Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | kernel-interface: support enumeration of virtual-only IPs | Martin Willi | 2013-05-06 | 3 | -9/+20 | |
| | | ||||||
| * | kernel-pfkey: refactor route installation to a dedicate function | Martin Willi | 2013-05-06 | 1 | -74/+81 | |
| | | ||||||
| * | kernel-pfroute: split /0 routes to avoid conflict with default route | Martin Willi | 2013-05-06 | 1 | -0/+15 | |
| | | ||||||
| * | kernel-pfkey: check if we have a gateway before comparing them | Martin Willi | 2013-05-06 | 1 | -0/+1 | |
| | | ||||||
| * | kernel-pfkey: install route along with input, not forward policies | Martin Willi | 2013-05-06 | 1 | -20/+20 | |
| | | | | | | | | | | | | As forwarding policies are not available on all systems (OS X), using the forward policy to attach the route is a bad pick. Using input policies allows OS X to install routes. | |||||
| * | kernel-pfroute: rescan address list for an interface if its state changes | Martin Willi | 2013-05-06 | 1 | -0/+43 | |
| | | | | | | | | | | It seems that we don't get address notifications if the interface is down on OS X. | |||||
| * | kernel-pfroute: add newly appearing interfaces to the interface cache | Martin Willi | 2013-05-06 | 1 | -1/+22 | |
| | | ||||||
| * | kernel-pfroute: implement get_nexthop() | Martin Willi | 2013-05-06 | 1 | -6/+73 | |
| | | ||||||
| * | kernel-pfroute: install and uninstall routes | Martin Willi | 2013-05-06 | 1 | -2/+129 | |
| | | ||||||
| * | kernel-pfroute: collect replies received for our own queries | Martin Willi | 2013-05-06 | 1 | -4/+40 | |
| | | ||||||
| * | kernel-pfroute: refactor PF_ROUTE message processing, use an enumerator | Martin Willi | 2013-05-06 | 1 | -35/+117 | |
| | | ||||||
| * | kernel-pfkey: use an int to set esp_port with a sysctl on OS X | Martin Willi | 2013-05-06 | 1 | -2/+4 | |
| | | ||||||
| * | kernel-pfroute: use INIT() macro for allocations | Martin Willi | 2013-05-06 | 1 | -17/+21 | |
| | | ||||||
| * | kernel-pfroute: use only a single PF_ROUTE socket for both events and queries | Martin Willi | 2013-05-06 | 1 | -27/+11 | |
| | | ||||||
| * | kernel-pfroute: fix length check when receiving PF_ROUTE messages | Martin Willi | 2013-05-06 | 1 | -1/+1 | |
| | | ||||||
| * | kernel-pfkey: remove obsolete pluto specific behavior | Martin Willi | 2013-05-06 | 1 | -5/+1 | |
| | | ||||||
| * | kernel-netlink: remove obsolete pluto specific behavior | Martin Willi | 2013-05-06 | 1 | -7/+1 | |
| | | ||||||
| * | tun_device: add a getter for the address previously passed to set_address() | Martin Willi | 2013-05-06 | 2 | -0/+32 | |
| | | ||||||
| * | tun_device: add a getter for the underlying file descriptor | Martin Willi | 2013-05-06 | 2 | -0/+14 | |
| | | ||||||
| * | tun-device: use host_create_netmask() to calculate interface netmask | Martin Willi | 2013-05-06 | 1 | -49/+12 | |
| | | ||||||
| * | host: add a netmask constructor taking the number of network bits | Martin Willi | 2013-05-06 | 2 | -0/+57 | |
| | | ||||||
| * | host: remove unused host_t.get_differences() method | Martin Willi | 2013-05-06 | 2 | -39/+0 | |
| | | ||||||
| * | host: print %#H format specifiers not as %any, but with the port | Martin Willi | 2013-05-06 | 1 | -1/+1 | |
| | | ||||||
| * | host: initialize sockaddr->sa_len if it is available | Martin Willi | 2013-05-06 | 1 | -0/+14 | |
| | | ||||||
| * | child-sa: pass traffic selector to add_sa() regardless of IPsec mode | Martin Willi | 2013-05-06 | 1 | -14/+11 | |
| | | | | | | | | | | This lets the kernel backend decide what to do with it, and in fact all kernel interfaces already handle this correctly. | |||||
| * | socket-default: to bind to one dynamic port on OS X, create v4 socket before v6 | Martin Willi | 2013-05-06 | 1 | -1/+7 | |
| | | | | | | | | | | It seems that the order of binding sockets of different address families to the same dynamic port must be v6-before-v4 on Linux, but v4-before-v6 on OS X. | |||||
| * | socket-default: refactor socket pair opening to a function | Martin Willi | 2013-05-06 | 1 | -27/+23 | |
| | | ||||||
| * | socket-default: Don't try to send packet if we haven't a socket for given family | Martin Willi | 2013-05-06 | 1 | -3/+4 | |
| | | ||||||
| * | socket-default: Use -1 if socket is not available, as 0 is actually a valid fd | Martin Willi | 2013-05-06 | 1 | -20/+23 | |
| | | ||||||
| * | semaphore: similar to thread_create(), semaphore_create() is used by Mach | Martin Willi | 2013-05-06 | 1 | -0/+5 | |
| | | | | | | | | | | | | The compiler spits no warning, but the wrong symbol is used when calling semaphore_create() from strongSwan. Override the name with a #define to force the use of our semaphore_create(). | |||||
| * | .gitignore: add OS X .DS_Store files | Martin Willi | 2013-05-06 | 1 | -0/+1 | |
|/ | ||||||
* | Merge branch 'charon-cmd' | Martin Willi | 2013-05-06 | 17 | -80/+1454 | |
|\ | | | | | | | | | | | Introduce a simple IKEv1/IKEv2 command line client, charon-cmd. It does not need any configuration files at all, but takes a few command line arguments to establish connections as a road warrior. | |||||
| * | charon-cmd: add an option to set a different server identity | Martin Willi | 2013-05-06 | 3 | -1/+19 | |
| | | ||||||
| * | proposals: try next if IKEv2 algorithm could not be mapped to IKEv1 | Martin Willi | 2013-05-06 | 1 | -2/+4 | |
| | | ||||||
| * | charon-cmd: add support for different IKEv1/IKEv2 authentication profiles | Martin Willi | 2013-05-06 | 4 | -17/+170 | |
| | | ||||||
| * | charon-cmd: support multi-line help text for each option in usage | Martin Willi | 2013-05-06 | 2 | -2/+12 | |
| | | ||||||
| * | charon-cmd: add --local/remote-ts options to set traffic selectors | Martin Willi | 2013-05-06 | 3 | -4/+64 | |
| | | ||||||
| * | charon-cmd: Use dynamic ports with the socket-default plugin | Martin Willi | 2013-05-06 | 1 | -0/+2 | |
| | | ||||||
| * | settings: Add a set_default_str() to set a different default for a key | Martin Willi | 2013-05-06 | 2 | -0/+31 | |
| | | | | | | | | | | The value is set only if it is not configured in strongswan.conf or has not been set() otherwise. | |||||
| * | charon-cmd: prompt for EAP passwords on-demand using a callback credential set | Martin Willi | 2013-05-06 | 1 | -0/+49 | |
| | | ||||||
| * | charon-cmd: authenticate with EAP if no private key is given | Martin Willi | 2013-05-06 | 1 | -1/+18 | |
| | | ||||||
| * | charon-cmd: pass arguments to all handlers, even if already handled | Martin Willi | 2013-05-06 | 1 | -2/+5 | |
| | | ||||||
| * | charon-cmd: build long_opts only once when reading arguments in charon-cmd | Martin Willi | 2013-05-06 | 1 | -10/+9 | |
| | | ||||||
| * | charon-cmd: add support for using dynamic ports in charon-cmd | Martin Willi | 2013-05-06 | 2 | -5/+9 | |
| | | ||||||
| * | socket-dynamic: when sending from port zero, allocate a free port dynamically | Martin Willi | 2013-05-06 | 1 | -26/+101 | |
| | | ||||||
| * | controller: clean up job data if a thread gets cancelled waiting in a function | Martin Willi | 2013-05-06 | 1 | -3/+6 | |
| | | | | | | | | | | Controller functions are thread cancellation points, so register a cancellation handler cleaning up job data. | |||||
| * | charon-cmd: load certificates and RSA private keys | Martin Willi | 2013-05-06 | 6 | -14/+210 | |
| | | ||||||
| * | charon-cmd: add a connection object and its initiation to charon-cmd | Martin Willi | 2013-05-06 | 6 | -10/+313 | |
| | | ||||||
| * | charon-cmd: move command line options to separate file, obsolete short options | Martin Willi | 2013-05-06 | 4 | -54/+109 | |
| | | ||||||
| * | charon-cmd: add a stub for charon-cmd, a simple command line IKE client | Martin Willi | 2013-05-06 | 6 | -48/+442 | |
|/ |