aboutsummaryrefslogtreecommitdiffstats
path: root/Source/charon/config
Commit message (Collapse)AuthorAgeFilesLines
* - import of strongswan-2.7.0Martin Willi2006-04-2823-4356/+0
| | | | | - applied patch for charon
* - reworked usage of IDs in various statesMartin Willi2006-04-274-12/+51
| | | | | | - using ID_ANY for any, not NULL as before - initiator sends IDr payload in IKE_AUTH when ID unique
* - add connection names to connectionsMartin Willi2006-04-275-8/+86
| | | | | | | | - stroke status / ipsec status shows them - added statusall for stroke - added status by connection name - some tests repaired, more to come
* - added separate implementation for connection_store, credential_store, ↵Martin Willi2006-04-2517-34/+978
| | | | | | | | policy_store - added folder structure to config - credentials are fetched solely on IDs now
* - fixed doxygen buildMartin Willi2006-04-202-2/+2
| | | | | - seperates now in lib and charon
* - leak detective is usable, but does not show static function namesMartin Willi2006-04-131-0/+0
| | | | | | - a script which gets address via ldd and resolves address via addr2line would be nice - fixed a leak in child_sa with new detective ;-)
* - split up in libstrong, charon, stroke, testing doneMartin Willi2006-04-105-33/+31
| | | | | | | | | - new leak detective with malloc hook in library - useable, but needs improvements - logger_manager has now a single instance per library - allows use of loggers from any linking prog - a LOT of other things
* ../svn-commit.tmpMartin Willi2006-04-055-15/+15
|
* - rewrite of logger_manager, uses now one instance per contextMartin Willi2006-03-233-19/+19
| | | | | | | - cleanups for logger here and there - removed critical flag check in payload verification (conformance to IKEv2) - so thats and theres everywere... ;-)
* - works quite well now with ipsec.conf & ipsec starterMartin Willi2006-03-2011-15/+346
|
* - reworked configuration framework completlyMartin Willi2006-03-1618-2729/+781
| | | | | | - configuration is now split up in: connections, policies, credentials and daemon config - further alloc/free fixes needed!
* - first attempt for connection loading and starting via "stroke"Martin Willi2006-03-149-133/+381
| | | | | - some improvements here and there
* - configuration_manager replaced by configuration_t interfaceMartin Willi2006-03-078-115/+1123
| | | | | | | | - current configuration_manager is now static_configuration (testing) - first draft of starter_configuration, which should once interact with ipsec starter (via whack?) - some cleanups - socket_t uses RAW socket, which allows parallel service of pluto/charon
* - comments and cleanupsMartin Willi2006-03-021-14/+6
|
* - working policy installation and removalMartin Willi2006-03-011-1/+10
|
* - proposal setup implementation begunMartin Willi2006-02-226-171/+130
|
* - fixed socket code, so we know on which address we receive trafficMartin Willi2006-02-161-4/+6
| | | | | - AH/ESP setup in kernel is working now!!! :-)))
* - installing of child sa worksMartin Willi2006-02-162-21/+35
| | | | | - need correct IP adresses to actually use IPsec
* - refactored ike proposalMartin Willi2006-02-148-273/+241
| | | | | | | | - uses now proposal_t, wich is also used by child proposals - ike key derivation refactored - crypter_t api has get_key_size now - some other improvements here and there
* - config uses uml hosts alice and bobMartin Willi2006-02-131-15/+45
|
* - fixed memleaksMartin Willi2006-02-092-7/+5
|
* - works with new proposal codeMartin Willi2006-02-093-17/+74
| | | | | - still some(!) memleaks
* - fixed alot of bugs in child_proposalMartin Willi2006-02-086-104/+820
| | | | | - near to working state ;-)
* - dead end implementationMartin Willi2006-02-064-255/+91
|
* - fixed doxygen warningsMartin Willi2005-12-152-28/+28
|
* - added deletion of IKE_SAJan Hutter2005-12-121-4/+8
|
* - fixed some BAD bugsMartin Willi2005-12-121-10/+29
| | | | | - clean localhost-testcases for bad_dh, shared and rsa
* - added todo's Jan Hutter2005-12-123-0/+36
|
* - changed config valuesJan Hutter2005-12-121-6/+7
|
* - added support for empty traffic selectors and empty sa payload in Jan Hutter2005-12-071-4/+6
| | | | IKE_AUTH request and reply
* ../svn-commit.tmpMartin Willi2005-12-071-10/+10
|
* - code cleanup in network and configMartin Willi2005-12-065-39/+37
| | | | | - moved packet_t members to private, added getter and setters
* - implemented jobs DELETE_HALF_OPEN_IKE_SA and DELETE_ESTABLISHED_IKE_SAJan Hutter2005-12-064-24/+86
|
* - added payload CERTJan Hutter2005-12-051-4/+4
| | | | | | - cleaned code of different states - added additional notify handling
* - code documentedJan Hutter2005-12-042-25/+34
|
* - code documentedJan Hutter2005-12-042-94/+96
|
* - logging cleanupMartin Willi2005-12-041-1/+0
| | | | | - pid re-replaced with thread_ids, since nptl does not distinguish pids between threads
* - implemented RSA, only signing and verifying esma_pkcs1 paddedMartin Willi2005-12-042-1/+403
| | | | | | | | | | | - removed gmp-helper: chunk_to_mpz is now done with gmp functions, prime generation in prime-pool - added prime-pool (needs priority fix) - proof of concept RSA authentication - mpz uses LEAK_DETECTIVE - configuration-manager supports rsa keys
* - preshared secrets are now retrieved over configuration_managerJan Hutter2005-12-032-3/+111
|
* - fixesMartin Willi2005-12-021-2/+8
|
* fixed different bugs when checking out ike sa and retransmitting Jan Hutter2005-12-021-7/+7
| | | | requests
* - retransmitting of requests implementedJan Hutter2005-12-022-6/+52
|
* - state ike_sa_init_responded implemented (has some memleaks)Martin Willi2005-12-022-16/+68
|
* (no commit message)Jan Hutter2005-12-021-1/+1
|
* cleaned codeJan Hutter2005-12-022-4/+5
|
* - fixed bugsJan Hutter2005-12-011-17/+56
|
* - added ts for both initator and responderMartin Willi2005-12-012-27/+141
| | | | - ts_payload can get now ts's
* - creation of ts payloads using tsMartin Willi2005-12-014-8/+73
|
* - new configuration support added to ike_sa and statesJan Hutter2005-12-014-296/+451
|
* - commentedMartin Willi2005-12-011-2/+10
|