Martin Willi
187bf24e4d
Migrated load_tester_config to INIT/METHOD macros
2011-05-16 15:24:13 +02:00
Martin Willi
8e67b5413c
Migrated load_tester_creds to INIT/METHOD macros
2011-05-16 15:24:13 +02:00
Martin Willi
e13819507e
Fix load tester shared key enumerator, provide dedicated EAP password
2011-05-16 15:24:13 +02:00
Martin Willi
69c3eca0e9
Added a non-blocking, skipping variant of IKE_SA enumerator
2011-05-16 15:24:13 +02:00
Martin Willi
3f06403705
Added a job_threshold option to drop IKE_SA_INITs if a certain job load reached
2011-05-16 15:24:13 +02:00
Martin Willi
06f0ede759
Use high priority for retransmit/dpd/keepalive jobs
2011-05-16 15:24:13 +02:00
Martin Willi
ea69c70d0e
Use job priorities in process_message job based on exchange types
2011-05-16 15:24:13 +02:00
Martin Willi
68f56418cd
Reserve threads for job priority classes based on strongswan.conf options
2011-05-16 15:24:13 +02:00
Martin Willi
2959ea6f84
Added job priority enum names
2011-05-16 15:24:13 +02:00
Martin Willi
c73d4f53f5
Processor job scheduling respects job priority classes
2011-05-16 15:24:13 +02:00
Martin Willi
f77203bbfb
Introduce priority classes for jobs
2011-05-16 15:24:12 +02:00
Martin Willi
dfe9bad981
Added a stroke memusage command to show memory usage
2011-05-16 15:22:21 +02:00
Martin Willi
fce3b5c3ba
Added a leak detective method to report current memory usage with backtraces
2011-05-16 15:22:21 +02:00
Martin Willi
f37e8252a3
Make leak detective public
2011-05-16 15:22:21 +02:00
Martin Willi
42e0f26e53
Migrated leak_detective to INIT/METHOD macros
2011-05-16 15:22:21 +02:00
Martin Willi
61a141d01c
Added a frame enumerator to backtrace_t
2011-05-16 15:22:21 +02:00
Martin Willi
c238e8ea86
Added an equals function to backtrace_t
2011-05-16 15:22:21 +02:00
Martin Willi
79edee7422
Migrated backtrace_t to METHOD macro
2011-05-16 15:22:21 +02:00
Tobias Brunner
700296ccbe
maemo: New upstream release.
2011-05-16 14:15:08 +02:00
Andreas Steffen
d6fc82c12e
version bump to final 4.5.2
2011-05-14 17:12:50 +02:00
Andreas Steffen
636a7d2bc3
whitelisting can already be enabled in strongswan.conf
2011-05-14 17:11:15 +02:00
Andreas Steffen
19ae24f0ea
fixed whitelist enabling
2011-05-14 17:09:45 +02:00
Andreas Steffen
706ae005c6
do not call recommendations if recs does not exist
2011-05-14 16:36:05 +02:00
Andreas Steffen
cc546c3ce6
Restrict IMCs and IMVs to call SendMessage()
2011-05-14 13:31:16 +02:00
Tobias Brunner
0e080d9b64
Don't compile login() in openssl_rsa_private_key_t if ENGINE support is disabled in OpenSSL.
2011-05-13 13:11:11 +02:00
Tobias Brunner
38a93a3cd9
fetcher.c added to Android.mk.
2011-05-13 13:09:38 +02:00
Andreas Steffen
8afbc768f3
added ikev2/rw-whitelist scenario
2011-05-12 21:11:01 +02:00
Martin Willi
6fd23444ea
Disable whitelist plugin by default
2011-05-12 09:07:14 +02:00
Duncan Salerno
4b6ebf9995
Protect the communication with the SIM card during a transaction from access by a second application
2011-05-12 06:20:11 +02:00
Andreas Steffen
e8a512f800
protection against insane IMCs and IMVs
2011-05-11 19:34:01 +02:00
Martin Willi
61e3819d04
Do not use deprecated vte_terminal_fork_command()
2011-05-11 12:12:02 +02:00
Tobias Brunner
38865eced3
Return correct status code in kernel_netlink_ipsec_t.query_sa.
2011-05-10 15:45:42 +02:00
Tobias Brunner
70f918ec1d
chunk_clear not clear_chunk.
2011-05-10 15:40:46 +02:00
Thomas Egerer
59965aaf96
pluto: Securely wipe quick mode keys from memory.
...
Keying material is derived in two separate steps for local and remote
endpoint. This allows us to securely wipe local/remote secrets
separately, too -- a precondition to wipe quick mode keys from memory in
a secure fashion.
2011-05-10 15:39:00 +02:00
Thomas Egerer
9e6bb93ab9
pluto: Securely wipe sensitive data from memory.
2011-05-10 15:19:46 +02:00
Andreas Steffen
261d5f22db
terminate imc/imv that couldn't be initialized properly
2011-05-10 07:03:50 +02:00
Andreas Steffen
bb6b2fbb81
lock the set_message_types() method for imvs
2011-05-09 16:46:08 +02:00
Andreas Steffen
375ac27609
cosmetics
2011-05-09 16:46:08 +02:00
Martin Willi
f7812f6492
Wipe memory after using key material (incomplete, to be continued)
2011-05-09 14:36:15 +02:00
Martin Willi
7dc48bab1b
Use memwipe() in chunk_clear()
2011-05-09 14:36:14 +02:00
Martin Willi
ed678b52e2
Added a memwipe() function to safely overwrite sensitive memory
2011-05-09 14:36:14 +02:00
Andreas Steffen
52cab8874b
fixed debug output
2011-05-09 00:49:59 +02:00
Andreas Steffen
d6eec513f1
adapted state_machine for retry batches
2011-05-09 00:49:36 +02:00
Andreas Steffen
82b43847f5
version bump to 4.5.2rc2
2011-05-08 17:56:05 +02:00
Andreas Steffen
ff30e06bf0
lock the set_message_types() method
2011-05-07 17:51:53 +02:00
Andreas Steffen
2c3464af46
added missing comma
2011-05-07 10:22:57 +02:00
Andreas Steffen
50a43c79a6
refactored tnccs->remove_connection()
2011-05-06 15:13:05 +02:00
Andreas Steffen
51f259a82d
id of non-registered threads defaults to 0
2011-05-06 06:22:19 +02:00
Martin Willi
e7643c92d3
Migrated scheduler_t to INIT/METHOD macros
2011-05-05 11:14:51 +02:00
Martin Willi
cda46be72a
Migrated callback_job to INIT/METHOD macros
2011-05-05 11:14:51 +02:00