This website requires JavaScript.
88db1fa3b4
refactored DBG3 output of sent XFRM messages
Andreas Steffen
2009-01-09 08:46:31 +00:00
abc177e035
DBG3 output of sent XFRM messages
Andreas Steffen
2009-01-09 08:27:17 +00:00
05332cc4b3
added message for undefined ocsp status #4
Andreas Steffen
2009-01-09 01:36:13 +00:00
48032aed00
add a compatible memrchr() function if the platform does not support it (e.g. old glibc). Patch courtesy to Thomas Jarosch
Andreas Steffen
2009-01-09 01:19:45 +00:00
a205d9581d
the Linux 2.6.28 uml guest kernel does not need any patches
Andreas Steffen
2009-01-09 00:28:47 +00:00
4faaa05439
test of ipsec leases command in ikev2/ip-pool and ikev2/ip-two-pools scenarios
Andreas Steffen
2009-01-09 00:24:54 +00:00
0519ca9099
version bump to 2.4.11
Andreas Steffen
2009-01-08 22:23:42 +00:00
6c8c268009
adapted ikev2/ip-pool-wish scenario to the new stroke ip pool function
Andreas Steffen
2009-01-08 21:41:07 +00:00
01a8b40b99
fixed two bugs introduced by the stroke ip pool refactoring
Andreas Steffen
2009-01-08 21:34:44 +00:00
d34030a810
increase nonce size to 32 bytes, required when using SHA384/512 PRFs
Martin Willi
2008-12-31 08:58:49 +00:00
b768170bf3
missing LOGFILE in debug statement
Andreas Steffen
2008-12-23 06:35:16 +00:00
4856241c1e
added some NEWS for 4.2.10
Martin Willi
2008-12-22 12:48:50 +00:00
12d4186f5c
fixed a potential memory leak when reusing mobike task
Martin Willi
2008-12-19 14:34:40 +00:00
f6035833fa
RNG tests based on FIPS 140-1
Martin Willi
2008-12-18 16:24:22 +00:00
2241a29571
support for Padlock RNG
Martin Willi
2008-12-18 16:21:05 +00:00
5045eeba7b
proper feature probing for padlock
Martin Willi
2008-12-17 15:40:01 +00:00
f30150d3da
correct use of calloc in hashtable_t
Tobias Brunner
2008-12-17 09:56:05 +00:00
9bcc9bb60e
updated documentation some minor cleanups calloc does not need an additional memset(0)
Martin Willi
2008-12-17 09:00:22 +00:00
58464dd737
improved IKE_SA uniqueness check
Tobias Brunner
2008-12-16 17:21:28 +00:00
097e4b8ff9
purge certificates after IKE_AUTH response has been built
Martin Willi
2008-12-16 15:48:36 +00:00
764e8b2211
reimplemented certificate cache: fixes unsafe certificate caching use fixed array instead of a list fine grained per-slot locking use cache hits for housekeeping
Martin Willi
2008-12-15 15:41:48 +00:00
482218f075
signal each entry condvar after enumeration, required if wait_for_entry is called
Martin Willi
2008-12-15 09:19:04 +00:00
abfde23ae9
added an additional frame to lock profiling backtraces
Martin Willi
2008-12-15 09:13:43 +00:00
50901d2550
do not respawn cancelled threads if we are shutting down
Martin Willi
2008-12-12 15:57:12 +00:00
248a1f57bb
fixed possible deadlock in checkin_and_destroy
Martin Willi
2008-12-12 10:40:45 +00:00
d183adbc9d
avoid DNS lookup if possible
Martin Willi
2008-12-12 10:38:53 +00:00
3993b91334
execute events if difference is 0, prevents a busywait
Martin Willi
2008-12-12 09:16:31 +00:00
8006835ec1
load tester got a "shutdown_when_complete" option, allows performance test using "time"
Martin Willi
2008-12-12 09:14:37 +00:00
30841a0305
daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill
Martin Willi
2008-12-12 09:13:06 +00:00
7a485e90bd
leak detective binds execution to a signle core, avoids corruption on SMP machines
Martin Willi
2008-12-12 09:10:52 +00:00
f2bd424c89
wait until all IKE_SAs are in-house before destroying them
Martin Willi
2008-12-12 08:33:48 +00:00
f55a7a76dd
address extensions refactored
Tobias Brunner
2008-12-11 13:39:30 +00:00
c636092c94
fixed usage of "leases" command
Martin Willi
2008-12-11 12:49:41 +00:00
a46173dfb4
nat_traversal in manpage corrected
Tobias Brunner
2008-12-10 17:45:44 +00:00
2475560c82
fixing checkout of IKE SAs with only the initiator SPI
Tobias Brunner
2008-12-10 15:58:39 +00:00
97016769fd
increasing the performance of checkout_duplicate by using a hash table.
Tobias Brunner
2008-12-10 13:51:21 +00:00
0dbd9788e5
initial size of 1 is nonsense
Tobias Brunner
2008-12-10 13:45:05 +00:00
d6dc0a21fb
incremental version of chunk_hash
Tobias Brunner
2008-12-10 13:43:51 +00:00
6b83549d1a
list assigned leases using "ipsec leases"
Martin Willi
2008-12-10 13:00:02 +00:00
ed2bcd0315
added IKE_SA established timer to "ipsec statusall"
Martin Willi
2008-12-10 09:59:35 +00:00
d5d5bc0f16
using rwlock to parallel build credentials
Martin Willi
2008-12-09 15:57:51 +00:00
5e5b2dc105
use thread-safe variant of gmtime
Martin Willi
2008-12-09 15:00:30 +00:00
6144daba9d
fixed load-tester shared key lookup
Martin Willi
2008-12-09 14:45:56 +00:00
7023d49ee1
purge auth_info when IKE_SA is established, releases cert memory
Martin Willi
2008-12-09 14:34:15 +00:00
a1466a3ec2
limit number of ADDITIONAL_IPV*_ADDR notifies
Martin Willi
2008-12-09 14:32:57 +00:00
2e03196551
list pools and usage in ipsec statusall
Martin Willi
2008-12-09 13:24:12 +00:00
adf9965272
extended stroke in-memory pool to use hash-tables supports online/offline leases properly reassign addresses to identities
Martin Willi
2008-12-09 13:23:42 +00:00
20fbc4277e
fixed hashtable->get_count() after doubling table size
Martin Willi
2008-12-09 11:13:52 +00:00
15ed045c87
require explicit enabling of load-testing plugin
Martin Willi
2008-12-09 09:11:37 +00:00
5bdc8fc794
generating different initiator identities, configs and certificates on the fly
Martin Willi
2008-12-08 19:18:28 +00:00
aa5c5d3fde
removed debugging leftovers
Martin Willi
2008-12-08 19:15:38 +00:00
474998099f
fixed out-of-tree build of scepclient
Martin Willi
2008-12-08 16:00:33 +00:00
df68b54f4e
basic x509 certificate generation
Martin Willi
2008-12-08 15:29:36 +00:00
9eb85cffe1
whitelisted another pthread_setspecific implementation
Martin Willi
2008-12-08 15:27:24 +00:00
d21b3549f7
accept NULL values in hashtable enumerator
Martin Willi
2008-12-05 12:34:17 +00:00
19e0010f51
hashtable enumerator enumerates over both, key and values
Martin Willi
2008-12-05 10:01:52 +00:00
a6d7a6107c
added actual ikev2bis draft
Martin Willi
2008-12-05 09:41:20 +00:00
876d5c63a3
pass identity to release_address(), allows providers to do a lookup by id
Martin Willi
2008-12-05 09:40:50 +00:00
c333bb4678
extended changeset [4753]
Andreas Steffen
2008-12-04 23:16:10 +00:00
3fb404d8da
implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead of a linked list.
Tobias Brunner
2008-12-04 16:46:08 +00:00
ffa6450695
fixed off by one error
Tobias Brunner
2008-12-04 16:33:39 +00:00
7710a286ca
fixed copy-paste bug (double-free)
Martin Willi
2008-12-04 10:10:37 +00:00
d0eee69822
reset pointer for a clean destruction
Martin Willi
2008-12-04 10:09:21 +00:00
3bfd0fe3f2
handling peer_match with higher priority tan ike_match to select correct config if IPs are equal
Martin Willi
2008-12-04 10:00:03 +00:00
0442562516
leak whitelisting of OPENSSL_config()
Martin Willi
2008-12-04 09:23:53 +00:00
c165d32d9e
suppress output from leak-detective in openac
Andreas Steffen
2008-12-04 04:51:05 +00:00
cf62817286
load openac plugins explicitly
Andreas Steffen
2008-12-04 04:36:39 +00:00
9c674e7214
fixed refactoring error in openac
Andreas Steffen
2008-12-04 04:34:49 +00:00
04409bbb74
suppress leak-detective stderr output in ipsec pool
Andreas Steffen
2008-12-04 03:31:53 +00:00
9b6f9d14ab
fixed double free of host in sadb_address2ts
Andreas Steffen
2008-12-04 01:08:19 +00:00
17a1045906
enable leak-detective and integrity-test in UML tests by default
Andreas Steffen
2008-12-04 00:34:59 +00:00
83c42156a2
add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg.
Tobias Brunner
2008-12-03 10:12:20 +00:00
c3bdc3cd7f
enable quoted tokens in the token enumerator
Tobias Brunner
2008-12-03 10:03:59 +00:00
f4bcf49bcb
fixed compiler warning
Tobias Brunner
2008-12-03 10:03:02 +00:00
81736d7d24
added memstr and extract_token_str helper functions
Tobias Brunner
2008-12-03 09:45:58 +00:00
0948edbbff
adding general purpose hash table
Tobias Brunner
2008-12-03 09:32:16 +00:00
70691c31b2
fixed double free of host in selector2ts
Martin Willi
2008-12-03 09:15:29 +00:00
efd0fe21e4
ref_get()/ref_put() use atomic gcc operations if supported, thanks to Thomas Jarosch for the patch
Martin Willi
2008-12-02 12:14:32 +00:00
6905f794bb
added a --disable-threads ./configure option for pluto
Martin Willi
2008-12-02 09:01:57 +00:00
2671a8fcee
use DBG_ANY to set all loglevels
Martin Willi
2008-12-02 08:52:46 +00:00
f464d75070
added time.h include for struct tm
Martin Willi
2008-12-02 08:46:15 +00:00
394eb35b0c
some task queueing improvements: - do not pass CHILD_SAs to task constructor, might not be valid anymore during execution (late lookup) - use sub-tasks to delete CHILD/IKE_SA after rekeying, as we want to execute the delete before additional queued tasks
Martin Willi
2008-12-01 18:38:28 +00:00
9a96ccd485
re-established lost default auth sys_logger
Andreas Steffen
2008-12-01 01:24:55 +00:00
405cc1d924
schedule rekeying when activating passive IKE_SAs
Martin Willi
2008-11-28 16:19:19 +00:00
dd6b7af3f7
do not delete passive IKE_SAs
Martin Willi
2008-11-28 15:44:25 +00:00
c610f42430
added a PASSIVE IKE_SA state to manage it externally
Martin Willi
2008-11-28 10:49:14 +00:00
ddef455219
pass SKd to derive_ike_keys() to have a more interoperable API
Martin Willi
2008-11-28 09:51:44 +00:00
9a1263c3c1
fixed a double-unlock bug, showed up when using rwlocks in backend manager
Martin Willi
2008-11-28 08:22:55 +00:00
ced41695dc
use rwlocks in backend manager to allow simultaneous access
Martin Willi
2008-11-27 15:34:17 +00:00
96eb7b44a0
use a rwlock in attribute manager to allow simultaneous access
Martin Willi
2008-11-27 15:22:41 +00:00
c50ad6f613
remove attribute provider in SQL plugin destruction
Martin Willi
2008-11-27 14:33:41 +00:00
ac812491aa
added an include hack to build starter without gmp.h
Martin Willi
2008-11-27 10:20:25 +00:00
140d0081bf
fixed pluto out-of-tree builds
Martin Willi
2008-11-27 10:18:38 +00:00
9413628b87
token enumerator missed the last token if it contains only a single char
Martin Willi
2008-11-27 09:21:52 +00:00
d2de674b9a
checkin of non-existing IKE_SAs removed unneeded checkin() return values
Martin Willi
2008-11-26 14:32:55 +00:00
09f407a14f
removed private parser function pointers, allows compiler to inline
Martin Willi
2008-11-26 10:54:08 +00:00
98bcdfe2c9
removed private generator function pointers, allows compiler to inline
Martin Willi
2008-11-26 10:42:54 +00:00
e2cb07d713
inlined some short chunk functions, showed up in the profiler
Martin Willi
2008-11-26 10:08:36 +00:00
4fd233a73e
memxor() tweaks, as it is heavily used in xcbc
Martin Willi
2008-11-26 10:06:59 +00:00
69e9698b17
allow to globally disable DOS protection by setting charon.dos_protection to no.
Tobias Brunner
2008-11-26 09:22:19 +00:00