Martin Willi
1694e82c7c
fixed another 64bit compiler warning
2009-06-19 10:19:55 +02:00
Martin Willi
f53b7e00c2
reverted rule_count back to size_t, as it is passed as pointer (fixes 64bit issues)
2009-06-19 10:01:04 +02:00
Martin Willi
80d3a187c5
double check that parsing a list consumes all bytes
2009-06-17 13:38:05 +02:00
Martin Willi
df2565a2d5
use signed lengths in parser and generator
2009-06-17 13:22:07 +02:00
Martin Willi
8ae89883e1
fixed copy/paste error in attribute type parsing
2009-06-17 11:42:53 +02:00
Martin Willi
fcb06fdbfa
use rwlock instead of a mutex in trap_manager, avoids possible deadlock
2009-06-16 17:27:25 +02:00
Martin Willi
4edda6e4a0
load trap_manager before plugins, allowing them to install traps
2009-06-16 17:27:24 +02:00
Martin Willi
04d6583e26
reset IKE_SA on bus after checkout/checkin of replacement SA
2009-06-16 17:27:24 +02:00
Martin Willi
140ea1fe5a
instanciate first registered kernel interface immediately
2009-06-16 17:27:24 +02:00
Martin Willi
f1f968d562
extended RSA tests by encrypt/decrypt operations
2009-06-15 18:05:34 +02:00
Andreas Steffen
ebde1a7ddd
consistent display of strongSwan version
2009-06-13 16:03:08 +02:00
Martin Willi
0897ff21e7
removed crypto tests form unit tester, all gone to test-vector plugin
2009-06-12 10:44:01 +02:00
Martin Willi
c66cd00df4
removed pluto test vectors, --disable-self-test option
2009-06-11 20:27:32 +02:00
Martin Willi
a4caeac76e
moved publickey speed test to a standalone program
...
This reverts commit 08874d6ae2
2009-06-10 16:25:32 +02:00
Martin Willi
3e3de01b28
moved Diffie-Hellman speed test to a standalone program
...
This reverts commit 1e6050bfae
2009-06-10 14:58:58 +02:00
Martin Willi
260158e53e
properly shut down and unref nm mainloop, fixes crash at shutdown
2009-06-09 15:13:10 +02:00
Martin Willi
4d8ddefb78
remove stale pidfile if no such process found
2009-06-09 14:56:31 +02:00
Martin Willi
fd0b7903e6
fix inclusion of private_key_t in nm plugin
2009-06-09 14:03:48 +02:00
Martin Willi
1e6050bfae
implemented a speed test for diffie-hellman
2009-06-09 11:27:35 +02:00
Martin Willi
08874d6ae2
implemented a speed test for public key algorithms
2009-06-09 11:27:34 +02:00
Martin Willi
b00fbdb55a
updated medcli/medsrv plugins to use new auth_cfg API, fixes compilation
2009-06-05 14:15:39 +02:00
Martin Willi
ec0b9ac97c
added missing identification.h include
2009-06-04 13:49:51 +02:00
Martin Willi
2fdca5e3cb
apply is_anyaddr fix from socket also to socket-raw
2009-06-03 17:56:55 +02:00
Martin Willi
9474a0d90c
added a charon.install_virtual_ip option to disable IP installation for testing
2009-06-02 13:45:29 +02:00
Andreas Steffen
e24aaddde0
hide credentials headers in credential_factory.h
2009-05-28 15:35:02 +02:00
Martin Willi
92f5956790
show strongSwan version in statusall
2009-05-26 14:10:45 +02:00
Andreas Steffen
f64d8240b2
resolve clone naming conflict with uclibc
2009-05-25 08:38:36 +02:00
Andreas Steffen
90df644ed6
suppress Routed Connections caption if list is empty
2009-05-24 20:06:55 +02:00
Tobias Brunner
617e59b7bc
Portably check for IPSEC_* constants (defined in ipsec.h).
...
The problem is that FreeBSD defines them as #defines whereas Linux defines them as enums.
2009-05-20 20:15:06 +02:00
Martin Willi
a13c013b6f
include TSi/TSr of triggering packet in acquire
2009-05-20 11:44:43 +02:00
Martin Willi
cd37e13133
properly terminate EAP authentication if EAP method fails
2009-05-20 09:24:18 +02:00
Martin Willi
8affd7ac65
fixed dumping of integers in generator
2009-05-20 09:04:10 +02:00
Andreas Steffen
e36c67aca4
same format as IKEv1
2009-05-19 22:12:29 +02:00
Martin Willi
c6c842e9ad
added Debian specific packaging files to NM applet
2009-05-19 14:01:40 +02:00
Martin Willi
bf9e1d4444
new NM applet release 1.1.1
2009-05-19 14:01:39 +02:00
Martin Willi
ef56ba51d4
fixed compiler warnings
2009-05-19 12:23:21 +02:00
Martin Willi
f920bd1861
replaced deprecated g_strcasecmp()
2009-05-19 12:23:21 +02:00
Martin Willi
9e2d7f962f
updated build system to newer autotool/gnome conventions
2009-05-19 12:23:20 +02:00
Andreas Steffen
5908478527
moved definition of proposal_token from proposal.c to proposal_keywords.h
2009-05-19 10:02:24 +02:00
Martin Willi
39ded7128c
do not write to unaligned memory in MSCHAPv2
2009-05-18 14:41:16 +02:00
Martin Willi
3f7611c59d
cleanup of generator code
2009-05-18 14:06:48 +02:00
Martin Willi
79a2afedd5
removed unused 64-bit integer parsing rule
2009-05-18 13:36:56 +02:00
Martin Willi
4274885855
do not access unaligned words/half-words directly
2009-05-18 13:34:09 +02:00
Martin Willi
57ae766af8
cleaned up parser code
2009-05-18 13:13:12 +02:00
Martin Willi
12806574b8
removed trailing spaces/tabs
2009-05-18 13:13:12 +02:00
Tobias Brunner
68173e1fea
typo
2009-05-18 13:04:18 +02:00
Martin Willi
24cd2ca6ee
moved very stroke specific x509 flag handling out of core library
2009-05-18 10:42:16 +02:00
Andreas Steffen
7b72af2eba
another lease identity to be single-quoted
2009-05-16 11:05:15 +02:00
Andreas Steffen
433cb51bb9
moved IKEv2 proposals and transforms to libstrongswan
2009-05-15 22:43:48 +02:00
Martin Willi
0ed6b7a7d7
If the NM gateway certificate has the CA constraint set, we use the gateway address as its identity.
...
To allow the same certificate deployment for Windows 7 and NetworkManager clients,
the NM plugin now accepts CA certificates. To prevent any certificate holder
to act as a gateway, we bind the identity to the entered gateway address. The
gateways certificate therefore must contain the IP/DNS of the gateway
as subjectAltName.
2009-05-15 16:35:14 +02:00
Martin Willi