Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | ikev1: implement mode config push mode | Martin Willi | 2013-09-04 | 5 | -76/+363 | |
| | ||||||
* | stroke: re-enable modeconfig keyword | Martin Willi | 2013-09-04 | 3 | -1/+3 | |
| | ||||||
* | peer-cfg: add a pull/push mode option to use with mode config | Martin Willi | 2013-09-04 | 15 | -20/+43 | |
| | ||||||
* | charon-cmd: support prompting for a PIN | Martin Willi | 2013-09-03 | 1 | -4/+8 | |
| | | | | | To support a Password and PIN XAuth combo, additionally support multiple prompts for different credential types. | |||||
* | xauth-generic: honor requested XAuth credential types as a client | Martin Willi | 2013-09-03 | 1 | -16/+51 | |
| | | | | Support requesting of XAuth PINs and print XAuth messages. | |||||
* | attributes: shorten some Unity and XAuth attribute short names | Martin Willi | 2013-09-03 | 1 | -15/+15 | |
| | ||||||
* | message: print type of configuration payload | Martin Willi | 2013-09-03 | 1 | -1/+21 | |
| | ||||||
* | message: print attributes for IKEv1 configuration payloads as well | Martin Willi | 2013-09-03 | 1 | -1/+2 | |
| | ||||||
* | eap-radius: support XAuth configuration profiles, defining multiple XAuth rounds | Martin Willi | 2013-09-03 | 1 | -22/+157 | |
| | ||||||
* | xauth: add a configuration string option to be passed to XAuth instances | Martin Willi | 2013-09-03 | 15 | -17/+52 | |
| | | | | | | The configuration string is appended to the XAuth backend name, separated by a colon. The configuration string is passed untouched to the backend, where it can change the behavior of the XAuth module. | |||||
* | Use ipsec_DATA destination5.1.1dr2 | Andreas Steffen | 2013-09-02 | 1 | -7/+1 | |
| | ||||||
* | Install SWID tag also in /share/ | Andreas Steffen | 2013-09-02 | 1 | -2/+3 | |
| | ||||||
* | Generate strongSwan SWID tag | Andreas Steffen | 2013-09-02 | 3 | -0/+55 | |
| | ||||||
* | Added regids table and some sample reqid data | Andreas Steffen | 2013-09-02 | 2 | -0/+62 | |
| | ||||||
* | Corrected debug class to DBG_IMC | Andreas Steffen | 2013-09-02 | 1 | -9/+9 | |
| | ||||||
* | conftest: Fix hook constructor resolution via dlsym() | Tobias Brunner | 2013-08-30 | 1 | -1/+3 | |
| | | | | | | | | AM_CPPFLAGS only takes preprocessor flags like -I or -D, so it did not forward -rdynamic to the linker (--export-dynamic), which meant that the symbols defined in the executable itself were not resolvable via dlsym(). Fixes #394. | |||||
* | SWID IMC implements recursive tag collection in /usr/share | Andreas Steffen | 2013-08-30 | 9 | -123/+385 | |
| | ||||||
* | kernel-pfroute: Fix mixed up memset() call in get_route() | Mathias Krause | 2013-08-29 | 1 | -1/+1 | |
| | | | | | | | | | | The retry code introduced in dc8b083 got the memset() arguments wrong. Fix this to ensure the buffer gets zeroed, for real. It probably doesn't matter as we do reset the message length on retry, so the stale data shouldn't be seen by anyone. Found-by: git grep 'memset\s*\([^,]*,\s*[^,]*,\s*0\s*\)' | |||||
* | charon-xpc: add a note how to build the source tarball | Martin Willi | 2013-08-29 | 1 | -0/+7 | |
| | ||||||
* | charon-xpc: include and prefer AES-GCM algorithms in ESP proposal | Martin Willi | 2013-08-29 | 1 | -0/+3 | |
| | ||||||
* | Added TCG-SWID error handling | Andreas Steffen | 2013-08-28 | 6 | -2/+180 | |
| | ||||||
* | Added tzset memory leak to whitelist | Andreas Steffen | 2013-08-28 | 1 | -0/+1 | |
| | ||||||
* | Selectively enable PT-TLS and/or RADIUS sockets in tnc-pdp plugin | Andreas Steffen | 2013-08-26 | 1 | -76/+95 | |
| | ||||||
* | chunk: Print chunks without separator if + modifier is used | Tobias Brunner | 2013-08-24 | 3 | -6/+20 | |
| | ||||||
* | utils: Add case-insensitive version of strpfx() | Tobias Brunner | 2013-08-24 | 2 | -0/+44 | |
| | ||||||
* | stroke: stop enumerating IKE_SAs in statusall if output stream gets closed | Martin Willi | 2013-08-23 | 1 | -1/+1 | |
| | | | | | | | If the output stream is not interested in more information, it can close the the stream. Checking for stream errors avoids useless enumeration of IKE_SAs, saving resources. This allows to use "ipsec statusall | head" to monitor the daemon, or stop enumerating IKE_SAs after a specific entry has been found. | |||||
* | kernel: Restore enumeration of all addresses when searching for address in TS | Tobias Brunner | 2013-08-21 | 1 | -3/+6 | |
| | | | | | | | | | Since f52cf07532 addresses on ignored, down or loopback interfaces were not considered as valid addresses anymore when searching for an address contained in the local traffic selector. This meant that route installation failed, for instance, if charon.install_virtual_ip_on was set to 'lo', or, on gateways, if internal interfaces were ignored with the charon.interfaces_* options. | |||||
* | conftest: Disable reset_seq hook on systems other than Linux | Tobias Brunner | 2013-08-21 | 1 | -0/+6 | |
| | | | | Fixes #386. | |||||
* | kernel-netlink: Fix calculation of ESN bitmap length | Tobias Brunner | 2013-08-21 | 1 | -4/+12 | |
| | | | | | While bmp_len stores the number of u_int32_t the allocated bitmap actually consists of those integers. | |||||
* | Version bump to 5.1.1dr1 | Andreas Steffen | 2013-08-19 | 1 | -5/+5 | |
| | ||||||
* | Process PB-TNC batches received via PT-TLS asynchronously | Andreas Steffen | 2013-08-19 | 2 | -64/+57 | |
| | ||||||
* | Optimize TLS socket buffer for TLS_MAX_FRAGMENT_LEN | Andreas Steffen | 2013-08-19 | 1 | -2/+2 | |
| | ||||||
* | Output handler of a given workitem | Andreas Steffen | 2013-08-16 | 1 | -0/+3 | |
| | ||||||
* | Implemented SWID Tag Inventory attribute | Andreas Steffen | 2013-08-16 | 9 | -42/+692 | |
| | ||||||
* | deleted moved files | Andreas Steffen | 2013-08-15 | 34 | -5996/+0 | |
| | ||||||
* | Implemented SWID prototype IMC/IMV pair | Andreas Steffen | 2013-08-15 | 60 | -76/+8562 | |
| | ||||||
* | Updated the SWID attributes | Andreas Steffen | 2013-08-15 | 2 | -11/+15 | |
| | ||||||
* | Optimized PT-TLS data transfer | Andreas Steffen | 2013-08-15 | 4 | -127/+107 | |
| | ||||||
* | Show host address of peer connecting to PT-TLS socket | Andreas Steffen | 2013-08-15 | 1 | -1/+7 | |
| | ||||||
* | Set client identity with TLS certificate authentication | Andreas Steffen | 2013-08-15 | 1 | -7/+18 | |
| | ||||||
* | Fixed memory leak in SASL PLAIN | Andreas Steffen | 2013-08-15 | 1 | -0/+3 | |
| | ||||||
* | added --optionsfrom capability | Andreas Steffen | 2013-08-15 | 1 | -3/+20 | |
| | ||||||
* | Use client identities from successful authentications, only | Andreas Steffen | 2013-08-15 | 1 | -18/+12 | |
| | ||||||
* | Add pt-tls-client to .gitignore | Andreas Steffen | 2013-08-15 | 2 | -228/+1 | |
| | ||||||
* | Extract client identity and authentication type from SASL authentication | Andreas Steffen | 2013-08-15 | 7 | -9/+76 | |
| | ||||||
* | Added some debug statements | Andreas Steffen | 2013-08-15 | 4 | -4/+47 | |
| | ||||||
* | enabled SASL PLAIN authentication | Andreas Steffen | 2013-08-15 | 1 | -2/+2 | |
| | ||||||
* | PT-TLS connection is properly terminated | Andreas Steffen | 2013-08-15 | 1 | -3/+2 | |
| | ||||||
* | moved tnc_imv plugin to libtnccs thanks to recommendation callback function | Andreas Steffen | 2013-08-15 | 26 | -120/+154 | |
| | ||||||
* | Moved tnc-tnccs, tnc-imc, tnccs-11, tnccs-20 and tnccs-dynamic libcharon ↵ | Andreas Steffen | 2013-08-15 | 72 | -52/+78 | |
| | | | | plugins to libtnccs |