aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* added a "load_tester.auth" option: "pubkey" (default) or "psk"Martin Willi2008-11-232-4/+57
|
* proper cancellation of load-testing initiatorsMartin Willi2008-11-231-1/+39
|
* added a MODP_NULL Diffie Hellman group to avoid calculation overhead in ↵Martin Willi2008-11-227-2/+139
| | | | load-testing
* expecting int sized length arguments to chunk_split, as vararg functions use ↵Martin Willi2008-11-211-2/+2
| | | | integers
* fixing Makefile of the nm plugin (avoids including a .svn directory in the ↵Tobias Brunner2008-11-201-1/+1
| | | | distribution)
* optimized ike_sa_manager for concurrent access (default behavior is still as ↵Tobias Brunner2008-11-201-217/+493
| | | | before, needs configuration in strongswan.conf).
* fixed lock-profiler help messageMartin Willi2008-11-191-1/+1
|
* refactored and cleaned up child_sa interfaceMartin Willi2008-11-196-444/+390
| | | | | | | replaced add/update calls by a install() call allocating SPIs always externally support installation of non-allocated CHILD_SAs some other cleanups
* fixing compilation on systems lacking linux/xfrm.hTobias Brunner2008-11-181-1/+1
|
* setting default port of own address to have a proper fallback if src addr ↵Martin Willi2008-11-181-0/+1
| | | | lookup fails
* consider interfaces we do not monitor as up (e.g. lo)Martin Willi2008-11-181-1/+2
| | | | fixes load-testing against 127.0.0.1
* version bump to 4.2.10Andreas Steffen2008-11-185-6/+8
|
* separated updown listener to its own class4.2.9Martin Willi2008-11-174-201/+380
| | | | caching interface names to properly remove rules if interface has changed
* fixed virtual IP re-installation failure in MOBIKE scenarios introduced with ↵Andreas Steffen2008-11-171-13/+19
| | | | changeset 4662
* set release number back to 4.2.9Andreas Steffen2008-11-161-1/+1
|
* added migration to NEWSAndreas Steffen2008-11-164-3/+7
|
* completed migration of MIPv6 connectionsAndreas Steffen2008-11-165-36/+75
|
* show TRANSPORT_PROXY mode in ipsec statusAndreas Steffen2008-11-161-3/+5
|
* using aligned buffers for netlinkMartin Willi2008-11-143-14/+23
|
* fallback to reauthentication if peer does not support CHILD_SA rekeyingMartin Willi2008-11-142-2/+27
|
* fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SASMartin Willi2008-11-141-1/+27
|
* also use correct encap parameter in PF_KEYMartin Willi2008-11-141-1/+1
|
* fixed encap enabling in xfrm (using new encap state, not the old one)Martin Willi2008-11-141-3/+3
|
* do not use a route if outgoing interface is downMartin Willi2008-11-142-55/+82
| | | | other cleanups
* rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead!Martin Willi2008-11-141-2/+3
|
* do not use public interface for functions which are local anywayMartin Willi2008-11-141-57/+54
|
* reset IKE_SA on bus during child_sa destructionMartin Willi2008-11-141-0/+2
|
* adapted evaltest.dat to changed debug outputAndreas Steffen2008-11-132-4/+0
|
* updated API doc for socket.hMartin Willi2008-11-131-10/+7
|
* ported socket enumerator to raw-socket.cMartin Willi2008-11-132-85/+78
| | | | some cleanups in socket.c
* added type=transport_proxy and installpolicy=yes|no to man pageAndreas Steffen2008-11-131-4/+16
|
* added MIPv6 functionality to NEWSAndreas Steffen2008-11-131-7/+16
|
* corrected unwanted deletion in commentAndreas Steffen2008-11-121-2/+2
|
* BEET mode might want forwarding policiesMartin Willi2008-11-121-11/+11
|
* removed some obsolete includesMartin Willi2008-11-121-11/+0
|
* moved ike_initiator flag to IKE_SAs condition bitfieldMartin Willi2008-11-123-30/+12
|
* ported some hard-to-merge cherries back to trunk :-/Martin Willi2008-11-129-96/+84
| | | | | shame, svn, shame: this was ways to complicated we should consider a switch to git...
* fixing keylength bug at the right place:Martin Willi2008-11-122-10/+2
| | | | we usually don't touch output parameters if operations fails
* improved fixAndreas Steffen2008-11-121-5/+9
|
* fixed AES-CCM/GCM authenticated encryption by eliminating generation of ↵Andreas Steffen2008-11-121-0/+4
| | | | superfluous generation of integrity keying material
* fixed compiler warnings issued by:Martin Willi2008-11-1122-59/+125
| | | | | | gcc 4.3 curl.h gcc type-checking glibc with enabled FORTIFY_SOURCE checking
* #defing out compress algs to avoid compiler warningMartin Willi2008-11-112-2/+6
|
* updated method signature of add_policyMartin Willi2008-11-111-5/+6
|
* fixed compilation of medcli pluginMartin Willi2008-11-112-28/+50
|
* added missing include for ULONG_MAXMartin Willi2008-11-111-0/+1
|
* announcing the kernel pluginsTobias Brunner2008-11-111-2/+5
|
* fixing mediation extensionTobias Brunner2008-11-112-11/+25
|
* some typosTobias Brunner2008-11-112-6/+6
|
* added some NEWS for 4.2.9Martin Willi2008-11-111-0/+23
|
* dynamic logging configuration through strongswan.confMartin Willi2008-11-116-39/+164
| | | | fallback to existing ipsec.conf/stroke loglevel configuration