Commit Graph
6841 Commits
Author SHA1 Message Date
Tobias Brunner ca25eb9eb3 testing: Directly link to index.html of tests to allow browsing via file://. 2011-05-05 10:29:52 +02:00
Tobias Brunner e8ae55f64b testing: Avoid adding additional spacing around testresults. 2011-05-05 10:29:52 +02:00
Tobias Brunner 074919dcc5 testing: Replace back link in results with crumbtrail to improve navigation. 2011-05-05 10:29:51 +02:00
Martin Willi 92ebb7c5b2 Added NEWS about duplicheck and coupling plugins 2011-05-05 09:38:48 +02:00
Martin Willi e35727c14d Fix algorithm type for signers, fixes warning with gcc 4.5 2011-05-03 11:33:40 +02:00
Tobias Brunner b4c9ab9c79 Cache group name in sys_logger_t to avoid problems with Vstr.
Because syslog(3) is not replaced when using the Vstr wrapper, %N can
not be resolved properly.
2011-05-03 10:50:28 +02:00
Tobias Brunner b7cb8100c4 Migrated sys_logger_t to INIT/METHOD macros. 2011-05-03 10:21:58 +02:00
Tobias Brunner 5bbe0ee18c Migrated file_logger_t to INIT/METHOD macros. 2011-05-03 10:21:03 +02:00
Andreas Steffen b58e9783d7 version bump to 4.5.2rc1 2011-05-02 22:15:43 +02:00
Tobias Brunner 7b12521679 Removed superfluous parameter missed in e5e5bcc92f. 2011-05-02 17:13:14 +02:00
Martin Willi aca6434ba9 Fix a potential memleak if two threads fingerprint a credential simultaneously 2011-05-02 15:05:41 +02:00
Martin Willi 33bad71ce9 Accept name fields in EAP-MD5 messages 2011-05-02 09:57:58 +02:00
Andreas Steffen ca0341bf85 added missing tab 2011-04-28 13:30:40 +02:00
Andreas Steffen 083fe967e5 adapted debug output 2011-04-28 13:28:40 +02:00
Andreas Steffen 02472e3417 do not send messages of type TNC_VENDORID_ANY or subtye TNC_SUBTYPE_ANY 2011-04-28 13:28:40 +02:00
Tobias Brunner 68447302d6 Typo fixed. 2011-04-28 12:50:30 +02:00
Andreas Steffen 7d39f3e1b9 log unsupported IMC_IMV message types 2011-04-28 02:27:08 +02:00
Andreas Steffen e7f21e33b1 list registered TNCCS message types 2011-04-28 01:35:45 +02:00
Tobias Brunner 67ec2be665 IKEv2 was only partially the default for connections with auto=route and auto=start.
Connections with auto=route and auto=start that did not have
keyexchange=ikev2 explicitly specified did get added to charon,
but did not get routed or started by charon.
2011-04-27 11:33:06 +02:00
Tobias Brunner cce8f65232 Fixed two typos in kernel-pfroute plugin. 2011-04-26 17:58:39 +02:00
Andreas Steffen 8af1e3606b fixed loop error in parsing of OCSP basic responses 2011-04-26 12:32:19 +02:00
Andreas Steffen 6ab1a83059 Migrated eap_sim_file to INIT/METHOD macros 2011-04-22 11:30:42 +02:00
Andreas Steffen 406051ea4e fixed segmentation fault due to null pointer 2011-04-22 10:11:16 +02:00
Andreas Steffen 4b06f9f265 debug type is EAP_TLS 2011-04-21 21:04:11 +02:00
Andreas Steffen 2778b6644b do not include length field in non-fragmented EAP-PEAP packets 2011-04-21 19:52:49 +02:00
Andreas Steffen c223ccd174 Win 7 accepts compressed EAP Identity request 2011-04-21 19:52:49 +02:00
Andreas Steffen 20c428b670 added level 3 debug output of forwarded EAP payloads 2011-04-21 19:52:49 +02:00
Martin Willi f9a552f011 Resolve and connect to RADIUS servers not before required 2011-04-21 14:01:25 +02:00
Martin Willi 5b0bcfb1fc Revert alloc_str changes
This reverts commit fdead26ffe.
This reverts commit 3e2419ebe3.
This reverts commit 17ce69b47a.
2011-04-21 13:35:31 +02:00
Martin Willi fdead26ffe If key not found, strdup default value, too 2011-04-21 10:57:17 +02:00
Martin Willi 3e2419ebe3 Use thread save settings alloc_str function where appropriate 2011-04-21 10:48:16 +02:00
Martin Willi 17ce69b47a Added a thread save, allocating settings get_str variant called alloc_str 2011-04-21 10:10:26 +02:00
Martin Willi 6d41218ced Be a little more liberal in checking maximum payload count 2011-04-20 15:15:00 +02:00
Martin Willi f7aca91603 Accept IKE_SA_INIT responses without CERTIFICATE_REQUESTs 2011-04-20 15:04:02 +02:00
Martin Willi 4778655726 Cast size_t len arguments to %.*s to int 2011-04-20 13:08:32 +02:00
Martin Willi 52846ec820 Remove superfluous test for peer_cfg on established IKE_SAs 2011-04-20 12:31:29 +02:00
Martin Willi 94c0e8346a Added charon.replay window to strongswan.conf.5 2011-04-20 12:26:58 +02:00
Martin Willi 378219546c Updated ipsec.conf.5 with new ESN options 2011-04-20 12:26:58 +02:00
Martin Willi d3d21c29db Add NEWS for ESN/custom replay window support 2011-04-20 12:26:58 +02:00
Martin Willi 98788537be Synchronize ESN support in HA plugin 2011-04-20 12:26:58 +02:00
Martin Willi 390b38b8c9 Add NO_EXT_SEQ_NUMBER to proposal only if it has not been specified in string 2011-04-20 12:26:58 +02:00
Martin Willi f8b26c452a Added proposal keywords for ESN support 2011-04-20 12:26:58 +02:00
Martin Willi bd01b9d8b2 Install ESN SAs if such a proposal has been negotiated 2011-04-20 12:26:58 +02:00
Martin Willi 05e9589783 Copy ESN enabled replay state during update_sa, if supported 2011-04-20 12:26:58 +02:00
Martin Willi ee8c89e2ee Add ESN support to kernel netlink plugin, including custom replay windows 2011-04-20 12:26:58 +02:00
Martin Willi 4876d4f3b3 Added an esn parameter to the kernel interface add_sa functions 2011-04-20 12:26:57 +02:00
Martin Willi f7925cad04 Updated copy of linux/xfrm.h to 2.6.39, featuring ESN support 2011-04-20 12:26:57 +02:00
Tobias Brunner dd0696ec8e Use strncpy when reading smartcard keyids from ipsec.secrets. 2011-04-19 18:00:16 +02:00
Tobias Brunner 6e0c82141f pluto: Replaced some strcpy usages with strncpy. 2011-04-19 17:35:57 +02:00
Tobias Brunner 81b598ca5f openac: --out is a mandatory argument. 2011-04-19 17:35:57 +02:00