Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | RSA_check_key() may return -1 if it fails | Martin Willi | 2013-04-10 | 1 | -2/+2 |
| | |||||
* | RAND_bytes/RAND_pseudo_bytes returns -1 if it is not supported by RAND method | Martin Willi | 2013-04-10 | 1 | -1/+1 |
| | |||||
* | Check return value of ECDSA_Verify() correctly | Martin Willi | 2013-04-10 | 1 | -1/+1 |
| | |||||
* | eap-radius: Add an option to exclude ports from Called/Calling-Station-Id | Martin Willi | 2013-04-10 | 2 | -9/+37 |
| | |||||
* | emit a single assig_vips bus message for all VIPs | Andreas Steffen | 2013-04-06 | 8 | -62/+57 |
| | |||||
* | ifmap plugin subscribes to assing_vip bus signal | Andreas Steffen | 2013-04-06 | 7 | -2/+135 |
| | |||||
* | Added missing sasl Doxygen group | Tobias Brunner | 2013-04-05 | 1 | -0/+3 |
| | |||||
* | unity: Check IKE_SA in only after enumerating virtual IPs | Tobias Brunner | 2013-04-05 | 1 | -2/+1 |
| | |||||
* | cleaned up XML code in tnccs-11 plugin | Andreas Steffen | 2013-04-04 | 8 | -80/+82 |
| | |||||
* | duplicheck: track multiple IKE_SAs in checking state to avoid any races | Martin Willi | 2013-04-04 | 1 | -63/+123 |
| | | | | | | When two consequent duplicates have been detected, track state of each checking IKE_SA separately, avoiding potential race conditions between the active SA and the different SAs in checking state. | ||||
* | fixed memory leak | Andreas Steffen | 2013-04-03 | 1 | -1/+1 |
| | |||||
* | properly handle orphaned renewSession jobs | Andreas Steffen | 2013-04-03 | 5 | -24/+102 |
| | |||||
* | support chunked HTTP responses | Andreas Steffen | 2013-04-03 | 4 | -140/+370 |
| | |||||
* | implemented periodic IF-MAP RenewSession request | Andreas Steffen | 2013-04-03 | 6 | -1/+181 |
| | |||||
* | Refactor check_for_rekeyed_child() in quick_mode task | Martin Willi | 2013-04-03 | 1 | -18/+24 |
| | |||||
* | Reuse reqid of an existing Quick Mode, even if it has been rekeyed | Martin Willi | 2013-04-03 | 1 | -1/+2 |
| | | | | | | If two peers rekey Quick Modes at the same time, the original Quick Mode is in REKEYING state and hence the requid is not reused. This is required though, as two identical policies won't work if they have different requids. | ||||
* | List all stroke counters when "all" is given, and report if connection not known | Martin Willi | 2013-04-03 | 1 | -30/+88 |
| | |||||
* | Defer CHILD_SA rekeying if allocating an SPI fails | Martin Willi | 2013-04-03 | 2 | -12/+26 |
| | |||||
* | allow retrieval of private keys from other credential sets | Andreas Steffen | 2013-04-02 | 2 | -9/+26 |
| | |||||
* | improve checking of sent and received http messages | Andreas Steffen | 2013-04-02 | 1 | -3/+7 |
| | |||||
* | Load raw keys before possibly destroying the identity | Tobias Brunner | 2013-04-01 | 1 | -12/+11 |
| | | | | | | | | If no identity (or %any) is configured the identification_t object is destroyed and an invalid object was associated with the created pubkey certificate. Actually using %any does not work as the certificate would not match when the client later provides an identity. | ||||
* | ipseckey: Use proper daemon name for enable option | Tobias Brunner | 2013-04-01 | 1 | -1/+1 |
| | |||||
* | Properly handle situation if no resolver plugins are loaded | Tobias Brunner | 2013-04-01 | 2 | -4/+7 |
| | |||||
* | fixed capability metadata | Andreas Steffen | 2013-03-31 | 1 | -1/+2 |
| | |||||
* | renamed tnc_ifmap2 plugin to tnc_ifmap | Andreas Steffen | 2013-03-31 | 11 | -180/+180 |
| | |||||
* | removed obsoleted tnc_ifmap plugin | Andreas Steffen | 2013-03-31 | 8 | -1344/+0 |
| | |||||
* | implemented http basic authentication | Andreas Steffen | 2013-03-31 | 3 | -46/+80 |
| | |||||
* | parse IF-MAP server URI | Andreas Steffen | 2013-03-31 | 3 | -41/+105 |
| | |||||
* | implemented publish_enforcement_report and endSession methods | Andreas Steffen | 2013-03-30 | 1 | -6/+58 |
| | |||||
* | implemented publish_ike_sa method | Andreas Steffen | 2013-03-30 | 1 | -6/+252 |
| | |||||
* | ifmap message type is known | Andreas Steffen | 2013-03-30 | 3 | -12/+7 |
| | |||||
* | implemented publish_device_ip method | Andreas Steffen | 2013-03-30 | 1 | -13/+132 |
| | |||||
* | added IF-MAP SOAP error handling | Andreas Steffen | 2013-03-30 | 1 | -9/+32 |
| | |||||
* | created tnc_ifmap2_soap_msg class | Andreas Steffen | 2013-03-29 | 4 | -220/+343 |
| | |||||
* | implement NewSession and PurgePublisher messages using the libxml2 library | Andreas Steffen | 2013-03-29 | 3 | -79/+265 |
| | |||||
* | set up a new IF-MAP session | Andreas Steffen | 2013-03-29 | 9 | -0/+884 |
| | |||||
* | fixed typo | Andreas Steffen | 2013-03-27 | 1 | -1/+1 |
| | |||||
* | Fixed Doxygen comment in eap_radius plugin | Tobias Brunner | 2013-03-27 | 1 | -2/+3 |
| | |||||
* | Fix detection and use of netinet/ip6.h on FreeBSD | Tobias Brunner | 2013-03-27 | 1 | -0/+1 |
| | |||||
* | Make some private functions in plugins static | Tobias Brunner | 2013-03-27 | 2 | -5/+5 |
| | | | | Fixes monolithic build. | ||||
* | libpts: Cast first argument for %.*s to int | Tobias Brunner | 2013-03-25 | 1 | -1/+1 |
| | |||||
* | error-notify: Close file descriptors in case clients are still connected | Tobias Brunner | 2013-03-25 | 1 | -0/+6 |
| | |||||
* | libpttls: Destroy reader when handling errors during SASL | Tobias Brunner | 2013-03-25 | 1 | -0/+2 |
| | |||||
* | pacman: Define gen_time out of the loop | Tobias Brunner | 2013-03-25 | 1 | -1/+2 |
| | | | | It gets assigned if count==3 but only used later when count >= 7. | ||||
* | ipseckey: NULL pointer dereference fixed in error case | Tobias Brunner | 2013-03-25 | 1 | -0/+1 |
| | |||||
* | Fixed some typos, courtesy of codespell | Tobias Brunner | 2013-03-25 | 4 | -5/+5 |
| | |||||
* | enforce singular of packets | Andreas Steffen | 2013-03-22 | 1 | -4/+6 |
| | |||||
* | asprintf(3) requires _GNU_SOURCE to be defined5.0.3rc1 | Tobias Brunner | 2013-03-22 | 1 | -0/+2 |
| | |||||
* | Use proper integer types when handling TLS exchanges | Tobias Brunner | 2013-03-22 | 1 | -5/+6 |
| | | | | tls_t.build takes a size_t argument not a ssize_t. | ||||
* | Check return value of asprintf(3) when converting AR identity | Tobias Brunner | 2013-03-22 | 1 | -2/+4 |
| | | | | | Using chunk_t.ptr as target was also not optimal as it resulted in a compiler warning. |