3208d8a73c
do not checksum IMC/IMV plugins
2011-06-01 09:22:12 +02:00
71ad779801
fixed location of imc_test/imv_test Makefiles
2011-06-01 08:02:16 +02:00
5d179d1999
version bump to 4.5.3dr2
2011-05-31 06:22:42 +02:00
510f37abd4
implemented the RFC 5792 PA-TNC protocol and an example IMC/IMV pair
2011-05-30 21:30:09 +02:00
13eeb1d22a
version bump to 4.5.3dr1
2011-05-25 21:34:22 +02:00
617061072b
Renamed option to enable unit tests as plugin is named unit-tester.
...
To correctly enable a plugin the names used in the ARG_ENABL_SET and
ADD_PLUGIN macros have to match (and they have, of course, to match the
plugin's name).
2011-05-24 19:28:54 +02:00
8ed3c9fba5
Enable strict-aliasing warnings, we should really get rid of them
2011-05-24 12:04:35 +02:00
afd53de627
Add md5 to script plugins
2011-05-20 10:08:57 +02:00
d6fc82c12e
version bump to final 4.5.2
2011-05-14 17:12:50 +02:00
82b43847f5
version bump to 4.5.2rc2
2011-05-08 17:56:05 +02:00
b58e9783d7
version bump to 4.5.2rc1
2011-05-02 22:15:43 +02:00
406051ea4e
fixed segmentation fault due to null pointer
2011-04-22 10:11:16 +02:00
7bc718ff3b
version bump to 4.5.2dr5
2011-04-11 06:24:31 +02:00
1be296dfb2
implemented the PEAP tunneling protocol as an EAP plugin
2011-04-06 14:42:02 +02:00
80dca77a50
Added SIM card backend based on pcsc-lite
2011-04-04 08:51:50 +02:00
6d508e8f36
version bump to 4.5.2dr4
2011-04-02 07:46:16 +02:00
fc16b361ef
Install systemd service file if systemd is available
2011-03-29 09:27:54 +02:00
a6390879d5
Make availability of glob(3) optional in settings_t.
...
If glob(3) is not available just try to open the pattern as regular
file. The reason for this change is that glob(3) is not available on Android.
2011-03-22 19:21:26 +01:00
d32a84fbc4
version bump to 4.5.2dr3
2011-03-17 20:24:44 +01:00
adba3c695d
version bump to 4.5.2dr2
2011-03-11 09:12:13 +01:00
007c47088c
Implemented permanent certificate coupling plugin
2011-02-28 16:39:40 +01:00
3e74ebbecc
Added an advanced duplicate checking plugin with liveness check of old SA
2011-02-28 15:37:18 +00:00
5e603aba4e
Implemented a in-memory peer identity whitelist plugin
2011-02-28 15:00:46 +01:00
e7d60a9a06
version bump to 4.5.2dr1
2011-02-11 07:46:23 +01:00
5ca559cfce
version bump to 4.5.1
2011-02-09 20:40:32 +01:00
234955d1ea
Check for libxml when building tnccs_11, use autoconf libxml CFLAGS/LIBS
2011-02-08 11:11:01 +01:00
8d13c12eac
version bump to 4.5.1rc2
2011-02-05 08:59:36 +01:00
ad061503b8
version bump to strongswan-4.5.1rc1
2011-01-31 05:39:17 +01:00
f652995b21
implemented dynamic detection of TNCCS protocol
2011-01-31 00:59:17 +01:00
44b6b8f9d5
Load load-tester plugin before kernel interfaces, fixes fake_kernel option
2011-01-19 16:43:00 +01:00
2ca52c8048
Implemented an alternative HTTP fetcher based on libsoup
2011-01-17 18:20:06 +01:00
2b52d5cb41
Do not install config files with user/group, as it might not exist on build machine
2011-01-17 18:08:17 +01:00
01d3038137
Added plugin stub for advanced X509 constraint checking
2011-01-05 16:46:00 +01:00
37b3fad782
Install "ipsec" script with tools or conftest
2011-01-05 16:45:56 +01:00
e78ec86d27
Added a Suite B conftest utility skeleton using libcharon
2011-01-05 16:45:40 +01:00
4aab89274c
version bump to 4.5.1dr5
2010-12-27 13:49:32 +01:00
71c87e3483
Added plugin stub for AF_ALG
2010-12-20 09:52:02 +01:00
814873a356
version bump to 4.5.1dr4
2010-12-19 09:46:59 +01:00
c0cadd7182
version bump to 4.5.1dr3
2010-12-15 08:56:32 +01:00
86818437c5
version bump to 4.5.1dr2
2010-12-01 10:08:49 +01:00
25be47b431
version bump to 4.5.1dr1
2010-11-28 11:55:40 +01:00
bcd386a95f
removed dependencies from libtnc
2010-11-09 20:43:50 +01:00
37242cc3fb
moved tnccs-20 plugin in front of tnc-imv and intc-imc
2010-11-01 18:55:01 +01:00
77255f477c
version bump to 4.5.1
2010-10-29 09:30:57 +02:00
327aa0c012
version bump to 4.5.0
2010-10-28 20:24:12 +02:00
fd459a8f45
version bump to 4.5.0rc3
2010-10-25 18:20:38 +02:00
ce84a5cb1d
version bump to 4.5.0rc2
2010-10-16 20:47:38 +02:00
8464e25a0f
Maemo: Register with libosso and init Glib main loop.
2010-10-14 17:36:18 +02:00
2bce814190
Maemo: Register charon as D-BUS system service.
...
In order to be able to access this service via libosso, charon is
started with the run-standalone.sh script, which sets up the required
environment.
2010-10-14 17:36:18 +02:00
f79161e866
Stub plugin for Maemo specific extensions added.
2010-10-14 17:36:17 +02:00
095e0e7940
version bump to 4.5.0rc1
2010-10-14 15:50:42 +02:00
d1b94592a6
fixed notation
2010-10-07 23:34:37 +02:00
8dcc56dcc0
created tnc-imc and tnc-imv plugins
2010-10-07 23:31:23 +02:00
9b04378ece
version bump to 4.5.0dr5
2010-10-06 07:07:14 +02:00
6d0e9cf046
created hull for TNCCS 2.0 plugin
2010-10-05 21:15:24 +02:00
f685b3aca0
started use of libtnc library
2010-09-29 23:24:59 +02:00
062e8faee1
version bump to 4.5dr4
2010-09-29 07:14:33 +02:00
4e8e74fcfa
moved TNCCS layer out of eap_tnc plugin
2010-09-28 23:34:04 +02:00
0a1233e642
Moved man pages for config files to a separate directory.
2010-09-10 12:01:19 +02:00
3c1debeb59
version bump to 4.5.0dr2
2010-09-10 07:37:28 +02:00
30cd31fb69
Added a simple led plugin to control Linux LEDs based on IKE activity
2010-09-08 12:00:57 +02:00
3f5de7b65f
Enable the random plugin for scripts
2010-09-06 18:11:05 +02:00
25de08474b
version bump to 4.5.0dr2
2010-09-02 22:19:37 +02:00
062a602216
Moved all kernel plugins to libhydra.
2010-09-02 19:01:26 +02:00
68eb610d81
fixed typos
2010-08-30 16:22:33 +02:00
d93e2e5409
created an eap-tnc method hull
2010-08-30 15:36:34 +02:00
f1a74a3cab
Implemented a TLS utility to test on any TLS secured TCP connection
2010-08-25 12:57:13 +02:00
1a64981048
Implemented a gcm plugin providing GCM mode based on CBC crypters
2010-08-19 19:05:15 +02:00
37e52c3fbf
Added a crypto transform stress test for profiling
2010-08-19 19:05:14 +02:00
80a93a1335
Implemented a ccm plugin providing CCM mode based on CBC crypters
2010-08-19 19:05:14 +02:00
272f0e1ae4
Added a counter mode wrapper plugin operating on existing CBC crypters
2010-08-13 19:39:59 +02:00
123a84d3db
Use an explicit plugin list instead of the unrealible "find" to build checksums
2010-08-12 16:07:24 +02:00
8f01815143
Build dedicated plugin lists for each strongSwan component
2010-08-12 14:46:57 +02:00
9e2c88b98d
Use a m4 helper macro to build plugin lists
2010-08-12 13:14:32 +02:00
26eb9b2d17
added eap_ttls plugin configuration
2010-08-07 11:26:04 +02:00
83e52fd12d
Register hmac/xcbc algorithms after potentially underlying PKCS#11
2010-08-04 09:26:22 +02:00
c281a427e0
Moved gmp plugin before users of it
2010-08-04 09:26:19 +02:00
6e862e2152
Added PKCS#11 token plugin stub
2010-08-04 09:26:18 +02:00
0f82a47063
Moved TLS stack to its own library
2010-08-03 15:39:26 +02:00
2107953804
Added EAP-TLS plugin stub
2010-08-03 15:39:24 +02:00
b599b80013
version bump to 4.4.2
2010-07-30 22:26:14 +02:00
3de510ca43
Warn about manual plugin load directives for pluto/charon with --disable-load-warning compile option
2010-07-15 06:29:26 +02:00
1c8c924610
Moved addrblock plugin to libcharon
2010-07-13 10:26:07 +02:00
c2e5cee413
Moved CRL/OCSP checking to a dedicated plugin called revocation
2010-07-13 10:26:07 +02:00
5f9e62c54f
Moved X509 addrBlock validation to a separate addrblock plugin
2010-07-13 10:26:07 +02:00
4f99093235
Show mallinfo() data in statusall, if available
2010-07-06 16:28:25 +02:00
946be4d357
Adding support for the native Linux capabilities interface.
...
Note that this interface is deprecated and mainly added to support
Android. Use libcap, if possible.
2010-06-15 19:58:30 +02:00
b77e493bea
Explicitly refer to LIBCAP in Makefiles.
2010-06-15 19:57:31 +02:00
d2c358742a
Added a EAP-SIM/AKA backend reading triplets/quintuplets from a SQL database
2010-06-02 15:59:44 +02:00
26ec52a405
implemented xauth as a pluto plugin
2010-05-18 13:51:27 +02:00
322226c0ce
Link to libgpg-error to resolve additional symbols when testing for libgcrypt
2010-05-17 11:08:13 +02:00
9a0333fa62
moved resolve plugin from libcharon to libhydra
2010-05-04 23:53:08 +02:00
a784c540e5
version bump to 4.4.1
2010-05-03 09:09:43 +02:00
d87489661c
Renamed ha-sync plugin to ha
2010-04-07 13:55:15 +02:00
e67f5136c0
HA sync plugin stub
2010-04-07 13:55:11 +02:00
a5ec302547
Moved attr plugin from libcharon to libhydra.
2010-04-06 12:47:40 +02:00
0d7b48a388
Added a farp plugin stop to spoof ARP requests
2010-03-25 14:39:32 +01:00
beaa048eed
Added DHCP plugin stub.
2010-03-25 14:28:28 +01:00
75dc019252
Moving attr-sql plugin from libstrongswan to libhydra.
2010-03-24 18:53:09 +01:00
0bf68cbf7c
Adding libhydra stub.
2010-03-24 18:53:09 +01:00
bd3f8ea30b
Convert charon into libcharon.
2010-03-19 13:34:52 +01:00
0fa7d1abb3
Do not disable the default-socket if it was enabled explicitly
2010-03-11 08:52:48 +01:00
40f130dab3
Implemented the PRF_KEYED_SHA1 algorithm in the openssl plugin
2010-03-08 13:16:12 +01:00
31bd75ec64
removed unwanted commits
2010-03-07 21:11:57 +01:00
ceeb9bac8b
critical keyUsage extension must be parsed
2010-03-07 20:51:34 +01:00
3372ad144b
Adding an option to build libstrongswan and charon monolithically.
2010-03-02 09:10:32 +01:00
9ed1bb4842
Added an initiator-only socket implementation which binds ports on demand
2010-02-26 11:44:34 +01:00
dab0560497
Moved socket and socket-raw implementations to plugins
2010-02-26 11:44:32 +01:00
c711687c00
Force libdl if the android plugin is enabled. AC_SEARCH_LIBS thinks it's not required, but on Android 2.0 it is.
2010-02-25 13:51:05 +01:00
3e35a6e7a1
Use side-channel secured mpz_powm_sec of libgmp 5, if available
2010-02-18 17:38:59 +01:00
55699f037f
Added Android plugin, currently provides DNS handling on Android
2010-02-17 18:24:11 +01:00
b65d7f8a15
version bump to 4.4.0
2010-02-15 20:58:41 +01:00
cb186f9922
Added some IPv6 tweaks for Android.
...
Android 1.6 does not yet support the Advanced Sockets API for IPv6 as defined in
RFC 3542. Also, in6addr_any is missing.
2009-12-23 17:03:42 +01:00
85202e8795
Added a workaround for the missing pthread_cancel on Android.
2009-12-23 17:03:42 +01:00
b2944d71ca
Use pthread_cond_timedwait_monotonic on Android.
2009-12-23 17:03:41 +01:00
070ac5b0b7
Check if libpthread is required or not.
2009-12-23 17:02:26 +01:00
866dc0134a
Check for pthread_condattr_init added to configure script.
2009-12-23 17:02:25 +01:00
f36143b0ba
Implemented a read-write lock using only mutex_t and condvar_t (in case the pthread_rwlock_* group of functions is not available).
2009-12-23 17:01:30 +01:00
89d236f0da
Support "_" and "-" variants of NetworkManager pkg-config packages
2009-12-08 14:36:22 +01:00
10bc5d96cb
Move comment out of register_printf_function test
2009-11-19 14:37:34 +01:00
f6bbcec390
Use register_printf_specifier instead of deprecated register_printf_function, if available
2009-11-12 13:16:46 +01:00
edcb2dd35b
Moved reauth/pseudonym functionality from eap-sim-file to separate plugins, usable by any SIM/AKA backend
2009-11-12 10:34:01 +01:00
f8330d0395
Added a libsimaka library with shared message handling code for EAP-SIM/AKA
2009-11-12 10:33:58 +01:00
5269150ebc
If cross-compiling, test for the existence of pthread_condattr_setclock only
2009-11-09 15:07:01 +01:00
a58b1722b0
version bump to 4.3.6
2009-11-02 22:47:55 +01:00
c4d53fe06b
Streamlined EAP plugins to use a dash between eap-method, as used in all other places
2009-10-15 10:36:17 +02:00
b76b867c70
Renamed --enable-load-tests to --enable-load-tester, like the plugin itself
2009-10-15 10:36:17 +02:00
601bc1df20
pluto can now make use of the mysql and sqlite plugins
2009-10-14 12:43:54 +02:00
247794827e
move SQL-based pool functionality to new attr-sql libstrongswan plugin
2009-10-13 17:02:29 +02:00
4720815774
Added a stub for the EAP-AKA backend implementing the 3GPP2 functions in software
2009-10-09 13:02:19 +02:00
f3e9eae283
the ikev1 scenarios need the x509 plugin
2009-10-06 14:38:34 +02:00
840743479a
Use mysql_config to query MySQL LIBS and CFLAGS
2009-09-23 12:45:03 +02:00
a7f79ee9c1
Define ME for all charon plugins
2009-09-23 11:13:27 +02:00
e20b792108
Correctly handle --enable-mediation option
2009-09-23 10:50:00 +02:00
4819ec6a71
resolv_conf plugin renamed to resolve
2009-09-20 19:06:58 +02:00
ddbb34093f
fixed --enable-eap-md5 and --enable-eap-gtc options
2009-09-18 18:23:26 +02:00
85af7a89c6
nm uses the distributions trusted root CAs if none is explicitly specified
2009-09-18 14:34:27 +02:00
faa4bd49fb
use sysconfdir, no need for an additional confdir variable
2009-09-07 15:10:30 +02:00
b7b5653386
Use macros to define --with options
2009-09-07 15:00:45 +02:00
b803bc82f4
Use macros to define --enable/--disable options
2009-09-07 15:00:45 +02:00
e455ae1343
use m4/ autoconf subdirectory
2009-09-07 15:00:32 +02:00
8b3b4a244e
Removed trailing whitespaces in configure.in/Makefile.am
2009-09-07 11:48:03 +02:00
3d5818ec38
use monotonic time source in convar->timed_wait, and in the scheduler using it
2009-08-31 15:13:48 +02:00
3f310c0d1f
implemented a monotonic timestamping function, unaffected from system time changes
2009-08-31 15:03:35 +02:00
1d39663f7a
do not depend on gcrypt autoconf macros
2009-08-31 13:14:54 +02:00
ca275b383f
fixed two typos
2009-08-26 17:29:57 +02:00
d16fd64d39
openac (and tools) do not depend on gmp anymore
2009-08-26 14:08:20 +02:00
7c577c8ea2
started implementation of a PKI tool, currently supporting RSA|ECDSA key generation
2009-08-26 11:23:55 +02:00
5ef478aaee
implemented RFC3110 key builder in a plugin, added generic DNSKEY RR parsing
2009-08-26 11:23:51 +02:00
9493dd2ce0
implemented a pgp plugin providing PGP key parsing builders
2009-08-26 11:23:50 +02:00
1e0f69373a
implemented a pkcs1 plugin providing PKCS#1 key parsing builders
2009-08-26 11:23:50 +02:00
160f4c225d
moved PEM parsing functionality to its own plugin
2009-08-26 11:23:48 +02:00
8bc2a8086c
version bump to 4.3.5
2009-08-18 18:35:37 +02:00
f1777dff59
Replacing gethostbyname, gethostbyname2 and their _r variants with getaddrinfo to increase portability.
2009-08-14 16:14:32 +02:00
26965b4ef3
OpenSolaris needs libsocket and libnsl for socket().
2009-08-14 14:50:53 +02:00
e580e0a9a2
sockio.h is required on OpenSolaris for SIOCGIFADDR.
2009-08-14 14:50:50 +02:00
8b6a5ce5ba
We need to include alloca.h on OpenSolaris.
2009-08-14 13:25:22 +02:00
3974b2fb07
FreeBSD's libc does not support backtrace(), but libexecinfo optionally replicates this function (and the other defined in execinfo.h).
2009-08-07 18:46:25 +02:00
1e7b4b0028
Reversed the check for udp.h, fixes compilation on Linux.
2009-08-06 10:01:59 +02:00
e8c3cdb25b
Missing check for udp.h added.
2009-08-04 11:08:57 +02:00
8ce8e19068
version bump to 4.3.4
2009-07-21 22:21:52 +02:00
6ff7ab850b
Fixed GID lookup in cases where the configured group is a prefix of another group.
2009-07-20 21:20:03 +02:00
7d2b06da6a
Translate the configured user and group to a numerical UID and GID.
2009-07-20 21:01:13 +02:00
69fc782000
Check for gperf version added to configure script.
2009-07-16 15:15:40 +02:00
c7e0f07ced
Typo fixed.
2009-07-16 15:15:35 +02:00
cf00cffef2
Added an option to the configure script to disable building the scripts.
2009-07-16 15:15:26 +02:00
f5410905ac
moved the CFLAGS mangling AC_LIB_PREFIX macro behind CFLAG test
2009-07-15 16:04:37 +02:00
0b5f2a81da
Added --with-lib-prefix option to the configure script.
...
This option enables users to add additional search paths for include
files and libraries.
2009-07-14 12:09:22 +02:00
67a7bb02ef
moved checksum_builder/libchechsum to top srcdir to respect build order
2009-06-22 15:47:18 +02:00
e4e6a77a80
check for dladdr() and dl_iterate_phdr() if --enable-integrity-test set
2009-06-22 15:47:17 +02:00
e3b7be91e1
removed obsolete INTEGRITY_TEST and fips signer code
...
--enable-integrity-test now conditionally builds libchecksum
2009-06-22 15:47:17 +02:00
12c68f1b3a
implemented a checksum_builder tool to build the checksum library
2009-06-22 15:47:17 +02:00
c4963c92ac
version bump to 4.3.3
2009-06-19 17:00:34 +02:00
0e9ded6838
removed serpent and twofish plugins - use gcrypt instead
2009-06-18 07:27:40 +02:00
a998276a2b
calculating plugin dependencies for eap-sim/aka
2009-06-16 14:53:16 +02:00
9c9a110130
pluto does not depend on gmp anymore
2009-06-16 14:47:07 +02:00
62d6da67dd
support older gcrypt libraries not defining the CAMELLIA cipher
2009-06-16 14:23:32 +02:00
0c013ff345
load hmac/xcbc plugins after hash/crypter plugins to pass crypto tests
2009-06-16 13:05:43 +02:00
272c81134c
Typo in configure script fixed.
2009-06-12 10:42:07 +02:00
c66cd00df4
removed pluto test vectors, --disable-self-test option
2009-06-11 20:27:32 +02:00
81811a9d8b
added a plugin providing crypto test vectors
2009-06-11 15:55:59 +02:00
ccd1464586
use autoconf macro provided by libgcrypt
2009-06-09 11:18:57 +02:00
4977018c23
added skeleton for libgcrypt based crypto plugin
2009-06-09 11:18:56 +02:00
c146b2c8df
pluto now requires pubkey plugin
2009-06-09 11:03:33 +02:00
96d42f445e
pluto now needs the gmp plugin
2009-05-24 19:33:16 +02:00
a213175d96
version bump to 4.3.2
2009-05-22 17:05:58 +02:00
a6ae2a1490
Fixing IPSEC_* checks on older Linux distros.
2009-05-21 10:03:27 +02:00
617e59b7bc
Portably check for IPSEC_* constants (defined in ipsec.h).
...
The problem is that FreeBSD defines them as #defines whereas Linux defines them as enums.
2009-05-20 20:15:06 +02:00
2d9ce480fa
Enable building the DUMM Ruby extension in a VPATH build.
2009-05-20 19:38:01 +02:00
d2e9cbc9a2
The configure script now tries to figure out where ruby.h is located.
...
This is required because the location depends on the architecture.
2009-05-20 19:38:01 +02:00
13e51a62a8
fixed copy-and-paste error
2009-05-15 10:17:17 +02:00
244dbb06db
if enabled, load openssl plugin by default in pluto
2009-05-15 10:01:30 +02:00
1bfb8007c2
got rid of libcrypto
2009-05-15 01:28:48 +02:00
9f090745cf
added another possible location for the ipsec.h header file
2009-05-14 17:38:32 +02:00
30a896173b
compute ASN.1 to UTC time without time functions
2009-05-14 13:55:55 +02:00
d36ae9e305
started migration to encryption plugins
2009-05-09 00:04:28 +02:00
bf45d6dd3b
added a configure option to enable the Vstr string library even if register_printf_function is available
2009-04-24 05:32:17 +02:00
65ea37abcd
fixed timezone compensation when parsing ASN.1 dates
2009-05-08 15:23:50 +02:00
a9f56adb59
more portable handling of the bool data type (Mac OS X has stdbool.h)
2009-05-06 09:11:13 -04:00
f52e9c1aa8
gethostbyname_r is not supported on Mac OS X (but gethostbyname uses thread-local buffers)
2009-05-06 09:11:03 -04:00
Andreas Steffen