 Andreas Steffen
|
4faaa05439
|
test of ipsec leases command in ikev2/ip-pool and ikev2/ip-two-pools scenarios
|
2009-01-09 00:24:54 +00:00 |
|
|
Andreas Steffen
|
0519ca9099
|
version bump to 2.4.11
|
2009-01-08 22:23:42 +00:00 |
|
|
Andreas Steffen
|
6c8c268009
|
adapted ikev2/ip-pool-wish scenario to the new stroke ip pool function
|
2009-01-08 21:41:07 +00:00 |
|
|
Andreas Steffen
|
01a8b40b99
|
fixed two bugs introduced by the stroke ip pool refactoring
|
2009-01-08 21:34:44 +00:00 |
|
|
Martin Willi
|
d34030a810
|
increase nonce size to 32 bytes, required when using SHA384/512 PRFs
|
2008-12-31 08:58:49 +00:00 |
|
|
Andreas Steffen
|
b768170bf3
|
missing LOGFILE in debug statement
|
2008-12-23 06:35:16 +00:00 |
|
|
Martin Willi
|
4856241c1e
|
added some NEWS for 4.2.10
|
2008-12-22 12:48:50 +00:00 |
|
|
Martin Willi
|
12d4186f5c
|
fixed a potential memory leak when reusing mobike task
|
2008-12-19 14:34:40 +00:00 |
|
|
Martin Willi
|
f6035833fa
|
RNG tests based on FIPS 140-1
|
2008-12-18 16:24:22 +00:00 |
|
|
Martin Willi
|
2241a29571
|
support for Padlock RNG
|
2008-12-18 16:21:05 +00:00 |
|
|
Martin Willi
|
5045eeba7b
|
proper feature probing for padlock
|
2008-12-17 15:40:01 +00:00 |
|
|
Tobias Brunner
|
f30150d3da
|
correct use of calloc in hashtable_t
|
2008-12-17 09:56:05 +00:00 |
|
|
Martin Willi
|
9bcc9bb60e
|
updated documentation
some minor cleanups
calloc does not need an additional memset(0)
|
2008-12-17 09:00:22 +00:00 |
|
|
Tobias Brunner
|
58464dd737
|
improved IKE_SA uniqueness check
|
2008-12-16 17:21:28 +00:00 |
|
|
Martin Willi
|
097e4b8ff9
|
purge certificates after IKE_AUTH response has been built
|
2008-12-16 15:48:36 +00:00 |
|
|
Martin Willi
|
764e8b2211
|
reimplemented certificate cache:
fixes unsafe certificate caching
use fixed array instead of a list
fine grained per-slot locking
use cache hits for housekeeping
|
2008-12-15 15:41:48 +00:00 |
|
|
Martin Willi
|
482218f075
|
signal each entry condvar after enumeration, required if wait_for_entry is called
|
2008-12-15 09:19:04 +00:00 |
|
|
Martin Willi
|
abfde23ae9
|
added an additional frame to lock profiling backtraces
|
2008-12-15 09:13:43 +00:00 |
|
|
Martin Willi
|
50901d2550
|
do not respawn cancelled threads if we are shutting down
|
2008-12-12 15:57:12 +00:00 |
|
|
Martin Willi
|
248a1f57bb
|
fixed possible deadlock in checkin_and_destroy
|
2008-12-12 10:40:45 +00:00 |
|
|
Martin Willi
|
d183adbc9d
|
avoid DNS lookup if possible
|
2008-12-12 10:38:53 +00:00 |
|
|
Martin Willi
|
3993b91334
|
execute events if difference is 0, prevents a busywait
|
2008-12-12 09:16:31 +00:00 |
|
|
Martin Willi
|
8006835ec1
|
load tester got a "shutdown_when_complete" option, allows performance test using "time"
|
2008-12-12 09:14:37 +00:00 |
|
|
Martin Willi
|
30841a0305
|
daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill
|
2008-12-12 09:13:06 +00:00 |
|
|
Martin Willi
|
7a485e90bd
|
leak detective binds execution to a signle core, avoids corruption on SMP machines
|
2008-12-12 09:10:52 +00:00 |
|
|
Martin Willi
|
f2bd424c89
|
wait until all IKE_SAs are in-house before destroying them
|
2008-12-12 08:33:48 +00:00 |
|
|
Tobias Brunner
|
f55a7a76dd
|
address extensions refactored
|
2008-12-11 13:39:30 +00:00 |
|
|
Martin Willi
|
c636092c94
|
fixed usage of "leases" command
|
2008-12-11 12:49:41 +00:00 |
|
|
Tobias Brunner
|
a46173dfb4
|
nat_traversal in manpage corrected
|
2008-12-10 17:45:44 +00:00 |
|
|
Tobias Brunner
|
2475560c82
|
fixing checkout of IKE SAs with only the initiator SPI
|
2008-12-10 15:58:39 +00:00 |
|
|
Tobias Brunner
|
97016769fd
|
increasing the performance of checkout_duplicate by using a hash table.
|
2008-12-10 13:51:21 +00:00 |
|
|
Tobias Brunner
|
0dbd9788e5
|
initial size of 1 is nonsense
|
2008-12-10 13:45:05 +00:00 |
|
|
Tobias Brunner
|
d6dc0a21fb
|
incremental version of chunk_hash
|
2008-12-10 13:43:51 +00:00 |
|
|
Martin Willi
|
6b83549d1a
|
list assigned leases using "ipsec leases"
|
2008-12-10 13:00:02 +00:00 |
|
|
Martin Willi
|
ed2bcd0315
|
added IKE_SA established timer to "ipsec statusall"
|
2008-12-10 09:59:35 +00:00 |
|
|
Martin Willi
|
d5d5bc0f16
|
using rwlock to parallel build credentials
|
2008-12-09 15:57:51 +00:00 |
|
|
Martin Willi
|
5e5b2dc105
|
use thread-safe variant of gmtime
|
2008-12-09 15:00:30 +00:00 |
|
|
Martin Willi
|
6144daba9d
|
fixed load-tester shared key lookup
|
2008-12-09 14:45:56 +00:00 |
|
|
Martin Willi
|
7023d49ee1
|
purge auth_info when IKE_SA is established, releases cert memory
|
2008-12-09 14:34:15 +00:00 |
|
|
Martin Willi
|
a1466a3ec2
|
limit number of ADDITIONAL_IPV*_ADDR notifies
|
2008-12-09 14:32:57 +00:00 |
|
|
Martin Willi
|
2e03196551
|
list pools and usage in ipsec statusall
|
2008-12-09 13:24:12 +00:00 |
|
|
Martin Willi
|
adf9965272
|
extended stroke in-memory pool to use hash-tables
supports online/offline leases
properly reassign addresses to identities
|
2008-12-09 13:23:42 +00:00 |
|
|
Martin Willi
|
20fbc4277e
|
fixed hashtable->get_count() after doubling table size
|
2008-12-09 11:13:52 +00:00 |
|
|
Martin Willi
|
15ed045c87
|
require explicit enabling of load-testing plugin
|
2008-12-09 09:11:37 +00:00 |
|
|
Martin Willi
|
5bdc8fc794
|
generating different initiator identities, configs and certificates on the fly
|
2008-12-08 19:18:28 +00:00 |
|
|
Martin Willi
|
aa5c5d3fde
|
removed debugging leftovers
|
2008-12-08 19:15:38 +00:00 |
|
|
Martin Willi
|
474998099f
|
fixed out-of-tree build of scepclient
|
2008-12-08 16:00:33 +00:00 |
|
|
Martin Willi
|
df68b54f4e
|
basic x509 certificate generation
|
2008-12-08 15:29:36 +00:00 |
|
|
Martin Willi
|
9eb85cffe1
|
whitelisted another pthread_setspecific implementation
|
2008-12-08 15:27:24 +00:00 |
|
|
Martin Willi
|
d21b3549f7
|
accept NULL values in hashtable enumerator
|
2008-12-05 12:34:17 +00:00 |
|