Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | android: Ignore if peer is unreachable when reestablishing an SA | Tobias Brunner | 2012-10-18 | 1 | -2/+7 | |
| | | ||||||
| * | android: Use a shorter timeout for retransmits | Tobias Brunner | 2012-10-18 | 1 | -1/+1 | |
| | | ||||||
| * | android: Use keyingtries=%forever and dpd|closeaction=restart | Tobias Brunner | 2012-10-18 | 2 | -12/+4 | |
| | | | | | | | | | | | | | | We also ignore the CHILD_SA_DOWN event. This should allow us to keep the connection up as long as the user does not manually disconnect. | |||||
| * | Resolve hosts by DNS name in separate threads so we can cancel them | Tobias Brunner | 2012-10-18 | 8 | -50/+373 | |
| | | | | | | | | | | | | | | | | | | | | getaddrinfo(3) may block a long time so proper termination of the daemon may block if DNS servers are not reachable. getaddrinfo(3) is an optional cancellation point in posix threads so it might still block a shutdown but at least on Android (with the signal based pthread_cancel implementation) it works, on Linux starter will kill charon anyway after a while. | |||||
| * | android: Handle unreachable peers via alert | Tobias Brunner | 2012-10-16 | 1 | -17/+5 | |
| | | ||||||
| * | Added a new alert that is raised if peer does not respond to initial IKE message | Tobias Brunner | 2012-10-16 | 2 | -0/+4 | |
| | | ||||||
| * | android: Use 0.0.0.0/0 as local traffic selector | Tobias Brunner | 2012-10-16 | 1 | -1/+2 | |
| | | | | | | | | | | This is helpful if the responder also wants to tunnel e.g. multicast packages. | |||||
| * | Log IP addresses for discarded inbound IPsec packets | Tobias Brunner | 2012-10-16 | 1 | -1/+3 | |
| | | ||||||
| * | android: Bypass/protect previously bypassed sockets if connectivity changes | Tobias Brunner | 2012-10-16 | 3 | -4/+30 | |
| | | ||||||
| * | android: Support for IPsec SA update added | Tobias Brunner | 2012-10-16 | 1 | -1/+2 | |
| | | ||||||
| * | Use pointers for lookups in IPsec SA manager | Tobias Brunner | 2012-10-16 | 1 | -16/+16 | |
| | | ||||||
| * | IPsec SA manager implements update_sa() | Tobias Brunner | 2012-10-16 | 2 | -0/+60 | |
| | | ||||||
| * | Setter for src and destination address of ipsec_sa_t added | Tobias Brunner | 2012-10-16 | 2 | -0/+30 | |
| | | ||||||
| * | android: Trigger roam events in case connectivity changes | Tobias Brunner | 2012-10-16 | 1 | -0/+63 | |
| | | ||||||
| * | android: Register NetworkManager as BroadcastReceiver and relay events via JNI | Tobias Brunner | 2012-10-16 | 5 | -8/+184 | |
| | | ||||||
| * | android: Determine source address dynamically | Tobias Brunner | 2012-10-16 | 6 | -64/+48 | |
| | | ||||||
| * | android: Added NetworkManager class which allows to retrieve a local IP address | Tobias Brunner | 2012-10-16 | 4 | -0/+274 | |
| | | ||||||
| * | android: Increase compile warnings | Tobias Brunner | 2012-10-16 | 1 | -0/+3 | |
| | | ||||||
| * | android: Fixed "Configure" button in Android VPN dialog | Tobias Brunner | 2012-10-16 | 1 | -1/+1 | |
| | | ||||||
| * | android: Don't use the default ESP proposal as it includes unsupported ↵ | Tobias Brunner | 2012-10-16 | 1 | -1/+4 | |
| | | | | | | | | algorithms | |||||
* | | no need to include pa_tnc_msg.h | Andreas Steffen | 2012-10-18 | 6 | -7/+1 | |
| | | ||||||
* | | refactored PA-TNC message handling by IMVs | Andreas Steffen | 2012-10-17 | 14 | -617/+992 | |
| | | ||||||
* | | refactored PA-TNC message handling by IMCs | Andreas Steffen | 2012-10-17 | 15 | -607/+899 | |
| | | ||||||
* | | increased IMC/IMV debug level to 3 | Andreas Steffen | 2012-10-17 | 6 | -6/+6 | |
| | | ||||||
* | | removed unused variable | Andreas Steffen | 2012-10-17 | 1 | -1/+0 | |
|/ | ||||||
* | Remove unused this parameter to load_issuer_cert/key(), as it is uninitialized | Martin Willi | 2012-10-16 | 1 | -4/+4 | |
| | ||||||
* | Generate a load-tester certificate only for DN or subjectAltName identities | Martin Willi | 2012-10-16 | 1 | -7/+17 | |
| | ||||||
* | Add a load-tester initiator_match option to match custom initiator_id | Martin Willi | 2012-10-16 | 1 | -2/+15 | |
| | ||||||
* | Encode non-DN load-tester identities as subjectAltNames | Martin Willi | 2012-10-16 | 1 | -1/+16 | |
| | ||||||
* | Add a load-tester digest option for issuing peer certificates | Martin Willi | 2012-10-16 | 1 | -1/+16 | |
| | ||||||
* | Load a multiple load-tester CA certificates from a directory | Martin Willi | 2012-10-16 | 1 | -4/+63 | |
| | ||||||
* | Added load-tester options to read issuing CA certificate and key from files | Martin Willi | 2012-10-16 | 1 | -7/+45 | |
| | ||||||
* | Use proper offset when adding mark attribute in kernel-netlink plugin | Tobias Brunner | 2012-10-15 | 1 | -1/+1 | |
| | ||||||
* | Also add mark when querying current replay state in kernel-netlink plugin | Tobias Brunner | 2012-10-15 | 1 | -2/+21 | |
| | ||||||
* | allow registration of multiple message type | Andreas Steffen | 2012-10-14 | 12 | -138/+175 | |
| | ||||||
* | implemented IETF Operational Status attribute | Andreas Steffen | 2012-10-13 | 8 | -2/+501 | |
| | ||||||
* | corrected class description | Andreas Steffen | 2012-10-13 | 3 | -3/+3 | |
| | ||||||
* | implemented IETF Factory Default Password Enabled attribute | Andreas Steffen | 2012-10-12 | 6 | -1/+317 | |
| | ||||||
* | added tnc/tnccs-20-os scenario | Andreas Steffen | 2012-10-12 | 17 | -0/+255 | |
| | ||||||
* | implemented the Forwarding Enabled attribute | Andreas Steffen | 2012-10-12 | 8 | -5/+390 | |
| | ||||||
* | minor fixes in imc_attestation.c | Andreas Steffen | 2012-10-12 | 1 | -1/+1 | |
| | ||||||
* | Fixed update_sa in kernel-netlink plugin if marks are used | Tobias Brunner | 2012-10-11 | 1 | -0/+18 | |
| | ||||||
* | Fixed compilation of android_handler_t | Tobias Brunner | 2012-10-11 | 1 | -0/+1 | |
| | ||||||
* | version bump to 5.0.2dr1 | Andreas Steffen | 2012-10-11 | 1 | -1/+1 | |
| | ||||||
* | implemented os_info_t class | Andreas Steffen | 2012-10-10 | 18 | -225/+519 | |
| | ||||||
* | Remove outdated TODO information | Martin Willi | 2012-10-10 | 1 | -25/+1 | |
| | ||||||
* | implemented IETF String Version attribute | Andreas Steffen | 2012-10-10 | 8 | -26/+446 | |
| | ||||||
* | restrict package name and package version number fields to 255 octets | Andreas Steffen | 2012-10-10 | 1 | -0/+4 | |
| | ||||||
* | created OS IMC/IMV pair | Andreas Steffen | 2012-10-09 | 12 | -2/+1242 | |
| | ||||||
* | implemented IETF Installed Packages attribute | Andreas Steffen | 2012-10-09 | 4 | -1/+407 | |
| |