-
7f5675c8e5
check length of hex-encoded IV
Andreas Steffen
2012-10-07 17:07:35 +02:00
-
41d344e8ea
allow has_noskip_flag to contain TRUE_OR_FALSE
Andreas Steffen
2012-10-07 16:26:02 +02:00
-
570402217c
free entry in error case
Andreas Steffen
2012-10-07 14:08:49 +02:00
-
cd198f48f2
test first and up in the outer while loop
Andreas Steffen
2012-10-07 12:46:19 +02:00
-
353938e614
fixed generation of PA-TNC error messages
Andreas Steffen
2012-10-07 11:37:30 +02:00
-
e6a58e5d5d
added some new SHA-512 OIDs
Andreas Steffen
2012-10-03 15:33:56 +02:00
-
565bfc08c6
Add a libfast sendfile() method to send files from disk
Martin Willi
2012-10-02 15:37:36 +02:00
-
9564f9eb6e
Include all dev headers, even if they are configuration specific
Martin Willi
2012-10-02 11:38:42 +02:00
-
c8697a7170
version bump to 5.0.1
Andreas Steffen
2012-10-02 10:39:43 +02:00
-
48651d8d02
Ensure UNSUPPORTED_CRITICAL_PAYLOAD notify contains correct payload type
Tobias Brunner
2012-09-28 22:31:06 +02:00
-
31cc325fce
Make sure hasher exists before trying to destroy it
Tobias Brunner
2012-09-28 20:57:12 +02:00
-
2a43350334
Missed one in
6c10cece
Tobias Brunner
2012-09-28 20:55:40 +02:00
-
6da1ada3b3
Missed one in
3dcffed6
Tobias Brunner
2012-09-28 20:50:09 +02:00
-
91a8dc2dec
Fixed RNG crypto tester
Tobias Brunner
2012-09-28 19:13:40 +02:00
-
3973ffa4f6
Request is never NULL when responding with an INFORMATIONAL message
Tobias Brunner
2012-09-28 19:10:03 +02:00
-
9181784fb1
Fixed check for rng in session ID creation of libfast
Tobias Brunner
2012-09-28 19:07:53 +02:00
-
6c10cecebf
Completed state handling in isakmp_cert_pre
Tobias Brunner
2012-09-28 19:01:09 +02:00
-
9ff9c3d11b
Added missing break statements in NAT-T mapping handling in PF_KEY plugin
Tobias Brunner
2012-09-28 18:57:56 +02:00
-
1407a0026f
Added missing break when building TLS cipher suites
Tobias Brunner
2012-09-28 18:55:40 +02:00
-
a37ac3a47a
Make sure we successfully opened xfrm_acq_expires
Tobias Brunner
2012-09-28 18:54:28 +02:00
-
a13c6a900e
Added missing continue statement in ha socket error handling
Tobias Brunner
2012-09-28 18:52:00 +02:00
-
0273245877
Fixed snprintf check in tnc-ifmap plugin
Tobias Brunner
2012-09-28 18:49:16 +02:00
-
1b1d1d938f
Make static analyzers happy when parsing hosts from sockaddr_t
Tobias Brunner
2012-09-28 18:35:26 +02:00
-
6ffb8f8634
Clarified code when hashing/comparing cached policies in kernel-netlink
Tobias Brunner
2012-09-28 18:30:16 +02:00
-
8b0dce08f2
Avoid overrunning array when registering pki command line options
Tobias Brunner
2012-09-28 18:22:54 +02:00
-
911e3156a0
Use %x to print uint32 as long ints are 64-bit long on x64 Linux
Tobias Brunner
2012-09-28 18:09:08 +02:00
-
a05f3b2021
Make sure first argument is an int when using %.*s to print e.g. chunks
Tobias Brunner
2012-09-28 18:01:49 +02:00
-
4bc24ba794
Avoid memory leak when sending RADIUS accounting start message failed
Tobias Brunner
2012-09-28 17:43:02 +02:00
-
53ab3c27cd
Ensure that pipe is closed when calling resolvconf(8)
Tobias Brunner
2012-09-28 17:33:24 +02:00
-
a067dfbb2c
Avoid memory leak when failing to read file metadata
Tobias Brunner
2012-09-28 17:10:19 +02:00
-
3dcffed682
The this->data member is never NULL
Tobias Brunner
2012-09-28 17:08:16 +02:00
-
9a1ba213f4
Use proper argument for sizeof when copying replay state
Tobias Brunner
2012-09-28 17:00:20 +02:00
-
bef21bd330
Algorithm names are not always static anymore, avoid string overflows
Tobias Brunner
2012-09-28 16:42:50 +02:00
-
f3d98a6b78
Correctly initialize payload length of encrypted payload
Tobias Brunner
2012-09-28 16:30:26 +02:00
-
9f22002706
The eap argument of send_response is never NULL
Tobias Brunner
2012-09-28 16:16:33 +02:00
-
9d5b688a11
Properly initialize sockaddr_in struct in fast and dhcp plugins
Tobias Brunner
2012-09-28 16:03:09 +02:00
-
0031bf3eaf
Properly initialize ima flag when adding file measurements
Tobias Brunner
2012-09-28 15:51:39 +02:00
-
3f0eb04a04
Properly initialize chunk for PCR value in case of errors
Tobias Brunner
2012-09-28 15:49:19 +02:00
-
24aa55867e
Initialize g and p in create_dh factory method
Tobias Brunner
2012-09-28 15:48:09 +02:00
-
10b116aa13
Properly initialize chunk for extension OID when parsing CRLs
Tobias Brunner
2012-09-28 15:39:37 +02:00
-
43e0cb6519
Fix parsing of IPv6 headers in ip_packet_t
Tobias Brunner
2012-09-28 15:15:07 +02:00
-
9fa335cb1b
Properly cleanup varargs in LDAP fetcher's set_option()
Tobias Brunner
2012-09-28 15:13:17 +02:00
-
b5835ee530
Properly cleanup varargs in enumerators of both SQL backends
Tobias Brunner
2012-09-28 15:10:29 +02:00
-
a79af394a0
Allow replay windows smaller than the default of 32
Tobias Brunner
2012-09-27 12:25:43 +02:00
-
9845391a95
Properly initialize cached address map in kernel-pfroute plugin
Tobias Brunner
2012-09-27 12:42:48 +02:00
-
45178362c8
Clarified error message if enabling UDP decapsulation fails
Tobias Brunner
2012-09-27 10:49:17 +02:00
-
bfd2cc1cd7
Fixed compilation of kernel-pfroute plugin
Tobias Brunner
2012-09-27 09:03:04 +02:00
-
358104a47f
Added description for flush_auth_cfg and acct_port plus some minor editorial changes
Tobias Brunner
2012-09-25 12:22:05 +02:00
-
2d39f79b9b
IKE_AUTH_LIFETIME task is not defined if IKEv2 is disabled
Tobias Brunner
2012-09-25 09:31:47 +02:00
-
012d7382b0
New Android release after fixing private key issues on Jelly Bean
Tobias Brunner
2012-09-24 17:13:23 +02:00
-
94106ddc85
android: Leak the private key reference on Jelly Bean to avoid a bug in the framework
Tobias Brunner
2012-09-24 16:56:37 +02:00
-
dfefa2f6dc
android: Added a global variable to check the current SDK version
Tobias Brunner
2012-09-24 16:54:38 +02:00
-
2e2feffb67
Don't check interface of inbound message if interfaces are not filtered
Tobias Brunner
2012-09-23 09:14:26 +02:00
-
64595464b2
android: Load the private key and certificates separately in android_creds_t
Tobias Brunner
2012-09-23 09:02:58 +02:00
-
406d680e45
android: Added a method to get the user's private key via JNI
Tobias Brunner
2012-09-23 09:00:34 +02:00
-
c35d468fb1
android: Added a JNI backed private key implementation
Tobias Brunner
2012-09-23 08:58:37 +02:00
-
31990a19cc
Documentation about some time values clarified
Tobias Brunner
2012-09-24 16:02:03 +02:00
-
e97602151a
removed ikev2/dynamic-responder scenario
Andreas Steffen
2012-09-22 17:50:50 +02:00
-
f65ec0aa90
Make sure the if_name member of cached route entries is initialized to NULL
Tobias Brunner
2012-09-22 08:23:56 +02:00
-
04bb739578
do not enable integrity and crypto tests in ikev1/rw-cert-unity scenario
Andreas Steffen
2012-09-21 21:25:56 +02:00
-
4a025539ef
NEWS about kernel interface changes
Tobias Brunner
2012-09-21 08:41:41 +02:00
-
e811cf152a
Properly handle thread cancelation in rwlock_condvar_t
Tobias Brunner
2012-09-21 07:58:37 +02:00
-
bdf36dac71
Use an rwlock in kernel-pfroute too
Tobias Brunner
2012-09-21 08:06:40 +02:00
-
a25d536eea
Use rwlock and rwlock_condvar to increase concurrency in kernel-netlink plugin
Tobias Brunner
2012-09-20 18:21:42 +02:00
-
16d62305c2
Use a separate mutex for cached routes in kernel-netlink plugin
Tobias Brunner
2012-09-20 18:06:01 +02:00
-
60dc44648f
Added a condvar implementation that works with rwlock_t
Tobias Brunner
2012-09-20 17:56:20 +02:00
-
4134108c77
Use a lock to safely check and update the time for the next roam event
Tobias Brunner
2012-09-20 11:58:52 +02:00
-
e8e9048fee
Added an option to configure the interface on which virtual IP addresses are installed
Tobias Brunner
2012-09-20 11:07:15 +02:00
-
c6b401581a
Changed how kernel-netlink handles virtual IP addresses
Tobias Brunner
2012-09-19 19:10:23 +02:00
-
4106aea8e4
Made IP address enumeration more flexible
Tobias Brunner
2012-09-17 19:04:51 +02:00
-
308ec0b7df
Avoid calculating the hash if hashtable is empty
Tobias Brunner
2012-09-21 08:49:59 +02:00
-
1f97e1aaca
Use a hashtable to quickly check for usable IP addresses/interfaces
Tobias Brunner
2012-09-17 18:09:51 +02:00
-
090c556ce8
Drop packets received on ignored interfaces
Tobias Brunner
2012-09-14 16:43:54 +02:00
-
940e1b0f66
Filter ignored interfaces in kernel interfaces (for events, address enumeration, etc.)
Tobias Brunner
2012-09-14 16:43:08 +02:00
-
645d7a5ef3
%any is never on a local interface
Tobias Brunner
2012-09-14 16:30:06 +02:00
-
e9a7779003
Avoid memset in is_anyaddr()
Tobias Brunner
2012-09-14 16:14:57 +02:00
-
9ba36c0f7f
Make it easy to check if an address is locally usable via changed get_interface() method
Tobias Brunner
2012-09-14 16:27:33 +02:00
-
aed33805ce
Don't ignore loopback devices and allow addresses on them being enumerated
Tobias Brunner
2012-09-14 15:03:09 +02:00
-
9513225e6b
Added options and a lookup function that will allow filtering of network interfaces
Tobias Brunner
2012-09-14 14:43:17 +02:00
-
a2a28d90ac
Make streq() and strcaseeq() static inline functions so they can be used as callbacks
Tobias Brunner
2012-09-14 12:06:02 +02:00
-
dad6d904ee
Use source address in get_nexthop() call
Tobias Brunner
2012-09-18 17:55:38 +02:00
-
662534657f
Source address lookup refactored
Tobias Brunner
2011-10-12 15:52:18 +02:00
-
cef0a8118e
Check routes with equal prefix if preferred source is specified
Tobias Brunner
2011-09-30 17:41:01 +02:00
-
9d6b02d6c1
Try to find preferred source on interface if returned source does not match
Tobias Brunner
2011-09-09 16:07:40 +02:00
-
da6d86dd94
Try to keep the given source address when looking up routes
Tobias Brunner
2011-09-01 11:33:13 +02:00
-
6676769e8c
Make sure we propose a dynamic TS if we don't have hosts to derive a TS from
Tobias Brunner
2012-09-21 18:13:42 +02:00
-
0d33f428d1
Move rw-eap-dynamic scenario to its proper location
Tobias Brunner
2012-09-21 09:34:10 +02:00
-
f0a2fef8a5
In mem_pool, check for an existing ID entry before creating a new one
Martin Willi
2012-09-20 11:04:55 +02:00
-
a69bc12a3a
Merge branch 'unity'
Martin Willi
2012-09-18 17:22:30 +02:00
-
-
995a9c8a0a
Add a simple test case for the unity plugin, featuring both includes and excludes
Martin Willi
2012-09-17 16:23:10 +02:00
-
f728ae590b
Build unity plugin in strongSwan test suite
Martin Willi
2012-09-17 15:39:29 +02:00
-
cc48f36084
Add unity plugin NEWS
Martin Willi
2012-09-17 11:48:31 +02:00
-
55f126fd55
Update ipsec.conf.5, leftsubnet can handle multiple subnets in IKEv1 with Unity
Martin Willi
2012-09-17 11:43:11 +02:00
-
77c37ea5e0
As Unity responder, don't change the proposed TS at all, racoon doesn't like that
Martin Willi
2012-09-17 14:30:35 +02:00
-
336dd7a9c7
Don't complain about multiple TS in IKEv1, as it supported with Unity
Martin Willi
2012-09-13 15:57:39 +02:00
-
7a7deec283
As initiator, narrow received Unity attributes to configured TS
Martin Willi
2012-09-13 15:57:06 +02:00
-
b8db3775f3
When using Unity, bump up remote TS as initiator to 0.0.0.0/0, too
Martin Willi
2012-09-13 15:38:04 +02:00
-
284ed1b352
Enable Cisco Unity only if Unity vendor id received
Martin Willi
2012-09-13 15:09:21 +02:00
-
6e60807637
Exchange 0.0.0.0/0 traffic selectors with Unity, narrowing after exchange
Martin Willi
2012-07-24 13:23:48 +02:00
-
f2463f1bd6
Add a Unity attribute provider that adds Split-Includes for TS
Martin Willi
2012-07-24 12:21:25 +02:00