tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Attributes moved from libstrongswan to libhydra.	Tobias Brunner	2010-03-24	13	-15/+57
\| \| \| \| \|	The attribute_manager_t instance is now located on the new hydra object instead of the lib object.
*	Fixing Doxygen for libhydra.	Tobias Brunner	2010-03-24	2	-6/+6
\|
*	Segment check added for libhydra.	Tobias Brunner	2010-03-24	1	-0/+1
\|
*	Fixed deinit for charon --version.	Tobias Brunner	2010-03-24	1	-1/+2
\|
*	Init/deinit libhydra in charon and pluto.	Tobias Brunner	2010-03-24	5	-22/+40
\|
*	Adding libhydra_init, which is currently only needed for integrity checks.	Tobias Brunner	2010-03-24	3	-2/+85
\|
*	Link pluto and charon to libhydra, fixes monolithic build.	Tobias Brunner	2010-03-24	2	-1/+7
\|
*	Moving attr-sql config in strongswan.conf to libhydra.	Tobias Brunner	2010-03-24	3	-4/+4
\|
*	Fixing integrity-checks after moving the attr-sql plugin and adding libhydra.	Tobias Brunner	2010-03-24	2	-2/+12
\|
*	Moving attr-sql plugin from libstrongswan to libhydra.	Tobias Brunner	2010-03-24	10	-14/+7
\|
*	Adding libhydra stub.	Tobias Brunner	2010-03-24	2	-0/+34
\|
*	Adapted test_pool to the libstrongswan threading.	Tobias Brunner	2010-03-24	1	-6/+5
\|
*	Link libcharon to checksum_builder in order to get rid of the fake symbols.	Tobias Brunner	2010-03-24	2	-6/+4
\|
*	Fixed some Doxygen warnings.	Tobias Brunner	2010-03-24	3	-18/+18
\|
*	Fixed compiler warning.	Tobias Brunner	2010-03-24	1	-1/+1
\|
*	Fixed ipsec pool --batch command	Heiko Hund	2010-03-24	1	-2/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	--batch mode has shown to be buggy in very obscure ways in the first real life tests. For example a batch file --del pool1 --replace pool2 --addresses file1 returned the error "/usr/libexec/ipsec/pool: unrecognized option '--lace'" which was gone after moving the --del behind --replace. With the patch from below applied everything works like a charm. From the info on the man page it seem to be unrelated to this problem, though: A program that scans multiple argument vectors, or rescans the same vector more than once, and wants to make use of GNU extensions such as '+' and '-' at the start of optstring, or changes the value of POSIXLY_CORRECT between scans, must reinitialize getopt() by resetting optind to 0, rather than the traditional value of 1. (Resetting to 0 forces the invocation of an internal initialization routine that rechecks POSIXLY_CORRECT and checks for GNU exten- sions in optstring.) Signed-off-by: Heiko Hund <hhund@astaro.com>
*	Use vstr/gmp as shared libraries in the Android build.	Tobias Brunner	2010-03-23	2	-5/+3
\|
*	Missed to include charon's Android.mk in the distribution.	Tobias Brunner	2010-03-22	1	-1/+1
\|
*	Added charon to .gitignore	Martin Willi	2010-03-19	1	-0/+1
\|
*	Do not indent the source file lists in Android.mk files so we can easily ↵	Tobias Brunner	2010-03-19	3	-157/+157
\| \| \| \|	compare them to the lists in the Makefile.am files.
*	Use wildcards to gather plugin source files.	Tobias Brunner	2010-03-19	2	-177/+60
\|
*	Adding support for the build of libcharon (and charon) on Android.	Tobias Brunner	2010-03-19	2	-6/+29
\|
*	Do not link libcharon to libstrongswan.	Tobias Brunner	2010-03-19	1	-1/+1
\| \| \| \| \| \|	Linking to libstrongswan breaks the integrity-tests because libtool relinks libcharon to libstrongswan on install, thus changing the checksum.
*	Explicitly link charon to libstrongswan.	Tobias Brunner	2010-03-19	1	-1/+1
\| \| \| \|	Also fixed the reference to the pthread library.
*	Don't indirectly link dependent libraries.	Gerd von Egidy	2010-03-19	3	-3/+3
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The default behaviour for ld allows users to 'indirectly' link to required objects/libraries through intermediate objects/libraries. While this is convenient, it can also be dangerous because it makes your program's dependencies tied to the dependencies of other objects. Beginning with Fedora 13 this will be changed and you need to explicitly link all dependent libraries. More details can be found here: http://fedoraproject.org/wiki/UnderstandingDSOLinkChange This patch fixes all such cases in strongSwan.
*	Make integrity tests compatible with libcharon.	Tobias Brunner	2010-03-19	2	-1/+7
\| \| \| \| \|	This does currently not work because libtool relinks libcharon on install, thus changing the checksum.
*	Replacing the original charon with a small wrapper around libcharon.	Tobias Brunner	2010-03-19	2	-0/+427
\|
*	Convert charon into libcharon.	Tobias Brunner	2010-03-19	38	-476/+149
\|
*	Moving charon to libcharon.	Tobias Brunner	2010-03-19	480	-0/+0
\|
*	Removed strayed code fragment	Martin Willi	2010-03-19	1	-20/+4
\|
*	ipsec pool --batch command	Heiko Hund	2010-03-19	1	-60/+200
\| \| \| \| \| \| \| \|	Introduce the --batch command which reads several ipsec pool commands and their arguments from a file or STDIN. Useful if you need to run serveral commands atomically from a configuration daemon or likewise. Signed-off-by: Heiko Hund <hhund@astaro.com>
*	ipsec pool error return status	Heiko Hund	2010-03-19	1	-49/+51
\| \| \| \| \| \| \|	Fix the error return status of the ipsec pool command. Also make --del for attributes succeed if no --server option was given. Signed-off-by: Heiko Hund <hhund@astaro.com>
*	ipsec pool --replace command	Heiko Hund	2010-03-19	1	-23/+61
\| \| \| \| \| \| \| \| \|	Introduce the pool --replace command as an alternative to --add. Also change the current behavior of allowing duplicate pool names so that, --add with an existing name fails and --replace removes the existing pool before adding the new one. Signed-off-by: Heiko Hund <hhund@astaro.com>
*	--addresses option for ipsec pool --add command	Heiko Hund	2010-03-19	1	-5/+187
\| \| \| \| \| \| \| \| \|	Introduce the --addresses option for --add that can be used to add a pool containing non-contiguous addresses. Additionally it allows to preclaim certain addresses for certain roadwarrior IDs. See the second chunk of the patch for a more detailed description. Signed-off-by: Heiko Hund <hhund@astaro.com>
*	Introduced ipsec.conf NTLM keyword for NT hashes	Martin Willi	2010-03-17	1	-0/+1
\|
*	EAP-MSCHAPv2 can use stored NT hashes in addition to plaintext passwords	Martin Willi	2010-03-17	2	-40/+59
\|
*	lookup exclusion for several arbitrary routing tables	Thomas Egerer	2010-03-17	1	-0/+70
\|
*	Fixing a compiler warning when building with -Wextra.	Tobias Brunner	2010-03-16	1	-1/+1
\|
*	setting the two most significant bits assures an RSA modulus of maximum bit size	Andreas Steffen	2010-03-15	1	-2/+2
\|
*	we don't accept a serial number with leading zeroes	Andreas Steffen	2010-03-14	2	-0/+10
\|
*	Reordered the name and sname construction.	Tobias Brunner	2010-03-12	1	-4/+4
\|
*	Fixed a bug in pluto's x509 handling.	Tobias Brunner	2010-03-12	1	-2/+2
\| \| \| \| \|	This bug would have lead to a segmentation fault, if no public key could have been extracted from a certificate.
*	deleted old strongSwan VIDs	Andreas Steffen	2010-03-12	2	-86/+15
\|
*	Added a very minimalistic SMTP client to send mails via a local Exim	Martin Willi	2010-03-11	3	-1/+241
\|
*	Add a getter for the HTTP referer	Martin Willi	2010-03-10	2	-0/+16
\|
*	fix 64bit issue with time_t from database	Andreas Steffen	2010-03-10	1	-2/+8
\|
*	Provide the Diffie Hellman parameters from a central location, so that we do ↵	Tobias Brunner	2010-03-09	5	-733/+380
\| \| \| \| \| \| \| \|	not have to replicate them in every plugin that implements the DH interface. The main reason for this change is that Android's libcrypto does not include the get_rfcX_prime_Y functions by default. Therefore we would have had to replicate the primes a third time.
*	Adding the OpenSSL plugin to the Android build.	Tobias Brunner	2010-03-08	3	-2/+20
\|
*	Fixing integrity tests after renaming the plugin constructors.	Tobias Brunner	2010-03-08	1	-2/+12
\|
*	Adding a helper function that translates single characters in a string.	Tobias Brunner	2010-03-08	3	-19/+32
\|