Commit Graph

6884 Commits

Author SHA1 Message Date
Martin Willi fce3b5c3ba Added a leak detective method to report current memory usage with backtraces 2011-05-16 15:22:21 +02:00
Martin Willi f37e8252a3 Make leak detective public 2011-05-16 15:22:21 +02:00
Martin Willi 42e0f26e53 Migrated leak_detective to INIT/METHOD macros 2011-05-16 15:22:21 +02:00
Martin Willi 61a141d01c Added a frame enumerator to backtrace_t 2011-05-16 15:22:21 +02:00
Martin Willi c238e8ea86 Added an equals function to backtrace_t 2011-05-16 15:22:21 +02:00
Martin Willi 79edee7422 Migrated backtrace_t to METHOD macro 2011-05-16 15:22:21 +02:00
Tobias Brunner 700296ccbe maemo: New upstream release. 2011-05-16 14:15:08 +02:00
Andreas Steffen d6fc82c12e version bump to final 4.5.2 2011-05-14 17:12:50 +02:00
Andreas Steffen 636a7d2bc3 whitelisting can already be enabled in strongswan.conf 2011-05-14 17:11:15 +02:00
Andreas Steffen 19ae24f0ea fixed whitelist enabling 2011-05-14 17:09:45 +02:00
Andreas Steffen 706ae005c6 do not call recommendations if recs does not exist 2011-05-14 16:36:05 +02:00
Andreas Steffen cc546c3ce6 Restrict IMCs and IMVs to call SendMessage() 2011-05-14 13:31:16 +02:00
Tobias Brunner 0e080d9b64 Don't compile login() in openssl_rsa_private_key_t if ENGINE support is disabled in OpenSSL. 2011-05-13 13:11:11 +02:00
Tobias Brunner 38a93a3cd9 fetcher.c added to Android.mk. 2011-05-13 13:09:38 +02:00
Andreas Steffen 8afbc768f3 added ikev2/rw-whitelist scenario 2011-05-12 21:11:01 +02:00
Martin Willi 6fd23444ea Disable whitelist plugin by default 2011-05-12 09:07:14 +02:00
Duncan Salerno 4b6ebf9995 Protect the communication with the SIM card during a transaction from access by a second application 2011-05-12 06:20:11 +02:00
Andreas Steffen e8a512f800 protection against insane IMCs and IMVs 2011-05-11 19:34:01 +02:00
Martin Willi 61e3819d04 Do not use deprecated vte_terminal_fork_command() 2011-05-11 12:12:02 +02:00
Tobias Brunner 38865eced3 Return correct status code in kernel_netlink_ipsec_t.query_sa. 2011-05-10 15:45:42 +02:00
Tobias Brunner 70f918ec1d chunk_clear not clear_chunk. 2011-05-10 15:40:46 +02:00
Thomas Egerer 59965aaf96 pluto: Securely wipe quick mode keys from memory.
Keying material is derived in two separate steps for local and remote
endpoint. This allows us to securely wipe local/remote secrets
separately, too -- a precondition to wipe quick mode keys from memory in
a secure fashion.
2011-05-10 15:39:00 +02:00
Thomas Egerer 9e6bb93ab9 pluto: Securely wipe sensitive data from memory. 2011-05-10 15:19:46 +02:00
Andreas Steffen 261d5f22db terminate imc/imv that couldn't be initialized properly 2011-05-10 07:03:50 +02:00
Andreas Steffen bb6b2fbb81 lock the set_message_types() method for imvs 2011-05-09 16:46:08 +02:00
Andreas Steffen 375ac27609 cosmetics 2011-05-09 16:46:08 +02:00
Martin Willi f7812f6492 Wipe memory after using key material (incomplete, to be continued) 2011-05-09 14:36:15 +02:00
Martin Willi 7dc48bab1b Use memwipe() in chunk_clear() 2011-05-09 14:36:14 +02:00
Martin Willi ed678b52e2 Added a memwipe() function to safely overwrite sensitive memory 2011-05-09 14:36:14 +02:00
Andreas Steffen 52cab8874b fixed debug output 2011-05-09 00:49:59 +02:00
Andreas Steffen d6eec513f1 adapted state_machine for retry batches 2011-05-09 00:49:36 +02:00
Andreas Steffen 82b43847f5 version bump to 4.5.2rc2 2011-05-08 17:56:05 +02:00
Andreas Steffen ff30e06bf0 lock the set_message_types() method 2011-05-07 17:51:53 +02:00
Andreas Steffen 2c3464af46 added missing comma 2011-05-07 10:22:57 +02:00
Andreas Steffen 50a43c79a6 refactored tnccs->remove_connection() 2011-05-06 15:13:05 +02:00
Andreas Steffen 51f259a82d id of non-registered threads defaults to 0 2011-05-06 06:22:19 +02:00
Martin Willi e7643c92d3 Migrated scheduler_t to INIT/METHOD macros 2011-05-05 11:14:51 +02:00
Martin Willi cda46be72a Migrated callback_job to INIT/METHOD macros 2011-05-05 11:14:51 +02:00
Martin Willi 3316742969 Migrated processor to INIT/METHOD macros 2011-05-05 11:14:50 +02:00
Tobias Brunner 5832d5058b Typo in NEWS fixed. 2011-05-05 10:31:33 +02:00
Tobias Brunner bf3c371531 Note about certificates added to CA section in ipsec.conf man page. 2011-05-05 10:30:51 +02:00
Tobias Brunner a855af9544 testing: Properly align numbers of succeeded and failed tests in overview page. 2011-05-05 10:29:52 +02:00
Tobias Brunner e296fc2d26 testing: Add crumbtrail to overview page which lists all tests. 2011-05-05 10:29:52 +02:00
Tobias Brunner ca25eb9eb3 testing: Directly link to index.html of tests to allow browsing via file://. 2011-05-05 10:29:52 +02:00
Tobias Brunner e8ae55f64b testing: Avoid adding additional spacing around testresults. 2011-05-05 10:29:52 +02:00
Tobias Brunner 074919dcc5 testing: Replace back link in results with crumbtrail to improve navigation. 2011-05-05 10:29:51 +02:00
Martin Willi 92ebb7c5b2 Added NEWS about duplicheck and coupling plugins 2011-05-05 09:38:48 +02:00
Martin Willi e35727c14d Fix algorithm type for signers, fixes warning with gcc 4.5 2011-05-03 11:33:40 +02:00
Tobias Brunner b4c9ab9c79 Cache group name in sys_logger_t to avoid problems with Vstr.
Because syslog(3) is not replaced when using the Vstr wrapper, %N can
not be resolved properly.
2011-05-03 10:50:28 +02:00
Tobias Brunner b7cb8100c4 Migrated sys_logger_t to INIT/METHOD macros. 2011-05-03 10:21:58 +02:00