tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Use a single thread-specific value for our custom rwlock_t implementation	Tobias Brunner	2012-08-03	1	-50/+67
\| \| \| \| \| \|	The pthread implementation on Android currently only supports 64 different thread-specific values per process, which we hit easily when every rwlock_t requires one.
*	Fix linking of addrblock plugin when building monolithic	Martin Willi	2012-08-03	1	-1/+1
\| \| \| \|	Fixes #212.
*	Reject initial exchange messages early once IKE_SA is established	Martin Willi	2012-08-02	1	-0/+18
\|
*	Move MODP_CUSTOM va_arg fetching out of loop	Martin Willi	2012-08-02	1	-15/+11
\| \| \| \|	It seems problematic at least on PPC with gcc 4.3, fixes #208.
*	libimcv requires nonce plugin	Andreas Steffen	2012-07-31	1	-1/+1
\|
*	Lookup IKEv1 PSK even if the peer identity is not known	Martin Willi	2012-07-31	1	-1/+1
\|
*	update state before handling status	Andreas Steffen	2012-07-30	1	-16/+20
\|
*	implemented support if functional sub-components	Andreas Steffen	2012-07-30	19	-285/+630
\|
*	extended and documented ipsec attest	Andreas Steffen	2012-07-30	4	-46/+107
\|
*	Proper fallback if capability dropping is not available	Tobias Brunner	2012-07-27	4	-2/+9
\|
*	The use of $< in Makefiles is not portable	Tobias Brunner	2012-07-27	3	-5/+5
\| \| \| \| \| \|	It requires GNU make which is not what most people use on e.g. FreeBSD. Fixes #205.
*	Include stdint.h for UINTxx_MAX defines	Tobias Brunner	2012-07-27	1	-2/+3
\| \| \| \|	Fixes #205.
*	measure all kernel modules and optimize firefox and thunderbird measurements	Andreas Steffen	2012-07-27	1	-34/+14
\|
*	with --relative --file do not insert absolute filenames into database	Andreas Steffen	2012-07-27	1	-3/+5
\|
*	Don't include acquiring packet traffic selectors in IKEv1	Martin Willi	2012-07-26	1	-0/+5
\| \| \| \| \| \| \| \|	As we only can negotiate a single TS in IKEv1, don't prepend the triggering packet TS, as we do in IKEv2. Otherwise we don't establish the TS of the configuration, but only that of the triggering packet. Fixes #207.
*	Implement late peer config switching after XAuth authentication	Martin Willi	2012-07-26	1	-15/+80
\| \| \| \| \| \| \|	If additional authentication constraints, such as group membership, is not fulfilled by an XAuth backend, we search for another peer configuration that fulfills all constraints, including those from phase1.
*	Check if XAuth round complies to configured authentication round	Martin Willi	2012-07-26	1	-7/+18
\|
*	Show which group would be required when failing in constraint check	Martin Willi	2012-07-26	1	-8/+10
\|
*	Don't add ANY identity constraint to auth config, as XAuth rounds don't use one	Martin Willi	2012-07-26	2	-3/+15
\|
*	Merge auth config items added from XAuth backends to IKE_SA	Martin Willi	2012-07-26	1	-0/+1
\|
*	Add an ipsec.conf leftgroups2 parameter for the second authentication round	Martin Willi	2012-07-26	8	-3/+15
\|
*	IMA SHA1 file measurement is not needed any more	Andreas Steffen	2012-07-23	1	-9/+1
\|
*	fixed typo	Andreas Steffen	2012-07-23	1	-1/+1
\|
*	Release leaking child config after uninstalling shunt policy	Martin Willi	2012-07-23	1	-0/+1
\|
*	moved PA-TNC message logging to level 1	Andreas Steffen	2012-07-23	1	-2/+2
\|
*	transport IMA file info via PTS Component Evidence Policy URI	Andreas Steffen	2012-07-23	11	-119/+156
\|
*	ipsec attest now deletes file hashes	Andreas Steffen	2012-07-22	2	-2/+25
\|
*	buffer PA-TNC attributes until Generate Attestation Evidence attribute is ↵	Andreas Steffen	2012-07-21	3	-21/+20
\| \| \| \|	received
*	allow --rel as an abbreviation for --relative	Andreas Steffen	2012-07-21	1	-0/+1
\|
*	moved all shadow PCR stuff to the pts_pcr class	Andreas Steffen	2012-07-21	8	-292/+335
\|
*	Support Unity split-include/exclude options in attr plugin	Martin Willi	2012-07-20	1	-7/+9
\|
*	Don't print hexdumps on loglevel 1 if hash verification fails	Martin Willi	2012-07-20	1	-3/+3
\|
*	created a pts_pcr class for PCR computations	Andreas Steffen	2012-07-20	4	-53/+285
\|
*	renamed build_database.sh to build-database.sh	Andreas Steffen	2012-07-20	2	-1/+2
\|
*	why the hell do firefox, thunderbird and acroread their own Linux libraries?	Andreas Steffen	2012-07-19	1	-1/+40
\|
*	added some multiply defined libraries	Andreas Steffen	2012-07-19	1	-0/+4
\|
*	queries with relative filenames might return multiple results	Andreas Steffen	2012-07-19	1	-9/+13
\|
*	updated build_database.sh	Andreas Steffen	2012-07-19	1	-123/+190
\|
*	added index to files table	Andreas Steffen	2012-07-19	1	-0/+4
\|
*	updated build_database.sh	Andreas Steffen	2012-07-19	1	-4/+52
\|
*	Fix EAP-MSCHAPv2 master key derivation, broken with 87dd205b	Martin Willi	2012-07-18	1	-4/+12
\|
*	Remove debugging leftovers	Martin Willi	2012-07-18	1	-10/+2
\|
*	Add a SHA1 test vector forcing padding over block boundary	Martin Willi	2012-07-18	2	-0/+7
\|
*	builds an Ubuntu 12.04 LTS measurement database	Andreas Steffen	2012-07-18	2	-0/+79
\|
*	minor fixes in attest	Andreas Steffen	2012-07-18	2	-2/+2
\|
*	Use centralized hasher names in pki utility	Martin Willi	2012-07-17	6	-45/+8
\|
*	Use centralized hasher names in coupling plugin	Martin Willi	2012-07-17	1	-20/+2
\|
*	Use centralized hasher names in openssl plugin	Martin Willi	2012-07-17	2	-73/+10
\|
*	Add short names for hasher algorithms	Martin Willi	2012-07-17	2	-0/+18
\|
*	various PTS fixes	Andreas Steffen	2012-07-17	4	-6/+8
\|