Martin Willi
fce3b5c3ba
Added a leak detective method to report current memory usage with backtraces
2011-05-16 15:22:21 +02:00
Martin Willi
f37e8252a3
Make leak detective public
2011-05-16 15:22:21 +02:00
Martin Willi
42e0f26e53
Migrated leak_detective to INIT/METHOD macros
2011-05-16 15:22:21 +02:00
Martin Willi
61a141d01c
Added a frame enumerator to backtrace_t
2011-05-16 15:22:21 +02:00
Martin Willi
c238e8ea86
Added an equals function to backtrace_t
2011-05-16 15:22:21 +02:00
Martin Willi
79edee7422
Migrated backtrace_t to METHOD macro
2011-05-16 15:22:21 +02:00
Tobias Brunner
700296ccbe
maemo: New upstream release.
2011-05-16 14:15:08 +02:00
Andreas Steffen
d6fc82c12e
version bump to final 4.5.2
2011-05-14 17:12:50 +02:00
Andreas Steffen
636a7d2bc3
whitelisting can already be enabled in strongswan.conf
2011-05-14 17:11:15 +02:00
Andreas Steffen
19ae24f0ea
fixed whitelist enabling
2011-05-14 17:09:45 +02:00
Andreas Steffen
706ae005c6
do not call recommendations if recs does not exist
2011-05-14 16:36:05 +02:00
Andreas Steffen
cc546c3ce6
Restrict IMCs and IMVs to call SendMessage()
2011-05-14 13:31:16 +02:00
Tobias Brunner
0e080d9b64
Don't compile login() in openssl_rsa_private_key_t if ENGINE support is disabled in OpenSSL.
2011-05-13 13:11:11 +02:00
Tobias Brunner
38a93a3cd9
fetcher.c added to Android.mk.
2011-05-13 13:09:38 +02:00
Andreas Steffen
8afbc768f3
added ikev2/rw-whitelist scenario
2011-05-12 21:11:01 +02:00
Martin Willi
6fd23444ea
Disable whitelist plugin by default
2011-05-12 09:07:14 +02:00
Duncan Salerno
4b6ebf9995
Protect the communication with the SIM card during a transaction from access by a second application
2011-05-12 06:20:11 +02:00
Andreas Steffen
e8a512f800
protection against insane IMCs and IMVs
2011-05-11 19:34:01 +02:00
Martin Willi
61e3819d04
Do not use deprecated vte_terminal_fork_command()
2011-05-11 12:12:02 +02:00
Tobias Brunner
38865eced3
Return correct status code in kernel_netlink_ipsec_t.query_sa.
2011-05-10 15:45:42 +02:00
Tobias Brunner
70f918ec1d
chunk_clear not clear_chunk.
2011-05-10 15:40:46 +02:00
Thomas Egerer
59965aaf96
pluto: Securely wipe quick mode keys from memory.
...
Keying material is derived in two separate steps for local and remote
endpoint. This allows us to securely wipe local/remote secrets
separately, too -- a precondition to wipe quick mode keys from memory in
a secure fashion.
2011-05-10 15:39:00 +02:00
Thomas Egerer
9e6bb93ab9
pluto: Securely wipe sensitive data from memory.
2011-05-10 15:19:46 +02:00
Andreas Steffen
261d5f22db
terminate imc/imv that couldn't be initialized properly
2011-05-10 07:03:50 +02:00
Andreas Steffen
bb6b2fbb81
lock the set_message_types() method for imvs
2011-05-09 16:46:08 +02:00
Andreas Steffen
375ac27609
cosmetics
2011-05-09 16:46:08 +02:00
Martin Willi
f7812f6492
Wipe memory after using key material (incomplete, to be continued)
2011-05-09 14:36:15 +02:00
Martin Willi
7dc48bab1b
Use memwipe() in chunk_clear()
2011-05-09 14:36:14 +02:00
Martin Willi
ed678b52e2
Added a memwipe() function to safely overwrite sensitive memory
2011-05-09 14:36:14 +02:00
Andreas Steffen
52cab8874b
fixed debug output
2011-05-09 00:49:59 +02:00
Andreas Steffen
d6eec513f1
adapted state_machine for retry batches
2011-05-09 00:49:36 +02:00
Andreas Steffen
82b43847f5
version bump to 4.5.2rc2
2011-05-08 17:56:05 +02:00
Andreas Steffen
ff30e06bf0
lock the set_message_types() method
2011-05-07 17:51:53 +02:00
Andreas Steffen
2c3464af46
added missing comma
2011-05-07 10:22:57 +02:00
Andreas Steffen
50a43c79a6
refactored tnccs->remove_connection()
2011-05-06 15:13:05 +02:00
Andreas Steffen
51f259a82d
id of non-registered threads defaults to 0
2011-05-06 06:22:19 +02:00
Martin Willi
e7643c92d3
Migrated scheduler_t to INIT/METHOD macros
2011-05-05 11:14:51 +02:00
Martin Willi
cda46be72a
Migrated callback_job to INIT/METHOD macros
2011-05-05 11:14:51 +02:00
Martin Willi
3316742969
Migrated processor to INIT/METHOD macros
2011-05-05 11:14:50 +02:00
Tobias Brunner
5832d5058b
Typo in NEWS fixed.
2011-05-05 10:31:33 +02:00
Tobias Brunner
bf3c371531
Note about certificates added to CA section in ipsec.conf man page.
2011-05-05 10:30:51 +02:00
Tobias Brunner
a855af9544
testing: Properly align numbers of succeeded and failed tests in overview page.
2011-05-05 10:29:52 +02:00
Tobias Brunner
e296fc2d26
testing: Add crumbtrail to overview page which lists all tests.
2011-05-05 10:29:52 +02:00
Tobias Brunner
ca25eb9eb3
testing: Directly link to index.html of tests to allow browsing via file://.
2011-05-05 10:29:52 +02:00
Tobias Brunner
e8ae55f64b
testing: Avoid adding additional spacing around testresults.
2011-05-05 10:29:52 +02:00
Tobias Brunner
074919dcc5
testing: Replace back link in results with crumbtrail to improve navigation.
2011-05-05 10:29:51 +02:00
Martin Willi
92ebb7c5b2
Added NEWS about duplicheck and coupling plugins
2011-05-05 09:38:48 +02:00
Martin Willi
e35727c14d
Fix algorithm type for signers, fixes warning with gcc 4.5
2011-05-03 11:33:40 +02:00
Tobias Brunner
b4c9ab9c79
Cache group name in sys_logger_t to avoid problems with Vstr.
...
Because syslog(3) is not replaced when using the Vstr wrapper, %N can
not be resolved properly.
2011-05-03 10:50:28 +02:00
Tobias Brunner
b7cb8100c4
Migrated sys_logger_t to INIT/METHOD macros.
2011-05-03 10:21:58 +02:00