aboutsummaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* tun-device: Avoid opening /dev/tunX multiple times (e.g. on FreeBSD)Tobias Brunner2013-06-211-2/+6
|
* kernel-libipsec: Router reads packets from multiple TUN devicesTobias Brunner2013-06-214-16/+268
| | | | These devices are collected via kernel_listener_t interface.
* kernel-libipsec: Use separate class to route packets between charon, ↵Tobias Brunner2013-06-214-74/+188
| | | | libipsec and TUN device
* kernel-pfroute: Raise tun event when creating/destroying TUN devices for ↵Tobias Brunner2013-06-211-1/+6
| | | | virtual IPs
* kernel: Add an event kernel interfaces can raise if they create/destroy a ↵Tobias Brunner2013-06-213-5/+43
| | | | TUN device
* printf-hook: Avoid double-free when freeing Vstr configTobias Brunner2013-06-211-1/+0
| | | | | | | Thread-specific objects get freed when the thread value object is destroyed (wasn't the case earlier, i.e. before 2b19dd35), which may cause the second call to vstr_free_conf() to fail in an assert in Vstr (depending on how it was built).
* kernel-libipsec: Track policies and automatically install routesTobias Brunner2013-06-211-5/+455
| | | | | | | | The routes direct traffic matching the remote traffic selector to the TUN device. If the remote traffic selector includes the IKE peer a very specific route is installed to allow IKE traffic.
* kernel-libipsec: Handle packets between charon socket, libipsec and TUN deviceTobias Brunner2013-06-211-0/+85
|
* kernel-libipsec: Create a TUN device and use it to install virtual IPsTobias Brunner2013-06-212-0/+40
|
* kernel-libipsec: Add plugin that implements kernel_ipsec_t using libipsecTobias Brunner2013-06-216-0/+392
|
* kernel-netlink: Routes don't require a gateway/nexthopTobias Brunner2013-06-211-5/+9
|
* charon-cmd: Document auxiliary optionsTobias Brunner2013-06-211-0/+15
|
* charon-cmd: Link strongswan.conf(5) and charon-cmd(8) man pagesTobias Brunner2013-06-211-2/+24
|
* charon-cmd: Use fixed number of character to align command descriptionsTobias Brunner2013-06-211-16/+15
| | | | | If the command and argument is longer than that write the first line of description to the following line.
* charon-cmd: Shortened and fixed command descriptionsTobias Brunner2013-06-211-2/+2
|
* charon-cmd: Simplify usage output for authentication profilesTobias Brunner2013-06-211-11/+3
| | | | The man page describes the min full.
* charon-cmd: Add Aggressive Mode profiles to man pageTobias Brunner2013-06-211-6/+10
|
* charon-cmd: Add man page for charon-cmd(8)Tobias Brunner2013-06-212-0/+123
|
* charon-cmd: Add --debug argument to set the default log levelTobias Brunner2013-06-213-2/+13
|
* charon-cmd: Handle simple command line arguments like --help before the othersTobias Brunner2013-06-211-3/+14
|
* plugin-loader: Move logging of failed features to status()Tobias Brunner2013-06-211-7/+11
| | | | | | | | | Still log an error message if critical features fail, as loaded plugins/features are not logged in that case. This way loaded plugins are printed before failed features and the relation is easier to make for users. It also allows programs to log this message on a different level.
* plugin-loader: Add method to print loaded plugins on a given log levelTobias Brunner2013-06-2110-4/+26
|
* plugin-loader: Collect statistics while loading features, print them in case ↵Tobias Brunner2013-06-211-69/+40
| | | | | | | features failed to load There is no need to explicitly search for failed features in critical plugins as this is now detected while loading the features.
* plugin-loader: Use different log level if failed feature is in critical pluginTobias Brunner2013-06-211-2/+16
|
* plugin-loader: Log message when failing to load pluginTobias Brunner2013-06-211-0/+8
|
* plugin-loader: Reduce verbosity while loading pluginsTobias Brunner2013-06-211-4/+4
|
* Fix crash if the initiator has no suitable proposal availableTobias Brunner2013-06-211-0/+5
| | | | Could be triggered with a typo in the ike or esp options when ! is used.
* leak-detective: (re-)whitelist some OpenSSL functionsMartin Willi2013-06-211-0/+5
| | | | | | | Some static allocations in plugins won't get freed, because in the test case process the plugins are not destroyed. If a plugin would clean up allocations done while just using the plugin, these show up as leak in the child process, letting tests fail.
* unit-tests: load plugins in test-runner from build directoryMartin Willi2013-06-212-1/+30
|
* unit-tests: link test-runner against -lpthreadMartin Willi2013-06-211-0/+1
|
* unit-tester: remove obsolete rsa_gen test, now covered in unit-testsMartin Willi2013-06-213-122/+0
|
* unit-tests: add RSA test cases, very similar to ECDSAMartin Willi2013-06-214-1/+400
|
* unit-tests: test with /dev/urandom if random plugin is in useMartin Willi2013-06-211-0/+6
|
* unit-tests: test supported ECDSA schemes onlyMartin Willi2013-06-211-0/+14
|
* Move test-runners has_feature() function to plugin loaderMartin Willi2013-06-213-32/+40
|
* unit-tests: enforce CET/CEST timezone to properly test non-UTC time formattingMartin Willi2013-06-211-0/+6
|
* unit-tests: don't use ck_assert() to test a cleared chunk, as it allocates dataMartin Willi2013-06-211-3/+10
| | | | The new allocation might be in the freed area, affecting the test result.
* unit-tests: define 64-bit constats with ULL, fixing compiler warning on 32-bitMartin Willi2013-06-211-2/+2
|
* unit-tests: test some zeroed ECDSA signatures that never should succeedMartin Willi2013-06-211-0/+63
|
* unit-tests: perform signing/validation with keys ECDSA keys generated or loadedMartin Willi2013-06-211-0/+47
|
* unit-tests: add an ECDSA test case loading keysMartin Willi2013-06-211-0/+61
|
* unit-tests: perform a first ECDSA test case if ECDSA is supportedMartin Willi2013-06-214-1/+58
|
* unit-tests: add a helper function checking if a plugin feature is availableMartin Willi2013-06-211-0/+32
|
* unit-tests: add a test case checking if all test vectors have been passedMartin Willi2013-06-214-1/+44
|
* crypto-factory: count the number of test vector failures during registrationMartin Willi2013-06-212-30/+73
|
* unit-tests: load all libstrongswan plugins in test-runnerMartin Willi2013-06-212-0/+7
|
* stroke: Add statusall-nb as alias for statusallnbTobias Brunner2013-06-212-1/+2
|
* stroke: Add non-blocking versions of up and downTobias Brunner2013-06-213-5/+23
| | | | | | stroke up-nb and stroke down-nb do not block until the command has finished. Instead, they return right after initiating the respective operation.
* starter: Make ipsec.conf path configurable via command lineTobias Brunner2013-06-211-3/+14
|
* pubkey: Improve comparison of raw public key certificate objectsTobias Brunner2013-06-211-1/+11
|