Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | Implemented a checkout/checkin mechanism for IPsec SAs | Tobias Brunner | 2012-08-08 | 2 | -25/+285 | |
| | | | | | | | | | | SAs can only be checked out by a single thread and all other threads block until the SA is checked in again. | |||||
| * | IPsec policy manager added | Tobias Brunner | 2012-08-08 | 6 | -0/+278 | |
| | | | | | | | | This version only provides the very simplest management functions. | |||||
| * | Method added to easily compare IPsec policies | Tobias Brunner | 2012-08-08 | 2 | -0/+29 | |
| | | ||||||
| * | Class representing an IPsec policy added | Tobias Brunner | 2012-08-08 | 4 | -0/+302 | |
| | | ||||||
| * | Schedule and relay expiration events for created IPsec SAs | Tobias Brunner | 2012-08-08 | 1 | -0/+95 | |
| | | ||||||
| * | Added class to relay IPsec events (like expiration) to listeners | Tobias Brunner | 2012-08-08 | 7 | -0/+332 | |
| | | | | | | | | | | Currently, only expiration of IPsec SAs is supported. Later other events for e.g. acquires or changed NAT endpoints could be added. | |||||
| * | Added IPsec SA manager | Tobias Brunner | 2012-08-08 | 6 | -7/+458 | |
| | | ||||||
| * | Add methods to easily compare IPsec SAs | Tobias Brunner | 2012-08-08 | 2 | -0/+51 | |
| | | ||||||
| * | Class representing an IPsec SA added | Tobias Brunner | 2012-08-08 | 4 | -2/+356 | |
| | | | | | | | | The IPsec SA also manages the respective ESP context. | |||||
| * | Moved types used by kernel_ipsec_t interface (and libipsec) to libstrongswan | Tobias Brunner | 2012-08-08 | 9 | -176/+223 | |
| | | | | | | | | This avoids a dependency of libipsec to libhydra. | |||||
| * | Use a CALLBACK feature to create charon's sender and receiver | Tobias Brunner | 2012-08-08 | 1 | -12/+31 | |
| | | ||||||
| * | Added a simple blocking queue around linked_list_t | Tobias Brunner | 2012-08-08 | 4 | -6/+232 | |
| | | ||||||
| * | esp_packet_t implements packet_t interface | Tobias Brunner | 2012-08-08 | 2 | -66/+100 | |
| | | | | | | | | This should allow to avoid unnecessary cloning of packet data. | |||||
| * | Extended constructor for packet_t added (takes src, dst and data) | Tobias Brunner | 2012-08-08 | 2 | -3/+24 | |
| | | ||||||
| * | Moved packet_t to libstrongswan | Tobias Brunner | 2012-08-08 | 13 | -54/+43 | |
| | | ||||||
| * | Headers from libhydra (kernel interface related) are required in libipsec | Tobias Brunner | 2012-08-08 | 1 | -1/+3 | |
| | | ||||||
| * | ESP packet wrapper added, handles encryption/decryption/verification etc. | Tobias Brunner | 2012-08-08 | 4 | -2/+554 | |
| | | ||||||
| * | Adding class to manage ESP context (crypto, sequence numbers) | Tobias Brunner | 2012-08-08 | 4 | -2/+414 | |
| | | ||||||
| * | Added a method to bio_writer_t that allows to skip a number of bytes | Tobias Brunner | 2012-08-08 | 2 | -0/+24 | |
| | | | | | | | | | | A chunk pointing to the skipped bytes is returned, allowing users of bio_writer_t to write/copy data to the skipped bytes themselves. | |||||
| * | Added a method to bio_writer_t that allows to extract the internal buffer | Tobias Brunner | 2012-08-08 | 2 | -0/+29 | |
| | | ||||||
| * | Added methods to bio_reader_t to read data from end of buffer | Tobias Brunner | 2012-08-08 | 2 | -24/+204 | |
| | | ||||||
| * | Increase log verbosity when sending NAT keep-alives | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | ||||||
| * | Only log the sending of regular packets in sender_t | Tobias Brunner | 2012-08-08 | 1 | -1/+2 | |
| | | | | | | | | | | | | | | | | When sender_t is used to send ESP packets this would otherwise cause an extreme amount of debug messages. With this change all messages sent via sender_t.send_no_marker() cause no extra DBG1 log message, but for debugging purposes the socket plugins do log the same message again with DBG2 for all packets. | |||||
* | | Merge branch 'android-ndk' | Tobias Brunner | 2012-08-13 | 82 | -328/+1458 | |
|\| | | | | | | | | | | | | | | | | | | | | | | | This branch comes with some preliminary changes for the user-land IPsec implementation and the Android App. One important change is that the UDP ports used by the socket-default plugin were made configurable (either via ./configure or strongswan.conf). Also, the plugin does randomly allocate a port if it is configured to 0, which is useful for client implementations. A consequence of these changes is that the local UDP port used when creating ike_cfg_t objects has to be fetched from the socket. | |||||
| * | Added option to prevent socket-default from setting the source address on ↵ | Tobias Brunner | 2012-08-08 | 2 | -1/+12 | |
| | | | | | | | | outbound packets | |||||
| * | Allocate UDP ports randomly in Android NDK build. | Tobias Brunner | 2012-08-08 | 1 | -1/+2 | |
| | | ||||||
| * | socket-default plugin allocates random ports if configured to 0. | Tobias Brunner | 2012-08-08 | 3 | -39/+96 | |
| | | | | | | | | Also added strongswan.conf options to change the ports. | |||||
| * | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 14 | -20/+33 | |
| | | ||||||
| * | Added get_port() method to socket_t to learn the listening port. | Tobias Brunner | 2012-08-08 | 6 | -5/+59 | |
| | | ||||||
| * | Added ESP log group for libipsec log messages. | Tobias Brunner | 2012-08-08 | 6 | -3/+12 | |
| | | ||||||
| * | Use send_no_marker to send NAT keepalives. | Tobias Brunner | 2012-08-08 | 2 | -9/+4 | |
| | | ||||||
| * | Avoid double-free when prepending Non-ESP marker. | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | ||||||
| * | Function added to send packets without Non-ESP marker. | Tobias Brunner | 2012-08-08 | 2 | -20/+36 | |
| | | ||||||
| * | Avoid unnecessary copy of packet data when removing Non-ESP marker. | Tobias Brunner | 2012-08-08 | 1 | -2/+1 | |
| | | ||||||
| * | Added packet_t.skip_bytes method to skip bytes at the start of a packet. | Tobias Brunner | 2012-08-08 | 2 | -3/+26 | |
| | | ||||||
| * | Improved how NAT-T keepalives are handled in sockets/receiver. | Tobias Brunner | 2012-08-08 | 4 | -24/+16 | |
| | | ||||||
| * | Let kernel interfaces decide how to enable UDP decapsulation of ESP packets. | Tobias Brunner | 2012-08-08 | 10 | -90/+133 | |
| | | ||||||
| * | Callback for ESP packets added to receiver. | Tobias Brunner | 2012-08-08 | 2 | -6/+86 | |
| | | ||||||
| * | Add Non-ESP marker in sender and not individual socket plugins. | Tobias Brunner | 2012-08-08 | 5 | -39/+23 | |
| | | ||||||
| * | Handle Non-ESP marker in receiver and not individual socket plugins. | Tobias Brunner | 2012-08-08 | 4 | -40/+34 | |
| | | ||||||
| * | Java code style fixed (analogous to C code). | Tobias Brunner | 2012-08-08 | 2 | -14/+28 | |
| | | ||||||
| * | Load libipsec in Android app. | Tobias Brunner | 2012-08-08 | 4 | -1/+15 | |
| | | ||||||
| * | Stub library for user space IPsec implementation added. | Tobias Brunner | 2012-08-08 | 8 | -0/+187 | |
| | | ||||||
| * | Some NDK build info updated. | Tobias Brunner | 2012-08-08 | 1 | -4/+7 | |
| | | ||||||
| * | Changed minimal SDK/API level to 14. | Tobias Brunner | 2012-08-08 | 3 | -4/+4 | |
| | | ||||||
| * | Added android.net.VpnService wrapper around charon (loaded via JNI). | Tobias Brunner | 2012-08-08 | 6 | -6/+228 | |
| | | ||||||
| * | Added Android shell app created with Android SDK. | Tobias Brunner | 2012-08-08 | 11 | -0/+118 | |
| | | ||||||
| * | Android.mk for NDK build added. | Tobias Brunner | 2012-08-08 | 4 | -0/+96 | |
| | | ||||||
| * | Extracted some parts from Android.mk.in which can be used for NDK builds. | Tobias Brunner | 2012-08-08 | 4 | -18/+25 | |
| | | ||||||
| * | Use filter instead of findstring to check for enabled plugins in Android.mk. | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | | | | | | | | | | | findstring is not prefix-safe (i.e. android matches android-log). On the other hand filter matches words separated by whitespace and if no wildcard (%) is used the full word has to match. |