| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Fix boolean return value if an empty RSA signature is detected in gmp plugin | Martin Willi | 2012-05-31 | 1 | -1/+1 | |
| | | | | | Fixes CVE-2012-2388. | |||||
| * | Avoid queueing more than one retry initiate job. | Tobias Brunner | 2012-05-30 | 3 | -4/+35 | |
| | | ||||||
| * | Retry IKE_SA initiation if DNS resolution failed. | Tobias Brunner | 2012-05-30 | 1 | -4/+39 | |
| | | | | | | This is disabled by default and can be enabled with the charon.retry_initiate_interval option in strongswan.conf. | |||||
| * | Job added to re-initiate an IKE_SA. | Tobias Brunner | 2012-05-30 | 3 | -0/+144 | |
| | | ||||||
| * | Fix MOBIKE address update if responder address changed. | Tobias Brunner | 2012-05-25 | 1 | -2/+2 | |
| | | | | | | Use the source address of the current MOBIKE message as peer address instead of assuming the address cached on the IKE_SA is still valid. | |||||
| * | Resolve hosts before reauthenticating due to address change. | Tobias Brunner | 2012-05-25 | 1 | -0/+2 | |
| | | ||||||
| * | Don't queue delete_ike_sa job when setting IKE_DELETING. | Tobias Brunner | 2012-05-25 | 2 | -9/+1 | |
| | | | | | | This avoids deleting IKE_SAs during reauthentication (without trying to reestablish them). | |||||
| * | During reauthentication reestablish IKE_SA even if deleting the old one fails. | Tobias Brunner | 2012-05-25 | 1 | -0/+6 | |
| | | ||||||
| * | Integrated main parts of IKE_REAUTH task into ike_sa_t.reestablish. | Tobias Brunner | 2012-05-25 | 2 | -115/+77 | |
| | | ||||||
| * | Fixed route lookup in case MOBIKE is not enabled. | Tobias Brunner | 2012-05-25 | 1 | -3/+9 | |
| | | ||||||
| * | Added encapsulation mode transform attribute to IPComp proposal. | Tobias Brunner | 2012-05-25 | 3 | -5/+10 | |
| | | ||||||
| * | Add an additional proposal without IPComp to SA payload. | Tobias Brunner | 2012-05-24 | 1 | -17/+15 | |
| | | ||||||
| * | Added log message if peer does not accept/provide IPComp proposal. | Tobias Brunner | 2012-05-24 | 1 | -2/+12 | |
| | | ||||||
| * | Added support to negotiate IPComp during Quick Mode. | Tobias Brunner | 2012-05-24 | 1 | -11/+91 | |
| | | ||||||
| * | Added support for IKEv1 IPComp proposals in SA payload. | Tobias Brunner | 2012-05-24 | 5 | -14/+98 | |
| | | ||||||
| * | Added support for IKEv1 IPComp proposals in proposal substructure. | Tobias Brunner | 2012-05-24 | 4 | -10/+129 | |
| | | ||||||
| * | Fix memleak during Quick Mode in case no SPI can be allocated from kernel. | Tobias Brunner | 2012-05-24 | 1 | -8/+8 | |
| | | ||||||
| * | Properly filter IKEv1 proposals consisting of multiple proposal payloads. | Tobias Brunner | 2012-05-24 | 1 | -9/+15 | |
| | | | | | | | | Since a proposal_t object is created for each transform contained in the proposal payload, it does not work to simply remove the last proposal_t object added to the list (there may be several other extracted from the previous proposal payload). | |||||
| * | Fixed check for loaded plugins with feature types that are not compared exactly. | Tobias Brunner | 2012-05-24 | 1 | -25/+13 | |
| | | | | | | Previously e.g. RNGs with weaker strength would have overwritten stronger ones. | |||||
| * | get_match() method added to hashtable_t. | Tobias Brunner | 2012-05-24 | 2 | -5/+34 | |
| | | ||||||
| * | Use a hashtable to check for already loaded plugin features. | Tobias Brunner | 2012-05-23 | 1 | -20/+37 | |
| | | ||||||
| * | Hash function for plugin features added. | Tobias Brunner | 2012-05-23 | 2 | -0/+68 | |
| | | ||||||
| * | Apply IDir before deriving keys as aggressive initiator | Martin Willi | 2012-05-23 | 1 | -4/+4 | |
| | | ||||||
| * | Use received identity to look up PSK as aggressive responder | Martin Willi | 2012-05-23 | 1 | -2/+9 | |
| | | ||||||
| * | Check if we actually have an initiating packet to free while processing ↵ | Martin Willi | 2012-05-23 | 1 | -1/+1 | |
| | | | | | responses | |||||
| * | list IKEv1 Aggressive Mode in ipsec statusall | Andreas Steffen | 2012-05-23 | 1 | -2/+9 | |
| | | ||||||
| * | Switch to alternative peer config in IKEv1 Main and Aggressive Mode. | Tobias Brunner | 2012-05-21 | 4 | -24/+85 | |
| | | ||||||
| * | Cancel pending retransmits when flushing active task queue | Martin Willi | 2012-05-21 | 1 | -0/+4 | |
| | | ||||||
| * | Cancel active quick mode task when receiving INFORMATIONAL error | Martin Willi | 2012-05-21 | 1 | -0/+30 | |
| | | ||||||
| * | Flush task queues explicitly, not implicitly if task returns ALREADY_DONE | Martin Willi | 2012-05-21 | 6 | -12/+20 | |
| | | ||||||
| * | Wrap task managers flush_queue() in IKE_SA | Martin Willi | 2012-05-21 | 2 | -0/+14 | |
| | | ||||||
| * | Make task managers flush_queue() method public | Martin Willi | 2012-05-21 | 3 | -20/+62 | |
| | | ||||||
| * | Destroy Netlink socket only after deleting remaining source routes. | Tobias Brunner | 2012-05-21 | 1 | -2/+1 | |
| | | ||||||
| * | Enumerate correct list while removing nonce_gens, fix deregistration | Martin Willi | 2012-05-21 | 1 | -1/+1 | |
| | | ||||||
| * | Added a convenience function to dump backtraces for gdb-less debugging | Martin Willi | 2012-05-21 | 2 | -0/+26 | |
| | | ||||||
| * | Fix IKEv1 DPD clear, destroying IKE_SA even if reestablish not needed | Martin Willi | 2012-05-21 | 1 | -9/+3 | |
| | | ||||||
| * | Properly munmap/close file if loading IMC/IMV fails. | Tobias Brunner | 2012-05-18 | 1 | -7/+7 | |
| | | ||||||
| * | Remove executable flag from source files. | Tobias Brunner | 2012-05-18 | 32 | -0/+0 | |
| | | ||||||
| * | Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, ↵ | Tobias Brunner | 2012-05-18 | 46 | -51/+66 | |
| | | | | | tasks etc.). | |||||
| * | Removed superfluous @param in bus.h. | Tobias Brunner | 2012-05-18 | 1 | -1/+0 | |
| | | ||||||
| * | whitelist: Make sure listed IDs are null-terminated. | Tobias Brunner | 2012-05-18 | 1 | -0/+1 | |
| | | ||||||
| * | pkcs8: Initialize salt and IV properly. | Tobias Brunner | 2012-05-18 | 1 | -1/+1 | |
| | | ||||||
| * | List registered nonce generators in statusall output. | Tobias Brunner | 2012-05-18 | 1 | -2/+18 | |
| | | ||||||
| * | Add enumerator for registered nonce generators. | Tobias Brunner | 2012-05-18 | 2 | -9/+33 | |
| | | ||||||
| * | Use nonce_gen instead of rng to generate nonces | Adrian-Ken Rueegsegger | 2012-05-18 | 4 | -34/+34 | |
| | | | | | | Replace usage of rng plugin with nonce generator to create nonces in IKE_INIT, CHILD_CREATE and QUICK_MODE tasks and the IKEv1 phase 1 helper. | |||||
| * | Add create_nonce_gen function to keymat interface | Adrian-Ken Rueegsegger | 2012-05-18 | 3 | -0/+24 | |
| | | | | | This function returns a nonce generator object. | |||||
| * | Add nonce plugin implementation | Adrian-Ken Rueegsegger | 2012-05-18 | 6 | -0/+271 | |
| | | | | | | | | This nonce generator uses an RNG to generate nonces. The RNG quality is currently set to RNG_WEAK which is the same value used in IKE init. The plugin is enabled and thus built by default. | |||||
| * | Add nonce generator interface | Adrian-Ken Rueegsegger | 2012-05-18 | 6 | -0/+163 | |
| | | | | | | | | Nonce generators (nonce_gen_t) can be used to get or allocate nonces. Users can request nonce generators from the crypto factory while nonce plugins register/remove themselves to/from the crypto factory. | |||||
| * | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 19 | -25/+76 | |
| | | ||||||
| * | Moved IKEv1 DPD processing to task manager, fix sequence issues | Martin Willi | 2012-05-15 | 3 | -73/+72 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |