Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | added a "load_tester.auth" option: "pubkey" (default) or "psk" | Martin Willi | 2008-11-23 | 2 | -4/+57 | |
| | ||||||
* | proper cancellation of load-testing initiators | Martin Willi | 2008-11-23 | 1 | -1/+39 | |
| | ||||||
* | added a MODP_NULL Diffie Hellman group to avoid calculation overhead in ↵ | Martin Willi | 2008-11-22 | 7 | -2/+139 | |
| | | | | load-testing | |||||
* | expecting int sized length arguments to chunk_split, as vararg functions use ↵ | Martin Willi | 2008-11-21 | 1 | -2/+2 | |
| | | | | integers | |||||
* | fixing Makefile of the nm plugin (avoids including a .svn directory in the ↵ | Tobias Brunner | 2008-11-20 | 1 | -1/+1 | |
| | | | | distribution) | |||||
* | optimized ike_sa_manager for concurrent access (default behavior is still as ↵ | Tobias Brunner | 2008-11-20 | 1 | -217/+493 | |
| | | | | before, needs configuration in strongswan.conf). | |||||
* | fixed lock-profiler help message | Martin Willi | 2008-11-19 | 1 | -1/+1 | |
| | ||||||
* | refactored and cleaned up child_sa interface | Martin Willi | 2008-11-19 | 6 | -444/+390 | |
| | | | | | | | replaced add/update calls by a install() call allocating SPIs always externally support installation of non-allocated CHILD_SAs some other cleanups | |||||
* | fixing compilation on systems lacking linux/xfrm.h | Tobias Brunner | 2008-11-18 | 1 | -1/+1 | |
| | ||||||
* | setting default port of own address to have a proper fallback if src addr ↵ | Martin Willi | 2008-11-18 | 1 | -0/+1 | |
| | | | | lookup fails | |||||
* | consider interfaces we do not monitor as up (e.g. lo) | Martin Willi | 2008-11-18 | 1 | -1/+2 | |
| | | | | fixes load-testing against 127.0.0.1 | |||||
* | version bump to 4.2.10 | Andreas Steffen | 2008-11-18 | 5 | -6/+8 | |
| | ||||||
* | separated updown listener to its own class4.2.9 | Martin Willi | 2008-11-17 | 4 | -201/+380 | |
| | | | | caching interface names to properly remove rules if interface has changed | |||||
* | fixed virtual IP re-installation failure in MOBIKE scenarios introduced with ↵ | Andreas Steffen | 2008-11-17 | 1 | -13/+19 | |
| | | | | changeset 4662 | |||||
* | set release number back to 4.2.9 | Andreas Steffen | 2008-11-16 | 1 | -1/+1 | |
| | ||||||
* | added migration to NEWS | Andreas Steffen | 2008-11-16 | 4 | -3/+7 | |
| | ||||||
* | completed migration of MIPv6 connections | Andreas Steffen | 2008-11-16 | 5 | -36/+75 | |
| | ||||||
* | show TRANSPORT_PROXY mode in ipsec status | Andreas Steffen | 2008-11-16 | 1 | -3/+5 | |
| | ||||||
* | using aligned buffers for netlink | Martin Willi | 2008-11-14 | 3 | -14/+23 | |
| | ||||||
* | fallback to reauthentication if peer does not support CHILD_SA rekeying | Martin Willi | 2008-11-14 | 2 | -2/+27 | |
| | ||||||
* | fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SAS | Martin Willi | 2008-11-14 | 1 | -1/+27 | |
| | ||||||
* | also use correct encap parameter in PF_KEY | Martin Willi | 2008-11-14 | 1 | -1/+1 | |
| | ||||||
* | fixed encap enabling in xfrm (using new encap state, not the old one) | Martin Willi | 2008-11-14 | 1 | -3/+3 | |
| | ||||||
* | do not use a route if outgoing interface is down | Martin Willi | 2008-11-14 | 2 | -55/+82 | |
| | | | | other cleanups | |||||
* | rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead! | Martin Willi | 2008-11-14 | 1 | -2/+3 | |
| | ||||||
* | do not use public interface for functions which are local anyway | Martin Willi | 2008-11-14 | 1 | -57/+54 | |
| | ||||||
* | reset IKE_SA on bus during child_sa destruction | Martin Willi | 2008-11-14 | 1 | -0/+2 | |
| | ||||||
* | adapted evaltest.dat to changed debug output | Andreas Steffen | 2008-11-13 | 2 | -4/+0 | |
| | ||||||
* | updated API doc for socket.h | Martin Willi | 2008-11-13 | 1 | -10/+7 | |
| | ||||||
* | ported socket enumerator to raw-socket.c | Martin Willi | 2008-11-13 | 2 | -85/+78 | |
| | | | | some cleanups in socket.c | |||||
* | added type=transport_proxy and installpolicy=yes|no to man page | Andreas Steffen | 2008-11-13 | 1 | -4/+16 | |
| | ||||||
* | added MIPv6 functionality to NEWS | Andreas Steffen | 2008-11-13 | 1 | -7/+16 | |
| | ||||||
* | corrected unwanted deletion in comment | Andreas Steffen | 2008-11-12 | 1 | -2/+2 | |
| | ||||||
* | BEET mode might want forwarding policies | Martin Willi | 2008-11-12 | 1 | -11/+11 | |
| | ||||||
* | removed some obsolete includes | Martin Willi | 2008-11-12 | 1 | -11/+0 | |
| | ||||||
* | moved ike_initiator flag to IKE_SAs condition bitfield | Martin Willi | 2008-11-12 | 3 | -30/+12 | |
| | ||||||
* | ported some hard-to-merge cherries back to trunk :-/ | Martin Willi | 2008-11-12 | 9 | -96/+84 | |
| | | | | | shame, svn, shame: this was ways to complicated we should consider a switch to git... | |||||
* | fixing keylength bug at the right place: | Martin Willi | 2008-11-12 | 2 | -10/+2 | |
| | | | | we usually don't touch output parameters if operations fails | |||||
* | improved fix | Andreas Steffen | 2008-11-12 | 1 | -5/+9 | |
| | ||||||
* | fixed AES-CCM/GCM authenticated encryption by eliminating generation of ↵ | Andreas Steffen | 2008-11-12 | 1 | -0/+4 | |
| | | | | superfluous generation of integrity keying material | |||||
* | fixed compiler warnings issued by: | Martin Willi | 2008-11-11 | 22 | -59/+125 | |
| | | | | | | gcc 4.3 curl.h gcc type-checking glibc with enabled FORTIFY_SOURCE checking | |||||
* | #defing out compress algs to avoid compiler warning | Martin Willi | 2008-11-11 | 2 | -2/+6 | |
| | ||||||
* | updated method signature of add_policy | Martin Willi | 2008-11-11 | 1 | -5/+6 | |
| | ||||||
* | fixed compilation of medcli plugin | Martin Willi | 2008-11-11 | 2 | -28/+50 | |
| | ||||||
* | added missing include for ULONG_MAX | Martin Willi | 2008-11-11 | 1 | -0/+1 | |
| | ||||||
* | announcing the kernel plugins | Tobias Brunner | 2008-11-11 | 1 | -2/+5 | |
| | ||||||
* | fixing mediation extension | Tobias Brunner | 2008-11-11 | 2 | -11/+25 | |
| | ||||||
* | some typos | Tobias Brunner | 2008-11-11 | 2 | -6/+6 | |
| | ||||||
* | added some NEWS for 4.2.9 | Martin Willi | 2008-11-11 | 1 | -0/+23 | |
| | ||||||
* | dynamic logging configuration through strongswan.conf | Martin Willi | 2008-11-11 | 6 | -39/+164 | |
| | | | | fallback to existing ipsec.conf/stroke loglevel configuration |