Tobias Brunner
d24a74c5b4
merging changes from portability branch back to trunk
...
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Martin Willi
be0a03be64
set default CFLAGS globally, including -Wno-format
2009-04-27 11:34:07 +00:00
Martin Willi
7f56b49461
attribute_manager supports attribute_handler's to handle configuration attributes via plugins
...
moved resolv.conf editing to a separate plugin (resolv_conf)
extended attribute_provider interface to hand out arbitrary attributes
moved strongswan.conf based dns/nbns configuration to a plugin (attr)
2009-04-24 14:13:52 +00:00
Andreas Steffen
226308ebc4
l format modifier outputs garbage on 64 bit platforms
2009-04-22 10:43:39 +00:00
Andreas Steffen
08b2d288a1
scepclient and pluto use asn1 from libstrongswan
2009-04-20 20:53:38 +00:00
Andreas Steffen
3eb5042e9c
migrated write_chunk() to chunk_write()
2009-04-20 06:58:00 +00:00
Andreas Steffen
63176bbcb0
moved strcaseeq() macro from constants.h to utils.h
2009-04-17 09:52:49 +00:00
Martin Willi
a44bb9345f
merged multi-auth branch back into trunk
2009-04-14 10:34:24 +00:00
Martin Willi
1490ff4d9b
updated Doxyfile
...
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Tobias Brunner
d25ce3701e
printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms).
2009-03-12 18:07:32 +00:00
Tobias Brunner
9086102dfd
memleak fixed when reading smartcard secrets
2009-03-12 15:12:11 +00:00
Martin Willi
7b2a032d28
stop searching other pools if lease successfully released
2009-03-03 14:43:53 +00:00
Andreas Steffen
77e7eede36
ipsec statusall <conn> also filters address pools
2009-03-03 10:30:59 +00:00
Tobias Brunner
73883705bd
force unique connections for mediation connections
2009-02-18 19:48:11 +00:00
Andreas Steffen
6f1271855b
[4859] caused crash when handling the %config case
2009-02-11 22:39:35 +00:00
Andreas Steffen
392f0e9446
corrected syntax
2009-02-11 16:45:14 +00:00
Andreas Steffen
a584a231b1
fixed a 64-bit issue with time_t printf hooks
2009-02-11 16:37:16 +00:00
Martin Willi
b81d8cd3cc
changed [4856] to dynamically choose traffic selector family
2009-02-11 13:09:52 +00:00
Martin Willi
8837080353
respect family when assigning pool addresses
2009-02-11 12:50:04 +00:00
Andreas Steffen
c59825fbfc
support of dynamic/128 and %any6
2009-02-05 22:13:48 +00:00
Andreas Steffen
eeb1e2259d
output pool name string rather than pool pointer
2009-01-28 00:37:11 +00:00
Andreas Steffen
67701cfdce
fixed broken listing of connections in ipsec statusall
2009-01-14 08:10:16 +00:00
Andreas Steffen
01a8b40b99
fixed two bugs introduced by the stroke ip pool refactoring
2009-01-08 21:34:44 +00:00
Martin Willi
6b83549d1a
list assigned leases using "ipsec leases"
2008-12-10 13:00:02 +00:00
Martin Willi
ed2bcd0315
added IKE_SA established timer to "ipsec statusall"
2008-12-10 09:59:35 +00:00
Martin Willi
2e03196551
list pools and usage in ipsec statusall
2008-12-09 13:24:12 +00:00
Martin Willi
adf9965272
extended stroke in-memory pool to use hash-tables
...
supports online/offline leases
properly reassign addresses to identities
2008-12-09 13:23:42 +00:00
Martin Willi
876d5c63a3
pass identity to release_address(), allows providers to do a lookup by id
2008-12-05 09:40:50 +00:00
Tobias Brunner
83c42156a2
add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg.
2008-12-03 10:12:20 +00:00
Andreas Steffen
ad60c249b6
show TRANSPORT_PROXY mode in ipsec status
2008-11-16 21:19:17 +00:00
Martin Willi
4252938811
dynamic logging configuration through strongswan.conf
...
fallback to existing ipsec.conf/stroke loglevel configuration
2008-11-11 10:52:37 +00:00
Andreas Steffen
c117f24e61
renamed proxy to proxy_mode in stroke_msg.h
2008-11-11 07:28:52 +00:00
Andreas Steffen
d487b4b727
preliminary support of Mobile IPv6
2008-11-11 06:37:37 +00:00
Martin Willi
27ed987ef7
wrapped all pthread_rwlock_t in profilable rwlock_t
2008-11-05 16:12:54 +00:00
Martin Willi
e13389a7f7
got rid of deprecated create_iterator_locked()
2008-11-05 08:32:38 +00:00
Martin Willi
5dffdea1d7
added hooks for IKE and CHILD keymat
2008-10-30 12:58:54 +00:00
Martin Willi
80853d8498
moved CHILD_SA key derivation to keymat_t
...
passing key chunks to CHILD_SA, not the PRF
2008-10-29 16:06:16 +00:00
Martin Willi
6a4ff35cc4
moved key derivation and management into keymat object
...
allows secured implementation of key management (e.g. in kernel or HW)
only IKE keys for now
2008-10-28 16:07:06 +00:00
Martin Willi
3c8234d408
store IKE proposal implicitly during derive_keys
2008-10-28 10:12:21 +00:00
Martin Willi
20fb671904
fixed reauthentication time in statusall
2008-10-28 09:41:33 +00:00
Martin Willi
85ac2fa547
use more generic stats getter, introducing new stats
2008-10-27 14:51:00 +00:00
Martin Willi
a1db79b31a
fixed some compiler warnings
2008-10-27 11:13:33 +00:00
Martin Willi
82d20c0588
additional getters for ipcomp and UDP encap
2008-10-24 09:51:48 +00:00
Martin Willi
6e10aeadab
more CHILD_SA refactorings
2008-10-24 08:02:35 +00:00
Martin Willi
1df106bf39
cache keys for in and outbound ESP SAs
...
removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t)
creating TS pairs dynamically using create_policy_enumerator()
2008-10-15 12:24:44 +00:00
Martin Willi
9f4e5f8c47
store ESP keys in CHILD_SA
2008-10-15 08:37:56 +00:00
Martin Willi
a985db3ff3
reintegrated bus-refactoring branch
2008-10-14 08:52:13 +00:00
Andreas Steffen
d1cbe55127
implemented ipsec listalgs as a stroke command
2008-10-08 07:00:13 +00:00
Martin Willi
9c0aa46b64
use dpd_action also for remotely closed tunnels
2008-10-02 13:47:19 +00:00
Tobias Brunner
a341a68fac
merging renaming of mode_t to ipsec_mode_t back to trunk
2008-09-25 13:56:23 +00:00
Tobias Brunner