aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Raise a bus alert when IKE message header parsing failsMartin Willi2012-10-242-0/+3
|
* Raise a bus alert when a received message contains unknown SPIsMartin Willi2012-10-242-0/+6
|
* Define stroke counter types to implementMartin Willi2012-10-242-0/+86
|
* Add a stub for IKE event counters in strokeMartin Willi2012-10-244-0/+112
|
* Add a load-tester option to define the IKE version to use for testingMartin Willi2012-10-241-2/+9
|
* Remove peer_cfg IKE version matching, as it is done in ike_cfg matchingMartin Willi2012-10-241-22/+3
|
* Respect IKE version while selecting an ike_cfg as responderMartin Willi2012-10-244-13/+38
|
* Remove version argument on peer_cfg constructor, use ike_cfg version insteadMartin Willi2012-10-2414-26/+18
|
* Add IKE version information to ike_cfg_tMartin Willi2012-10-2414-25/+55
|
* Move ike_version_t definition from peer_cfg_t to ike_cfg_tMartin Willi2012-10-244-24/+24
|
* android: Enable ECC in the app as our custom built libcrypto supports itTobias Brunner2012-10-231-3/+0
|
* version bump to 5.0.2dr2Andreas Steffen2012-10-201-1/+1
|
* updated NEWSAndreas Steffen2012-10-191-0/+7
|
* implemented IETF Numeric Version attributeAndreas Steffen2012-10-189-8/+436
|
* implemented IETF Remediation Instructions attributeAndreas Steffen2012-10-187-3/+524
|
* Handle type of first EAP-RADIUS response more sophisticatedTobias Brunner2012-10-181-3/+18
|
* Starter ignores non-fatal errors when reloading configTobias Brunner2012-10-181-1/+1
|
* Starter unroutes removed or changed connections before loading and routing ↵Tobias Brunner2012-10-183-0/+19
| | | | new ones
* Update routed connections in trap managerTobias Brunner2012-10-181-37/+39
| | | | | | Before this change, modified configs that have been updated with ipsec reload, could properly be started manually, but the old config would get used if triggered via trap policies.
* Reload logger configuration on SIGHUPTobias Brunner2012-10-186-208/+400
| | | | | | Besides changing the configuration this allows to easily rotate log files. Also moved logger initialization back to daemon_t.
* Make syslog and file loggers configurable at runtimeTobias Brunner2012-10-188-80/+185
|
* Store loggers in conftest separately, not on charonTobias Brunner2012-10-182-6/+19
|
* Added an option to reload certificates from PKCS#11 tokens on SIGHUPTobias Brunner2012-10-182-0/+19
|
* Copy the name of pkcs11_library_t objectsTobias Brunner2012-10-182-2/+3
| | | | | Strings returned by settings_t.create_section_enumerator will be freed when the config is reloaded.
* New Android release after adding MOBIKE supportTobias Brunner2012-10-181-2/+2
|
* Merge branch 'android-mobility'Tobias Brunner2012-10-1834-199/+1224
|\ | | | | | | | | | | | | | | | | This brings support for MOBIKE to the Android app. The app also tries to keep the connection up as long as possible. DNS queries are now handled by a new class that uses independent threads to resolve them, this allows to cancel them e.g. if no network connectivity is available (otherwise the app would block until the DNS query returns).
| * Use a shortcut to resolve numeric IP addresses (no need for separate threads)Tobias Brunner2012-10-181-0/+33
| |
| * Use native threads in host resolver so that it works even if processor has ↵Tobias Brunner2012-10-181-45/+77
| | | | | | | | no threads
| * Terminate unused resolver threads after a timeoutTobias Brunner2012-10-184-9/+41
| |
| * Only create more threads if needed in host_resolver_tTobias Brunner2012-10-181-1/+9
| |
| * Use a helper function to add milliseconds to timeval structsTobias Brunner2012-10-186-37/+22
| |
| * android: Ignore if peer is unreachable when reestablishing an SATobias Brunner2012-10-181-2/+7
| |
| * android: Use a shorter timeout for retransmitsTobias Brunner2012-10-181-1/+1
| |
| * android: Use keyingtries=%forever and dpd|closeaction=restartTobias Brunner2012-10-182-12/+4
| | | | | | | | | | | | | | We also ignore the CHILD_SA_DOWN event. This should allow us to keep the connection up as long as the user does not manually disconnect.
| * Resolve hosts by DNS name in separate threads so we can cancel themTobias Brunner2012-10-188-50/+373
| | | | | | | | | | | | | | | | | | | | getaddrinfo(3) may block a long time so proper termination of the daemon may block if DNS servers are not reachable. getaddrinfo(3) is an optional cancellation point in posix threads so it might still block a shutdown but at least on Android (with the signal based pthread_cancel implementation) it works, on Linux starter will kill charon anyway after a while.
| * android: Handle unreachable peers via alertTobias Brunner2012-10-161-17/+5
| |
| * Added a new alert that is raised if peer does not respond to initial IKE messageTobias Brunner2012-10-162-0/+4
| |
| * android: Use 0.0.0.0/0 as local traffic selectorTobias Brunner2012-10-161-1/+2
| | | | | | | | | | This is helpful if the responder also wants to tunnel e.g. multicast packages.
| * Log IP addresses for discarded inbound IPsec packetsTobias Brunner2012-10-161-1/+3
| |
| * android: Bypass/protect previously bypassed sockets if connectivity changesTobias Brunner2012-10-163-4/+30
| |
| * android: Support for IPsec SA update addedTobias Brunner2012-10-161-1/+2
| |
| * Use pointers for lookups in IPsec SA managerTobias Brunner2012-10-161-16/+16
| |
| * IPsec SA manager implements update_sa()Tobias Brunner2012-10-162-0/+60
| |
| * Setter for src and destination address of ipsec_sa_t addedTobias Brunner2012-10-162-0/+30
| |
| * android: Trigger roam events in case connectivity changesTobias Brunner2012-10-161-0/+63
| |
| * android: Register NetworkManager as BroadcastReceiver and relay events via JNITobias Brunner2012-10-165-8/+184
| |
| * android: Determine source address dynamicallyTobias Brunner2012-10-166-64/+48
| |
| * android: Added NetworkManager class which allows to retrieve a local IP addressTobias Brunner2012-10-164-0/+274
| |
| * android: Increase compile warningsTobias Brunner2012-10-161-0/+3
| |
| * android: Fixed "Configure" button in Android VPN dialogTobias Brunner2012-10-161-1/+1
| |
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-08 19:11:46 +0000