aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* implemented NAT detection for IPv6Martin Willi2006-08-311-36/+19
|
* removed unneeded constructorMartin Willi2006-08-312-30/+2
|
* initial support for IPv6 (more testing needed)Martin Willi2006-08-3016-374/+1074
| | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support
* added stddef.h include for compilers which do not support the offsetof() ↵Martin Willi2006-08-281-0/+2
| | | | directive
* moved interface enumeration code to socket, where it belongsMartin Willi2006-08-2812-348/+207
| | | | | query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall"
* version bump of UML kernel to 2.6.17.11Andreas Steffen2006-08-252-2/+2
|
* fixed crash bug when doing "ipsec down" with an unknown connectionMartin Willi2006-08-251-2/+5
|
* added name property in CHILD_SA, allows proper status outputMartin Willi2006-08-255-14/+75
|
* (no commit message)Martin Willi2006-08-251-5/+0
|
* fixed bug which prevented port float when nat is detectedMartin Willi2006-08-251-0/+8
|
* version bumpsAndreas Steffen2006-08-252-5/+5
|
* 'sha' and 'sha1' are now treated as synonymsAndreas Steffen2006-08-231-0/+5
|
* 'sha' and 'sha1' are now treated as synonymsAndreas Steffen2006-08-231-0/+8
|
* updated Changelog and other docsMartin Willi2006-08-235-13/+149
|
* fixed rekeying behavior when proposing an inacceptable DH group ↵4.0.3Martin Willi2006-08-232-35/+26
| | | | (INVALID_KE_PAYLOAD)
* implement proper handling of most simultaneous IKE_SA rekeying casesMartin Willi2006-08-238-57/+288
|
* version bump to 4.0.3Andreas Steffen2006-08-021-1/+1
|
* implemented proper refcounting using atomic operationsMartin Willi2006-07-288-6/+79
|
* implemented IKE_SA rekeyingMartin Willi2006-07-2730-317/+1696
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* added possibility to route CHILD_SAs, without to set them upMartin Willi2006-07-2126-142/+1011
| | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires
* reuse an existing IKE_SA to set up additional CHILD_SAsMartin Willi2006-07-2019-263/+344
|
* introduced refcounting on policy and connectionsMartin Willi2006-07-2028-894/+1060
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* cleanups in kernel interface codeMartin Willi2006-07-1823-586/+730
| | | | | | added proper traffic selector to string conversion some cleanups here & there
* X.509 certificate trust path verification4.0.2Andreas Steffen2006-07-141-3/+8
|
* addedAndreas Steffen2006-07-148-0/+178
|
* fixed UDP decapsulation by adding inbound bypass policy for send socketMartin Willi2006-07-141-10/+17
|
* updated mixed tests to new charon outputMartin Willi2006-07-143-5/+5
|
* corrected DPD entryAndreas Steffen2006-07-141-5/+7
|
* reenabled module tests for charonMartin Willi2006-07-144-25/+27
|
* fixed bug which erroneously detected KE payload when rekeyingMartin Willi2006-07-141-0/+1
|
* added IPsec bypass policy to receiving socket, allows incoming IKE traffic ↵Martin Willi2006-07-141-26/+29
| | | | on host2host tunnels when using NAT
* improved logging on verify errors for some payloadsMartin Willi2006-07-136-73/+59
| | | | | | enforcing IKE_SA shutdown, even when transactions are outstanding proper reject of CREATE_CHILD_SA message with KE payload
* added test cases from NAT teamMartin Willi2006-07-1374-15/+1069
| | | | | updated all IKEv2 tests to work with new status output
* added tcpdumpcount function from NATT guysMartin Willi2006-07-135-3/+106
| | | | | | | added possibility to mount the strongswan tree into all UMLs added script for installing from shared tree in all UMLs added script to shut down all UMLs properly
* removed in favour of tests from NAT teamMartin Willi2006-07-137-98/+0
|
* fixed CREATE_CHILD_SA transaction dispatchingMartin Willi2006-07-131-37/+28
|
* added CHILD_SA states, which allows us to detect further simultaneous ↵Martin Willi2006-07-1318-132/+239
| | | | | | | transactions reimplemented the buggy message id handling
* updated some inline docsMartin Willi2006-07-124-4/+40
|
* fixed crypter/signer in/out to conform with standardMartin Willi2006-07-121-9/+9
|
* fixed payload orderMartin Willi2006-07-121-5/+4
|
* added message id loggingMartin Willi2006-07-121-2/+4
|
* added all currently known notify payload typesMartin Willi2006-07-122-1/+34
|
* added policy cache to kernel interfaceMartin Willi2006-07-127-568/+553
| | | | | | allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying
* leak detective blanks memory on free & alloc, allows further membug detectionMartin Willi2006-07-123-14/+28
|
* code cleanupsMartin Willi2006-07-122-84/+43
|
* identification_t.matches() supports multiple wildcard countsAndreas Steffen2006-07-112-31/+19
|
* identification_t.matches() supports multiple wildcard countsAndreas Steffen2006-07-112-85/+124
|
* further work done for simultaneous rekeying/deleteMartin Willi2006-07-1015-229/+312
| | | | | still some cases which cause trouble
* fixed compiler warnings in parser when using -O2Martin Willi2006-07-071-3/+3
|
* reenabled check_expiryMartin Willi2006-07-071-6/+6
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-11 20:20:12 +0000