 | -5/+20 | |
| | | | | | | | | | | | Fragments are always accepted but will not be sent if disabled. The vendor ID is only sent if the option is enabled. | |||||
| | * | Split larger messages into fragments if IKE fragmentation is supported by peer | Tobias Brunner | 2012-12-24 | 1 | -14/+114 | |
| | | | ||||||
| | * | Log message size for in- and outbound IKE messages | Tobias Brunner | 2012-12-24 | 2 | -4/+7 | |
| | | | ||||||
| | * | Add support to create IKE fragments | Tobias Brunner | 2012-12-24 | 2 | -0/+30 | |
| | | | | | | | | | | | All fragments currently use the same fragment ID (1) as that's what other implementations are doing. | |||||
| | * | Log added NAT-T vendor IDs | Tobias Brunner | 2012-12-24 | 1 | -0/+1 | |
| | | | ||||||
| | * | Detect a peer's support for IKE fragmentation | Tobias Brunner | 2012-12-24 | 2 | -0/+9 | |
| | | | | | | | | | Fragments are accepted even if this vendor ID is not seen. | |||||
| | * | Map fragmented initial initial Main or Aggressive Mode messages to the same ↵ | Tobias Brunner | 2012-12-24 | 1 | -1/+17 | |
| | | | | | | | | | IKE_SA | |||||
| | * | Allow ID_PROT/AGGRESSIVE messages for established IKE_SAs if they contain ↵ | Tobias Brunner | 2012-12-24 | 1 | -1/+2 | |
| | | | | | | | | | | | | | | | fragments Other implementations send fragments always in an initial message type even for transaction or quick mode exchanges. | |||||
| | * | Don't handle fragmented messages larger than charon.max_packet | Tobias Brunner | 2012-12-24 | 1 | -4/+39 | |
| | | | ||||||
| | * | Don't update an IKE_SA-entry's cached message ID when handling fragments | Tobias Brunner | 2012-12-24 | 1 | -1/+4 | |
| | | | ||||||
| | * | Store inbound IKE fragments and reassemble the message when all fragments ↵ | Tobias Brunner | 2012-12-24 | 1 | -3/+166 | |
| | | | | | | | | | are received | |||||
| | * | Add message rules to properly handle IKE fragments | Tobias Brunner | 2012-12-24 | 1 | -0/+8 | |
| | | | | | | | | | | | These are sent in unencrypted messages and are the only payload contained in such messages. | |||||
| | * | Reset the encrypted flag when handling IKE messages that contain a fragment | Tobias Brunner | 2012-12-24 | 1 | -0/+6 | |
| | | | | | | | | | | | Racoon sets the encrypted bit for messages containing a fragment, but these messages are not really encrypted (the fragmented message is though). | |||||
| | * | Payload added to handle IKE fragments | Tobias Brunner | 2012-12-24 | 6 | -11/+314 | |
| | | | ||||||
| * | | Don't use bio_writer_t.skip() to write length field when appending more data | Martin Willi | 2013-01-11 | 2 | -6/+9 | |
| | | | | | | | | | | | If the writer reallocates its buffer, the length pointer might not be valid anymore, or even worse, point to an arbitrary allocation. | |||||
| * | | Use raw opcodes for rdrand to build with older binutils | Martin Willi | 2013-01-11 | 1 | -6/+6 | |
| | | | ||||||
| * | | Provide RNG_TRUE quality in rdrand by mixing reseeded outputs using AES | Martin Willi | 2013-01-11 | 2 | -8/+108 | |
| | | | ||||||
| * | | Provide RNG_STRONG quality in rdrand by forcing PRNG reseed after every sample | Martin Willi | 2013-01-11 | 2 | -1/+69 | |
| | | | ||||||
| * | | Provide RNG_WEAK quality random generator in rdrand | Martin Willi | 2013-01-11 | 4 | -2/+342 | |
| | | | ||||||
| * | | Add a rdrand plugin stub detecting availability of RDRAND instructions | Martin Willi | 2013-01-11 | 4 | -0/+183 | |
| | | | ||||||
| * | | Streamline debug output when receiving intermediate CA certificates in IKEv1 | Martin Willi | 2013-01-11 | 1 | -1/+1 | |
| | | | ||||||
| * | | Refactored IKEv2 cert/certreq payload processing to multiple functions | Martin Willi | 2013-01-11 | 1 | -112/+141 | |
| | | | ||||||
| * | | Refactored IKEv1 cert payload processing to multiple functions | Martin Willi | 2013-01-11 | 1 | -73/+102 | |
| | | | ||||||
| * | | IKEv1 support for PKCS#7 wrapped certificates | Volker Rümelin | 2013-01-11 | 3 | -0/+96 | |
| | | | ||||||
| * | | Fixed some typos in comments | Volker Rümelin | 2013-01-11 | 4 | -6/+6 | |
| | | | ||||||
| * | | Fixed some typos in Ukrainian translation | Pavel Kopchyk | 2013-01-09 | 1 | -15/+16 | |
| | | | ||||||
| * | | conftest: Add support for time_format and ike_name options in log sections | Thomas Klute | 2013-01-08 | 1 | -1/+18 | |
| | | | | | | | | | | | | | Both options are well supported for normal operation but were completely ignored by conftest, which used hard coded defaults. File options are still missing but could be added in a similar way. | |||||
| * | | conftest: Fix log level settings for stdout | Thomas Klute | 2013-01-08 | 1 | -0/+3 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | This patch fixes bug #272 ("conftest ignores log settings for stdout"). http://wiki.strongswan.org/issues/272 According to the documentation of add_logger in src/libcharon/bus/bus.h, the relevant log levels of a logger are registered with the logging subsystem when adding the logger. If the log levels change later, the logger must be re-added to propagate the new settings. In conftest.c, the stdout logger is initialized and added before reading the logging settings, but wasn't re-added after reading the settings. | |||||
| * | | conftest: Make outgoing sequence number set by reset_seq configurable | Thomas Klute | 2013-01-08 | 2 | -8/+70 | |
| | | | | | | | | | | | | | | | | | This is useful for certain test cases. Passing the sequence number to the callback requires a new struct that contains both the number and the xfrm_usersa_id. The new configuration parameter is called oseq in accordance with the kernel name, see the comment in the reset_cb callback function for details. | |||||
| * | | Include opensslconf.h before checking its defines | Martin Willi | 2013-01-03 | 1 | -0/+2 | |
| | | | ||||||
| * | | Don't build OpenSSL PKCS#7 code if OPENSSL_NO_CMS defined | Martin Willi | 2013-01-03 | 1 | -0/+4 | |
| | | | ||||||
| * | | make pacman.sh run under cron | Andreas Steffen | 2012-12-26 | 1 | -9/+13 | |
| | | | ||||||
| * | | deleted newly constructed attributes in send_assessment | Andreas Steffen | 2012-12-24 | 3 | -21/+7 | |
| | | | ||||||
| * | | Added Russian and Ukrainian strings for Android client | Dmitry Korzhevin | 2012-12-24 | 4 | -0/+252 | |
| |/ | ||||||
| * | Add parantheses to avoid compiler warning | Martin Willi | 2012-12-24 | 1 | -1/+1 | |
| | | ||||||
| * | Send empty CDATA batch if TNC client has no data to send | Andreas Steffen | 2012-12-23 | 1 | -16/+28 | |
| | | ||||||
| * | Fixed some typos, courtesy of codespell | Tobias Brunner | 2012-12-20 | 10 | -11/+11 | |
| | | ||||||
| * | Raise an alert if IKE SA is kept | Adrian-Ken Rueegsegger | 2012-12-20 | 2 | -0/+3 | |
| | | | | | | This alert is raised when the establishment of a child SA fails but the IKE SA is kept. | |||||
| * | stroke: Drop unneeded [MY|OTHER]_NETBITS | Reto Buerki | 2012-12-19 | 1 | -2/+2 | |
| | | ||||||
| * | stroke: Enable install_policy in add_connection() | Reto Buerki | 2012-12-19 | 1 | -0/+1 | |
| | | ||||||
| * | Add support for draft-ietf-ipsec-nat-t-ike-03 and earlier | Volker Rümelin | 2012-12-19 | 14 | -90/+311 | |
| | | | | | | This adds support for early versions of the draft that eventually resulted in RFC 3947. | |||||
| * | Add missing error_notify_msg.h to distribution tarball | Martin Willi | 2012-12-19 | 1 | -1/+2 | |
| | | ||||||
| * | Add an error-notify sample application to listen to error notifications | Martin Willi | 2012-12-19 | 3 | -0/+66 | |
| | | ||||||
| * | Add an error-notify plugin to send catched alerts to listening applications | Martin Willi | 2012-12-19 | 9 | -0/+743 | |
| | | ||||||
| * | Raise an alert if half-open timeout limit reached | Martin Willi | 2012-12-19 | 2 | -0/+3 | |
| | | ||||||
| * | Raise an alert if an authorize() hook fails | Martin Willi | 2012-12-19 | 2 | -0/+6 | |
| | | ||||||
| * | Raise an alert if allocating virtual IPs fails | Martin Willi | 2012-12-19 | 2 | -0/+4 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |