strongswan.git
10 years agofixed asn1_oid_to_string() conversion
Andreas Steffen [Wed, 9 Mar 2011 14:35:35 +0000 (15:35 +0100)]
fixed asn1_oid_to_string() conversion

10 years agoUse a boolean expression for refcount check, fixes refcounting if bool is a signed...
Martin Willi [Wed, 9 Mar 2011 06:52:13 +0000 (07:52 +0100)]
Use a boolean expression for refcount check, fixes refcounting if bool is a signed char

10 years agoMigrated sim_manager to INIT/METHOD macros
Martin Willi [Tue, 8 Mar 2011 14:02:42 +0000 (15:02 +0100)]
Migrated sim_manager to INIT/METHOD macros

10 years agoProtect sim card/provider/hook (un-)registration with a rwlock
Martin Willi [Tue, 8 Mar 2011 13:52:47 +0000 (14:52 +0100)]
Protect sim card/provider/hook (un-)registration with a rwlock

10 years agoSplitted sim_manager.h header to sim_{card,provider,hooks}.h
Martin Willi [Tue, 8 Mar 2011 13:17:53 +0000 (14:17 +0100)]
Splitted sim_manager.h header to sim_{card,provider,hooks}.h

10 years agodefined some TCG attribute OIDs
Andreas Steffen [Tue, 8 Mar 2011 06:27:00 +0000 (07:27 +0100)]
defined some TCG attribute OIDs

10 years agosupport of RSAES-OAEP public keys
Andreas Steffen [Tue, 8 Mar 2011 06:03:22 +0000 (07:03 +0100)]
support of RSAES-OAEP public keys

10 years agoadded id-RSAES-OAEP and id-pSpecified OIDs
Andreas Steffen [Mon, 7 Mar 2011 21:46:28 +0000 (22:46 +0100)]
added id-RSAES-OAEP and id-pSpecified OIDs

10 years agoinitiate or route all child configs if they have different names from their parent...
Andreas Steffen [Fri, 4 Mar 2011 06:02:03 +0000 (07:02 +0100)]
initiate or route all child configs if they have different names from their parent peer config

10 years agoAlign netlink attributes properly if rta_len not a multiple of RTA_ALIGNTO
Martin Willi [Wed, 2 Mar 2011 15:06:13 +0000 (16:06 +0100)]
Align netlink attributes properly if rta_len not a multiple of RTA_ALIGNTO

10 years agoinitiate or route child configs which don't have a peer config of the same name
Andreas Steffen [Tue, 1 Mar 2011 21:24:19 +0000 (22:24 +0100)]
initiate or route child configs which don't have a peer config of the same name

10 years agoput DN in double quotes
Andreas Steffen [Fri, 18 Feb 2011 16:36:18 +0000 (17:36 +0100)]
put DN in double quotes

10 years agocorrected pkcs11 error message
Andreas Steffen [Fri, 18 Feb 2011 16:32:48 +0000 (17:32 +0100)]
corrected pkcs11 error message

10 years agoImplemented permanent certificate coupling plugin
Martin Willi [Mon, 21 Feb 2011 13:05:21 +0000 (13:05 +0000)]
Implemented permanent certificate coupling plugin

10 years agoUpdate duplicheck entry during IKE rekeying
Martin Willi [Mon, 28 Feb 2011 14:49:50 +0000 (14:49 +0000)]
Update duplicheck entry during IKE rekeying

10 years agoRemove entry from active duplicate list only if it was not in checking
Martin Willi [Tue, 22 Feb 2011 10:16:13 +0000 (11:16 +0100)]
Remove entry from active duplicate list only if it was not in checking

10 years agoAdded an example application listening to duplicheck notifications
Martin Willi [Wed, 9 Feb 2011 15:28:31 +0000 (16:28 +0100)]
Added an example application listening to duplicheck notifications

10 years agoNotify duplicate detections over a UNIX sockets to listening applications
Martin Willi [Wed, 9 Feb 2011 15:15:21 +0000 (16:15 +0100)]
Notify duplicate detections over a UNIX sockets to listening applications

10 years agoAdded an advanced duplicate checking plugin with liveness check of old SA
Martin Willi [Wed, 9 Feb 2011 14:04:21 +0000 (15:04 +0100)]
Added an advanced duplicate checking plugin with liveness check of old SA

10 years agoInvert check to delete unestablished IKE_SAs to not delete them once established
Martin Willi [Wed, 9 Feb 2011 14:03:08 +0000 (15:03 +0100)]
Invert check to delete unestablished IKE_SAs to not delete them once established

10 years agoAdded whitelist plugin NEWS
Martin Willi [Tue, 8 Feb 2011 08:40:14 +0000 (09:40 +0100)]
Added whitelist plugin NEWS

10 years agoAdded a whitelist command line utility to control whitelist plugin
Martin Willi [Thu, 3 Feb 2011 16:06:40 +0000 (17:06 +0100)]
Added a whitelist command line utility to control whitelist plugin

10 years agoAdded a UNIX socket based control backend to whitelist plugin
Martin Willi [Thu, 3 Feb 2011 13:37:45 +0000 (14:37 +0100)]
Added a UNIX socket based control backend to whitelist plugin

10 years agoImplemented a in-memory peer identity whitelist plugin
Martin Willi [Thu, 3 Feb 2011 12:38:13 +0000 (13:38 +0100)]
Implemented a in-memory peer identity whitelist plugin

10 years agoFixed a possible segfault after termination of IKE and child SAs.
Tobias Brunner [Mon, 28 Feb 2011 12:19:39 +0000 (13:19 +0100)]
Fixed a possible segfault after termination of IKE and child SAs.

Because the thread that is actually terminating the SA and thus checking
it in again is not be the same thread that previously checked it out and
queued the termination job, the thread local SA on the bus has to be reset
manually, similar to how it is set in the job which is executing the job.

10 years agoSlightly change IKE_SA destruction order to inherit properly during ike_rekey task...
Martin Willi [Mon, 28 Feb 2011 10:31:36 +0000 (10:31 +0000)]
Slightly change IKE_SA destruction order to inherit properly during ike_rekey task destruction

10 years agoAdded a pseudo EAP type to allow an implementation to select the real type dynamically
Martin Willi [Tue, 22 Feb 2011 15:09:45 +0000 (16:09 +0100)]
Added a pseudo EAP type to allow an implementation to select the real type dynamically

10 years agoprevent multiple debug outputs in case of non-monolithic plugins
Andreas Steffen [Sun, 20 Feb 2011 14:18:36 +0000 (15:18 +0100)]
prevent multiple debug outputs in case of non-monolithic plugins

10 years agoWhitelisted another tzset variant and dlsym
Martin Willi [Fri, 18 Feb 2011 15:07:16 +0000 (16:07 +0100)]
Whitelisted another tzset variant and dlsym

10 years agoMigrated kernel_pfroute_net to INIT/METHOD macros
Martin Willi [Thu, 17 Feb 2011 09:39:25 +0000 (09:39 +0000)]
Migrated kernel_pfroute_net to INIT/METHOD macros

10 years agoMigrated kernel_netlink_net to INIT/METHOD macros
Martin Willi [Thu, 17 Feb 2011 09:31:15 +0000 (09:31 +0000)]
Migrated kernel_netlink_net to INIT/METHOD macros

10 years agomaemo: New upstream release.
Tobias Brunner [Tue, 15 Feb 2011 09:43:19 +0000 (10:43 +0100)]
maemo: New upstream release.

10 years agoversion bump to 4.5.2dr1
Andreas Steffen [Fri, 11 Feb 2011 06:46:23 +0000 (07:46 +0100)]
version bump to 4.5.2dr1

10 years agomaemo: Disabled some unneeded plugins. 4.5.1
Tobias Brunner [Thu, 10 Feb 2011 15:07:16 +0000 (16:07 +0100)]
maemo: Disabled some unneeded plugins.

10 years agoMerged the monolithic and non-monolithic plugin loaders into one.
Tobias Brunner [Thu, 10 Feb 2011 15:46:06 +0000 (16:46 +0100)]
Merged the monolithic and non-monolithic plugin loaders into one.

This allows to add additional plugins even when the original build was
monolithic. Also fixes the pluto/xauth bug with the monolithic build.

10 years agopluto: Properly free secrets in error cases.
Tobias Brunner [Thu, 10 Feb 2011 14:50:58 +0000 (15:50 +0100)]
pluto: Properly free secrets in error cases.

10 years agoKernel interface updated for KLIPS plugin (TFC padding).
Tobias Brunner [Thu, 10 Feb 2011 10:01:15 +0000 (11:01 +0100)]
Kernel interface updated for KLIPS plugin (TFC padding).

10 years agoCompiler warning fixed.
Tobias Brunner [Thu, 10 Feb 2011 10:00:31 +0000 (11:00 +0100)]
Compiler warning fixed.

10 years ago[hopefully] fixed pathlen problem on ARM platforms
Andreas Steffen [Thu, 10 Feb 2011 14:51:18 +0000 (15:51 +0100)]
[hopefully] fixed pathlen problem on ARM platforms

10 years agomaemo: Typos in description fixed.
Tobias Brunner [Tue, 8 Feb 2011 17:10:13 +0000 (18:10 +0100)]
maemo: Typos in description fixed.

10 years agomaemo: Homepage added to debian/control files.
Tobias Brunner [Tue, 8 Feb 2011 16:41:57 +0000 (17:41 +0100)]
maemo: Homepage added to debian/control files.

10 years agoremoved ipsec up %startall from scenario descriptions
Andreas Steffen [Thu, 10 Feb 2011 09:03:59 +0000 (10:03 +0100)]
removed ipsec up %startall from scenario descriptions

10 years agoMigrated update_sa_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 07:31:46 +0000 (08:31 +0100)]
Migrated update_sa_job_t to INIT/METHOD macros

10 years agoMigrated send_keepalive_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 07:28:19 +0000 (08:28 +0100)]
Migrated send_keepalive_job_t to INIT/METHOD macros

10 years agoMigrated send_dpd_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 07:25:41 +0000 (08:25 +0100)]
Migrated send_dpd_job_t to INIT/METHOD macros

10 years agoMigrated roam_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 07:22:57 +0000 (08:22 +0100)]
Migrated roam_job_t to INIT/METHOD macros

10 years agoMigrated retransmit_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 07:19:47 +0000 (08:19 +0100)]
Migrated retransmit_job_t to INIT/METHOD macros

10 years agoMigrated rekey_ike_sa_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 07:16:23 +0000 (08:16 +0100)]
Migrated rekey_ike_sa_job_t to INIT/METHOD macros

10 years agoMigrated rekey_child_sa_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 07:13:01 +0000 (08:13 +0100)]
Migrated rekey_child_sa_job_t to INIT/METHOD macros

10 years agoMigrated process_message_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 07:09:36 +0000 (08:09 +0100)]
Migrated process_message_job_t to INIT/METHOD macros

10 years agoMigrated migrate_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 07:06:06 +0000 (08:06 +0100)]
Migrated migrate_job_t to INIT/METHOD macros

10 years ago_ prefix not required
Andreas Steffen [Thu, 10 Feb 2011 06:59:43 +0000 (07:59 +0100)]
_ prefix not required

10 years agoMigrated delete_ike_sa_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 06:56:53 +0000 (07:56 +0100)]
Migrated delete_ike_sa_job_t to INIT/METHOD macros

10 years agoMigrated delete_child_sa_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 06:53:34 +0000 (07:53 +0100)]
Migrated delete_child_sa_job_t to INIT/METHOD macros

10 years agoMigrated acquire_job_t to INIT/METHOD macros
Andreas Steffen [Thu, 10 Feb 2011 06:49:05 +0000 (07:49 +0100)]
Migrated acquire_job_t to INIT/METHOD macros

10 years agoreplaced ipsec up %startall command by start_action job
Andreas Steffen [Wed, 9 Feb 2011 21:27:04 +0000 (22:27 +0100)]
replaced ipsec up %startall command by start_action job

10 years agoversion bump to 4.5.1
Andreas Steffen [Wed, 9 Feb 2011 19:40:02 +0000 (20:40 +0100)]
version bump to 4.5.1

10 years agoadded openssl-ikev2/critical-extension scenario
Andreas Steffen [Tue, 8 Feb 2011 21:58:31 +0000 (22:58 +0100)]
added openssl-ikev2/critical-extension scenario

10 years agomaemo: Exclude static libraries from strongswan-applet package.
Tobias Brunner [Tue, 8 Feb 2011 15:18:50 +0000 (16:18 +0100)]
maemo: Exclude static libraries from strongswan-applet package.

10 years agomaemo: Use automatic optification.
Tobias Brunner [Tue, 8 Feb 2011 14:19:15 +0000 (15:19 +0100)]
maemo: Use automatic optification.

10 years agomaemo: Explicitly list the installed files.
Tobias Brunner [Tue, 8 Feb 2011 14:15:36 +0000 (15:15 +0100)]
maemo: Explicitly list the installed files.

This avoids packaging static libraries and .la files plus excludes man3
pages of libfreeswan.

10 years agomaemo: Use /usr/lib instead of /usr/libexec.
Tobias Brunner [Tue, 8 Feb 2011 14:14:48 +0000 (15:14 +0100)]
maemo: Use /usr/lib instead of /usr/libexec.

10 years agomaemo: Create DBUS service file with correct path to charon.
Tobias Brunner [Tue, 8 Feb 2011 14:13:15 +0000 (15:13 +0100)]
maemo: Create DBUS service file with correct path to charon.

10 years agomaemo: Fixed remake of strongswan package.
Tobias Brunner [Tue, 8 Feb 2011 14:04:06 +0000 (15:04 +0100)]
maemo: Fixed remake of strongswan package.

10 years agoFixed tnc-imc/imv library names when building monolithic
Martin Willi [Tue, 8 Feb 2011 10:22:02 +0000 (11:22 +0100)]
Fixed tnc-imc/imv library names when building monolithic

10 years agoCheck for libxml when building tnccs_11, use autoconf libxml CFLAGS/LIBS
Martin Willi [Tue, 8 Feb 2011 10:11:01 +0000 (11:11 +0100)]
Check for libxml when building tnccs_11, use autoconf libxml CFLAGS/LIBS

10 years agotnccs_11 does not link against libtls, just uses its headers
Martin Willi [Tue, 8 Feb 2011 10:09:27 +0000 (11:09 +0100)]
tnccs_11 does not link against libtls, just uses its headers

10 years agoWhitespace cleanups in tnc code
Martin Willi [Tue, 8 Feb 2011 09:56:06 +0000 (10:56 +0100)]
Whitespace cleanups in tnc code

10 years agoAdd a prefix to the global visible tnc names to avoid name clashes, move to tncifimv
Martin Willi [Tue, 8 Feb 2011 09:53:10 +0000 (10:53 +0100)]
Add a prefix to the global visible tnc names to avoid name clashes, move to tncifimv

10 years agoFixed compiler warning
Martin Willi [Tue, 8 Feb 2011 09:51:02 +0000 (10:51 +0100)]
Fixed compiler warning

10 years agotnccs_11 does not link to libtnc anymore
Martin Willi [Tue, 8 Feb 2011 09:44:08 +0000 (10:44 +0100)]
tnccs_11 does not link to libtnc anymore

10 years agoImplement correct signature for pb_tnc_msg->process()
Martin Willi [Tue, 8 Feb 2011 09:42:48 +0000 (10:42 +0100)]
Implement correct signature for pb_tnc_msg->process()

10 years agoFixed doxygen groups in libcharon tnc subtree
Martin Willi [Tue, 8 Feb 2011 09:18:42 +0000 (10:18 +0100)]
Fixed doxygen groups in libcharon tnc subtree

10 years agoFixed various doxygen errors in tnc plugins
Martin Willi [Tue, 8 Feb 2011 09:18:09 +0000 (10:18 +0100)]
Fixed various doxygen errors in tnc plugins

10 years agoFixed function parameter description
Martin Willi [Tue, 8 Feb 2011 09:14:56 +0000 (10:14 +0100)]
Fixed function parameter description

10 years agoadded ikev2/critical-extension scenario
Andreas Steffen [Tue, 8 Feb 2011 06:05:11 +0000 (07:05 +0100)]
added ikev2/critical-extension scenario

10 years agodefined OID_STRONGSWAN
Andreas Steffen [Mon, 7 Feb 2011 22:42:29 +0000 (23:42 +0100)]
defined OID_STRONGSWAN

10 years agouse DN from pkcs10 request if it exists
Andreas Steffen [Mon, 7 Feb 2011 22:41:54 +0000 (23:41 +0100)]
use DN from pkcs10 request if it exists

10 years agomaemo: New releases.
Tobias Brunner [Mon, 7 Feb 2011 15:14:12 +0000 (16:14 +0100)]
maemo: New releases.

10 years agomaemo: Build dependencies fixed.
Tobias Brunner [Mon, 7 Feb 2011 15:13:37 +0000 (16:13 +0100)]
maemo: Build dependencies fixed.

10 years agomaemo: Makefile target to build source-only packages.
Tobias Brunner [Mon, 7 Feb 2011 15:12:30 +0000 (16:12 +0100)]
maemo: Makefile target to build source-only packages.

10 years agoReport correct key size if a cipher is not supported
Martin Willi [Mon, 7 Feb 2011 15:38:54 +0000 (16:38 +0100)]
Report correct key size if a cipher is not supported

10 years agoremoved keyblobtoid.c from libfreeswan
Andreas Steffen [Mon, 7 Feb 2011 14:47:43 +0000 (15:47 +0100)]
removed keyblobtoid.c from libfreeswan

10 years agoremoved atosa.c and satoa.c from libfreeswan
Andreas Steffen [Mon, 7 Feb 2011 14:35:24 +0000 (15:35 +0100)]
removed atosa.c and satoa.c from libfreeswan

10 years agoremoved prng.c from libfreeswan
Andreas Steffen [Mon, 7 Feb 2011 14:19:06 +0000 (15:19 +0100)]
removed prng.c from libfreeswan

10 years agoRemoved empty man page for starter.
Tobias Brunner [Mon, 7 Feb 2011 10:37:12 +0000 (11:37 +0100)]
Removed empty man page for starter.

10 years agoRemoved useless man page for _copyright.
Tobias Brunner [Mon, 7 Feb 2011 10:28:44 +0000 (11:28 +0100)]
Removed useless man page for _copyright.

10 years agoSome typos fixed.
Tobias Brunner [Mon, 7 Feb 2011 10:13:27 +0000 (11:13 +0100)]
Some typos fixed.

10 years agoFixed whatis entry of pluto manpage.
Tobias Brunner [Mon, 7 Feb 2011 10:09:03 +0000 (11:09 +0100)]
Fixed whatis entry of pluto manpage.

10 years agoEscape - in manpages when used as minus sign.
Tobias Brunner [Mon, 7 Feb 2011 09:52:54 +0000 (10:52 +0100)]
Escape - in manpages when used as minus sign.

10 years agomaemo: Register with the GtkIconTheme "changed" signal not until the GUI is initialized.
Tobias Brunner [Mon, 7 Feb 2011 09:43:28 +0000 (10:43 +0100)]
maemo: Register with the GtkIconTheme "changed" signal not until the GUI is initialized.

10 years agointroduced libstrongswan.x509.enforce_critical parameter
Andreas Steffen [Sat, 5 Feb 2011 08:01:18 +0000 (09:01 +0100)]
introduced libstrongswan.x509.enforce_critical parameter

10 years agoversion bump to 4.5.1rc2
Andreas Steffen [Sat, 5 Feb 2011 07:59:36 +0000 (08:59 +0100)]
version bump to 4.5.1rc2

10 years agoProperly initialize variable 'critical'.
Tobias Brunner [Fri, 4 Feb 2011 17:01:47 +0000 (18:01 +0100)]
Properly initialize variable 'critical'.

10 years agomaemo: Moved package sources.
Tobias Brunner [Fri, 4 Feb 2011 17:01:10 +0000 (18:01 +0100)]
maemo: Moved package sources.

10 years agomaemo: Added Maemo specific patches for strongswan.conf.
Tobias Brunner [Fri, 4 Feb 2011 17:00:18 +0000 (18:00 +0100)]
maemo: Added Maemo specific patches for strongswan.conf.

10 years agomaemo: Use newer Debian source package format.
Tobias Brunner [Fri, 4 Feb 2011 16:59:31 +0000 (17:59 +0100)]
maemo: Use newer Debian source package format.

10 years agomaemo: Adding Makefiles to build Debian packages.
Tobias Brunner [Fri, 4 Feb 2011 16:58:55 +0000 (17:58 +0100)]
maemo: Adding Makefiles to build Debian packages.

10 years agomaemo: Move debian/ directory for applet to packages/.
Tobias Brunner [Fri, 4 Feb 2011 16:41:15 +0000 (17:41 +0100)]
maemo: Move debian/ directory for applet to packages/.

10 years agomaemo: Enable pluto and starter.
Tobias Brunner [Fri, 4 Feb 2011 11:52:40 +0000 (12:52 +0100)]
maemo: Enable pluto and starter.