| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 74 | -306/+1381 | |
| |\| | | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket. | |||||
| | * | Added option to prevent socket-default from setting the source address on ↵ | Tobias Brunner | 2012-08-08 | 1 | -1/+9 | |
| | | | | | | | | | outbound packets | |||||
| | * | Allocate UDP ports randomly in Android NDK build. | Tobias Brunner | 2012-08-08 | 1 | -1/+2 | |
| | | | ||||||
| | * | socket-default plugin allocates random ports if configured to 0. | Tobias Brunner | 2012-08-08 | 1 | -36/+84 | |
| | | | | | | | | | Also added strongswan.conf options to change the ports. | |||||
| | * | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 14 | -20/+33 | |
| | | | ||||||
| | * | Added get_port() method to socket_t to learn the listening port. | Tobias Brunner | 2012-08-08 | 6 | -5/+59 | |
| | | | ||||||
| | * | Added ESP log group for libipsec log messages. | Tobias Brunner | 2012-08-08 | 4 | -2/+7 | |
| | | | ||||||
| | * | Use send_no_marker to send NAT keepalives. | Tobias Brunner | 2012-08-08 | 2 | -9/+4 | |
| | | | ||||||
| | * | Avoid double-free when prepending Non-ESP marker. | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | | ||||||
| | * | Function added to send packets without Non-ESP marker. | Tobias Brunner | 2012-08-08 | 2 | -20/+36 | |
| | | | ||||||
| | * | Avoid unnecessary copy of packet data when removing Non-ESP marker. | Tobias Brunner | 2012-08-08 | 1 | -2/+1 | |
| | | | ||||||
| | * | Added packet_t.skip_bytes method to skip bytes at the start of a packet. | Tobias Brunner | 2012-08-08 | 2 | -3/+26 | |
| | | | ||||||
| | * | Improved how NAT-T keepalives are handled in sockets/receiver. | Tobias Brunner | 2012-08-08 | 4 | -24/+16 | |
| | | | ||||||
| | * | Let kernel interfaces decide how to enable UDP decapsulation of ESP packets. | Tobias Brunner | 2012-08-08 | 10 | -90/+133 | |
| | | | ||||||
| | * | Callback for ESP packets added to receiver. | Tobias Brunner | 2012-08-08 | 2 | -6/+86 | |
| | | | ||||||
| | * | Add Non-ESP marker in sender and not individual socket plugins. | Tobias Brunner | 2012-08-08 | 5 | -39/+23 | |
| | | | ||||||
| | * | Handle Non-ESP marker in receiver and not individual socket plugins. | Tobias Brunner | 2012-08-08 | 4 | -40/+34 | |
| | | | ||||||
| | * | Java code style fixed (analogous to C code). | Tobias Brunner | 2012-08-08 | 2 | -14/+28 | |
| | | | ||||||
| | * | Load libipsec in Android app. | Tobias Brunner | 2012-08-08 | 4 | -1/+15 | |
| | | | ||||||
| | * | Stub library for user space IPsec implementation added. | Tobias Brunner | 2012-08-08 | 6 | -0/+183 | |
| | | | ||||||
| | * | Some NDK build info updated. | Tobias Brunner | 2012-08-08 | 1 | -4/+7 | |
| | | | ||||||
| | * | Changed minimal SDK/API level to 14. | Tobias Brunner | 2012-08-08 | 3 | -4/+4 | |
| | | | ||||||
| | * | Added android.net.VpnService wrapper around charon (loaded via JNI). | Tobias Brunner | 2012-08-08 | 6 | -6/+228 | |
| | | | ||||||
| | * | Added Android shell app created with Android SDK. | Tobias Brunner | 2012-08-08 | 11 | -0/+118 | |
| | | | ||||||
| | * | Android.mk for NDK build added. | Tobias Brunner | 2012-08-08 | 4 | -0/+96 | |
| | | | ||||||
| | * | Moved Android specific logger to separate plugin. | Tobias Brunner | 2012-08-08 | 9 | -33/+168 | |
| | | | | | | | | | | | | | This is mainly because the other parts of the existing android plugin can not be built in the NDK (access to keystore and system properties are not part of the stable NDK libraries). | |||||
| | * | Link android plugin against liblog in the NDK. | Tobias Brunner | 2012-08-08 | 1 | -0/+1 | |
| | | | | | | | | | Doesn't seem to hurt the build within the source tree. | |||||
| | * | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 17 | -48/+66 | |
| | | | | | | | | | configurable. | |||||
| | * | Make path to Android OpenSSL headers configurable. | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | | ||||||
| | * | Don't require STRONGSWAN_CONF to be defined. | Tobias Brunner | 2012-08-08 | 1 | -2/+9 | |
| | | | ||||||
| | * | Don't require PLUGINDIR to be defined. | Tobias Brunner | 2012-08-08 | 1 | -6/+15 | |
| | | | | | | | | | If it is not available, we just load monolithically built plugins. | |||||
| * | | Doxygen fix | Tobias Brunner | 2012-08-11 | 1 | -1/+1 | |
| | | | ||||||
| * | | Avoid problems with Doxygen by adding warn_unused_result attribute at the ↵ | Tobias Brunner | 2012-08-11 | 9 | -61/+57 | |
| | | | | | | | | | end of method signatures | |||||
| * | | Add warn_unused_result attributes to rng_(get|allocate)_bytes_not_zero | Tobias Brunner | 2012-08-11 | 1 | -5/+6 | |
| | | | | | | | | | Also fixed Doxygen comments. | |||||
| * | | If _POSIX_SPIN_LOCKS is defined as -1, it is not available | Martin Willi | 2012-08-10 | 1 | -0/+4 | |
| | | | ||||||
| * | | If vstr printf functions are #defined, undef them before redefinition | Martin Willi | 2012-08-10 | 1 | -0/+31 | |
| | | | | | | | | | | | At least Mountain Lion seems to have them #defined to secure _chk variants. | |||||
| * | | Use actual daemon name to enable XAuth/PSK with aggressive mode | Martin Willi | 2012-08-10 | 1 | -2/+3 | |
| | | | ||||||
| * | | EAP-GTC can use any XAuth backend, including xauth-pam | Martin Willi | 2012-08-10 | 2 | -88/+45 | |
| | | | | | | | | | | | | | | | This makes EAP-GTC a generic plain password authentication method, as it is used with XAuth. Instead of verifying credentials with PAM, any backend can be configured. The default is xauth-pam, providing the same functionality as EAP-GTC in strongSwan 4.x. | |||||
| * | | Add xauth-pam, an XAuth backend verifying credentials with PAM | Martin Willi | 2012-08-10 | 6 | -0/+390 | |
| | | | ||||||
| * | | Add getspnam_r() to leak detective whitelist | Martin Willi | 2012-08-10 | 1 | -0/+1 | |
| | | | ||||||
| * | | make max_message_size parameter consistent with similar options | Andreas Steffen | 2012-08-09 | 2 | -2/+2 | |
| | | | ||||||
| * | | Check if TLS handshake received Finished before processing application data | Martin Willi | 2012-08-09 | 1 | -0/+6 | |
| |/ | ||||||
| * | Remove queued IKEv1 message before processing it | Martin Willi | 2012-08-08 | 1 | -3/+5 | |
| | | | | | | Avoids destruction or processing of a queued message in recursive process_message() call. | |||||
| * | Include src address in hash of initial message for Main Mode | Tobias Brunner | 2012-08-08 | 1 | -5/+31 | |
| | | | | | | | | If two initiators use the same SPI and also use the same SA proposal the hash for the initial message would be exactly the same. For IKEv2 and Aggressive Mode that's not a problem as these messages include random data (Ni, KEi payloads). | |||||
| * | implemented deletion of product_file database entries | Andreas Steffen | 2012-08-07 | 1 | -15/+13 | |
| | | ||||||
| * | Add DH group 15 (MODP-3072) to IKE proposal | Adrian-Ken Rueegsegger | 2012-08-06 | 1 | -0/+1 | |
| | | ||||||
| * | PEM loading soft-depends on MD5 only, as unencrypted files don't need MD5 | Martin Willi | 2012-08-03 | 1 | -4/+4 | |
| | | | | | Fixes #211. | |||||
| * | Rebuild charon after running ./configure to reflect plugin changes | Martin Willi | 2012-08-03 | 1 | -0/+2 | |
| | | ||||||
| * | Block XAuth transaction on established IKE_SAs, but allow Mode Config | Martin Willi | 2012-08-03 | 2 | -2/+1 | |
| | | ||||||
| * | Implemented recursive mutex without thread-specific counter | Tobias Brunner | 2012-08-03 | 1 | -23/+17 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |