tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
* \|	Fixed some typos in Ukrainian translation	Pavel Kopchyk	2013-01-09	1	-15/+16
\| \|
* \|	conftest: Add support for time_format and ike_name options in log sections	Thomas Klute	2013-01-08	1	-1/+18
\| \| \| \| \| \| \| \| \| \| \| \|	Both options are well supported for normal operation but were completely ignored by conftest, which used hard coded defaults. File options are still missing but could be added in a similar way.
* \|	conftest: Fix log level settings for stdout	Thomas Klute	2013-01-08	1	-0/+3
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This patch fixes bug #272 ("conftest ignores log settings for stdout"). http://wiki.strongswan.org/issues/272 According to the documentation of add_logger in src/libcharon/bus/bus.h, the relevant log levels of a logger are registered with the logging subsystem when adding the logger. If the log levels change later, the logger must be re-added to propagate the new settings. In conftest.c, the stdout logger is initialized and added before reading the logging settings, but wasn't re-added after reading the settings.
* \|	conftest: Make outgoing sequence number set by reset_seq configurable	Thomas Klute	2013-01-08	2	-8/+70
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This is useful for certain test cases. Passing the sequence number to the callback requires a new struct that contains both the number and the xfrm_usersa_id. The new configuration parameter is called oseq in accordance with the kernel name, see the comment in the reset_cb callback function for details.
* \|	Include opensslconf.h before checking its defines	Martin Willi	2013-01-03	1	-0/+2
\| \|
* \|	Don't build OpenSSL PKCS#7 code if OPENSSL_NO_CMS defined	Martin Willi	2013-01-03	1	-0/+4
\| \|
* \|	make pacman.sh run under cron	Andreas Steffen	2012-12-26	1	-9/+13
\| \|
* \|	deleted newly constructed attributes in send_assessment	Andreas Steffen	2012-12-24	3	-21/+7
\| \|
* \|	Added Russian and Ukrainian strings for Android client	Dmitry Korzhevin	2012-12-24	4	-0/+252
\|/
*	Add parantheses to avoid compiler warning	Martin Willi	2012-12-24	1	-1/+1
\|
*	Send empty CDATA batch if TNC client has no data to send	Andreas Steffen	2012-12-23	1	-16/+28
\|
*	Fixed some typos, courtesy of codespell	Tobias Brunner	2012-12-20	10	-11/+11
\|
*	Raise an alert if IKE SA is kept	Adrian-Ken Rueegsegger	2012-12-20	2	-0/+3
\| \| \| \| \|	This alert is raised when the establishment of a child SA fails but the IKE SA is kept.
*	stroke: Drop unneeded [MY\|OTHER]_NETBITS	Reto Buerki	2012-12-19	1	-2/+2
\|
*	stroke: Enable install_policy in add_connection()	Reto Buerki	2012-12-19	1	-0/+1
\|
*	Add support for draft-ietf-ipsec-nat-t-ike-03 and earlier	Volker Rümelin	2012-12-19	14	-90/+311
\| \| \| \| \|	This adds support for early versions of the draft that eventually resulted in RFC 3947.
*	Add missing error_notify_msg.h to distribution tarball	Martin Willi	2012-12-19	1	-1/+2
\|
*	Add an error-notify sample application to listen to error notifications	Martin Willi	2012-12-19	3	-0/+66
\|
*	Add an error-notify plugin to send catched alerts to listening applications	Martin Willi	2012-12-19	9	-0/+743
\|
*	Raise an alert if half-open timeout limit reached	Martin Willi	2012-12-19	2	-0/+3
\|
*	Raise an alert if an authorize() hook fails	Martin Willi	2012-12-19	2	-0/+6
\|
*	Raise an alert if allocating virtual IPs fails	Martin Willi	2012-12-19	2	-0/+4
\|
*	Raise an alert if kernel policy installation fails	Martin Willi	2012-12-19	2	-0/+4
\|
*	Raise an alert if kernel SA installation fails	Martin Willi	2012-12-19	2	-0/+4
\|
*	Raise an alert on traffic selector mismatch	Martin Willi	2012-12-19	2	-0/+5
\|
*	Raise alerts when enforcing IKE_SA unique policy	Martin Willi	2012-12-19	4	-0/+7
\|
*	Raise an alert if CHILD_SA proposals mismatch	Martin Willi	2012-12-19	2	-0/+4
\|
*	Raise an alert if IKE proposals mismatch	Martin Willi	2012-12-19	2	-0/+7
\|
*	Raise an alert of generating local authentication data fails	Martin Willi	2012-12-19	2	-6/+12
\|
*	Free leaking scep attributes	Martin Willi	2012-12-19	1	-0/+4
\|
*	Corrected error message if enveloped-data decryption fails	Martin Willi	2012-12-19	1	-1/+1
\|
*	Fix up serialNumber in openssl PKCS#7 if it has a leading MSB set	Martin Willi	2012-12-19	1	-2/+7
\|
*	Don't handle PKCS#7 containers with infinite length encodings in pkcs7 plugin	Martin Willi	2012-12-19	1	-0/+6
\|
*	Implement PKCS#7 decryption using openssl	Martin Willi	2012-12-19	1	-16/+255
\|
*	Make available wrapped certificates while verifying PKCS#7 signatures in openssl	Martin Willi	2012-12-19	1	-0/+22
\|
*	Implement openssl PKCS#7 certficiate enumeration	Martin Willi	2012-12-19	1	-0/+72
\|
*	Fix doxygen grouping regarding containers and PKCS#7	Martin Willi	2012-12-19	8	-11/+14
\|
*	Enable pkcs7 plugin when building scepclient on Android	Martin Willi	2012-12-19	1	-0/+2
\|
*	Move PKCS#9 attribute lists to pkcs7 plugin, as we currently use it there only	Martin Willi	2012-12-19	6	-45/+48
\|
*	Implement get_attribute() in openssl PKCS#7 backend	Martin Willi	2012-12-19	1	-1/+35
\|
*	Allocate data returned by pkcs7_t.get_attribute()	Martin Willi	2012-12-19	4	-2/+9
\|
*	Implement OpenSSL PKCS#7 signed-data parsing and verification	Martin Willi	2012-12-19	1	-4/+287
\|
*	Add a stub for OpenSSL PKCS#7 parsing	Martin Willi	2012-12-19	4	-0/+172
\|
*	Remove unused monolithic PKCS#7 code	Martin Willi	2012-12-19	4	-1241/+3
\|
*	Migrated scepclient to new modular PKCS# API	Martin Willi	2012-12-19	3	-95/+172
\|
*	Fix encryption algorithm/key size argument processing in PKCS#7 enveloped-data	Martin Willi	2012-12-19	1	-1/+1
\|
*	Properly clone PKCS#7 attributes passed to builder	Martin Willi	2012-12-19	1	-1/+1
\|
*	Fix enum names for container_type_t	Martin Willi	2012-12-19	1	-1/+1
\|
*	Add a --show option to pki --pkcs7 to print contained certificates	Martin Willi	2012-12-19	1	-1/+50
\|
*	Add an enumerator for PKCS#7 contained certificates	Martin Willi	2012-12-19	4	-0/+17
\|