Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | - import of strongswan-2.7.0 | Martin Willi | 2006-04-28 | 23 | -4356/+0 |
| | | | | | - applied patch for charon | ||||
* | - reworked usage of IDs in various states | Martin Willi | 2006-04-27 | 4 | -12/+51 |
| | | | | | | - using ID_ANY for any, not NULL as before - initiator sends IDr payload in IKE_AUTH when ID unique | ||||
* | - add connection names to connections | Martin Willi | 2006-04-27 | 5 | -8/+86 |
| | | | | | | | | - stroke status / ipsec status shows them - added statusall for stroke - added status by connection name - some tests repaired, more to come | ||||
* | - added separate implementation for connection_store, credential_store, ↵ | Martin Willi | 2006-04-25 | 17 | -34/+978 |
| | | | | | | | | policy_store - added folder structure to config - credentials are fetched solely on IDs now | ||||
* | - fixed doxygen build | Martin Willi | 2006-04-20 | 2 | -2/+2 |
| | | | | | - seperates now in lib and charon | ||||
* | - leak detective is usable, but does not show static function names | Martin Willi | 2006-04-13 | 1 | -0/+0 |
| | | | | | | - a script which gets address via ldd and resolves address via addr2line would be nice - fixed a leak in child_sa with new detective ;-) | ||||
* | - split up in libstrong, charon, stroke, testing done | Martin Willi | 2006-04-10 | 5 | -33/+31 |
| | | | | | | | | | - new leak detective with malloc hook in library - useable, but needs improvements - logger_manager has now a single instance per library - allows use of loggers from any linking prog - a LOT of other things | ||||
* | ../svn-commit.tmp | Martin Willi | 2006-04-05 | 5 | -15/+15 |
| | |||||
* | - rewrite of logger_manager, uses now one instance per context | Martin Willi | 2006-03-23 | 3 | -19/+19 |
| | | | | | | | - cleanups for logger here and there - removed critical flag check in payload verification (conformance to IKEv2) - so thats and theres everywere... ;-) | ||||
* | - works quite well now with ipsec.conf & ipsec starter | Martin Willi | 2006-03-20 | 11 | -15/+346 |
| | |||||
* | - reworked configuration framework completly | Martin Willi | 2006-03-16 | 18 | -2729/+781 |
| | | | | | | - configuration is now split up in: connections, policies, credentials and daemon config - further alloc/free fixes needed! | ||||
* | - first attempt for connection loading and starting via "stroke" | Martin Willi | 2006-03-14 | 9 | -133/+381 |
| | | | | | - some improvements here and there | ||||
* | - configuration_manager replaced by configuration_t interface | Martin Willi | 2006-03-07 | 8 | -115/+1123 |
| | | | | | | | | - current configuration_manager is now static_configuration (testing) - first draft of starter_configuration, which should once interact with ipsec starter (via whack?) - some cleanups - socket_t uses RAW socket, which allows parallel service of pluto/charon | ||||
* | - comments and cleanups | Martin Willi | 2006-03-02 | 1 | -14/+6 |
| | |||||
* | - working policy installation and removal | Martin Willi | 2006-03-01 | 1 | -1/+10 |
| | |||||
* | - proposal setup implementation begun | Martin Willi | 2006-02-22 | 6 | -171/+130 |
| | |||||
* | - fixed socket code, so we know on which address we receive traffic | Martin Willi | 2006-02-16 | 1 | -4/+6 |
| | | | | | - AH/ESP setup in kernel is working now!!! :-))) | ||||
* | - installing of child sa works | Martin Willi | 2006-02-16 | 2 | -21/+35 |
| | | | | | - need correct IP adresses to actually use IPsec | ||||
* | - refactored ike proposal | Martin Willi | 2006-02-14 | 8 | -273/+241 |
| | | | | | | | | - uses now proposal_t, wich is also used by child proposals - ike key derivation refactored - crypter_t api has get_key_size now - some other improvements here and there | ||||
* | - config uses uml hosts alice and bob | Martin Willi | 2006-02-13 | 1 | -15/+45 |
| | |||||
* | - fixed memleaks | Martin Willi | 2006-02-09 | 2 | -7/+5 |
| | |||||
* | - works with new proposal code | Martin Willi | 2006-02-09 | 3 | -17/+74 |
| | | | | | - still some(!) memleaks | ||||
* | - fixed alot of bugs in child_proposal | Martin Willi | 2006-02-08 | 6 | -104/+820 |
| | | | | | - near to working state ;-) | ||||
* | - dead end implementation | Martin Willi | 2006-02-06 | 4 | -255/+91 |
| | |||||
* | - fixed doxygen warnings | Martin Willi | 2005-12-15 | 2 | -28/+28 |
| | |||||
* | - added deletion of IKE_SA | Jan Hutter | 2005-12-12 | 1 | -4/+8 |
| | |||||
* | - fixed some BAD bugs | Martin Willi | 2005-12-12 | 1 | -10/+29 |
| | | | | | - clean localhost-testcases for bad_dh, shared and rsa | ||||
* | - added todo's | Jan Hutter | 2005-12-12 | 3 | -0/+36 |
| | |||||
* | - changed config values | Jan Hutter | 2005-12-12 | 1 | -6/+7 |
| | |||||
* | - added support for empty traffic selectors and empty sa payload in | Jan Hutter | 2005-12-07 | 1 | -4/+6 |
| | | | | IKE_AUTH request and reply | ||||
* | ../svn-commit.tmp | Martin Willi | 2005-12-07 | 1 | -10/+10 |
| | |||||
* | - code cleanup in network and config | Martin Willi | 2005-12-06 | 5 | -39/+37 |
| | | | | | - moved packet_t members to private, added getter and setters | ||||
* | - implemented jobs DELETE_HALF_OPEN_IKE_SA and DELETE_ESTABLISHED_IKE_SA | Jan Hutter | 2005-12-06 | 4 | -24/+86 |
| | |||||
* | - added payload CERT | Jan Hutter | 2005-12-05 | 1 | -4/+4 |
| | | | | | | - cleaned code of different states - added additional notify handling | ||||
* | - code documented | Jan Hutter | 2005-12-04 | 2 | -25/+34 |
| | |||||
* | - code documented | Jan Hutter | 2005-12-04 | 2 | -94/+96 |
| | |||||
* | - logging cleanup | Martin Willi | 2005-12-04 | 1 | -1/+0 |
| | | | | | - pid re-replaced with thread_ids, since nptl does not distinguish pids between threads | ||||
* | - implemented RSA, only signing and verifying esma_pkcs1 padded | Martin Willi | 2005-12-04 | 2 | -1/+403 |
| | | | | | | | | | | | - removed gmp-helper: chunk_to_mpz is now done with gmp functions, prime generation in prime-pool - added prime-pool (needs priority fix) - proof of concept RSA authentication - mpz uses LEAK_DETECTIVE - configuration-manager supports rsa keys | ||||
* | - preshared secrets are now retrieved over configuration_manager | Jan Hutter | 2005-12-03 | 2 | -3/+111 |
| | |||||
* | - fixes | Martin Willi | 2005-12-02 | 1 | -2/+8 |
| | |||||
* | fixed different bugs when checking out ike sa and retransmitting | Jan Hutter | 2005-12-02 | 1 | -7/+7 |
| | | | | requests | ||||
* | - retransmitting of requests implemented | Jan Hutter | 2005-12-02 | 2 | -6/+52 |
| | |||||
* | - state ike_sa_init_responded implemented (has some memleaks) | Martin Willi | 2005-12-02 | 2 | -16/+68 |
| | |||||
* | (no commit message) | Jan Hutter | 2005-12-02 | 1 | -1/+1 |
| | |||||
* | cleaned code | Jan Hutter | 2005-12-02 | 2 | -4/+5 |
| | |||||
* | - fixed bugs | Jan Hutter | 2005-12-01 | 1 | -17/+56 |
| | |||||
* | - added ts for both initator and responder | Martin Willi | 2005-12-01 | 2 | -27/+141 |
| | | | | - ts_payload can get now ts's | ||||
* | - creation of ts payloads using ts | Martin Willi | 2005-12-01 | 4 | -8/+73 |
| | |||||
* | - new configuration support added to ike_sa and states | Jan Hutter | 2005-12-01 | 4 | -296/+451 |
| | |||||
* | - commented | Martin Willi | 2005-12-01 | 1 | -2/+10 |
| |