Tobias Brunner
|
e20bd8b6ea
|
Enabling NAT-T on Mac OS X using the private SADB_X_EXT_NATT flag and sadb_sa_2 struct.
|
2009-07-30 14:06:26 +02:00 |
|
Tobias Brunner
|
789ba17024
|
Configure the NAT-T port via sysctl on Mac OS X to enable handling of incoming UDP encapsulated ESP packets in the kernel.
|
2009-07-30 14:06:26 +02:00 |
|
Tobias Brunner
|
b2117eee20
|
Make accept(2) and recvfrom(2) cancellation points on Mac OS X.
|
2009-07-30 14:06:26 +02:00 |
|
Andreas Steffen
|
ecff28c5c5
|
fixe KW_END_FIRST..KW_END_LAST keyword range
|
2009-07-28 15:44:24 +02:00 |
|
Andreas Steffen
|
acb34739e4
|
improved DPD error message
|
2009-07-22 22:30:21 +02:00 |
|
Andreas Steffen
|
e1089f5906
|
added file and segment lengths to checksum.c
|
2009-07-21 22:23:51 +02:00 |
|
Andreas Steffen
|
8ce8e19068
|
version bump to 4.3.4
|
2009-07-21 22:21:52 +02:00 |
|
Martin Willi
|
fcac8f6571
|
filter objects for segment checksumming by dlpi_name, excludes rare false positives
|
2009-07-21 15:10:24 +02:00 |
|
Martin Willi
|
7655843ab5
|
enumerate executable sections only to build checksum
|
2009-07-21 15:00:18 +02:00 |
|
Martin Willi
|
acd4afc997
|
announce integrity testing only once
|
2009-07-21 14:58:14 +02:00 |
|
Tobias Brunner
|
9af7715c3d
|
Fixed installation of config files in out-of-tree builds.
|
2009-07-20 21:13:45 +02:00 |
|
Tobias Brunner
|
7cdf712d3e
|
Use the numerical UID/GID to install the config files and create the ipsec.d directories.
|
2009-07-20 21:03:05 +02:00 |
|
Andreas Steffen
|
def1777eca
|
streamlined integrity test output some more
|
2009-07-18 11:23:27 +02:00 |
|
Andreas Steffen
|
1d941f12ad
|
advertise activated integrity tests
|
2009-07-18 00:37:35 +02:00 |
|
Andreas Steffen
|
2e4a94ec26
|
added strongswan-2.8.11 and strongswan-4.2.17 VIDs
|
2009-07-17 21:19:32 +02:00 |
|
Andreas Steffen
|
e3f3b004e2
|
fix test vector error output
|
2009-07-17 20:36:21 +02:00 |
|
Andreas Steffen
|
eab241fb56
|
stop strongswan if integrity check of libstrongswan or daemon fails
|
2009-07-17 20:33:19 +02:00 |
|
Andreas Steffen
|
6b04ba288d
|
streamlined debug output of integrity tests
|
2009-07-17 17:00:17 +02:00 |
|
Andreas Steffen
|
ca366aeea0
|
enforce strongSwan coding rules
|
2009-07-17 16:57:07 +02:00 |
|
Andreas Steffen
|
521aa00fb1
|
shortened cypto test output
|
2009-07-17 16:36:01 +02:00 |
|
Andreas Steffen
|
848133ff1c
|
accelerate lookup in non-concatenated pools
|
2009-07-17 13:58:29 +02:00 |
|
Andreas Steffen
|
7f522b5fd8
|
check for an existing lease over all assigned pools first
|
2009-07-17 11:48:35 +02:00 |
|
Andreas Steffen
|
07be083b7f
|
fixed problem with static leases over multiple pools
|
2009-07-16 21:53:46 +02:00 |
|
Tobias Brunner
|
375a91bb9b
|
Fixing distribution build (checksum.c is created on the user's system).
|
2009-07-16 16:53:43 +02:00 |
|
Martin Willi
|
e0964e2e26
|
fixed memleak in SQL config lookup
|
2009-07-16 15:59:56 +02:00 |
|
Martin Willi
|
88957f54f2
|
raise an alert() if the RADIUS server is not responding
|
2009-07-16 15:15:39 +02:00 |
|
Martin Willi
|
e85b83c737
|
added an alert() bus hook to raise critical system errors and notifications
|
2009-07-16 15:15:39 +02:00 |
|
Tobias Brunner
|
599d2bcea8
|
Revert "gperf under FreeBSD does not know the -m option."
This reverts commit 0ead254919.
|
2009-07-16 15:15:09 +02:00 |
|
Tobias Brunner
|
233a132634
|
Removed an unnecessary include of a header that is not available on Mac OS X.
|
2009-07-15 22:42:22 +02:00 |
|
Andreas Steffen
|
225bb2b810
|
conversion from ECDSA_WITH_SHAxxx OIDs to signature schemes
|
2009-07-15 18:12:40 +02:00 |
|
Martin Willi
|
449e90e1af
|
updated debian package
|
2009-07-15 15:37:23 +02:00 |
|
Martin Willi
|
0a1d168752
|
updated Standards-Version to 3.8.2
|
2009-07-15 14:01:47 +02:00 |
|
Martin Willi
|
e04c5d9371
|
added ${misc:Depends} dependency, fixes debhelper-but-no-misc-depends lintian warning
|
2009-07-15 14:00:42 +02:00 |
|
Martin Willi
|
426e1c3d0f
|
added copyright information, fixes copyright-without-copyright-notice lintian warning
|
2009-07-15 13:59:25 +02:00 |
|
Martin Willi
|
74b14b4008
|
cast pointers to uintptr_t for alignement check
|
2009-07-15 10:39:45 +02:00 |
|
Tobias Brunner
|
0ead254919
|
gperf under FreeBSD does not know the -m option.
We could use AC_PATH_PROGS_FEATURE_CHECK (added in Autoconf 2.62) to check for this option.
|
2009-07-14 12:09:22 +02:00 |
|
Tobias Brunner
|
fd0df7ec75
|
Corrected check for valid ASN1 types in rdn_enumerate.
Because of the range of u_char the comparison was always TRUE before.
|
2009-07-14 12:09:22 +02:00 |
|
Andreas Steffen
|
75682462fc
|
added SHA224_WITH_RSA and ECDSA_WITH_SHAxxx OIDs
|
2009-07-14 05:35:01 +02:00 |
|
Andreas Steffen
|
d44b03563a
|
double free caused strange side effects
|
2009-07-13 20:28:36 +02:00 |
|
Andreas Steffen
|
ecb32c75ce
|
report installation failure of inbound and/or outbound IPsec SA, separately
|
2009-07-13 15:13:12 +02:00 |
|
Andreas Steffen
|
5c49289e27
|
great, I got my comma back
|
2009-07-12 21:08:37 +02:00 |
|
Andreas Steffen
|
540d02f6c0
|
pluto supports AES_CCM and AES_GCM ESP algorithms
|
2009-07-12 00:05:42 +02:00 |
|
Andreas Steffen
|
c5ebd00517
|
put variable definitions up front
|
2009-07-12 00:05:42 +02:00 |
|
Andreas Steffen
|
ad92c1f6cd
|
cosmetics
|
2009-07-12 00:05:42 +02:00 |
|
Andreas Steffen
|
a3ee331b0c
|
added listener.h to charon_SOURCES
|
2009-07-12 00:05:41 +02:00 |
|
Martin Willi
|
69b8058925
|
use the configured NM connection id as configuration/IKE_SA name
|
2009-07-10 11:01:44 +02:00 |
|
Martin Willi
|
ce741aa649
|
fixed state check if establishing the CHILD_SA fails
|
2009-07-10 09:40:02 +02:00 |
|
Martin Willi
|
bad99d5aff
|
use the new updown()/rekey() hooks to track the state of NetworkManager connections
|
2009-07-10 09:37:27 +02:00 |
|
Andreas Steffen
|
356cdc2d72
|
update libfreeswan/pfkeyv2.h
|
2009-07-10 07:15:08 +02:00 |
|
Andreas Steffen
|
8e905c44c9
|
added AES_CTR, AES_CCM, and AES_GCM strings
|
2009-07-10 06:54:06 +02:00 |
|