Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | removed unused variables | Andreas Steffen | 2012-07-11 | 1 | -2/+0 | |
| | ||||||
* | fixed libstrongswan/Makefile.am | Andreas Steffen | 2012-07-11 | 1 | -11/+11 | |
| | ||||||
* | Use "-include config.h" when building ruby dumm extension | Martin Willi | 2012-07-11 | 1 | -1/+1 | |
| | ||||||
* | fixed logging of unsupported TNCCS version | Andreas Steffen | 2012-07-11 | 1 | -1/+1 | |
| | ||||||
* | PB-TNC Client sends empty CLOSE batch only in DECIDED state | Andreas Steffen | 2012-07-11 | 1 | -10/+23 | |
| | ||||||
* | have_recommendation() accepts NULL arguments | Andreas Steffen | 2012-07-11 | 1 | -4/+12 | |
| | ||||||
* | send empty SDATA batch if no recommendation is available yet, but in order ↵ | Andreas Steffen | 2012-07-11 | 4 | -3/+58 | |
| | | | | to avoid loops only if no empty CDATA batch was received | |||||
* | moved batch size calculation into pb_tnc_batch_t | Andreas Steffen | 2012-07-11 | 4 | -31/+50 | |
| | ||||||
* | make maximum PB-TNC batch size configurable | Andreas Steffen | 2012-07-11 | 1 | -2/+11 | |
| | ||||||
* | limit the size of a PB-TNC batch to the maximum EAP-TNC packet size | Andreas Steffen | 2012-07-11 | 10 | -88/+134 | |
| | ||||||
* | eliminate message length field in EAP-TNC | Andreas Steffen | 2012-07-11 | 3 | -4/+8 | |
| | ||||||
* | due to single fragment, total length does not have to be included | Andreas Steffen | 2012-07-11 | 1 | -3/+1 | |
| | ||||||
* | EAP-TNC does not support fragmentation | Andreas Steffen | 2012-07-11 | 1 | -12/+14 | |
| | ||||||
* | allow to transmit 64k TLS Handshake and Application messages via EAP-[T]TLS | Andreas Steffen | 2012-07-11 | 3 | -19/+23 | |
| | ||||||
* | some tls_eap optimizations | Andreas Steffen | 2012-07-11 | 1 | -10/+13 | |
| | ||||||
* | max_message_count = 0 disables limit | Andreas Steffen | 2012-07-11 | 1 | -1/+1 | |
| | ||||||
* | defined ITA Dummy PA-TNC attribute for test purposes | Andreas Steffen | 2012-07-11 | 9 | -18/+333 | |
| | ||||||
* | use TSS_PCRS_STRUCT_DEFAULT | Andreas Steffen | 2012-07-11 | 1 | -1/+1 | |
| | ||||||
* | log invalid TLS packet length | Andreas Steffen | 2012-07-11 | 1 | -1/+2 | |
| | ||||||
* | check boot_aggregate value | Andreas Steffen | 2012-07-11 | 1 | -64/+111 | |
| | ||||||
* | refactored PTS functional component measurements | Andreas Steffen | 2012-07-11 | 9 | -187/+385 | |
| | ||||||
* | Install dev headers only if --with-dev-headers= option is set | Martin Willi | 2012-07-11 | 3 | -3/+9 | |
| | ||||||
* | Install libtls development headers | Martin Willi | 2012-07-11 | 1 | -12/+9 | |
| | ||||||
* | Install libfast development headers | Martin Willi | 2012-07-11 | 1 | -2/+7 | |
| | ||||||
* | Check if config.h passed correctly via gcc -include | Martin Willi | 2012-07-11 | 1 | -0/+4 | |
| | ||||||
* | Install libstrongswan development headers | Martin Willi | 2012-07-11 | 2 | -81/+56 | |
| | ||||||
* | Use and install a config.h AC_CONFIG_HEADER that contains all AC_DEFINE results | Martin Willi | 2012-07-11 | 1 | -0/+3 | |
| | ||||||
* | Add safe_strerror() to leak detective whitelist | Martin Willi | 2012-07-11 | 1 | -0/+1 | |
| | | | | | | While the thread specific strerror buffer gets cleaned up for worker threads during their termination, the main thread itself, and so its strerror buffer, is still alive during leak reports. | |||||
* | Send cert request based on peers configured authentication class | Martin Willi | 2012-07-10 | 1 | -3/+30 | |
| | ||||||
* | Add an option to disable libstrongswan certificate caching | Martin Willi | 2012-07-09 | 1 | -18/+29 | |
| | ||||||
* | getpwnam_r and getgrnam_r are not supported by the Android NDK | Tobias Brunner | 2012-07-09 | 1 | -24/+69 | |
| | ||||||
* | Android.mk of libstrongswan updated | Tobias Brunner | 2012-07-09 | 1 | -0/+2 | |
| | ||||||
* | Don't send CERTREQs when initiating aggressive mode PSK | Martin Willi | 2012-07-09 | 1 | -0/+4 | |
| | ||||||
* | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 16 | -233/+393 | |
| | ||||||
* | Use spin locks to update IKE_SAs in controller_t | Tobias Brunner | 2012-07-04 | 1 | -4/+38 | |
| | | | | | | This ensures the listeners don't miss any events after the SAs have been checked out in the asynchronously executed jobs. This is a matter of memory visibility and not primary a matter of exclusive access. | |||||
* | Added wrapper for POSIX spin locks | Tobias Brunner | 2012-07-04 | 3 | -0/+191 | |
| | ||||||
* | Fixed job handling in controller_t | Tobias Brunner | 2012-07-04 | 1 | -110/+128 | |
| | | | | Also IKE_SAs are now checked out in the jobs and not before. | |||||
* | Add charon-nm to .gitignore | Martin Willi | 2012-07-03 | 1 | -0/+1 | |
| | ||||||
* | Default to register_printf_specifier() if no printf hooking #defined | Martin Willi | 2012-07-03 | 1 | -0/+7 | |
| | | | | | | This allows us to build (non-./configured) external tools against libstrongswan without explicitly specifiying the most commonly used printf hooking function. | |||||
* | openssl: Ensure the thread ID is never zero | Tobias Brunner | 2012-07-03 | 1 | -1/+3 | |
| | | | | | | This might otherwise cause problems because OpenSSL tries to lock mutexes recursively if it assumes the lock is held by a different thread e.g. during FIPS initialization. | |||||
* | Accept non-"/0" subnet sizes for traffic selectors starting at 0.0.0.0 | Martin Willi | 2012-07-02 | 1 | -40/+9 | |
| | ||||||
* | Added GPL header to AndroidConfigLocal.h | Tobias Brunner | 2012-06-29 | 1 | -0/+15 | |
| | ||||||
* | Removed superfluous remove_hasher() call in md5 plugin | Tobias Brunner | 2012-06-29 | 1 | -2/+0 | |
| | ||||||
* | Pass "lo" as faked tundev to NM, as it now needs a valid interface since 0.9 | Martin Willi | 2012-06-29 | 1 | -3/+4 | |
| | ||||||
* | As a responder, don't start a TRANSACTION request if we expect one from the ↵ | Martin Willi | 2012-06-29 | 2 | -2/+4 | |
| | | | | initiator | |||||
* | added Ubuntu 12.04 LTS i686 measurements | Andreas Steffen | 2012-06-28 | 1 | -0/+319 | |
| | ||||||
* | IMCs and IMVs might depend on X.509 certificates or trusted public keys | Andreas Steffen | 2012-06-28 | 2 | -0/+4 | |
| | ||||||
* | Defined a macro to replace strerror(3) with calls to thread-safe wrapper | Tobias Brunner | 2012-06-28 | 2 | -0/+7 | |
| | ||||||
* | Thread-safe wrapper around strerror(3)/strerror_r(3) added | Tobias Brunner | 2012-06-28 | 2 | -4/+92 | |
| | ||||||
* | Show some uname() info in "ipsec statusall" | Martin Willi | 2012-06-28 | 1 | -3/+10 | |
| |