Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | migrate job creates a new IKE_SA | Andreas Steffen | 2008-11-03 | 1 | -11/+35 |
| | |||||
* | replace tab by spaces | Andreas Steffen | 2008-11-03 | 1 | -2/+3 |
| | |||||
* | removed unused variables | Andreas Steffen | 2008-11-03 | 1 | -5/+0 |
| | |||||
* | migrate_job() finds a matching child_cfg | Andreas Steffen | 2008-11-03 | 7 | -23/+310 |
| | |||||
* | corrected parameter description | Andreas Steffen | 2008-11-03 | 1 | -1/+1 |
| | |||||
* | corrected captions | Andreas Steffen | 2008-11-02 | 2 | -14/+14 |
| | |||||
* | fully implemented the parsing of XFRM and PF_KEY MIGRATE messages | Andreas Steffen | 2008-11-02 | 2 | -36/+94 |
| | |||||
* | removed 0-byte truncation, fixes random Openssl RSA signature verification ↵ | Martin Willi | 2008-10-31 | 1 | -7/+0 |
| | | | | failures | ||||
* | fixed crash in openssl signature verification if sizeof(size_t) != ↵ | Martin Willi | 2008-10-31 | 1 | -1/+3 |
| | | | | sizeof(int) (64bit) | ||||
* | identify attributes of XFRM ACQUIRE and MIGRATE messages | Andreas Steffen | 2008-10-31 | 1 | -14/+58 |
| | |||||
* | subscribing XFRM socket for MIGRATE messages | Andreas Steffen | 2008-10-31 | 1 | -2/+3 |
| | |||||
* | adapted evaltest.dat to extended acquire job message | Andreas Steffen | 2008-10-31 | 5 | -6/+6 |
| | |||||
* | parse xfrm and pf_key acquire messages and subscribe to migrate messages | Andreas Steffen | 2008-10-31 | 4 | -37/+216 |
| | |||||
* | reverted changeset 4529: | Martin Willi | 2008-10-30 | 1 | -2/+1 |
| | | | | | Camellia is 22 in IKEv1, but not-yet defined in IKEv2 in IKEv2, 22 is reserved for AES-XTS | ||||
* | added hooks for IKE and CHILD keymat | Martin Willi | 2008-10-30 | 9 | -44/+179 |
| | |||||
* | store plain skd, not the prf | Martin Willi | 2008-10-30 | 2 | -23/+19 |
| | |||||
* | added Camellia CBC to list of encryption algorithms | Andreas Steffen | 2008-10-30 | 1 | -1/+2 |
| | |||||
* | corrected parameter description | Andreas Steffen | 2008-10-30 | 1 | -1/+1 |
| | |||||
* | moved CHILD_SA key derivation to keymat_t | Martin Willi | 2008-10-29 | 7 | -440/+438 |
| | | | | passing key chunks to CHILD_SA, not the PRF | ||||
* | prf handles zero-length allocations graceful | Martin Willi | 2008-10-29 | 1 | -3/+10 |
| | |||||
* | do not store DH redundant in keymat | Martin Willi | 2008-10-29 | 3 | -52/+30 |
| | |||||
* | replaced not-maintained ChangeLog | Martin Willi | 2008-10-29 | 1 | -1079/+3 |
| | |||||
* | upgrade to linux-2.6.28 headers with support for kmaddress struct | Andreas Steffen | 2008-10-29 | 2 | -1/+29 |
| | |||||
* | moved key derivation and management into keymat object | Martin Willi | 2008-10-28 | 13 | -585/+748 |
| | | | | | | allows secured implementation of key management (e.g. in kernel or HW) only IKE keys for now | ||||
* | store IKE proposal implicitly during derive_keys | Martin Willi | 2008-10-28 | 4 | -46/+18 |
| | |||||
* | fixed reauthentication time in statusall | Martin Willi | 2008-10-28 | 1 | -1/+1 |
| | |||||
* | refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key | Andreas Steffen | 2008-10-28 | 3 | -27/+62 |
| | |||||
* | use more generic stats getter, introducing new stats | Martin Willi | 2008-10-27 | 4 | -80/+62 |
| | |||||
* | new release of NM debs | Martin Willi | 2008-10-27 | 1 | -1/+6 |
| | |||||
* | including a "none" tundev to make NM happy | Martin Willi | 2008-10-27 | 1 | -44/+28 |
| | |||||
* | fixed some compiler warnings | Martin Willi | 2008-10-27 | 6 | -9/+11 |
| | |||||
* | remove unused local DH_EXPONENT_ENTROPY definition | Andreas Steffen | 2008-10-27 | 1 | -2/+0 |
| | |||||
* | use 512 bits of entropy for secret DH exponents | Andreas Steffen | 2008-10-26 | 4 | -2/+10 |
| | |||||
* | additional getters for ipcomp and UDP encap | Martin Willi | 2008-10-24 | 3 | -7/+37 |
| | |||||
* | more CHILD_SA refactorings | Martin Willi | 2008-10-24 | 4 | -131/+135 |
| | |||||
* | initiate connections simultaneously in load tester | Martin Willi | 2008-10-22 | 1 | -2/+9 |
| | |||||
* | include updown plugin in sql scenarios | Andreas Steffen | 2008-10-21 | 33 | -33/+33 |
| | |||||
* | a load testing plugin, to: | Martin Willi | 2008-10-21 | 11 | -0/+846 |
| | | | | | find multi-threading issues do performance profiling | ||||
* | fixed enumeration of CHILD_SA traffic selectors | Martin Willi | 2008-10-21 | 1 | -24/+25 |
| | |||||
* | use old algorithm nameagain in pfkey/alg-aes-xcbc scenario | Andreas Steffen | 2008-10-21 | 1 | -2/+2 |
| | |||||
* | reset threads IKE_SA after checking other IKE_SAs | Martin Willi | 2008-10-20 | 4 | -9/+26 |
| | | | | invoke updown script only if we have valid IKE_SA | ||||
* | re-established all previous AUD level messages | Andreas Steffen | 2008-10-17 | 3 | -6/+7 |
| | |||||
* | fixed perl oid generation | Martin Willi | 2008-10-16 | 1 | -2/+2 |
| | |||||
* | loading updown plugin if required | Martin Willi | 2008-10-16 | 166 | -166/+166 |
| | |||||
* | moved updown script invocation to an optional plugin | Martin Willi | 2008-10-16 | 12 | -245/+354 |
| | |||||
* | bus uses finally recusive locking | Martin Willi | 2008-10-16 | 1 | -47/+58 |
| | | | | other small fixes | ||||
* | condvar->wait() can handle recursive mutex | Martin Willi | 2008-10-16 | 1 | -20/+76 |
| | |||||
* | added missing EAP-AKA RFC | Martin Willi | 2008-10-16 | 1 | -0/+4427 |
| | |||||
* | added a guest.mconsole() method to script mconsole (e.g. add additional conX=) | Martin Willi | 2008-10-15 | 5 | -14/+33 |
| | |||||
* | cache keys for in and outbound ESP SAs | Martin Willi | 2008-10-15 | 4 | -202/+241 |
| | | | | | removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t) creating TS pairs dynamically using create_policy_enumerator() |