Martin Willi
e4e6a77a80
check for dladdr() and dl_iterate_phdr() if --enable-integrity-test set
2009-06-22 15:47:17 +02:00
Martin Willi
e3b7be91e1
removed obsolete INTEGRITY_TEST and fips signer code
...
--enable-integrity-test now conditionally builds libchecksum
2009-06-22 15:47:17 +02:00
Martin Willi
12c68f1b3a
implemented a checksum_builder tool to build the checksum library
2009-06-22 15:47:17 +02:00
Andreas Steffen
c4963c92ac
version bump to 4.3.3
2009-06-19 17:00:34 +02:00
Andreas Steffen
0e9ded6838
removed serpent and twofish plugins - use gcrypt instead
2009-06-18 07:27:40 +02:00
Martin Willi
a998276a2b
calculating plugin dependencies for eap-sim/aka
2009-06-16 14:53:16 +02:00
Martin Willi
9c9a110130
pluto does not depend on gmp anymore
2009-06-16 14:47:07 +02:00
Martin Willi
62d6da67dd
support older gcrypt libraries not defining the CAMELLIA cipher
2009-06-16 14:23:32 +02:00
Martin Willi
0c013ff345
load hmac/xcbc plugins after hash/crypter plugins to pass crypto tests
2009-06-16 13:05:43 +02:00
Tobias Brunner
272c81134c
Typo in configure script fixed.
2009-06-12 10:42:07 +02:00
Martin Willi
c66cd00df4
removed pluto test vectors, --disable-self-test option
2009-06-11 20:27:32 +02:00
Martin Willi
81811a9d8b
added a plugin providing crypto test vectors
2009-06-11 15:55:59 +02:00
Martin Willi
ccd1464586
use autoconf macro provided by libgcrypt
2009-06-09 11:18:57 +02:00
Martin Willi
4977018c23
added skeleton for libgcrypt based crypto plugin
2009-06-09 11:18:56 +02:00
Andreas Steffen
c146b2c8df
pluto now requires pubkey plugin
2009-06-09 11:03:33 +02:00
Andreas Steffen
96d42f445e
pluto now needs the gmp plugin
2009-05-24 19:33:16 +02:00
Andreas Steffen
a213175d96
version bump to 4.3.2
2009-05-22 17:05:58 +02:00
Tobias Brunner
a6ae2a1490
Fixing IPSEC_* checks on older Linux distros.
2009-05-21 10:03:27 +02:00
Tobias Brunner
617e59b7bc
Portably check for IPSEC_* constants (defined in ipsec.h).
...
The problem is that FreeBSD defines them as #defines whereas Linux defines them as enums.
2009-05-20 20:15:06 +02:00
Tobias Brunner
2d9ce480fa
Enable building the DUMM Ruby extension in a VPATH build.
2009-05-20 19:38:01 +02:00
Tobias Brunner
d2e9cbc9a2
The configure script now tries to figure out where ruby.h is located.
...
This is required because the location depends on the architecture.
2009-05-20 19:38:01 +02:00
Andreas Steffen
13e51a62a8
fixed copy-and-paste error
2009-05-15 10:17:17 +02:00
Andreas Steffen
244dbb06db
if enabled, load openssl plugin by default in pluto
2009-05-15 10:01:30 +02:00
Andreas Steffen
1bfb8007c2
got rid of libcrypto
2009-05-15 01:28:48 +02:00
Tobias Brunner
9f090745cf
added another possible location for the ipsec.h header file
2009-05-14 17:38:32 +02:00
Andreas Steffen
30a896173b
compute ASN.1 to UTC time without time functions
2009-05-14 13:55:55 +02:00
Andreas Steffen
d36ae9e305
started migration to encryption plugins
2009-05-09 00:04:28 +02:00
Tobias Brunner
bf45d6dd3b
added a configure option to enable the Vstr string library even if register_printf_function is available
2009-04-24 05:32:17 +02:00
Tobias Brunner
65ea37abcd
fixed timezone compensation when parsing ASN.1 dates
2009-05-08 15:23:50 +02:00
Tobias Brunner
a9f56adb59
more portable handling of the bool data type (Mac OS X has stdbool.h)
2009-05-06 09:11:13 -04:00
Tobias Brunner
f52e9c1aa8
gethostbyname_r is not supported on Mac OS X (but gethostbyname uses thread-local buffers)
2009-05-06 09:11:03 -04:00
Andreas Steffen
6eb9bc9bb8
SKEYID derivation based on libstrongswan
2009-05-05 14:28:31 +02:00
Martin Willi
4f734a55b7
fixed dladdr ./configure check, leak detective whitelist
2009-05-04 13:59:44 +02:00
Andreas Steffen
bc2e33ca96
pluto and scepclient use the random plugin from libstrongswan
2009-04-30 18:31:48 +00:00
Tobias Brunner
ea7e89c72c
somehow missed these changes during the portability branch back-merge
2009-04-30 17:13:45 +00:00
Andreas Steffen
de92b9e70c
default plugins for pluto
2009-04-29 08:56:19 +00:00
Martin Willi
be0a03be64
set default CFLAGS globally, including -Wno-format
2009-04-27 11:34:07 +00:00
Martin Willi
adc25ec252
added missing configure.in changes for attr/resolv_conf plugins
2009-04-24 14:14:43 +00:00
Andreas Steffen
f032a6909a
version bump to 4.3.1
2009-04-24 04:38:57 +00:00
Andreas Steffen
4985ad6e4a
pluto and scepclient use the regular libstrongswan library
2009-04-21 12:26:04 +00:00
Andreas Steffen
d4f8c569ab
version bump to 4.3.0
2009-03-31 03:53:18 +00:00
Andreas Steffen
8f83b1472b
set version back to 4.2.14
2009-03-27 10:17:23 +00:00
Andreas Steffen
22180558a5
some changes
2009-03-27 10:16:38 +00:00
Martin Willi
4a6b84a934
reintegrated eap-radius branch into trunk
2009-03-24 10:24:58 +00:00
Andreas Steffen
623bca407b
version bump to 4.2.14
2009-03-22 14:37:03 +00:00
Tobias Brunner
d25ce3701e
printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms).
2009-03-12 18:07:32 +00:00
Andreas Steffen
ce62951115
version bump to 4.2.13
2009-02-21 17:53:10 +00:00
Andreas Steffen
1e0d1ae213
support of MD4 hash
2009-02-19 10:06:58 +00:00
Tobias Brunner
f98cdf7a47
adding plugin for EAP-MS-CHAPv2
2009-02-18 19:57:15 +00:00
Martin Willi
2d887e8e08
removed unused extract_last_token() and the required memrchr implementation
2009-02-18 09:45:54 +00:00
Andreas Steffen
9599ee1597
version bump to 4.2.12
2009-01-21 03:14:52 +00:00
Tobias Brunner
bb835afa90
fixing cross-compilation
2009-01-13 10:38:16 +00:00
Andreas Steffen
48032aed00
add a compatible memrchr() function if the platform does not support it (e.g. old glibc). Patch courtesy to Thomas Jarosch
2009-01-09 01:19:45 +00:00
Andreas Steffen
0519ca9099
version bump to 2.4.11
2009-01-08 22:23:42 +00:00
Martin Willi
efd0fe21e4
ref_get()/ref_put() use atomic gcc operations if supported, thanks to Thomas Jarosch for the patch
2008-12-02 12:14:32 +00:00
Martin Willi
6905f794bb
added a --disable-threads ./configure option for pluto
2008-12-02 09:01:57 +00:00
Martin Willi
fc3ef71fa7
fixed lock-profiler help message
2008-11-19 15:37:46 +00:00
Andreas Steffen
50ae86017c
version bump to 4.2.10
2008-11-18 00:02:59 +00:00
Andreas Steffen
9a095db5e8
set release number back to 4.2.9
2008-11-16 22:25:16 +00:00
Andreas Steffen
4dc0dce886
added migration to NEWS
2008-11-16 21:23:56 +00:00
Tobias Brunner
ea625fabf9
merging kernel_klips plugin back into trunk
2008-11-11 09:22:00 +00:00
Martin Willi
0214012508
threshhold and ./configure option for lock profiler
2008-11-05 14:36:57 +00:00
Martin Willi
0fd6e95562
a load testing plugin, to:
...
find multi-threading issues
do performance profiling
2008-10-21 13:00:38 +00:00
Martin Willi
ad3af574a4
moved updown script invocation to an optional plugin
2008-10-16 11:48:18 +00:00
Tobias Brunner
1adaa02bb2
merging kernel_pfkey plugin back from kernel-interface branch
2008-10-14 08:46:31 +00:00
Andreas Steffen
9257c3a287
version bump to 4.2.9
2008-10-14 01:53:37 +00:00
Martin Willi
79a878466c
reintegrated two-sim branch providing SIM card plugin API
2008-10-10 08:36:01 +00:00
Martin Willi
c5ebb635a1
trimming additial / in some cases
2008-10-10 07:33:37 +00:00
Andreas Steffen
09d7ef2614
added --disable-kernel-netlink configure option
2008-10-03 03:27:42 +00:00
Tobias Brunner
507f26f685
merging modularized kernel interface back to trunk
2008-09-25 07:56:58 +00:00
Andreas Steffen
414caff027
version bump to 4.2.8
2008-09-18 00:42:22 +00:00
Martin Willi
21c9546321
libstrongswan agent plugin to use ssh-agent for RSA signatures
2008-09-02 11:04:26 +00:00
Martin Willi
eb3e27059b
use libcap for capability dropping
...
optional, must be enabled --with-capabilities=libcap
will be extended to support --with-capabilities=libcap2
2008-08-29 09:24:14 +00:00
Martin Willi
e577ad3985
creating default IKE proposals dynamically using algorithm enumeration API
2008-08-28 11:07:57 +00:00
Andreas Steffen
a9bb69c8a8
version bump to 4.2.7
2008-08-27 12:01:57 +00:00
Martin Willi
1caa265c61
a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM
2008-08-21 12:10:07 +00:00
Andreas Steffen
59bb33e1e0
set version back to 4.2.6
2008-08-19 18:53:15 +00:00
Andreas Steffen
af165431d2
fixed libstrongswan integrity test
2008-08-19 18:51:30 +00:00
Martin Willi
6dbce9c803
reimplemented dbus plugin for NetworkManager 0.7, renamed to nm
2008-07-31 11:16:14 +00:00
Andreas Steffen
5c96dab653
version bump to 4.2.6
2008-07-28 09:14:07 +00:00
Andreas Steffen
60721cee73
reset version to 4.2.5
2008-07-03 16:43:18 +00:00
Andreas Steffen
174216c79d
update NEWS with ip pool add-ons and fixes
2008-07-03 16:42:45 +00:00
Martin Willi
7da767f773
sqlite plugin requires libsqlite3 => 3.3.1 to share connections
...
use recursive locking if libsqlite3 < 3.5.0
2008-06-30 11:06:18 +00:00
Andreas Steffen
39b7780df9
created scripts/Makefile.am
2008-06-29 13:57:00 +00:00
Andreas Steffen
615611afc1
version bump to 4.2.5
2008-06-26 09:59:55 +00:00
Andreas Steffen
7f6d8d5172
set version to 4.2.4
2008-06-22 18:08:37 +00:00
Martin Willi
29727a4447
compatibility fix for other shells than bash >= 3.1
2008-06-20 07:56:01 +00:00
Martin Willi
61c4638646
first simple prototype of a UCI configuration plugin for OpenWRT
2008-06-17 14:17:51 +00:00
Martin Willi
9529fb6836
added mediation server web frontend
...
updated charons medsrv plugin to updated database scheme
2008-06-11 14:13:24 +00:00
Martin Willi
1e9c46f13d
configure option for updown firewall scripts
2008-06-06 08:24:39 +00:00
Martin Willi
e581a31d6a
link against openssl crypto library only
2008-06-06 08:04:42 +00:00
Andreas Steffen
8f7074cf2e
version bump to 4.2.4
2008-05-25 10:35:39 +00:00
Andreas Steffen
8cc16c9d9e
fixed the strongswan.conf path
2008-05-22 21:59:54 +00:00
Andreas Steffen
4d9c95ffcd
version bump to 4.2.3
2008-05-21 18:40:11 +00:00
Martin Willi
1ba62b5562
loading default modules depending on configure options
2008-05-16 08:52:32 +00:00
Martin Willi
782db7edd1
prototype of mediation client database plugin
2008-05-14 07:26:19 +00:00
Martin Willi
affd7a90ba
moved RAW public key support to a separate plugin (pubkey)
2008-05-08 13:16:42 +00:00
Martin Willi
5b7ec6d4e0
renamed med_db plugin to medsrv, as we will introduce an additional medcli client plugin
2008-05-08 12:11:30 +00:00
Martin Willi
25b12c696b
replaced --with-gid/uid by --with-group/user
...
using named users, groups
fixed capability dropping in pluto
2008-05-08 10:58:04 +00:00
Martin Willi
f8277a8370
added configure check and support for sqlite3 libraries without sqlite3_prepare_v2
2008-05-07 14:41:13 +00:00
Martin Willi
27d04e055d
implemented XCBC algorithms (signer, prf) for IKE on top of a crypter
...
supporting ike=...-aesxcbc-... in ipsec.conf
added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal
AES XCBC testcase
2008-04-30 14:26:24 +00:00
Martin Willi
a47486b5e4
prototype of dumm GUI
2008-04-28 16:43:30 +00:00
Tobias Brunner
17353034f3
added a wrapper plugin for OpenSSL crypters (AES, 3DES, Blowfish etc.)
2008-04-28 14:25:19 +00:00
Martin Willi
36d62fac65
experimental Padlock plugin supportin SHA1 and AES-128 for VIA C7 Esther
2008-04-22 08:44:56 +00:00
Andreas Steffen
7c0c0aac01
version bump to 4.2.2
2008-04-19 10:07:32 +00:00
Martin Willi
6a365f0740
added API for random number generators, served through credential factory
...
ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
2008-04-15 05:56:35 +00:00
Martin Willi
ff867d062e
added ./configure option --with-strongswan-conf=
...
defaults to /etc/strongswan.conf
2008-04-07 06:56:33 +00:00
Andreas Steffen
bc722433be
version bump to 4.2.1
2008-04-06 12:12:13 +00:00
Martin Willi
9e72d3bcaf
defining ME globally, as we need it in plugins
2008-03-31 15:01:43 +00:00
Andreas Steffen
681d56b1bb
disabled build of outdated dbus interface
2008-03-31 12:59:39 +00:00
Martin Willi
6b9290ff12
renamed xml plugin to smp to avoid confusion
...
added some dependency checks to configure
configure checks ClearSilver and fastcgi
cleanups in the build system here and there
2008-03-28 12:44:01 +00:00
Tobias Brunner
e74bc8e51d
changed external interface to the mediation extension.
2008-03-27 12:31:35 +00:00
Tobias Brunner
dc04b7c743
mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed
2008-03-26 18:40:19 +00:00
Martin Willi
552cc11b1f
merged the modularization branch (credentials) back to trunk
2008-03-13 14:14:44 +00:00
Andreas Steffen
a11ea97db8
version bump to 4.2.0
2008-02-15 18:44:29 +00:00
Andreas Steffen
6859f760d9
release of 4.1.11 bug fix version
2008-02-14 21:26:21 +00:00
Andreas Steffen
dfc14c8480
added --with-plugindir option
2008-01-20 17:57:38 +00:00
Andreas Steffen
fb6d76cd5c
version bump to 4.2.0
2007-12-24 18:07:55 +00:00
Martin Willi
26e2467692
ported EAP-AKA branch into trunk
2007-12-13 10:54:29 +00:00
Martin Willi
4b403e7672
merged EAP-MD5 into trunk
2007-12-12 14:29:10 +00:00
Andreas Steffen
81edb520b2
version bump to 4.1.10
2007-12-04 23:54:32 +00:00
Andreas Steffen
d7bf4e4279
added brackets in PKG_CHECK_MODULES
2007-12-03 23:12:39 +00:00
Martin Willi
cbfb2aff50
added more ./configure build options for
...
EAP-Identity module
ipsec tools (openac, scepclient)
optional charon/pluto build
charon stroke interface
2007-12-03 14:47:15 +00:00
Martin Willi
733f336ad3
socket_t implementation withouth raw sockets
...
--disable-raw-socket configure option
prevents charon/pluto to run in parallel
2007-11-26 11:20:00 +00:00
Andreas Steffen
8ad95a2000
version bumpt to 4.1.9
2007-11-06 13:47:27 +00:00
Andreas Steffen
c840a9b484
version bump to 4.1.8
2007-10-04 06:41:45 +00:00
Tobias Brunner
d5cc175833
experimental P2P-NAT-T for IKEv2 merged back from branch
2007-10-03 15:10:41 +00:00
Martin Willi
8f561d4409
prototype implemementation of an sqlite configuration backend
2007-09-18 07:12:21 +00:00
Martin Willi
b8c7453a82
manager can query and list IKE_SA status (no layout yet)
2007-09-13 07:45:04 +00:00
Andreas Steffen
054767bfff
version bump to 4.1.7
2007-09-03 19:04:38 +00:00
Andreas Steffen
0e3073608d
re-introduced the XAUTH_VID compile option
2007-09-02 11:13:24 +00:00
Andreas Steffen
ef5f65626f
change self_test to self-test
2007-08-29 07:03:47 +00:00
Andreas Steffen
bf422b1664
fixed typo
2007-08-28 09:59:53 +00:00
Andreas Steffen
9ee1111d8b
added --enable-integrity-test and --disable-self-test options
2007-08-28 06:36:31 +00:00
Martin Willi
0739cca9d1
default routing table/prio: 220/220 (as 19530 was invalid)
...
added configure option --with-routing-table-prio=
2007-08-27 14:53:42 +00:00
Martin Willi
ad9613226b
using default routing table 19530 for ipsec routes
2007-08-27 11:30:21 +00:00
Martin Willi
4e411c8361
added --with-routing-table= configure option
2007-08-27 11:15:35 +00:00
Andreas Steffen
dc481855bb
set default to uml=false
2007-08-10 10:47:48 +00:00
Martin Willi
fd4ded974d
build UML stuff only on --enable-uml
2007-08-08 14:24:25 +00:00
Martin Willi
f2d6355eaa
added UML modeler to autotools
2007-08-08 14:03:55 +00:00
Andreas Steffen
3dcf9dbd70
version bump to 4.1.6
2007-08-08 08:17:48 +00:00
Andreas Steffen
c520944800
version bump to 4.1.5
2007-07-08 19:08:31 +00:00
Andreas Steffen
b5463662d2
version bump to 4.1.4
2007-05-26 19:05:34 +00:00
Andreas Steffen
4262749f11
version bump to 4.1.3
2007-05-10 12:40:09 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi
a84fb01b96
restructuring of configuration backends
...
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
configuration backends
control interfaces
using pluggable modules as in EAP
2007-04-27 14:25:08 +00:00
Martin Willi
04a7b6d868
added most problematic linux headers to distribution
...
other/real linux header may be selected using --with-linux-headers=dir
2007-04-19 08:59:36 +00:00
Andreas Steffen
83e60eb29a
version bump to 4.1.2
2007-04-10 11:53:35 +00:00
Andreas Steffen
2c0e0f4f62
changed LDAP_VER compile option to LIBLDAP
2007-04-06 09:49:05 +00:00
Andreas Steffen
7b0c588a88
added --enable-nat-transport and --disable-vendor-id configuration options
2007-04-03 07:58:21 +00:00
Andreas Steffen
35101bf86a
version bump to 4.1.1
2007-03-23 17:22:12 +00:00
Martin Willi
d560c849e3
added --with-sim-reader option to configure script
...
some cleanups in eap_sim
2007-03-14 15:39:45 +00:00
Andreas Steffen
5e079e25e7
version bump to 4.1.0
2007-03-14 15:11:00 +00:00
Martin Willi
b0f24449dd
added EAP-SIM authentication
...
client side only
uses an external SIM reader library specified with SIM_READER_LIB
untested
2007-03-13 15:01:02 +00:00
Martin Willi
c60c7694d2
merged tasking branch into trunk
2007-02-28 14:04:36 +00:00
Martin Willi
f27f6296e6
merged EAP framework from branch into trunk
...
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Andreas Steffen
9247a99973
version bump to 4.0.8
2007-02-02 11:02:29 +00:00
Martin Willi
61dd20f9e3
added address listing without getifaddrs for uclibc (only IPv4 yet)
2007-02-02 09:58:59 +00:00
Andreas Steffen
1748c57799
version bump
2007-01-11 20:02:07 +00:00
Andreas Steffen
195307b574
define path to xauth module
2007-01-05 11:02:38 +00:00
Andreas Steffen
2df45a738e
added enable-cisco-quirks configure option
2007-01-04 14:26:27 +00:00
Martin Willi
4986554f1a
fixed more uClibc issues
...
should compile against a uClibc > 0.9.28 (untested)
2006-12-15 14:22:56 +00:00
Martin Willi
e696757c47
made backtrace() calls optional to support uClibc
2006-12-06 13:59:13 +00:00
Andreas Steffen
a0bf4274c9
version bump to 4.0.6
2006-11-29 21:31:45 +00:00
Andreas Steffen
c09d8959b7
found libraries are not appended to LIBS anymore
2006-10-06 07:22:38 +00:00
Andreas Steffen
f8ef0d1a0c
version bump to 4.0.5
2006-10-03 06:52:31 +00:00
Andreas Steffen
6725ef5f23
version bump to 4.0.4
2006-09-14 06:47:21 +00:00
Andreas Steffen
c3f97102f1
version bump to 4.0.3
2006-08-02 12:33:26 +00:00
Martin Willi
92ee45a0ee
cleanups in kernel interface code
...
added proper traffic selector to string conversion
some cleanups here & there
2006-07-18 12:53:54 +00:00
Andreas Steffen
c01d911201
version bump to 4.0.2
2006-06-27 08:47:03 +00:00
Martin Willi
0773bdcf3f
- included charons module tests to build & dist
2006-05-30 13:00:18 +00:00
Martin Willi
5e5f0bd4b2
- added testing files to dist
...
- required the use of the "ustar" format to support
filenames longer than 99 chars
2006-05-30 08:51:48 +00:00
Martin Willi
298b06c28c
- build gets perl and gperf from configure now
...
- moved built sources to maintainer-clean
2006-05-24 06:36:46 +00:00
Martin Willi
4acc8989ce
- fixed build when using --enable-leak-detective
2006-05-23 08:00:29 +00:00
Martin Willi
b5e1560659
- applied andreas's patch
...
- logger output improvements
- testin gupdates
- and a lot more
2006-05-18 06:02:28 +00:00
Martin Willi
db26d00e73
- added random source ./configure options
...
- fixed default-pkcs11 option
2006-05-17 14:21:38 +00:00
Martin Willi
f0cdc48e4e
- fixed errors when --enable-pkcs11
...
- added autogen script
2006-05-17 07:16:23 +00:00
Martin Willi
f2c2d395ff
- introduced autotools
...
- first working version
- make dist should work
- things to do:
- UML testing!
- more cleanups
2006-05-16 14:24:03 +00:00