6f2378c1ce
added NEWS for the 4.5.2dr1 release
2011-03-11 09:11:37 +01:00
f813069e89
fixed asn1_oid_to_string() conversion
2011-03-09 15:36:05 +01:00
21f411b861
Use a boolean expression for refcount check, fixes refcounting if bool is a signed char
2011-03-09 07:52:13 +01:00
5f47296f22
Migrated sim_manager to INIT/METHOD macros
2011-03-08 16:42:27 +01:00
7b3bfe4b6c
Protect sim card/provider/hook (un-)registration with a rwlock
2011-03-08 16:42:27 +01:00
f58db72482
Splitted sim_manager.h header to sim_{card,provider,hooks}.h
2011-03-08 16:42:27 +01:00
c54e1bb83b
defined some TCG attribute OIDs
2011-03-08 07:27:00 +01:00
04be19127d
support of RSAES-OAEP public keys
2011-03-08 07:03:22 +01:00
bf10d793f6
added id-RSAES-OAEP and id-pSpecified OIDs
2011-03-07 22:46:28 +01:00
25ed5672a6
initiate or route all child configs if they have different names from their parent peer config
2011-03-04 07:02:31 +01:00
50110dfef8
Align netlink attributes properly if rta_len not a multiple of RTA_ALIGNTO
2011-03-02 16:07:38 +01:00
ea1c20d14b
initiate or route child configs which don't have a peer config of the same name
2011-03-01 22:24:19 +01:00
a2ebc1bd69
put DN in double quotes
2011-03-01 22:19:59 +01:00
a79eba2e9c
corrected pkcs11 error message
2011-03-01 22:19:58 +01:00
007c47088c
Implemented permanent certificate coupling plugin
2011-02-28 16:39:40 +01:00
0d6d992589
Update duplicheck entry during IKE rekeying
2011-02-28 15:37:18 +00:00
b85be69079
Remove entry from active duplicate list only if it was not in checking
2011-02-28 15:37:18 +00:00
ee0f53e189
Added an example application listening to duplicheck notifications
2011-02-28 15:37:18 +00:00
3883150779
Notify duplicate detections over a UNIX sockets to listening applications
2011-02-28 15:37:18 +00:00
3e74ebbecc
Added an advanced duplicate checking plugin with liveness check of old SA
2011-02-28 15:37:18 +00:00
8ce567e69e
Invert check to delete unestablished IKE_SAs to not delete them once established
2011-02-28 15:37:17 +00:00
320e98c2ac
Added whitelist plugin NEWS
2011-02-28 15:00:46 +01:00
c893bf7e5c
Added a whitelist command line utility to control whitelist plugin
2011-02-28 15:00:46 +01:00
53f2a7c712
Added a UNIX socket based control backend to whitelist plugin
2011-02-28 15:00:46 +01:00
5e603aba4e
Implemented a in-memory peer identity whitelist plugin
2011-02-28 15:00:46 +01:00
dcab9d39a2
Fixed a possible segfault after termination of IKE and child SAs.
...
Because the thread that is actually terminating the SA and thus checking
it in again is not be the same thread that previously checked it out and
queued the termination job, the thread local SA on the bus has to be reset
manually, similar to how it is set in the job which is executing the job.
2011-02-28 13:29:09 +01:00
e44ebdcfc8
Slightly change IKE_SA destruction order to inherit properly during ike_rekey task destruction
2011-02-28 10:31:36 +00:00
d17304cd29
Added a pseudo EAP type to allow an implementation to select the real type dynamically
2011-02-22 16:09:45 +01:00
1a9f2443a2
prevent multiple debug outputs in case of non-monolithic plugins
2011-02-20 15:18:36 +01:00
07bda3feea
Whitelisted another tzset variant and dlsym
2011-02-18 16:08:01 +01:00
e131f11779
Migrated kernel_pfroute_net to INIT/METHOD macros
2011-02-17 09:39:25 +00:00
887abfb1e7
Migrated kernel_netlink_net to INIT/METHOD macros
2011-02-17 09:34:53 +00:00
be8d5c08fb
maemo: New upstream release.
2011-02-15 10:43:19 +01:00
e7d60a9a06
version bump to 4.5.2dr1
2011-02-11 07:46:23 +01:00
068b9c0b76
maemo: Disabled some unneeded plugins.
2011-02-10 16:51:35 +01:00
6302f49754
Merged the monolithic and non-monolithic plugin loaders into one.
...
This allows to add additional plugins even when the original build was
monolithic. Also fixes the pluto/xauth bug with the monolithic build.
2011-02-10 16:49:42 +01:00
c38877b395
pluto: Properly free secrets in error cases.
2011-02-10 16:49:42 +01:00
e185d78fc9
Kernel interface updated for KLIPS plugin (TFC padding).
2011-02-10 16:49:42 +01:00
35fe7f8cbd
Compiler warning fixed.
2011-02-10 16:49:42 +01:00
d390b3b901
[hopefully] fixed pathlen problem on ARM platforms
2011-02-10 15:51:18 +01:00
afddd6a7e8
maemo: Typos in description fixed.
2011-02-10 10:17:46 +01:00
bcf34c20d5
maemo: Homepage added to debian/control files.
2011-02-10 10:17:46 +01:00
76c8b190f8
removed ipsec up %startall from scenario descriptions
2011-02-10 10:03:59 +01:00
3cd805a115
Migrated update_sa_job_t to INIT/METHOD macros
2011-02-10 08:31:46 +01:00
51d6a0d44a
Migrated send_keepalive_job_t to INIT/METHOD macros
2011-02-10 08:28:19 +01:00
bcf071d9d5
Migrated send_dpd_job_t to INIT/METHOD macros
2011-02-10 08:25:41 +01:00
e76d12bb9e
Migrated roam_job_t to INIT/METHOD macros
2011-02-10 08:22:57 +01:00
ac226a1a60
Migrated retransmit_job_t to INIT/METHOD macros
2011-02-10 08:19:47 +01:00
84e8fa47dc
Migrated rekey_ike_sa_job_t to INIT/METHOD macros
2011-02-10 08:16:23 +01:00
44836c50ff
Migrated rekey_child_sa_job_t to INIT/METHOD macros
2011-02-10 08:13:01 +01:00
Andreas Steffen