aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * Implemented a checkout/checkin mechanism for IPsec SAsTobias Brunner2012-08-082-25/+285
| | | | | | | | | | SAs can only be checked out by a single thread and all other threads block until the SA is checked in again.
| * IPsec policy manager addedTobias Brunner2012-08-086-0/+278
| | | | | | | | This version only provides the very simplest management functions.
| * Method added to easily compare IPsec policiesTobias Brunner2012-08-082-0/+29
| |
| * Class representing an IPsec policy addedTobias Brunner2012-08-084-0/+302
| |
| * Schedule and relay expiration events for created IPsec SAsTobias Brunner2012-08-081-0/+95
| |
| * Added class to relay IPsec events (like expiration) to listenersTobias Brunner2012-08-087-0/+332
| | | | | | | | | | Currently, only expiration of IPsec SAs is supported. Later other events for e.g. acquires or changed NAT endpoints could be added.
| * Added IPsec SA managerTobias Brunner2012-08-086-7/+458
| |
| * Add methods to easily compare IPsec SAsTobias Brunner2012-08-082-0/+51
| |
| * Class representing an IPsec SA addedTobias Brunner2012-08-084-2/+356
| | | | | | | | The IPsec SA also manages the respective ESP context.
| * Moved types used by kernel_ipsec_t interface (and libipsec) to libstrongswanTobias Brunner2012-08-089-176/+223
| | | | | | | | This avoids a dependency of libipsec to libhydra.
| * Use a CALLBACK feature to create charon's sender and receiverTobias Brunner2012-08-081-12/+31
| |
| * Added a simple blocking queue around linked_list_tTobias Brunner2012-08-084-6/+232
| |
| * esp_packet_t implements packet_t interfaceTobias Brunner2012-08-082-66/+100
| | | | | | | | This should allow to avoid unnecessary cloning of packet data.
| * Extended constructor for packet_t added (takes src, dst and data)Tobias Brunner2012-08-082-3/+24
| |
| * Moved packet_t to libstrongswanTobias Brunner2012-08-0813-54/+43
| |
| * Headers from libhydra (kernel interface related) are required in libipsecTobias Brunner2012-08-081-1/+3
| |
| * ESP packet wrapper added, handles encryption/decryption/verification etc.Tobias Brunner2012-08-084-2/+554
| |
| * Adding class to manage ESP context (crypto, sequence numbers)Tobias Brunner2012-08-084-2/+414
| |
| * Added a method to bio_writer_t that allows to skip a number of bytesTobias Brunner2012-08-082-0/+24
| | | | | | | | | | A chunk pointing to the skipped bytes is returned, allowing users of bio_writer_t to write/copy data to the skipped bytes themselves.
| * Added a method to bio_writer_t that allows to extract the internal bufferTobias Brunner2012-08-082-0/+29
| |
| * Added methods to bio_reader_t to read data from end of bufferTobias Brunner2012-08-082-24/+204
| |
| * Increase log verbosity when sending NAT keep-alivesTobias Brunner2012-08-081-1/+1
| |
| * Only log the sending of regular packets in sender_tTobias Brunner2012-08-081-1/+2
| | | | | | | | | | | | | | | | When sender_t is used to send ESP packets this would otherwise cause an extreme amount of debug messages. With this change all messages sent via sender_t.send_no_marker() cause no extra DBG1 log message, but for debugging purposes the socket plugins do log the same message again with DBG2 for all packets.
* | Merge branch 'android-ndk'Tobias Brunner2012-08-1382-328/+1458
|\| | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket.
| * Added option to prevent socket-default from setting the source address on ↵Tobias Brunner2012-08-082-1/+12
| | | | | | | | outbound packets
| * Allocate UDP ports randomly in Android NDK build.Tobias Brunner2012-08-081-1/+2
| |
| * socket-default plugin allocates random ports if configured to 0.Tobias Brunner2012-08-083-39/+96
| | | | | | | | Also added strongswan.conf options to change the ports.
| * Replaced usages of CHARON_*_PORT with calls to get_port().Tobias Brunner2012-08-0814-20/+33
| |
| * Added get_port() method to socket_t to learn the listening port.Tobias Brunner2012-08-086-5/+59
| |
| * Added ESP log group for libipsec log messages.Tobias Brunner2012-08-086-3/+12
| |
| * Use send_no_marker to send NAT keepalives.Tobias Brunner2012-08-082-9/+4
| |
| * Avoid double-free when prepending Non-ESP marker.Tobias Brunner2012-08-081-1/+1
| |
| * Function added to send packets without Non-ESP marker.Tobias Brunner2012-08-082-20/+36
| |
| * Avoid unnecessary copy of packet data when removing Non-ESP marker.Tobias Brunner2012-08-081-2/+1
| |
| * Added packet_t.skip_bytes method to skip bytes at the start of a packet.Tobias Brunner2012-08-082-3/+26
| |
| * Improved how NAT-T keepalives are handled in sockets/receiver.Tobias Brunner2012-08-084-24/+16
| |
| * Let kernel interfaces decide how to enable UDP decapsulation of ESP packets.Tobias Brunner2012-08-0810-90/+133
| |
| * Callback for ESP packets added to receiver.Tobias Brunner2012-08-082-6/+86
| |
| * Add Non-ESP marker in sender and not individual socket plugins.Tobias Brunner2012-08-085-39/+23
| |
| * Handle Non-ESP marker in receiver and not individual socket plugins.Tobias Brunner2012-08-084-40/+34
| |
| * Java code style fixed (analogous to C code).Tobias Brunner2012-08-082-14/+28
| |
| * Load libipsec in Android app.Tobias Brunner2012-08-084-1/+15
| |
| * Stub library for user space IPsec implementation added.Tobias Brunner2012-08-088-0/+187
| |
| * Some NDK build info updated.Tobias Brunner2012-08-081-4/+7
| |
| * Changed minimal SDK/API level to 14.Tobias Brunner2012-08-083-4/+4
| |
| * Added android.net.VpnService wrapper around charon (loaded via JNI).Tobias Brunner2012-08-086-6/+228
| |
| * Added Android shell app created with Android SDK.Tobias Brunner2012-08-0811-0/+118
| |
| * Android.mk for NDK build added.Tobias Brunner2012-08-084-0/+96
| |
| * Extracted some parts from Android.mk.in which can be used for NDK builds.Tobias Brunner2012-08-084-18/+25
| |
| * Use filter instead of findstring to check for enabled plugins in Android.mk.Tobias Brunner2012-08-081-1/+1
| | | | | | | | | | | | findstring is not prefix-safe (i.e. android matches android-log). On the other hand filter matches words separated by whitespace and if no wildcard (%) is used the full word has to match.