3287 Commits

Author SHA1 Message Date
Tobias Brunner
bb835afa90 fixing cross-compilation 2009-01-13 10:38:16 +00:00
Andreas Steffen
3119fafd8d cosmetics 2009-01-13 06:50:55 +00:00
Andreas Steffen
04bcdc715d changed type definition of level from char* to int 2009-01-13 06:36:31 +00:00
Andreas Steffen
37fbc74121 hiding XFRM message names from netlink 2009-01-09 09:37:13 +00:00
Andreas Steffen
40d9388037 renamed chunk 2009-01-09 08:51:41 +00:00
Andreas Steffen
88db1fa3b4 refactored DBG3 output of sent XFRM messages 2009-01-09 08:46:31 +00:00
Andreas Steffen
abc177e035 DBG3 output of sent XFRM messages 2009-01-09 08:27:17 +00:00
Andreas Steffen
05332cc4b3 added message for undefined ocsp status #4 2009-01-09 01:36:13 +00:00
Andreas Steffen
48032aed00 add a compatible memrchr() function if the platform does not support it (e.g. old glibc). Patch courtesy to Thomas Jarosch 2009-01-09 01:19:45 +00:00
Andreas Steffen
a205d9581d the Linux 2.6.28 uml guest kernel does not need any patches 2009-01-09 00:28:47 +00:00
Andreas Steffen
4faaa05439 test of ipsec leases command in ikev2/ip-pool and ikev2/ip-two-pools scenarios 2009-01-09 00:24:54 +00:00
Andreas Steffen
0519ca9099 version bump to 2.4.11 2009-01-08 22:23:42 +00:00
Andreas Steffen
6c8c268009 adapted ikev2/ip-pool-wish scenario to the new stroke ip pool function 2009-01-08 21:41:07 +00:00
Andreas Steffen
01a8b40b99 fixed two bugs introduced by the stroke ip pool refactoring 4.2.10 2009-01-08 21:34:44 +00:00
Martin Willi
d34030a810 increase nonce size to 32 bytes, required when using SHA384/512 PRFs 2008-12-31 08:58:49 +00:00
Andreas Steffen
b768170bf3 missing LOGFILE in debug statement 2008-12-23 06:35:16 +00:00
Martin Willi
4856241c1e added some NEWS for 4.2.10 2008-12-22 12:48:50 +00:00
Martin Willi
12d4186f5c fixed a potential memory leak when reusing mobike task 2008-12-19 14:34:40 +00:00
Martin Willi
f6035833fa RNG tests based on FIPS 140-1 2008-12-18 16:24:22 +00:00
Martin Willi
2241a29571 support for Padlock RNG 2008-12-18 16:21:05 +00:00
Martin Willi
5045eeba7b proper feature probing for padlock 2008-12-17 15:40:01 +00:00
Tobias Brunner
f30150d3da correct use of calloc in hashtable_t 2008-12-17 09:56:05 +00:00
Martin Willi
9bcc9bb60e updated documentation
some minor cleanups
calloc does not need an additional memset(0)
2008-12-17 09:00:22 +00:00
Tobias Brunner
58464dd737 improved IKE_SA uniqueness check 2008-12-16 17:21:28 +00:00
Martin Willi
097e4b8ff9 purge certificates after IKE_AUTH response has been built 2008-12-16 15:48:36 +00:00
Martin Willi
764e8b2211 reimplemented certificate cache:
fixes unsafe certificate caching
	use fixed array instead of a list
	fine grained per-slot locking
	use cache hits for housekeeping
2008-12-15 15:41:48 +00:00
Martin Willi
482218f075 signal each entry condvar after enumeration, required if wait_for_entry is called 2008-12-15 09:19:04 +00:00
Martin Willi
abfde23ae9 added an additional frame to lock profiling backtraces 2008-12-15 09:13:43 +00:00
Martin Willi
50901d2550 do not respawn cancelled threads if we are shutting down 2008-12-12 15:57:12 +00:00
Martin Willi
248a1f57bb fixed possible deadlock in checkin_and_destroy 2008-12-12 10:40:45 +00:00
Martin Willi
d183adbc9d avoid DNS lookup if possible 2008-12-12 10:38:53 +00:00
Martin Willi
3993b91334 execute events if difference is 0, prevents a busywait 2008-12-12 09:16:31 +00:00
Martin Willi
8006835ec1 load tester got a "shutdown_when_complete" option, allows performance test using "time" 2008-12-12 09:14:37 +00:00
Martin Willi
30841a0305 daemon exports main_thread_id, sends SIGTERM to the main thread in daemon_kill 2008-12-12 09:13:06 +00:00
Martin Willi
7a485e90bd leak detective binds execution to a signle core, avoids corruption on SMP machines 2008-12-12 09:10:52 +00:00
Martin Willi
f2bd424c89 wait until all IKE_SAs are in-house before destroying them 2008-12-12 08:33:48 +00:00
Tobias Brunner
f55a7a76dd address extensions refactored 2008-12-11 13:39:30 +00:00
Martin Willi
c636092c94 fixed usage of "leases" command 2008-12-11 12:49:41 +00:00
Tobias Brunner
a46173dfb4 nat_traversal in manpage corrected 2008-12-10 17:45:44 +00:00
Tobias Brunner
2475560c82 fixing checkout of IKE SAs with only the initiator SPI 2008-12-10 15:58:39 +00:00
Tobias Brunner
97016769fd increasing the performance of checkout_duplicate by using a hash table. 2008-12-10 13:51:21 +00:00
Tobias Brunner
0dbd9788e5 initial size of 1 is nonsense 2008-12-10 13:45:05 +00:00
Tobias Brunner
d6dc0a21fb incremental version of chunk_hash 2008-12-10 13:43:51 +00:00
Martin Willi
6b83549d1a list assigned leases using "ipsec leases" 2008-12-10 13:00:02 +00:00
Martin Willi
ed2bcd0315 added IKE_SA established timer to "ipsec statusall" 2008-12-10 09:59:35 +00:00
Martin Willi
d5d5bc0f16 using rwlock to parallel build credentials 2008-12-09 15:57:51 +00:00
Martin Willi
5e5b2dc105 use thread-safe variant of gmtime 2008-12-09 15:00:30 +00:00
Martin Willi
6144daba9d fixed load-tester shared key lookup 2008-12-09 14:45:56 +00:00
Martin Willi
7023d49ee1 purge auth_info when IKE_SA is established, releases cert memory 2008-12-09 14:34:15 +00:00
Martin Willi
a1466a3ec2 limit number of ADDITIONAL_IPV*_ADDR notifies 2008-12-09 14:32:57 +00:00