strongswan.git
10 years agofixed build on non-i386 architectures
Martin Willi [Tue, 17 Feb 2009 09:34:52 +0000 (09:34 -0000)]
fixed build on non-i386 architectures

10 years agobuild strongswan-padlock on i386 only
Martin Willi [Mon, 16 Feb 2009 16:49:43 +0000 (16:49 -0000)]
build strongswan-padlock on i386 only

10 years agouse separate distribution tarballs for NetworkManager applet
Martin Willi [Mon, 16 Feb 2009 16:11:16 +0000 (16:11 -0000)]
use separate distribution tarballs for NetworkManager applet

10 years agouse a slightly adopted package versioning scheme
Martin Willi [Mon, 16 Feb 2009 16:05:30 +0000 (16:05 -0000)]
use a slightly adopted package versioning scheme
  NM applet uses strongSwan independent versions

10 years agoadded Makefile to build ubuntu PPA source packages
Martin Willi [Mon, 16 Feb 2009 16:03:09 +0000 (16:03 -0000)]
added Makefile to build ubuntu PPA source packages

10 years agoinitial version of new modular strongswan debian packages
Martin Willi [Mon, 16 Feb 2009 12:48:35 +0000 (12:48 -0000)]
initial version of new modular strongswan debian packages
  "strongswan" metapackage adds similar functionality as old debian packages
  "network-manager-strongswan" depends on required strongSwan packages

10 years agoconfiguration of NBNS server assignment via strongswan.conf
Andreas Steffen [Fri, 13 Feb 2009 11:57:50 +0000 (11:57 -0000)]
configuration of NBNS server assignment via strongswan.conf

10 years agouse internal host venus as dns2
Andreas Steffen [Thu, 12 Feb 2009 09:18:42 +0000 (09:18 -0000)]
use internal host venus as dns2

10 years agoconfiguration of DNS server assignment via strongswan.conf
Andreas Steffen [Thu, 12 Feb 2009 09:02:15 +0000 (09:02 -0000)]
configuration of DNS server assignment via strongswan.conf

10 years ago[4859] caused crash when handling the %config case
Andreas Steffen [Wed, 11 Feb 2009 22:39:35 +0000 (22:39 -0000)]
[4859] caused crash when handling the %config case

10 years agocorrected syntax
Andreas Steffen [Wed, 11 Feb 2009 16:45:14 +0000 (16:45 -0000)]
corrected syntax

10 years agothis debug statement has only two arguments
Andreas Steffen [Wed, 11 Feb 2009 16:41:37 +0000 (16:41 -0000)]
this debug statement has only two arguments

10 years agofixed a 64-bit issue with time_t printf hooks
Andreas Steffen [Wed, 11 Feb 2009 16:37:16 +0000 (16:37 -0000)]
fixed a 64-bit issue with time_t printf hooks

10 years agochanged [4856] to dynamically choose traffic selector family
Martin Willi [Wed, 11 Feb 2009 13:09:52 +0000 (13:09 -0000)]
changed [4856] to dynamically choose traffic selector family

10 years agorespect family when assigning pool addresses
Martin Willi [Wed, 11 Feb 2009 12:50:04 +0000 (12:50 -0000)]
respect family when assigning pool addresses

10 years agosend proper AUTHENTICATION_FAILED if EAP method is successful, but AUTH mismatches
Martin Willi [Tue, 10 Feb 2009 17:21:44 +0000 (17:21 -0000)]
send proper AUTHENTICATION_FAILED if EAP method is successful, but AUTH mismatches

10 years agofree unneeded retransmission packet when exchange completes
Martin Willi [Mon, 9 Feb 2009 10:45:51 +0000 (10:45 -0000)]
free unneeded retransmission packet when exchange completes

10 years agosupport of dynamic/128 and %any6
Andreas Steffen [Thu, 5 Feb 2009 22:13:48 +0000 (22:13 -0000)]
support of dynamic/128 and %any6

10 years agodisable MOBIKE in load-tester
Andreas Steffen [Thu, 5 Feb 2009 10:10:20 +0000 (10:10 -0000)]
disable MOBIKE in load-tester

10 years agooutput pool name string rather than pool pointer
Andreas Steffen [Wed, 28 Jan 2009 00:37:11 +0000 (00:37 -0000)]
output pool name string rather than pool pointer

10 years agoversion bump to 4.2.12
Andreas Steffen [Wed, 21 Jan 2009 03:14:52 +0000 (03:14 -0000)]
version bump to 4.2.12

10 years agoadded two Microsoft proprietary configuration attribute types 4.2.11
Andreas Steffen [Tue, 20 Jan 2009 22:55:13 +0000 (22:55 -0000)]
added two Microsoft proprietary configuration attribute types

10 years agochanges in 4.2.11
Andreas Steffen [Tue, 20 Jan 2009 22:37:58 +0000 (22:37 -0000)]
changes in 4.2.11

10 years agoadded notify message types used by RFC 4739
Andreas Steffen [Mon, 19 Jan 2009 12:32:42 +0000 (12:32 -0000)]
added notify message types used by RFC 4739

10 years agoproper initialization and disposal of keying material
Andreas Steffen [Thu, 15 Jan 2009 01:52:44 +0000 (01:52 -0000)]
proper initialization and disposal of keying material

10 years agoadded pfkey/esp-alg-null scenario
Andreas Steffen [Thu, 15 Jan 2009 00:47:21 +0000 (00:47 -0000)]
added pfkey/esp-alg-null scenario

10 years agoadded ikev2/esp-alg-null scenario
Andreas Steffen [Thu, 15 Jan 2009 00:39:06 +0000 (00:39 -0000)]
added ikev2/esp-alg-null scenario

10 years agofixed ESP NULL encryption
Andreas Steffen [Thu, 15 Jan 2009 00:34:42 +0000 (00:34 -0000)]
fixed ESP NULL encryption

10 years agofixed broken listing of connections in ipsec statusall
Andreas Steffen [Wed, 14 Jan 2009 08:10:16 +0000 (08:10 -0000)]
fixed broken listing of connections in ipsec statusall

10 years agoadded eap=gtc option to ipsec.conf man page
Andreas Steffen [Wed, 14 Jan 2009 03:29:59 +0000 (03:29 -0000)]
added eap=gtc option to ipsec.conf man page

10 years agodisable DPD and sending of cert requests in load-tester
Andreas Steffen [Wed, 14 Jan 2009 00:13:21 +0000 (00:13 -0000)]
disable DPD and sending of cert requests in load-tester

10 years agofixing cross-compilation
Tobias Brunner [Tue, 13 Jan 2009 10:38:16 +0000 (10:38 -0000)]
fixing cross-compilation

10 years agocosmetics
Andreas Steffen [Tue, 13 Jan 2009 06:50:55 +0000 (06:50 -0000)]
cosmetics

10 years agochanged type definition of level from char* to int
Andreas Steffen [Tue, 13 Jan 2009 06:36:31 +0000 (06:36 -0000)]
changed type definition of level from char* to int

10 years agohiding XFRM message names from netlink
Andreas Steffen [Fri, 9 Jan 2009 09:37:13 +0000 (09:37 -0000)]
hiding XFRM message names from netlink

10 years agorenamed chunk
Andreas Steffen [Fri, 9 Jan 2009 08:51:41 +0000 (08:51 -0000)]
renamed chunk

10 years agorefactored DBG3 output of sent XFRM messages
Andreas Steffen [Fri, 9 Jan 2009 08:46:31 +0000 (08:46 -0000)]
refactored DBG3 output of sent XFRM messages

10 years agoDBG3 output of sent XFRM messages
Andreas Steffen [Fri, 9 Jan 2009 08:27:17 +0000 (08:27 -0000)]
DBG3 output of sent XFRM messages

10 years agoadded message for undefined ocsp status #4
Andreas Steffen [Fri, 9 Jan 2009 01:36:13 +0000 (01:36 -0000)]
added message for undefined ocsp status #4

10 years agoadd a compatible memrchr() function if the platform does not support it (e.g. old...
Andreas Steffen [Fri, 9 Jan 2009 01:19:45 +0000 (01:19 -0000)]
add a compatible memrchr() function if the platform does not support it (e.g. old glibc). Patch courtesy to Thomas Jarosch

10 years agothe Linux 2.6.28 uml guest kernel does not need any patches
Andreas Steffen [Fri, 9 Jan 2009 00:28:47 +0000 (00:28 -0000)]
the Linux 2.6.28 uml guest kernel does not need any patches

10 years agotest of ipsec leases command in ikev2/ip-pool and ikev2/ip-two-pools scenarios
Andreas Steffen [Fri, 9 Jan 2009 00:24:54 +0000 (00:24 -0000)]
test of ipsec leases command in ikev2/ip-pool and ikev2/ip-two-pools scenarios

10 years agoversion bump to 2.4.11
Andreas Steffen [Thu, 8 Jan 2009 22:23:42 +0000 (22:23 -0000)]
version bump to 2.4.11

10 years agoadapted ikev2/ip-pool-wish scenario to the new stroke ip pool function
Andreas Steffen [Thu, 8 Jan 2009 21:41:07 +0000 (21:41 -0000)]
adapted ikev2/ip-pool-wish scenario to the new stroke ip pool function

10 years agofixed two bugs introduced by the stroke ip pool refactoring 4.2.10
Andreas Steffen [Thu, 8 Jan 2009 21:34:44 +0000 (21:34 -0000)]
fixed two bugs introduced by the stroke ip pool refactoring

10 years agoincrease nonce size to 32 bytes, required when using SHA384/512 PRFs
Martin Willi [Wed, 31 Dec 2008 08:58:49 +0000 (08:58 -0000)]
increase nonce size to 32 bytes, required when using SHA384/512 PRFs

10 years agomissing LOGFILE in debug statement
Andreas Steffen [Tue, 23 Dec 2008 06:35:16 +0000 (06:35 -0000)]
missing LOGFILE in debug statement

10 years agoadded some NEWS for 4.2.10
Martin Willi [Mon, 22 Dec 2008 12:48:50 +0000 (12:48 -0000)]
added some NEWS for 4.2.10

10 years agofixed a potential memory leak when reusing mobike task
Martin Willi [Fri, 19 Dec 2008 14:34:40 +0000 (14:34 -0000)]
fixed a potential memory leak when reusing mobike task

10 years agoRNG tests based on FIPS 140-1
Martin Willi [Thu, 18 Dec 2008 16:24:22 +0000 (16:24 -0000)]
RNG tests based on FIPS 140-1

10 years agosupport for Padlock RNG
Martin Willi [Thu, 18 Dec 2008 16:21:05 +0000 (16:21 -0000)]
support for Padlock RNG

10 years agoproper feature probing for padlock
Martin Willi [Wed, 17 Dec 2008 15:40:01 +0000 (15:40 -0000)]
proper feature probing for padlock

10 years agocorrect use of calloc in hashtable_t
Tobias Brunner [Wed, 17 Dec 2008 09:56:05 +0000 (09:56 -0000)]
correct use of calloc in hashtable_t

10 years agoupdated documentation
Martin Willi [Wed, 17 Dec 2008 09:00:22 +0000 (09:00 -0000)]
updated documentation
some minor cleanups
calloc does not need an additional memset(0)

10 years agoimproved IKE_SA uniqueness check
Tobias Brunner [Tue, 16 Dec 2008 17:21:28 +0000 (17:21 -0000)]
improved IKE_SA uniqueness check

10 years agopurge certificates after IKE_AUTH response has been built
Martin Willi [Tue, 16 Dec 2008 15:48:36 +0000 (15:48 -0000)]
purge certificates after IKE_AUTH response has been built

10 years agoreimplemented certificate cache:
Martin Willi [Mon, 15 Dec 2008 15:41:48 +0000 (15:41 -0000)]
reimplemented certificate cache:
fixes unsafe certificate caching
use fixed array instead of a list
fine grained per-slot locking
use cache hits for housekeeping

10 years agosignal each entry condvar after enumeration, required if wait_for_entry is called
Martin Willi [Mon, 15 Dec 2008 09:19:04 +0000 (09:19 -0000)]
signal each entry condvar after enumeration, required if wait_for_entry is called

10 years agoadded an additional frame to lock profiling backtraces
Martin Willi [Mon, 15 Dec 2008 09:13:43 +0000 (09:13 -0000)]
added an additional frame to lock profiling backtraces

10 years agodo not respawn cancelled threads if we are shutting down
Martin Willi [Fri, 12 Dec 2008 15:57:12 +0000 (15:57 -0000)]
do not respawn cancelled threads if we are shutting down

10 years agofixed possible deadlock in checkin_and_destroy
Martin Willi [Fri, 12 Dec 2008 10:40:45 +0000 (10:40 -0000)]
fixed possible deadlock in checkin_and_destroy

10 years agoavoid DNS lookup if possible
Martin Willi [Fri, 12 Dec 2008 10:38:53 +0000 (10:38 -0000)]
avoid DNS lookup if possible

10 years agoexecute events if difference is 0, prevents a busywait
Martin Willi [Fri, 12 Dec 2008 09:16:31 +0000 (09:16 -0000)]
execute events if difference is 0, prevents a busywait

10 years agoload tester got a "shutdown_when_complete" option, allows performance test using...
Martin Willi [Fri, 12 Dec 2008 09:14:37 +0000 (09:14 -0000)]
load tester got a "shutdown_when_complete" option, allows performance test using "time"

10 years agodaemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill
Martin Willi [Fri, 12 Dec 2008 09:13:06 +0000 (09:13 -0000)]
daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill

10 years agoleak detective binds execution to a signle core, avoids corruption on SMP machines
Martin Willi [Fri, 12 Dec 2008 09:10:52 +0000 (09:10 -0000)]
leak detective binds execution to a signle core, avoids corruption on SMP machines

10 years agowait until all IKE_SAs are in-house before destroying them
Martin Willi [Fri, 12 Dec 2008 08:33:48 +0000 (08:33 -0000)]
wait until all IKE_SAs are in-house before destroying them

10 years agoaddress extensions refactored
Tobias Brunner [Thu, 11 Dec 2008 13:39:30 +0000 (13:39 -0000)]
address extensions refactored

10 years agofixed usage of "leases" command
Martin Willi [Thu, 11 Dec 2008 12:49:41 +0000 (12:49 -0000)]
fixed usage of "leases" command

10 years agonat_traversal in manpage corrected
Tobias Brunner [Wed, 10 Dec 2008 17:45:44 +0000 (17:45 -0000)]
nat_traversal in manpage corrected

10 years agofixing checkout of IKE SAs with only the initiator SPI
Tobias Brunner [Wed, 10 Dec 2008 15:58:39 +0000 (15:58 -0000)]
fixing checkout of IKE SAs with only the initiator SPI

10 years agoincreasing the performance of checkout_duplicate by using a hash table.
Tobias Brunner [Wed, 10 Dec 2008 13:51:21 +0000 (13:51 -0000)]
increasing the performance of checkout_duplicate by using a hash table.

10 years agoinitial size of 1 is nonsense
Tobias Brunner [Wed, 10 Dec 2008 13:45:05 +0000 (13:45 -0000)]
initial size of 1 is nonsense

10 years agoincremental version of chunk_hash
Tobias Brunner [Wed, 10 Dec 2008 13:43:51 +0000 (13:43 -0000)]
incremental version of chunk_hash

10 years agolist assigned leases using "ipsec leases"
Martin Willi [Wed, 10 Dec 2008 13:00:02 +0000 (13:00 -0000)]
list assigned leases using "ipsec leases"

10 years agoadded IKE_SA established timer to "ipsec statusall"
Martin Willi [Wed, 10 Dec 2008 09:59:35 +0000 (09:59 -0000)]
added IKE_SA established timer to "ipsec statusall"

10 years agousing rwlock to parallel build credentials
Martin Willi [Tue, 9 Dec 2008 15:57:51 +0000 (15:57 -0000)]
using rwlock to parallel build credentials

10 years agouse thread-safe variant of gmtime
Martin Willi [Tue, 9 Dec 2008 15:00:30 +0000 (15:00 -0000)]
use thread-safe variant of gmtime

10 years agofixed load-tester shared key lookup
Martin Willi [Tue, 9 Dec 2008 14:45:56 +0000 (14:45 -0000)]
fixed load-tester shared key lookup

10 years agopurge auth_info when IKE_SA is established, releases cert memory
Martin Willi [Tue, 9 Dec 2008 14:34:15 +0000 (14:34 -0000)]
purge auth_info when IKE_SA is established, releases cert memory

10 years agolimit number of ADDITIONAL_IPV*_ADDR notifies
Martin Willi [Tue, 9 Dec 2008 14:32:57 +0000 (14:32 -0000)]
limit number of ADDITIONAL_IPV*_ADDR notifies

10 years agolist pools and usage in ipsec statusall
Martin Willi [Tue, 9 Dec 2008 13:24:12 +0000 (13:24 -0000)]
list pools and usage in ipsec statusall

10 years agoextended stroke in-memory pool to use hash-tables
Martin Willi [Tue, 9 Dec 2008 13:23:42 +0000 (13:23 -0000)]
extended stroke in-memory pool to use hash-tables
supports online/offline leases
properly reassign addresses to identities

10 years agofixed hashtable->get_count() after doubling table size
Martin Willi [Tue, 9 Dec 2008 11:13:52 +0000 (11:13 -0000)]
fixed hashtable->get_count() after doubling table size

10 years agorequire explicit enabling of load-testing plugin
Martin Willi [Tue, 9 Dec 2008 09:11:37 +0000 (09:11 -0000)]
require explicit enabling of load-testing plugin

10 years agogenerating different initiator identities, configs and certificates on the fly
Martin Willi [Mon, 8 Dec 2008 19:18:28 +0000 (19:18 -0000)]
generating different initiator identities, configs and certificates on the fly

10 years agoremoved debugging leftovers
Martin Willi [Mon, 8 Dec 2008 19:15:38 +0000 (19:15 -0000)]
removed debugging leftovers

10 years agofixed out-of-tree build of scepclient
Martin Willi [Mon, 8 Dec 2008 16:00:33 +0000 (16:00 -0000)]
fixed out-of-tree build of scepclient

10 years agobasic x509 certificate generation
Martin Willi [Mon, 8 Dec 2008 15:29:36 +0000 (15:29 -0000)]
basic x509 certificate generation

10 years agowhitelisted another pthread_setspecific implementation
Martin Willi [Mon, 8 Dec 2008 15:27:24 +0000 (15:27 -0000)]
whitelisted another pthread_setspecific implementation

10 years agoaccept NULL values in hashtable enumerator
Martin Willi [Fri, 5 Dec 2008 12:34:17 +0000 (12:34 -0000)]
accept NULL values in hashtable enumerator

10 years agohashtable enumerator enumerates over both, key and values
Martin Willi [Fri, 5 Dec 2008 10:01:52 +0000 (10:01 -0000)]
hashtable enumerator enumerates over both, key and values

10 years agoadded actual ikev2bis draft
Martin Willi [Fri, 5 Dec 2008 09:41:20 +0000 (09:41 -0000)]
added actual ikev2bis draft

10 years agopass identity to release_address(), allows providers to do a lookup by id
Martin Willi [Fri, 5 Dec 2008 09:40:50 +0000 (09:40 -0000)]
pass identity to release_address(), allows providers to do a lookup by id

10 years agoextended changeset [4753]
Andreas Steffen [Thu, 4 Dec 2008 23:16:10 +0000 (23:16 -0000)]
extended changeset [4753]

10 years agoimplemented the policy cache in kernel_netlink_ipsec_t with a hash table instead...
Tobias Brunner [Thu, 4 Dec 2008 16:46:08 +0000 (16:46 -0000)]
implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead of a linked list.

10 years agofixed off by one error
Tobias Brunner [Thu, 4 Dec 2008 16:33:39 +0000 (16:33 -0000)]
fixed off by one error

10 years agofixed copy-paste bug (double-free)
Martin Willi [Thu, 4 Dec 2008 10:10:37 +0000 (10:10 -0000)]
fixed copy-paste bug (double-free)

10 years agoreset pointer for a clean destruction
Martin Willi [Thu, 4 Dec 2008 10:09:21 +0000 (10:09 -0000)]
reset pointer for a clean destruction

10 years agohandling peer_match with higher priority tan ike_match to select correct config if...
Martin Willi [Thu, 4 Dec 2008 10:00:03 +0000 (10:00 -0000)]
handling peer_match with higher priority tan ike_match to select correct config if IPs are equal