Commit Graph

Select branches

Hide Pull Requests

claude/energy-consumption-optimization-0040a6

main

Mono Color

• 5493ffde0b traffic_selector_t is gone into libstrongswan, migrate printf hook registration, too. Martin Willi 2010-06-07 15:06:09 +02:00
• 550d9085fa Flush auth configs, create new keymat during SA reset Martin Willi 2010-06-07 14:59:39 +02:00
• dbdb69f908 Recreate IKE_INIT/IKE_NATD/IKE_VENDOR tasks if we reset SA during IKE_AUTH Martin Willi 2010-06-07 14:58:57 +02:00
• 8b56ec20f3 Reacquire keymat from new IKE_SA during task migration Martin Willi 2010-06-07 14:56:24 +02:00
• d5ad6eb1e0 Flush certificate cache on CA delete Martin Willi 2010-06-07 13:51:18 +02:00
• a3ffa9edfd Log non-empty task queues in statusall Martin Willi 2010-06-07 11:59:37 +02:00
• ea340ee840 Wrap task enumerator in ike_sa Martin Willi 2010-06-07 11:37:55 +02:00
• 8bced61b76 Migrated ike_sa_t to INIT/METHOD macros Martin Willi 2010-06-07 09:30:27 +00:00
• 665c18bd85 Added support for task enumeration in task_manager_t Martin Willi 2010-06-07 10:45:25 +02:00
• 9560a3166f Migrated task_manager_t to INIT/METHOD macros Martin Willi 2010-06-07 10:37:00 +02:00
• 39e3b58fe4 use --addattr Andreas Steffen 2010-06-05 13:49:01 +02:00
• 88613f159d use --addattr Andreas Steffen 2010-06-05 13:47:23 +02:00
• 4321d19d1e added ikev2/nat-virtual-ip scenario Andreas Steffen 2010-06-05 13:42:28 +02:00
• b2be7dd621 remove stray carolReq.pem Andreas Steffen 2010-06-05 13:36:39 +02:00
• 5a9a255ae5 share pool in ikev1/mode-config-multiple scenario Andreas Steffen 2010-06-05 13:17:51 +02:00
• 6d989d356b use --addattr Andreas Steffen 2010-06-05 13:15:03 +02:00
• bdd28aa9c5 remove stray scenario files Andreas Steffen 2010-06-05 13:10:39 +02:00
• d43775ae58 Accept ARP requests with an ethernet trailer, but trim it Martin Willi 2010-06-02 10:05:43 +02:00
• d2c358742a Added a EAP-SIM/AKA backend reading triplets/quintuplets from a SQL database Martin Willi 2010-06-02 15:55:58 +02:00
• c77f4b305e fixed configuration attribute type determination Andreas Steffen 2010-06-02 11:51:53 +02:00
• 2f57e6da0e Disable close action for a redundant CHILD_SA resulting from a rekey collision Martin Willi 2010-06-02 11:43:39 +02:00
• fe02d99b96 Use wrapped getters for close/dpd action Martin Willi 2010-06-02 11:41:46 +02:00
• 4c401ea216 Wrap getters for dpd/close action into CHILD_SA, allows us to override them Martin Willi 2010-06-02 11:40:38 +02:00
• 616b13c7a5 ipsec pool --statusattr [--hexout] outputs attribute values in correct format if known Andreas Steffen 2010-06-01 16:47:56 +02:00
• 185d8b7335 added unity_def_domain keyword tip ipsec pool Andreas Steffen 2010-05-31 16:46:47 +02:00
• 80b5661a9b Added generated manpages to .gitignore Martin Willi 2010-05-31 13:41:25 +02:00
• a2cf26f1c1 Changed default lifetime of certificates to 3 years Martin Willi 2010-05-31 13:14:36 +02:00
• 70ac7c43a5 Support extendedKeyUsage flags in self-signed certificates Martin Willi 2010-05-31 13:12:46 +02:00
• 3d829c4c0a IPSEC_CONFDIR in ipsec script fixed. Tobias Brunner 2010-05-30 13:07:32 +02:00
• 8f76653a4c Adding the version number to the most relevant manual pages. Tobias Brunner 2010-05-30 13:03:04 +02:00
• 1d3a48b559 Updated and corrected the ipsec.secrets(5) manual page. Tobias Brunner 2010-05-30 11:51:30 +02:00
• f115838bee Updated and corrected the ipsec.conf(5) manual page. Tobias Brunner 2010-05-29 21:10:18 +02:00
• 28550caaa8 Updated and corrected the ipsec(8) manual page. Tobias Brunner 2010-05-29 17:34:00 +02:00
• d9c751daac added --leases command line option to synopsis Andreas Steffen 2010-05-29 13:29:23 +02:00
• 751379e5e8 added --showattr command line option to synopsys Andreas Steffen 2010-05-29 13:23:20 +02:00
• 3561cc4b3b added X.509 support by openssl plugin to NEWS Andreas Steffen 2010-05-29 11:22:36 +02:00
• 5b6200888b remove x509 plugin from openssl-ikev1 scenarios Andreas Steffen 2010-05-28 23:22:15 +02:00
• d070e0a6d1 Do not install trap policy if remote host is %any. Tobias Brunner 2010-05-28 15:43:12 +02:00
• e8960c2a99 be lenient towards wrong attribute encodings Andreas Steffen 2010-05-28 15:07:09 +02:00
• 2e08be79a3 Send empty SIM/AKA-NOTIFICATION response for non-success codes, too Martin Willi 2010-05-27 15:04:25 +02:00
• ddf29f5b07 Added support for reading raw PUT/POST data from HTTP request Martin Willi 2010-05-27 09:30:14 +02:00
• f00a101590 Unwrap subjectKeyIdentifier from OCTET_STRING Martin Willi 2010-05-26 16:09:50 +02:00
• bd371ccac7 remove x509 plugin from remaining openssl-ikev2 scenarios Andreas Steffen 2010-05-25 15:49:58 +02:00
• 2996cb3163 openssl-ikev2/rw-cert scenario doesn't need x509 plugin any more Andreas Steffen 2010-05-25 15:26:46 +02:00
• e2bd6b616e several subnets can be concatenated Andreas Steffen 2010-05-22 22:53:24 +02:00
• 2111dc1b84 added --showattr command to usage() Andreas Steffen 2010-05-22 10:46:15 +02:00
• 24632bc0e8 Fixed compiler warning in invocation of crl_is_newer() Martin Willi 2010-05-21 16:41:13 +02:00
• 09f38ebe54 Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier Martin Willi 2010-05-21 16:38:19 +02:00
• 0c73ceff0a Added a --signcrl command to the pki utility Martin Willi 2010-05-21 15:53:31 +02:00
• 13c593f126 Added support for CRL generation to x509 plugin Martin Willi 2010-05-21 15:52:20 +02:00
• aab861608a Removed is_newer() from certificate_t, obsoleting all implementations Martin Willi 2010-05-21 09:53:23 +02:00
• 8029e5efd2 Added generic implementations for crl_is_newer/certificate_is_newer Martin Willi 2010-05-21 09:48:23 +02:00
• 654218a31b Migrated x509_crl_t to INIT/METHOD macros Martin Willi 2010-05-21 09:18:27 +02:00
• 6d7eed9a37 Implemented X.509 CRL reading using OpenSSL Martin Willi 2010-05-20 17:33:52 +02:00
• 5728c6aa7e Implemented X.509 certificate reading using OpenSSL Martin Willi 2010-05-20 08:09:04 +00:00
• 3e3059ba7c oops, removed stray parenthesis Andreas Steffen 2010-05-20 17:38:39 +02:00
• 9806381322 Fixed doxygen group Martin Willi 2010-05-20 13:22:13 +02:00
• 40b2be16e3 Whitelist OpenSSLs ERR_put_error() in leak-detective Martin Willi 2010-05-20 09:44:59 +02:00
• 2e57b21252 Added a --print command to pki that dumps different credentials Martin Willi 2010-05-20 09:41:47 +02:00
• 091d178060 Option to skip slow addr2line resolution in leak-detective Martin Willi 2010-05-19 15:22:12 +02:00
• 36c1650b19 range check for configuration attribute types Andreas Steffen 2010-05-20 17:35:10 +02:00
• c2d10df6e7 implement ipsec pool -showattr function Andreas Steffen 2010-05-20 17:24:43 +02:00
• 05f1096cd8 removed deprecated use of ipsec pool --attr|del dns|nbns from usage() Andreas Steffen 2010-05-20 16:30:15 +02:00
• e3dd6b1475 Only include C files that start with the plugin name when building for Android. Tobias Brunner 2010-05-20 12:01:12 +02:00
• c5c6f9b6da added ipsec pool attribute support to NEWS Andreas Steffen 2010-05-19 21:53:55 +02:00
• ad6dbc41e5 management of any attribute by ipsec pool Andreas Steffen 2010-05-19 21:51:21 +02:00
• b596f4f260 updated ikev1/rw-cert scenario to support xauth integrity test Andreas Steffen 2010-05-19 08:31:39 +02:00
• f71cb4777e checksum_builder() needs the pluto symbol Andreas Steffen 2010-05-19 08:02:22 +02:00
• 73434ce9eb updated ikev1/xauth-rsa-mode-config scenario to support xauth plugin Andreas Steffen 2010-05-18 22:57:12 +02:00
• 1fe5d973cb updated ikev1/xauth-psk-mode-config scenario to support xauth plugin Andreas Steffen 2010-05-18 22:56:42 +02:00
• 17adc8d074 updated ikev1/xauth-psk-mode-config scenario to support xauth plugin Andreas Steffen 2010-05-18 22:48:37 +02:00
• ab0ecb7dd9 register virtual IPs under the XAUTH identity Andreas Steffen 2010-05-18 22:41:22 +02:00
• efde96b38e updated ikev1/xauth-rsa-nosecret scenario to support xauth plugin Andreas Steffen 2010-05-18 20:20:55 +02:00
• 4f1110ab7b created ikev1/xauth-id-psk scenario Andreas Steffen 2010-05-18 20:04:52 +02:00
• dc5d63a599 updated ikev1/xauth-psk scenario to support xauth plugin Andreas Steffen 2010-05-18 20:04:02 +02:00
• 8d7fffc942 clarified secret loading debug output Andreas Steffen 2010-05-18 16:54:20 +02:00
• 8ebc3da64c updated ikev1/xauth-rsa-fail scenario to xauth plugin Andreas Steffen 2010-05-18 16:53:34 +02:00
• 2549ff7849 created ikev1/xauth-id-rsa scenario using XAUTH identities Andreas Steffen 2010-05-18 16:53:00 +02:00
• 0a6085b13e updated ikev1/xauth-rsa scenario to xauth plugin Andreas Steffen 2010-05-18 16:52:12 +02:00
• 9ffb475e5d Typo fixed. Tobias Brunner 2010-05-18 13:59:23 +02:00
• 26ec52a405 implemented xauth as a pluto plugin Andreas Steffen 2010-05-18 13:51:15 +02:00
• ea409980b9 Handle collisions between rekey and the following delete properly Martin Willi 2010-05-18 12:21:38 +02:00
• d235274486 Added simple conditional packet receive delay Martin Willi 2010-05-18 12:21:05 +02:00
• 45def2147b Added simple conditional packet send delay Martin Willi 2010-05-18 12:20:32 +02:00
• 42df8beeb6 Explicitly link gpg-error to gcrypt plugin Martin Willi 2010-05-17 12:36:30 +02:00
• 322226c0ce Link to libgpg-error to resolve additional symbols when testing for libgcrypt Martin Willi 2010-05-17 11:08:13 +02:00
• ee1bdd85d3 it's too late on Saturday evening Andreas Steffen 2010-05-15 18:52:59 +02:00
• 3399c3dca0 roll back some changes Andreas Steffen 2010-05-15 18:48:35 +02:00
• 31b39e5f7c encoding of MODE_TUNNEL changed Andreas Steffen 2010-05-15 18:36:14 +02:00
• 20ae6eccf5 the keyid is a subjectKeyIdentifier Andreas Steffen 2010-05-15 17:03:04 +02:00
• ccfd54e68d fixed keyids in sql/rw-psk-rsa-split scenario Andreas Steffen 2010-05-15 16:55:08 +02:00
• 4636f1579c fixed keyids in sql/rw-eap-aka-rsa scenario Andreas Steffen 2010-05-15 16:44:53 +02:00
• 88e180489a fixed keyids in sql/rw-cert scenario Andreas Steffen 2010-05-15 16:34:50 +02:00
• 829b790e5b fixed keyids in sql/net2net-cert scenario Andreas Steffen 2010-05-15 16:20:34 +02:00
• d147de932e inserted newline Andreas Steffen 2010-05-15 16:13:22 +02:00
• c572f93ed7 fixed keyids in sql/ip-split-pools-db-restart scenario Andreas Steffen 2010-05-15 16:11:08 +02:00
• 2948e3d0c2 fixed keyids in sql/ip-split-pools-db scenario Andreas Steffen 2010-05-15 13:40:11 +02:00
• 1ae9353d8a fixed keyids in sql/ip-pool-db-restart scenario Andreas Steffen 2010-05-15 13:22:49 +02:00
• f2c84bd890 fixed keyids in sql/ip-pool-db-expired scenario Andreas Steffen 2010-05-15 13:07:22 +02:00
• 0ee2c5e9be fixed keyids in sql/ip-pool-db scenario Andreas Steffen 2010-05-15 13:06:48 +02:00