|
|
|
@4683
|
[4683]
|
11/20/08 15:46:03 |
tobias |
fixing Makefile of the nm plugin (avoids including a .svn directory in the … |
|
|
|
@4681
|
[4681]
|
11/20/08 14:30:23 |
tobias |
optimized ike_sa_manager for concurrent access (default behavior is still … |
|
|
|
@4679
|
[4679]
|
11/19/08 16:37:46 |
martin |
fixed lock-profiler help message |
|
|
|
@4677
|
[4677]
|
11/19/08 16:31:27 |
martin |
refactored and cleaned up child_sa interface
replaced add/update calls by … |
|
|
|
@4675
|
[4675]
|
11/18/08 15:28:05 |
tobias |
fixing compilation on systems lacking linux/xfrm.h |
|
|
|
@4672
|
[4672]
|
11/18/08 11:10:36 |
martin |
setting default port of own address to have a proper fallback if src addr … |
|
|
|
@4671
|
[4671]
|
11/18/08 10:52:28 |
martin |
consider interfaces we do not monitor as up (e.g. lo)
fixes load-testing … |
|
|
|
@4670
|
[4670]
|
11/18/08 01:02:59 |
andreas |
version bump to 4.2.10 |
|
|
|
@4667
|
[4667]
|
11/17/08 10:38:34 |
martin |
added build folder to ignore, for those using out-of-tree builds
removed … |
|
|
|
@4666
|
[4666]
|
11/17/08 10:29:27 |
martin |
separated updown listener to its own class
caching interface names to … |
|
|
|
@4665
|
[4665]
|
11/17/08 01:01:34 |
andreas |
fixed virtual IP re-installation failure in MOBIKE scenarios introduced … |
|
|
|
@4664
|
[4664]
|
11/16/08 23:25:16 |
andreas |
set release number back to 4.2.9 |
|
|
|
@4663
|
[4663]
|
11/16/08 22:23:56 |
andreas |
added migration to NEWS |
|
|
|
@4662
|
[4662]
|
11/16/08 22:19:58 |
andreas |
completed migration of MIPv6 connections |
|
|
|
@4661
|
[4661]
|
11/16/08 22:19:17 |
andreas |
show TRANSPORT_PROXY mode in ipsec status |
|
|
|
@4660
|
[4660]
|
11/14/08 15:23:11 |
martin |
using aligned buffers for netlink |
|
|
|
@4659
|
[4659]
|
11/14/08 15:05:47 |
martin |
fallback to reauthentication if peer does not support CHILD_SA rekeying |
|
|
|
@4658
|
[4658]
|
11/14/08 14:58:16 |
martin |
fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SAS |
|
|
|
@4657
|
[4657]
|
11/14/08 14:15:26 |
martin |
also use correct encap parameter in PF_KEY |
|
|
|
@4656
|
[4656]
|
11/14/08 14:12:07 |
martin |
fixed encap enabling in xfrm (using new encap state, not the old one) |
|
|
|
@4655
|
[4655]
|
11/14/08 14:04:22 |
martin |
do not use a route if outgoing interface is down
other cleanups |
|
|
|
@4654
|
[4654]
|
11/14/08 11:30:26 |
martin |
rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead! |
|
|
|
@4653
|
[4653]
|
11/14/08 10:38:49 |
martin |
do not use public interface for functions which are local anyway |
|
|
|
@4652
|
[4652]
|
11/14/08 09:38:53 |
martin |
reset IKE_SA on bus during child_sa destruction |
|
|
|
@4651
|
[4651]
|
11/13/08 22:38:16 |
andreas |
adapted evaltest.dat to changed debug output |
|
|
|
@4647
|
[4647]
|
11/13/08 08:48:27 |
martin |
updated API doc for socket.h |
|
|
|
@4646
|
[4646]
|
11/13/08 08:15:45 |
martin |
ported socket enumerator to raw-socket.c
some cleanups in socket.c |
|
|
|
@4645
|
[4645]
|
11/13/08 07:29:53 |
andreas |
added type=transport_proxy and installpolicy=yes|no to man page |
|
|
|
@4644
|
[4644]
|
11/13/08 06:46:51 |
andreas |
added MIPv6 functionality to NEWS |
|
|
|
@4643
|
[4643]
|
11/12/08 23:57:46 |
andreas |
corrected unwanted deletion in comment |
|
|
|
@4642
|
[4642]
|
11/12/08 17:47:19 |
martin |
BEET mode might want forwarding policies |
|
|
|
@4641
|
[4641]
|
11/12/08 17:10:34 |
martin |
removed some obsolete includes |
|
|
|
@4640
|
[4640]
|
11/12/08 17:07:17 |
martin |
moved ike_initiator flag to IKE_SAs condition bitfield |
|
|
|
@4639
|
[4639]
|
11/12/08 16:09:24 |
martin |
ported some hard-to-merge cherries back to trunk :-/
shame, svn, shame: … |
|
|
|
@4635
|
[4635]
|
11/12/08 09:27:48 |
martin |
fixing keylength bug at the right place:
we usually don't touch output … |
|
|
|
@4634
|
[4634]
|
11/12/08 05:08:30 |
andreas |
improved fix |
|
|
|
@4633
|
[4633]
|
11/12/08 05:02:10 |
andreas |
fixed AES-CCM/GCM authenticated encryption by eliminating generation of … |
|
|
|
@4632
|
[4632]
|
11/11/08 19:37:19 |
martin |
fixed compiler warnings issued by:
gcc 4.3
curl.h gcc … |
|
|
|
@4631
|
[4631]
|
11/11/08 19:35:10 |
martin |
#defing out compress algs to avoid compiler warning |
|
|
|
@4630
|
[4630]
|
11/11/08 19:33:48 |
martin |
updated method signature of add_policy |
|
|
|
@4629
|
[4629]
|
11/11/08 16:20:25 |
martin |
fixed compilation of medcli plugin |
|
|
|
@4628
|
[4628]
|
11/11/08 16:19:13 |
martin |
added missing include for ULONG_MAX |
|
|
|
@4626
|
[4626]
|
11/11/08 14:35:51 |
tobias |
announcing the kernel plugins |
|
|
|
@4625
|
[4625]
|
11/11/08 14:12:05 |
tobias |
fixing mediation extension |
|
|
|
@4624
|
[4624]
|
11/11/08 14:11:44 |
tobias |
some typos |
|
|
|
@4623
|
[4623]
|
11/11/08 13:52:55 |
martin |
added some NEWS for 4.2.9 |
|
|
|
@4622
|
[4622]
|
11/11/08 11:52:37 |
martin |
dynamic logging configuration through strongswan.conf
fallback to existing … |
|
|
|
@4621
|
[4621]
|
11/11/08 11:29:31 |
martin |
fixed compiler warning |
|
|
|
@4620
|
[4620]
|
11/11/08 10:56:47 |
tobias |
fixing a memory leak |
|
|
|
@4618
|
[4618]
|
11/11/08 10:22:00 |
tobias |
merging kernel_klips plugin back into trunk |
|
|
|
@4614
|
[4614]
|
11/11/08 08:28:52 |
andreas |
renamed proxy to proxy_mode in stroke_msg.h |
|
|
|
@4613
|
[4613]
|
11/11/08 08:11:30 |
andreas |
deleted obsolete parameter descriptions |
|
|
|
@4612
|
[4612]
|
11/11/08 07:37:37 |
andreas |
preliminary support of Mobile IPv6 |
|
|
|
@4611
|
[4611]
|
11/11/08 07:29:25 |
andreas |
added the MIPv6 options use_proxy_mode and install_policy |
|
|
|
@4610
|
[4610]
|
11/11/08 07:19:37 |
andreas |
cosmetics in debug output |
|
|
|
@4609
|
[4609]
|
11/10/08 17:44:27 |
martin |
whitelisting localtime_r |
|
|
|
@4608
|
[4608]
|
11/10/08 17:43:15 |
martin |
make load_tester more strict to use it along stroke |
|
|
|
@4607
|
[4607]
|
11/10/08 17:42:05 |
martin |
fixed leak in host_create_from_string("%any") |
|
|
|
@4606
|
[4606]
|
11/10/08 16:45:19 |
martin |
fixed some minor issues found when using -DFORTIFY_SOURCE=2 |
|
|
|
@4605
|
[4605]
|
11/10/08 11:10:51 |
martin |
iterations = 0 for infinite iterations |
|
|
|
@4604
|
[4604]
|
11/10/08 11:09:44 |
martin |
added PEM version of keys |
|
|
|
@4603
|
[4603]
|
11/07/08 16:08:53 |
martin |
settings section enumeration
printf style key lookup |
|
|
|
@4602
|
[4602]
|
11/07/08 15:48:54 |
martin |
fixed copy/paste error |
|
|
|
@4601
|
[4601]
|
11/07/08 06:15:19 |
andreas |
use of host_create_any() for %any address |
|
|
|
@4600
|
[4600]
|
11/07/08 04:38:56 |
andreas |
SADB_X_EXT_KMADDRESS is not present in old kernels |
|
|
|
@4599
|
[4599]
|
11/07/08 04:23:59 |
andreas |
added retrieval of remote kmaddress via PF_KEY |
|
|
|
@4598
|
[4598]
|
11/06/08 15:07:46 |
martin |
added delete_after_established option |
|
|
|
@4597
|
[4597]
|
11/06/08 15:05:58 |
martin |
fixed leak
fixed build if !HAVE_BACKTRACE |
|
|
|
@4592
|
[4592]
|
11/05/08 17:21:57 |
martin |
use read-write locks in crypto factory for parallelization |
|
|
|
@4591
|
[4591]
|
11/05/08 17:12:54 |
martin |
wrapped all pthread_rwlock_t in profilable rwlock_t |
|
|
|
@4590
|
[4590]
|
11/05/08 16:51:57 |
martin |
wrapped rwlock with profiling support |
|
|
|
@4587
|
[4587]
|
11/05/08 15:36:57 |
martin |
threshhold and ./configure option for lock profiler |
|
|
|
@4586
|
[4586]
|
11/05/08 15:22:58 |
martin |
added missing includes |
|
|
|
@4585
|
[4585]
|
11/05/08 14:58:19 |
martin |
separated backtrace functionality from leak_detective, used … |
|
|
|
@4583
|
[4583]
|
11/05/08 13:37:37 |
martin |
proper cleanup of openssl locking code |
|
|
|
@4582
|
[4582]
|
11/05/08 13:24:36 |
martin |
fixed sender destruction order |
|
|
|
@4580
|
[4580]
|
11/05/08 12:55:17 |
martin |
fixed iterator regression introduced in [4577] |
|
|
|
@4579
|
[4579]
|
11/05/08 12:29:56 |
martin |
replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant |
|
|
|
@4577
|
[4577]
|
11/05/08 09:37:09 |
martin |
get rid of unused iterator hook functions |
|
|
|
@4576
|
[4576]
|
11/05/08 09:32:38 |
martin |
got rid of deprecated create_iterator_locked() |
|
|
|
@4575
|
[4575]
|
11/05/08 08:57:26 |
martin |
simple mutex profiler |
|
|
|
@4574
|
[4574]
|
11/05/08 08:38:55 |
martin |
do not install route if interface lookup failed |
|
|
|
@4573
|
[4573]
|
11/05/08 06:32:43 |
andreas |
%any is IP family neutral |
|
|
|
@4572
|
[4572]
|
11/05/08 06:27:42 |
andreas |
corrected typo2 |
|
|
|
@4571
|
[4571]
|
11/05/08 05:53:45 |
andreas |
support of %any address string |
|
|
|
@4570
|
[4570]
|
11/05/08 01:41:46 |
andreas |
handle 0.0.0.0 string and af == AF_INET6 |
|
|
|
@4568
|
[4568]
|
11/04/08 15:55:22 |
martin |
two new load_testing options:
request_virtual_ip: request a … |
|
|
|
@4567
|
[4567]
|
11/04/08 15:05:42 |
martin |
OpenSSL requires a signature length of exactly RSA_size() |
|
|
|
@4566
|
[4566]
|
11/04/08 14:12:11 |
martin |
removed superfluous get_other_public_value in diffie_hellman_t interface |
|
|
|
@4565
|
[4565]
|
11/04/08 14:05:00 |
martin |
fixed bignum export if BN_num_bytes() != DH_size() |
|
|
|
@4564
|
[4564]
|
11/04/08 14:01:36 |
martin |
fixed memleak |
|
|
|
@4563
|
[4563]
|
11/04/08 13:59:53 |
martin |
added a delay option to delay initiations |
|
|
|
@4562
|
[4562]
|
11/04/08 00:46:42 |
andreas |
corrected a copy-and-paste error |
|
|
|
@4561
|
[4561]
|
11/04/08 00:34:23 |
andreas |
updated copyright of kernel interface code |
|
|
|
@4560
|
[4560]
|
11/04/08 00:29:34 |
andreas |
added support for xfrm remote kmaddress |
|
|
|
@4558
|
[4558]
|
11/03/08 17:14:12 |
martin |
added locking mechanism for multithreaded use of OpenSSL |
|
|
|
@4556
|
[4556]
|
11/03/08 16:11:01 |
martin |
added fake_kernel option to make dummy kernel implementation optional |
|
|
|
@4555
|
[4555]
|
11/03/08 13:40:42 |
martin |
removed accidently checked in debug code |
|
|
|
@4554
|
[4554]
|
11/03/08 11:02:39 |
martin |
load testing between different hosts |
|
|
|
@4553
|
[4553]
|
11/03/08 10:44:54 |
martin |
log loaded plugins at startup |