Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fixed a minor vulnerability in which a malformed ASN.1 length field could ↵5.1.2rc1 | Andreas Steffen | 2014-02-14 | 1 | -0/+1 |
| | | | | cause a crash of the charon daemon if the verbose debug level 3 (raw hex dump) for the asn subsystem is enabled. | ||||
* | pacman.sh creates /etc/pts/dists directory if it doesn't exist yet | Andreas Steffen | 2014-02-13 | 1 | -0/+1 |
| | |||||
* | printf-hook-glibc: printf.h on FreeBSD 10 does not include stdargs.h | Tobias Brunner | 2014-02-13 | 1 | -1/+1 |
| | |||||
* | array: Fix compilation on FreeBSD | Tobias Brunner | 2014-02-13 | 1 | -2/+2 |
| | |||||
* | libpts: Move settings to <ns>.plugins with fallback to libimcv | Tobias Brunner | 2014-02-12 | 8 | -24/+25 |
| | |||||
* | libimcv: Move settings to <ns>.imcv and <ns>.plugins with fallback | Tobias Brunner | 2014-02-12 | 10 | -22/+32 |
| | |||||
* | libtnccs: Move settings to <ns>.tnc and <ns>.plugins with fallback | Tobias Brunner | 2014-02-12 | 7 | -9/+12 |
| | |||||
* | attr: Silently skip over load option | Tobias Brunner | 2014-02-12 | 1 | -0/+4 |
| | |||||
* | conf: Install strongswan.conf template from a separate directory | Tobias Brunner | 2014-02-12 | 2 | -40/+0 |
| | |||||
* | settings: Add support to enumerate sections and key/value pairs with fallbacks | Tobias Brunner | 2014-02-12 | 3 | -45/+187 |
| | |||||
* | settings: Implement subsections and key/value pairs with sorted arrays | Tobias Brunner | 2014-02-12 | 1 | -68/+74 |
| | | | | | | Is a bit more memory efficient (also due to lazy instantiation) and lookups for sections with lots of subsections/keys (e.g. charon.plugins) are faster. | ||||
* | array: Add fallback for qsort_r using thread-local value | Tobias Brunner | 2014-02-12 | 3 | -2/+49 |
| | | | | Cygwin for example does not support qsort_r. | ||||
* | plugin-loader: Optionally use load option in each plugin section to load plugins | Tobias Brunner | 2014-02-12 | 2 | -4/+144 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This now works because all plugins use the same config namespace. If <ns>.load_modular is true, the list of plugins to load is determined via the value of the <ns>.plugins.<name>.load options. Using includes the following is possible: charon { load_modular = yes plugins { include strongswan.d/charon/*.conf } } charon-cmd { load_modular = yes plugins { include strongswan.d/charon-cmd/*.conf } } Where each .conf file would contain something like: <name> { load = yes <option> = <value> } To increase the priority of individual plugins load = <priority> can be used (the default is 1). For instance, to use openssl instead of the built-in crypto plugins set in strongswan.d/charon/openssl.conf: openssl { load = 10 } If two plugins have the same priority their order in the default plugin list is preserved. Plugins not found in that list are ordered alphabetically before other plugins with the same priority. | ||||
* | array: Add array_bsearch function | Tobias Brunner | 2014-02-12 | 3 | -0/+141 |
| | |||||
* | array: Add array_sort function | Tobias Brunner | 2014-02-12 | 3 | -1/+167 |
| | |||||
* | libcharon: Remove unused charon->name | Tobias Brunner | 2014-02-12 | 10 | -21/+13 |
| | |||||
* | charon-tkm: Use lib->ns instead of charon->name | Tobias Brunner | 2014-02-12 | 3 | -5/+5 |
| | |||||
* | libcharon: Use lib->ns instead of charon->name | Tobias Brunner | 2014-02-12 | 72 | -259/+255 |
| | |||||
* | libhydra: Remove unused hydra->daemon | Tobias Brunner | 2014-02-12 | 11 | -22/+12 |
| | |||||
* | libhydra: Use lib->ns instead of hydra->daemon | Tobias Brunner | 2014-02-12 | 10 | -30/+30 |
| | |||||
* | libtls: Move settings to <ns>.tls with fallback to libtls | Tobias Brunner | 2014-02-12 | 2 | -4/+9 |
| | |||||
* | attr-sql: Use namespace for attr-sql config, with fallback | Tobias Brunner | 2014-02-12 | 3 | -5/+12 |
| | |||||
* | lib: All settings use configured namespace | Tobias Brunner | 2014-02-12 | 23 | -54/+54 |
| | |||||
* | lib: Add default config fallback for configured namespace | Tobias Brunner | 2014-02-12 | 1 | -0/+3 |
| | | | | All settings in the configured global namespace fall back to libstrongswan. | ||||
* | unit-tests: Test how settings_t handles some invalid data | Tobias Brunner | 2014-02-12 | 1 | -0/+72 |
| | |||||
* | settings: Add method that allows to define fallback sections for other sections | Tobias Brunner | 2014-02-12 | 3 | -13/+276 |
| | | | | | The fallbacks are currently only used for single value lookups. Enumerators are not affected by them. | ||||
* | settings: Make print_key() not rely on null-terminated beginning of key buffer | Tobias Brunner | 2014-02-12 | 1 | -10/+5 |
| | | | | | The key to print (e.g. until the next .) still has to be null-terminated. | ||||
* | unit-tests: Add tests for includes and file loading in settings_t | Tobias Brunner | 2014-02-12 | 1 | -0/+149 |
| | |||||
* | settings: Allow empty strings in section key | Tobias Brunner | 2014-02-12 | 2 | -23/+33 |
| | |||||
* | unit-tests: Add tests for enumerators in settings_t | Tobias Brunner | 2014-02-12 | 1 | -0/+148 |
| | |||||
* | unit-tests: Add tests for setters in settings_t | Tobias Brunner | 2014-02-12 | 1 | -0/+109 |
| | |||||
* | unit-tests: Add basic tests for settings_t | Tobias Brunner | 2014-02-12 | 3 | -0/+319 |
| | |||||
* | lib: Add global config namespace | Tobias Brunner | 2014-02-12 | 27 | -30/+44 |
| | |||||
* | pool: Typo in Makefile fixed | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | |||||
* | pool: Install SQL schemas from src/pool | Tobias Brunner | 2014-02-12 | 5 | -3/+11 |
| | | | | | This allows us to install the schemas if either the attr-sql or sql plugin is enabled, since both use the same schema (at least in parts). | ||||
* | sql: Set default values for some fields in addresses table | Tobias Brunner | 2014-02-12 | 2 | -6/+6 |
| | |||||
* | libimcv: Install SQL files in /usr/share/strongswan/templates/database | Tobias Brunner | 2014-02-12 | 2 | -2/+3 |
| | |||||
* | sql: Install SQL schemas in /usr/share/strongswan/templates/database | Tobias Brunner | 2014-02-12 | 1 | -0/+3 |
| | |||||
* | sql: Remove unused cred.sql snippet | Tobias Brunner | 2014-02-12 | 1 | -24/+0 |
| | |||||
* | asn1: Support dates before 1970-01-01 (i.e. when time_t gets negative) | Tobias Brunner | 2014-02-12 | 3 | -4/+29 |
| | | | | | | On x86 we allow "overflows" around 1969/1970 but not for other dates. Fixes #509. | ||||
* | asn1: Add additional validation for parsed ASN.1 date/time values | Tobias Brunner | 2014-02-12 | 2 | -1/+20 |
| | |||||
* | ikev1: Fix config switching due to failed authentication during Aggressive mode | Tobias Brunner | 2014-02-12 | 1 | -3/+1 |
| | | | | | | | The encoded ID payload gets destroyed by the authenticator, which caused a segmentation fault after the switch. Fixes #501. | ||||
* | kernel-pfroute: Don't cache route entries if installation fails | Tobias Brunner | 2014-02-12 | 1 | -2/+5 |
| | |||||
* | kernel-netlink: Don't cache route entries if installation fails | Tobias Brunner | 2014-02-12 | 1 | -2/+5 |
| | | | | Fixes #500. | ||||
* | identification: Fix printing of empty RDNs on FreeBSD | Tobias Brunner | 2014-02-12 | 1 | -1/+6 |
| | | | | On FreeBSD (null) is printed for NULL even if the precision is 0. | ||||
* | tests: Fix test for printing NULL on FreeBSD | Tobias Brunner | 2014-02-12 | 1 | -2/+13 |
| | |||||
* | unit-tests: added asn1_parser tests | Andreas Steffen | 2014-02-10 | 3 | -0/+293 |
| | |||||
* | unit-tests: added some more ASN.1 length tests | Andreas Steffen | 2014-02-10 | 1 | -0/+13 |
| | |||||
* | leak_detective: Assign return value of realloc to buf | Thomas Egerer | 2014-02-10 | 1 | -1/+1 |
| | | | | | | | If realloc return a pointer value different from the value to be reallocated, a double free can occur in this context. Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com> | ||||
* | rdrand: Provide get_features() regardless of RDRAND availability | Martin Willi | 2014-02-10 | 1 | -6/+6 |
| | | | | | As having no get_features() raises a deprecated warning, we return no features instead. |