Commit Graph

6896 Commits

Author SHA1 Message Date
Martin Willi 187bf24e4d Migrated load_tester_config to INIT/METHOD macros 2011-05-16 15:24:13 +02:00
Martin Willi 8e67b5413c Migrated load_tester_creds to INIT/METHOD macros 2011-05-16 15:24:13 +02:00
Martin Willi e13819507e Fix load tester shared key enumerator, provide dedicated EAP password 2011-05-16 15:24:13 +02:00
Martin Willi 69c3eca0e9 Added a non-blocking, skipping variant of IKE_SA enumerator 2011-05-16 15:24:13 +02:00
Martin Willi 3f06403705 Added a job_threshold option to drop IKE_SA_INITs if a certain job load reached 2011-05-16 15:24:13 +02:00
Martin Willi 06f0ede759 Use high priority for retransmit/dpd/keepalive jobs 2011-05-16 15:24:13 +02:00
Martin Willi ea69c70d0e Use job priorities in process_message job based on exchange types 2011-05-16 15:24:13 +02:00
Martin Willi 68f56418cd Reserve threads for job priority classes based on strongswan.conf options 2011-05-16 15:24:13 +02:00
Martin Willi 2959ea6f84 Added job priority enum names 2011-05-16 15:24:13 +02:00
Martin Willi c73d4f53f5 Processor job scheduling respects job priority classes 2011-05-16 15:24:13 +02:00
Martin Willi f77203bbfb Introduce priority classes for jobs 2011-05-16 15:24:12 +02:00
Martin Willi dfe9bad981 Added a stroke memusage command to show memory usage 2011-05-16 15:22:21 +02:00
Martin Willi fce3b5c3ba Added a leak detective method to report current memory usage with backtraces 2011-05-16 15:22:21 +02:00
Martin Willi f37e8252a3 Make leak detective public 2011-05-16 15:22:21 +02:00
Martin Willi 42e0f26e53 Migrated leak_detective to INIT/METHOD macros 2011-05-16 15:22:21 +02:00
Martin Willi 61a141d01c Added a frame enumerator to backtrace_t 2011-05-16 15:22:21 +02:00
Martin Willi c238e8ea86 Added an equals function to backtrace_t 2011-05-16 15:22:21 +02:00
Martin Willi 79edee7422 Migrated backtrace_t to METHOD macro 2011-05-16 15:22:21 +02:00
Tobias Brunner 700296ccbe maemo: New upstream release. 2011-05-16 14:15:08 +02:00
Andreas Steffen d6fc82c12e version bump to final 4.5.2 2011-05-14 17:12:50 +02:00
Andreas Steffen 636a7d2bc3 whitelisting can already be enabled in strongswan.conf 2011-05-14 17:11:15 +02:00
Andreas Steffen 19ae24f0ea fixed whitelist enabling 2011-05-14 17:09:45 +02:00
Andreas Steffen 706ae005c6 do not call recommendations if recs does not exist 2011-05-14 16:36:05 +02:00
Andreas Steffen cc546c3ce6 Restrict IMCs and IMVs to call SendMessage() 2011-05-14 13:31:16 +02:00
Tobias Brunner 0e080d9b64 Don't compile login() in openssl_rsa_private_key_t if ENGINE support is disabled in OpenSSL. 2011-05-13 13:11:11 +02:00
Tobias Brunner 38a93a3cd9 fetcher.c added to Android.mk. 2011-05-13 13:09:38 +02:00
Andreas Steffen 8afbc768f3 added ikev2/rw-whitelist scenario 2011-05-12 21:11:01 +02:00
Martin Willi 6fd23444ea Disable whitelist plugin by default 2011-05-12 09:07:14 +02:00
Duncan Salerno 4b6ebf9995 Protect the communication with the SIM card during a transaction from access by a second application 2011-05-12 06:20:11 +02:00
Andreas Steffen e8a512f800 protection against insane IMCs and IMVs 2011-05-11 19:34:01 +02:00
Martin Willi 61e3819d04 Do not use deprecated vte_terminal_fork_command() 2011-05-11 12:12:02 +02:00
Tobias Brunner 38865eced3 Return correct status code in kernel_netlink_ipsec_t.query_sa. 2011-05-10 15:45:42 +02:00
Tobias Brunner 70f918ec1d chunk_clear not clear_chunk. 2011-05-10 15:40:46 +02:00
Thomas Egerer 59965aaf96 pluto: Securely wipe quick mode keys from memory.
Keying material is derived in two separate steps for local and remote
endpoint. This allows us to securely wipe local/remote secrets
separately, too -- a precondition to wipe quick mode keys from memory in
a secure fashion.
2011-05-10 15:39:00 +02:00
Thomas Egerer 9e6bb93ab9 pluto: Securely wipe sensitive data from memory. 2011-05-10 15:19:46 +02:00
Andreas Steffen 261d5f22db terminate imc/imv that couldn't be initialized properly 2011-05-10 07:03:50 +02:00
Andreas Steffen bb6b2fbb81 lock the set_message_types() method for imvs 2011-05-09 16:46:08 +02:00
Andreas Steffen 375ac27609 cosmetics 2011-05-09 16:46:08 +02:00
Martin Willi f7812f6492 Wipe memory after using key material (incomplete, to be continued) 2011-05-09 14:36:15 +02:00
Martin Willi 7dc48bab1b Use memwipe() in chunk_clear() 2011-05-09 14:36:14 +02:00
Martin Willi ed678b52e2 Added a memwipe() function to safely overwrite sensitive memory 2011-05-09 14:36:14 +02:00
Andreas Steffen 52cab8874b fixed debug output 2011-05-09 00:49:59 +02:00
Andreas Steffen d6eec513f1 adapted state_machine for retry batches 2011-05-09 00:49:36 +02:00
Andreas Steffen 82b43847f5 version bump to 4.5.2rc2 2011-05-08 17:56:05 +02:00
Andreas Steffen ff30e06bf0 lock the set_message_types() method 2011-05-07 17:51:53 +02:00
Andreas Steffen 2c3464af46 added missing comma 2011-05-07 10:22:57 +02:00
Andreas Steffen 50a43c79a6 refactored tnccs->remove_connection() 2011-05-06 15:13:05 +02:00
Andreas Steffen 51f259a82d id of non-registered threads defaults to 0 2011-05-06 06:22:19 +02:00
Martin Willi e7643c92d3 Migrated scheduler_t to INIT/METHOD macros 2011-05-05 11:14:51 +02:00
Martin Willi cda46be72a Migrated callback_job to INIT/METHOD macros 2011-05-05 11:14:51 +02:00