Commit Graph

349 Commits

Author SHA1 Message Date
Tobias Brunner a9f56adb59 more portable handling of the bool data type (Mac OS X has stdbool.h) 2009-05-06 09:11:13 -04:00
Tobias Brunner f52e9c1aa8 gethostbyname_r is not supported on Mac OS X (but gethostbyname uses thread-local buffers) 2009-05-06 09:11:03 -04:00
Andreas Steffen 6eb9bc9bb8 SKEYID derivation based on libstrongswan 2009-05-05 14:28:31 +02:00
Martin Willi 4f734a55b7 fixed dladdr ./configure check, leak detective whitelist 2009-05-04 13:59:44 +02:00
Andreas Steffen bc2e33ca96 pluto and scepclient use the random plugin from libstrongswan 2009-04-30 18:31:48 +00:00
Tobias Brunner ea7e89c72c somehow missed these changes during the portability branch back-merge 2009-04-30 17:13:45 +00:00
Andreas Steffen de92b9e70c default plugins for pluto 2009-04-29 08:56:19 +00:00
Martin Willi be0a03be64 set default CFLAGS globally, including -Wno-format 2009-04-27 11:34:07 +00:00
Martin Willi adc25ec252 added missing configure.in changes for attr/resolv_conf plugins 2009-04-24 14:14:43 +00:00
Andreas Steffen f032a6909a version bump to 4.3.1 2009-04-24 04:38:57 +00:00
Andreas Steffen 4985ad6e4a pluto and scepclient use the regular libstrongswan library 2009-04-21 12:26:04 +00:00
Andreas Steffen d4f8c569ab version bump to 4.3.0 2009-03-31 03:53:18 +00:00
Andreas Steffen 8f83b1472b set version back to 4.2.14 2009-03-27 10:17:23 +00:00
Andreas Steffen 22180558a5 some changes 2009-03-27 10:16:38 +00:00
Martin Willi 4a6b84a934 reintegrated eap-radius branch into trunk 2009-03-24 10:24:58 +00:00
Andreas Steffen 623bca407b version bump to 4.2.14 2009-03-22 14:37:03 +00:00
Tobias Brunner d25ce3701e printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms). 2009-03-12 18:07:32 +00:00
Andreas Steffen ce62951115 version bump to 4.2.13 2009-02-21 17:53:10 +00:00
Andreas Steffen 1e0d1ae213 support of MD4 hash 2009-02-19 10:06:58 +00:00
Tobias Brunner f98cdf7a47 adding plugin for EAP-MS-CHAPv2 2009-02-18 19:57:15 +00:00
Martin Willi 2d887e8e08 removed unused extract_last_token() and the required memrchr implementation 2009-02-18 09:45:54 +00:00
Andreas Steffen 9599ee1597 version bump to 4.2.12 2009-01-21 03:14:52 +00:00
Tobias Brunner bb835afa90 fixing cross-compilation 2009-01-13 10:38:16 +00:00
Andreas Steffen 48032aed00 add a compatible memrchr() function if the platform does not support it (e.g. old glibc). Patch courtesy to Thomas Jarosch 2009-01-09 01:19:45 +00:00
Andreas Steffen 0519ca9099 version bump to 2.4.11 2009-01-08 22:23:42 +00:00
Martin Willi efd0fe21e4 ref_get()/ref_put() use atomic gcc operations if supported, thanks to Thomas Jarosch for the patch 2008-12-02 12:14:32 +00:00
Martin Willi 6905f794bb added a --disable-threads ./configure option for pluto 2008-12-02 09:01:57 +00:00
Martin Willi fc3ef71fa7 fixed lock-profiler help message 2008-11-19 15:37:46 +00:00
Andreas Steffen 50ae86017c version bump to 4.2.10 2008-11-18 00:02:59 +00:00
Andreas Steffen 9a095db5e8 set release number back to 4.2.9 2008-11-16 22:25:16 +00:00
Andreas Steffen 4dc0dce886 added migration to NEWS 2008-11-16 21:23:56 +00:00
Tobias Brunner ea625fabf9 merging kernel_klips plugin back into trunk 2008-11-11 09:22:00 +00:00
Martin Willi 0214012508 threshhold and ./configure option for lock profiler 2008-11-05 14:36:57 +00:00
Martin Willi 0fd6e95562 a load testing plugin, to:
find multi-threading issues
	do performance profiling
2008-10-21 13:00:38 +00:00
Martin Willi ad3af574a4 moved updown script invocation to an optional plugin 2008-10-16 11:48:18 +00:00
Tobias Brunner 1adaa02bb2 merging kernel_pfkey plugin back from kernel-interface branch 2008-10-14 08:46:31 +00:00
Andreas Steffen 9257c3a287 version bump to 4.2.9 2008-10-14 01:53:37 +00:00
Martin Willi 79a878466c reintegrated two-sim branch providing SIM card plugin API 2008-10-10 08:36:01 +00:00
Martin Willi c5ebb635a1 trimming additial / in some cases 2008-10-10 07:33:37 +00:00
Andreas Steffen 09d7ef2614 added --disable-kernel-netlink configure option 2008-10-03 03:27:42 +00:00
Tobias Brunner 507f26f685 merging modularized kernel interface back to trunk 2008-09-25 07:56:58 +00:00
Andreas Steffen 414caff027 version bump to 4.2.8 2008-09-18 00:42:22 +00:00
Martin Willi 21c9546321 libstrongswan agent plugin to use ssh-agent for RSA signatures 2008-09-02 11:04:26 +00:00
Martin Willi eb3e27059b use libcap for capability dropping
optional, must be enabled --with-capabilities=libcap
	will be extended to support --with-capabilities=libcap2
2008-08-29 09:24:14 +00:00
Martin Willi e577ad3985 creating default IKE proposals dynamically using algorithm enumeration API 2008-08-28 11:07:57 +00:00
Andreas Steffen a9bb69c8a8 version bump to 4.2.7 2008-08-27 12:01:57 +00:00
Martin Willi 1caa265c61 a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM 2008-08-21 12:10:07 +00:00
Andreas Steffen 59bb33e1e0 set version back to 4.2.6 2008-08-19 18:53:15 +00:00
Andreas Steffen af165431d2 fixed libstrongswan integrity test 2008-08-19 18:51:30 +00:00
Martin Willi 6dbce9c803 reimplemented dbus plugin for NetworkManager 0.7, renamed to nm 2008-07-31 11:16:14 +00:00
Andreas Steffen 5c96dab653 version bump to 4.2.6 2008-07-28 09:14:07 +00:00
Andreas Steffen 60721cee73 reset version to 4.2.5 2008-07-03 16:43:18 +00:00
Andreas Steffen 174216c79d update NEWS with ip pool add-ons and fixes 2008-07-03 16:42:45 +00:00
Martin Willi 7da767f773 sqlite plugin requires libsqlite3 => 3.3.1 to share connections
use recursive locking if libsqlite3 < 3.5.0
2008-06-30 11:06:18 +00:00
Andreas Steffen 39b7780df9 created scripts/Makefile.am 2008-06-29 13:57:00 +00:00
Andreas Steffen 615611afc1 version bump to 4.2.5 2008-06-26 09:59:55 +00:00
Andreas Steffen 7f6d8d5172 set version to 4.2.4 2008-06-22 18:08:37 +00:00
Martin Willi 29727a4447 compatibility fix for other shells than bash >= 3.1 2008-06-20 07:56:01 +00:00
Martin Willi 61c4638646 first simple prototype of a UCI configuration plugin for OpenWRT 2008-06-17 14:17:51 +00:00
Martin Willi 9529fb6836 added mediation server web frontend
updated charons medsrv plugin to updated database scheme
2008-06-11 14:13:24 +00:00
Martin Willi 1e9c46f13d configure option for updown firewall scripts 2008-06-06 08:24:39 +00:00
Martin Willi e581a31d6a link against openssl crypto library only 2008-06-06 08:04:42 +00:00
Andreas Steffen 8f7074cf2e version bump to 4.2.4 2008-05-25 10:35:39 +00:00
Andreas Steffen 8cc16c9d9e fixed the strongswan.conf path 2008-05-22 21:59:54 +00:00
Andreas Steffen 4d9c95ffcd version bump to 4.2.3 2008-05-21 18:40:11 +00:00
Martin Willi 1ba62b5562 loading default modules depending on configure options 2008-05-16 08:52:32 +00:00
Martin Willi 782db7edd1 prototype of mediation client database plugin 2008-05-14 07:26:19 +00:00
Martin Willi affd7a90ba moved RAW public key support to a separate plugin (pubkey) 2008-05-08 13:16:42 +00:00
Martin Willi 5b7ec6d4e0 renamed med_db plugin to medsrv, as we will introduce an additional medcli client plugin 2008-05-08 12:11:30 +00:00
Martin Willi 25b12c696b replaced --with-gid/uid by --with-group/user
using named users, groups
fixed capability dropping in pluto
2008-05-08 10:58:04 +00:00
Martin Willi f8277a8370 added configure check and support for sqlite3 libraries without sqlite3_prepare_v2 2008-05-07 14:41:13 +00:00
Martin Willi 27d04e055d implemented XCBC algorithms (signer, prf) for IKE on top of a crypter
supporting ike=...-aesxcbc-... in ipsec.conf 
added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal
AES XCBC testcase
2008-04-30 14:26:24 +00:00
Martin Willi a47486b5e4 prototype of dumm GUI 2008-04-28 16:43:30 +00:00
Tobias Brunner 17353034f3 added a wrapper plugin for OpenSSL crypters (AES, 3DES, Blowfish etc.) 2008-04-28 14:25:19 +00:00
Martin Willi 36d62fac65 experimental Padlock plugin supportin SHA1 and AES-128 for VIA C7 Esther 2008-04-22 08:44:56 +00:00
Andreas Steffen 7c0c0aac01 version bump to 4.2.2 2008-04-19 10:07:32 +00:00
Martin Willi 6a365f0740 added API for random number generators, served through credential factory
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
2008-04-15 05:56:35 +00:00
Martin Willi ff867d062e added ./configure option --with-strongswan-conf=
defaults to /etc/strongswan.conf
2008-04-07 06:56:33 +00:00
Andreas Steffen bc722433be version bump to 4.2.1 2008-04-06 12:12:13 +00:00
Martin Willi 9e72d3bcaf defining ME globally, as we need it in plugins 2008-03-31 15:01:43 +00:00
Andreas Steffen 681d56b1bb disabled build of outdated dbus interface 2008-03-31 12:59:39 +00:00
Martin Willi 6b9290ff12 renamed xml plugin to smp to avoid confusion
added some dependency checks to configure
configure checks ClearSilver and fastcgi
cleanups in the build system here and there
2008-03-28 12:44:01 +00:00
Tobias Brunner e74bc8e51d changed external interface to the mediation extension. 2008-03-27 12:31:35 +00:00
Tobias Brunner dc04b7c743 mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed 2008-03-26 18:40:19 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00
Andreas Steffen a11ea97db8 version bump to 4.2.0 2008-02-15 18:44:29 +00:00
Andreas Steffen 6859f760d9 release of 4.1.11 bug fix version 2008-02-14 21:26:21 +00:00
Andreas Steffen dfc14c8480 added --with-plugindir option 2008-01-20 17:57:38 +00:00
Andreas Steffen fb6d76cd5c version bump to 4.2.0 2007-12-24 18:07:55 +00:00
Martin Willi 26e2467692 ported EAP-AKA branch into trunk 2007-12-13 10:54:29 +00:00
Martin Willi 4b403e7672 merged EAP-MD5 into trunk 2007-12-12 14:29:10 +00:00
Andreas Steffen 81edb520b2 version bump to 4.1.10 2007-12-04 23:54:32 +00:00
Andreas Steffen d7bf4e4279 added brackets in PKG_CHECK_MODULES 2007-12-03 23:12:39 +00:00
Martin Willi cbfb2aff50 added more ./configure build options for
EAP-Identity module
  ipsec tools (openac, scepclient)
  optional charon/pluto build
  charon stroke interface
2007-12-03 14:47:15 +00:00
Martin Willi 733f336ad3 socket_t implementation withouth raw sockets
--disable-raw-socket configure option
  prevents charon/pluto to run in parallel
2007-11-26 11:20:00 +00:00
Andreas Steffen 8ad95a2000 version bumpt to 4.1.9 2007-11-06 13:47:27 +00:00
Andreas Steffen c840a9b484 version bump to 4.1.8 2007-10-04 06:41:45 +00:00
Tobias Brunner d5cc175833 experimental P2P-NAT-T for IKEv2 merged back from branch 2007-10-03 15:10:41 +00:00
Martin Willi 8f561d4409 prototype implemementation of an sqlite configuration backend 2007-09-18 07:12:21 +00:00
Martin Willi b8c7453a82 manager can query and list IKE_SA status (no layout yet) 2007-09-13 07:45:04 +00:00
Andreas Steffen 054767bfff version bump to 4.1.7 2007-09-03 19:04:38 +00:00
Andreas Steffen 0e3073608d re-introduced the XAUTH_VID compile option 2007-09-02 11:13:24 +00:00
Andreas Steffen ef5f65626f change self_test to self-test 2007-08-29 07:03:47 +00:00
Andreas Steffen bf422b1664 fixed typo 2007-08-28 09:59:53 +00:00
Andreas Steffen 9ee1111d8b added --enable-integrity-test and --disable-self-test options 2007-08-28 06:36:31 +00:00
Martin Willi 0739cca9d1 default routing table/prio: 220/220 (as 19530 was invalid)
added configure option --with-routing-table-prio=
2007-08-27 14:53:42 +00:00
Martin Willi ad9613226b using default routing table 19530 for ipsec routes 2007-08-27 11:30:21 +00:00
Martin Willi 4e411c8361 added --with-routing-table= configure option 2007-08-27 11:15:35 +00:00
Andreas Steffen dc481855bb set default to uml=false 2007-08-10 10:47:48 +00:00
Martin Willi fd4ded974d build UML stuff only on --enable-uml 2007-08-08 14:24:25 +00:00
Martin Willi f2d6355eaa added UML modeler to autotools 2007-08-08 14:03:55 +00:00
Andreas Steffen 3dcf9dbd70 version bump to 4.1.6 2007-08-08 08:17:48 +00:00
Andreas Steffen c520944800 version bump to 4.1.5 2007-07-08 19:08:31 +00:00
Andreas Steffen b5463662d2 version bump to 4.1.4 2007-05-26 19:05:34 +00:00
Andreas Steffen 4262749f11 version bump to 4.1.3 2007-05-10 12:40:09 +00:00
Martin Willi 6874bf698c changing UID/GID after startup of pluto/charon
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi a84fb01b96 restructuring of configuration backends
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
  configuration backends
  control interfaces
using pluggable modules as in EAP
2007-04-27 14:25:08 +00:00
Martin Willi 04a7b6d868 added most problematic linux headers to distribution
other/real linux header may be selected using --with-linux-headers=dir
2007-04-19 08:59:36 +00:00
Andreas Steffen 83e60eb29a version bump to 4.1.2 2007-04-10 11:53:35 +00:00
Andreas Steffen 2c0e0f4f62 changed LDAP_VER compile option to LIBLDAP 2007-04-06 09:49:05 +00:00
Andreas Steffen 7b0c588a88 added --enable-nat-transport and --disable-vendor-id configuration options 2007-04-03 07:58:21 +00:00
Andreas Steffen 35101bf86a version bump to 4.1.1 2007-03-23 17:22:12 +00:00
Martin Willi d560c849e3 added --with-sim-reader option to configure script
some cleanups in eap_sim
2007-03-14 15:39:45 +00:00
Andreas Steffen 5e079e25e7 version bump to 4.1.0 2007-03-14 15:11:00 +00:00
Martin Willi b0f24449dd added EAP-SIM authentication
client side only
  uses an external SIM reader library specified with SIM_READER_LIB
  untested
2007-03-13 15:01:02 +00:00
Martin Willi c60c7694d2 merged tasking branch into trunk 2007-02-28 14:04:36 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Andreas Steffen 9247a99973 version bump to 4.0.8 2007-02-02 11:02:29 +00:00
Martin Willi 61dd20f9e3 added address listing without getifaddrs for uclibc (only IPv4 yet) 2007-02-02 09:58:59 +00:00
Andreas Steffen 1748c57799 version bump 2007-01-11 20:02:07 +00:00
Andreas Steffen 195307b574 define path to xauth module 2007-01-05 11:02:38 +00:00
Andreas Steffen 2df45a738e added enable-cisco-quirks configure option 2007-01-04 14:26:27 +00:00
Martin Willi 4986554f1a fixed more uClibc issues
should compile against a uClibc > 0.9.28 (untested)
2006-12-15 14:22:56 +00:00
Martin Willi e696757c47 made backtrace() calls optional to support uClibc 2006-12-06 13:59:13 +00:00
Andreas Steffen a0bf4274c9 version bump to 4.0.6 2006-11-29 21:31:45 +00:00
Andreas Steffen c09d8959b7 found libraries are not appended to LIBS anymore 2006-10-06 07:22:38 +00:00
Andreas Steffen f8ef0d1a0c version bump to 4.0.5 2006-10-03 06:52:31 +00:00
Andreas Steffen 6725ef5f23 version bump to 4.0.4 2006-09-14 06:47:21 +00:00
Andreas Steffen c3f97102f1 version bump to 4.0.3 2006-08-02 12:33:26 +00:00
Martin Willi 92ee45a0ee cleanups in kernel interface code
added proper traffic selector to string conversion
some cleanups here & there
2006-07-18 12:53:54 +00:00
Andreas Steffen c01d911201 version bump to 4.0.2 2006-06-27 08:47:03 +00:00
Martin Willi 0773bdcf3f - included charons module tests to build & dist 2006-05-30 13:00:18 +00:00
Martin Willi 5e5f0bd4b2 - added testing files to dist
- required the use of the "ustar" format to support 
    filenames longer than 99 chars
2006-05-30 08:51:48 +00:00
Martin Willi 298b06c28c - build gets perl and gperf from configure now
- moved built sources to maintainer-clean
2006-05-24 06:36:46 +00:00
Martin Willi 4acc8989ce - fixed build when using --enable-leak-detective 2006-05-23 08:00:29 +00:00
Martin Willi b5e1560659 - applied andreas's patch
- logger output improvements
  - testin gupdates
  - and a lot more
2006-05-18 06:02:28 +00:00
Martin Willi db26d00e73 - added random source ./configure options
- fixed default-pkcs11 option
2006-05-17 14:21:38 +00:00
Martin Willi f0cdc48e4e - fixed errors when --enable-pkcs11
- added autogen script
2006-05-17 07:16:23 +00:00
Martin Willi f2c2d395ff - introduced autotools
- first working version
  - make dist should work
  - things to do:
    - UML testing!
    - more cleanups
2006-05-16 14:24:03 +00:00