Andreas Steffen
b6a8cfab4b
additional UML configuration options
2011-01-31 05:47:05 +01:00
Andreas Steffen
ad061503b8
version bump to strongswan-4.5.1rc1
2011-01-31 05:39:17 +01:00
Andreas Steffen
5cdaafefc1
added tnccs_dynamic plugin and tnccs_11 refactoring to NEWS
2011-01-31 05:37:41 +01:00
Andreas Steffen
88e15afc8c
added comment to determine_tnccs_protocol() function
2011-01-31 05:31:22 +01:00
Andreas Steffen
f652995b21
implemented dynamic detection of TNCCS protocol
2011-01-31 00:59:17 +01:00
Martin Willi
5c89a00f05
Do not log potentially hundreds of cert requests for unknown CAs at level 1
2011-01-28 08:29:23 +01:00
Martin Willi
60b71def1a
Use wrapped threading functions in ha plugin
2011-01-20 15:52:29 +01:00
Martin Willi
44b6b8f9d5
Load load-tester plugin before kernel interfaces, fixes fake_kernel option
2011-01-19 16:43:00 +01:00
Martin Willi
8118707845
Increase tls_writer buffer by at least 4 bytes
2011-01-19 14:41:59 +01:00
Thomas Egerer
f2e2a40550
Fix potential use after free
2011-01-19 09:59:01 +01:00
Martin Willi
7cfa84f540
Whitelist gnutls init function
2011-01-17 18:20:12 +01:00
Martin Willi
2ca52c8048
Implemented an alternative HTTP fetcher based on libsoup
2011-01-17 18:20:06 +01:00
Martin Willi
a8a7a31700
Added simple fetcher tool to test fetcher implementations
2011-01-17 18:19:59 +01:00
Martin Willi
b94feb4b05
backtrace->contains_function takes multiple names, speeding up whitelist check drastically
2011-01-17 18:19:44 +01:00
Martin Willi
ec8426a349
Add some common glib non-leaks to whitelist
2011-01-17 18:19:36 +01:00
Martin Willi
c4048cd61f
Add missing va_end to va_start in curl_fetcher
2011-01-17 18:19:17 +01:00
Martin Willi
d27a8e5011
Do not pass an enum type to va_arg
2011-01-17 18:18:58 +01:00
Martin Willi
ff5538e5c0
Use newer Linux capability native API, if available
2011-01-17 18:18:21 +01:00
Martin Willi
2b52d5cb41
Do not install config files with user/group, as it might not exist on build machine
2011-01-17 18:08:17 +01:00
Martin Willi
64e06d4f8f
Compare ending address in ts->equals, fixes redundant traffic selector elimination
2011-01-14 13:24:08 +01:00
Martin Willi
983a5e88d3
Revert "Send INITIAL_CONTACT even if we have a unique policy"
...
It makes sense to omit INITIAL_CONTACT if don't have a unique policy,
as a client might want to connect from different devices to the same
account.
This reverts commit 719c33b41a
2011-01-13 10:50:46 +01:00
Martin Willi
9bac426bf3
Fixed memory cleanup if no DHCP transaction found for an OFFER
2011-01-13 10:36:16 +01:00
Martin Willi
2082417df3
Force port update as responder when initiator switches to 4500 in IKE_AUTH
2011-01-12 14:37:15 +01:00
Martin Willi
8ba805f4db
Avoid variable name overloading
2011-01-12 14:37:09 +01:00
Andreas Steffen
213281de04
terminate TNCCS 1.1 connection after sending recommendation
2011-01-11 01:17:40 +01:00
Andreas Steffen
4c8e9708ca
fixed XML syntax for TNCCS-Recommendation messages
2011-01-11 01:17:40 +01:00
Andreas Steffen
59d1b15aea
implemented check_and_build_recommendation()
2011-01-11 01:17:40 +01:00
Andreas Steffen
21d96f44f7
correct numbering of batches
2011-01-11 01:17:40 +01:00
Andreas Steffen
8d0d0f0fe9
initialize the reference count correctly
2011-01-11 01:17:40 +01:00
Andreas Steffen
f33966fe8f
handle zero size Base64 conversions
2011-01-11 01:17:40 +01:00
Andreas Steffen
8a284e0454
communicate DELETE state to IMCs and IMVs
2011-01-11 01:17:40 +01:00
Martin Willi
719c33b41a
Send INITIAL_CONTACT even if we have a unique policy
2011-01-10 11:54:10 +01:00
Andreas Steffen
5fee822a93
implemented parsing of TNCCS 1.1 messages
2011-01-09 10:00:54 +01:00
Andreas Steffen
33749b879c
send notifyConnectionChange() to IMCs
2011-01-09 10:00:13 +01:00
Andreas Steffen
a226307f13
suiteb directory hasn't been moved to Master yet
2011-01-08 02:17:42 +01:00
Andreas Steffen
8235528840
generate TNCCS-Error messages
2011-01-08 02:17:42 +01:00
Andreas Steffen
1c4b4f76ad
created process() method for TNCCS messages
2011-01-08 02:17:42 +01:00
Martin Willi
96c4addcbd
Added NEWS for ipsec.conf certpolicy and key strength options
2011-01-07 15:51:35 +01:00
Martin Willi
44e513a320
Added support for trustchain key strength checking to rightauth option
2011-01-07 15:51:35 +01:00
Martin Willi
6367de28ad
Added a left/rightcertpolicy keyword to specify certificatePolicy requirements
2011-01-07 15:51:35 +01:00
Martin Willi
1ed482d808
Fix nonce comparison in rekey collisions, lowest nonce loses
2011-01-07 15:51:35 +01:00
Andreas Steffen
3a04dfaaf6
corrected naming of tnccs_reason_strings_msg_t object
2011-01-07 07:18:42 +01:00
Andreas Steffen
87fd83a91e
do not forget to advance node
2011-01-07 07:17:52 +01:00
Andreas Steffen
1f7aad7f58
libcharon plugins depend on libtls and/or libsimaka
2011-01-07 06:28:08 +01:00
Andreas Steffen
3e348daae5
fixed cert_validator_t:validate interface
2011-01-07 05:41:01 +01:00
Andreas Steffen
d9e21bf180
implemented TNCCS 1.1 without libtnc
2011-01-07 05:29:59 +01:00
Andreas Steffen
cfa190bb7c
compute memory requirement for PEM-encoding correctly
2011-01-07 05:29:59 +01:00
Martin Willi
fb1e7df13f
Added delta CRL NEWS
2011-01-05 18:20:11 +01:00
Martin Willi
77eee25f5a
Added constraints plugin NEWS
2011-01-05 18:15:44 +01:00
Martin Willi
f078346476
Added conftest NEWS
2011-01-05 18:09:49 +01:00
Andreas Steffen