Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | ECDSA with OpenSSL | Tobias Brunner | 2008-06-10 | 1 | -1/+1 |
| | |||||
* | fixed the strongswan.conf path | Andreas Steffen | 2008-05-22 | 1 | -2/+6 |
| | |||||
* | fixed loading of smp plugin | Martin Willi | 2008-05-19 | 1 | -1/+1 |
| | |||||
* | fixed plugin names of EAP modules | Martin Willi | 2008-05-16 | 1 | -4/+4 |
| | |||||
* | loading default modules depending on configure options | Martin Willi | 2008-05-16 | 1 | -0/+13 |
| | |||||
* | prototype of mediation client database plugin | Martin Willi | 2008-05-14 | 1 | -0/+4 |
| | |||||
* | renamed med_db plugin to medsrv, as we will introduce an additional medcli ↵ | Martin Willi | 2008-05-08 | 1 | -2/+2 |
| | | | | client plugin | ||||
* | build plugins after daemon/libstrongswan | Martin Willi | 2008-04-15 | 1 | -1/+1 |
| | |||||
* | implementation of an CFG attribute framework, currently supporting virtual IPs | Martin Willi | 2008-04-09 | 1 | -0/+2 |
| | | | | | | updated ipsec.conf sourceip parameter to support CIDR notatation to serve from a pool %poolname to query a separate (database?) pool | ||||
* | defining ME globally, as we need it in plugins | Martin Willi | 2008-03-31 | 1 | -1/+0 |
| | |||||
* | renamed xml plugin to smp to avoid confusion | Martin Willi | 2008-03-28 | 1 | -10/+18 |
| | | | | | | added some dependency checks to configure configure checks ClearSilver and fastcgi cleanups in the build system here and there | ||||
* | mediation extension adapted to the naming convention of the current version ↵ | Tobias Brunner | 2008-03-26 | 1 | -2/+2 |
| | | | | of the draft. note: the external interface (config, autotools) has not yet been changed | ||||
* | cert_cache_t caches subject-issuer relations and subject certificates | Martin Willi | 2008-03-20 | 1 | -0/+1 |
| | | | | ocsp/crl do not benefit yet due missing lookup function | ||||
* | refactored trustchain verification, this should fix #33 | Martin Willi | 2008-03-19 | 1 | -0/+2 |
| | | | | moved auth_info/ocsp_response credset wrapper to separate files | ||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -71/+37 |
| | |||||
* | implemented IKEV2 EAP-SIM server and client test module that use triplets ↵ | Andreas Steffen | 2008-02-04 | 1 | -1/+6 |
| | | | | stored in a file. For details see the scenario 'ikev2/rw-eap-sim-rsa' | ||||
* | ported EAP-AKA branch into trunk | Martin Willi | 2007-12-13 | 1 | -4/+10 |
| | |||||
* | merged EAP-MD5 into trunk | Martin Willi | 2007-12-12 | 1 | -0/+6 |
| | |||||
* | added more ./configure build options for | Martin Willi | 2007-12-03 | 1 | -17/+24 |
| | | | | | | | | EAP-Identity module ipsec tools (openac, scepclient) optional charon/pluto build charon stroke interface | ||||
* | moved AUTH_LIFETIME handling in its own task (cleaner separation, proper ↵ | Martin Willi | 2007-12-03 | 1 | -0/+1 |
| | | | | payload order) | ||||
* | added a "libcharon-" prefix to plugins to avoid conflicts | Martin Willi | 2007-12-03 | 1 | -24/+24 |
| | |||||
* | socket_t implementation withouth raw sockets | Martin Willi | 2007-11-26 | 1 | -1/+7 |
| | | | | | | --disable-raw-socket configure option prevents charon/pluto to run in parallel | ||||
* | experimental P2P-NAT-T for IKEv2 merged back from branch | Tobias Brunner | 2007-10-03 | 1 | -0/+8 |
| | |||||
* | removed some empty lines | Andreas Steffen | 2007-09-18 | 1 | -2/+0 |
| | |||||
* | prototype implemementation of an sqlite configuration backend | Martin Willi | 2007-09-18 | 1 | -1/+8 |
| | |||||
* | further MOBIKE stuff: | Martin Willi | 2007-06-21 | 1 | -0/+2 |
| | | | | | | | | | kernel properly reports network reconfiguration and informs all IKE_SAs MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange reestablishment of IKE_SAs on network reconfiguration kinda works not stable yet! | ||||
* | proper reauthentication: | Martin Willi | 2007-06-14 | 1 | -0/+1 |
| | | | | | IKE_SA is closed completely before the new is initiated, resolves some issues when a dynamic IP is requested from a pool | ||||
* | introduced callback_job: | Martin Willi | 2007-06-11 | 1 | -4/+3 |
| | | | | | | | | | | | | simple asynchronous method invocation use daemons thread pool for all threads proper cancellation and cleanups cancellation mechanism to dynamically unload multithreaded code unified event_queue and scheduler => scheduler unified job_queue and thread_pool => processor removed job_type_t, not really needed fixes here, there and everywhere | ||||
* | removed route_job, handled all in interface_manager | Martin Willi | 2007-05-16 | 1 | -1/+0 |
| | |||||
* | properly implemented interface_managers initiate, terminte_[ike|child] | Martin Willi | 2007-05-09 | 1 | -1/+0 |
| | | | | | proper thread release when stroke is CTRL+C'ed fixed some permission issues | ||||
* | added interface.h | Andreas Steffen | 2007-04-27 | 1 | -0/+1 |
| | |||||
* | added writeable_backend.h | Andreas Steffen | 2007-04-27 | 1 | -1/+1 |
| | |||||
* | fixed typo | Andreas Steffen | 2007-04-27 | 1 | -1/+1 |
| | |||||
* | restructuring of configuration backends | Martin Willi | 2007-04-27 | 1 | -19/+52 |
| | | | | | | | | | added propotypes of new control interfaces (xml & dbus) introduced loadable: configuration backends control interfaces using pluggable modules as in EAP | ||||
* | added most problematic linux headers to distribution | Martin Willi | 2007-04-19 | 1 | -1/+2 |
| | | | | | other/real linux header may be selected using --with-linux-headers=dir | ||||
* | cleaned up apidoc | Martin Willi | 2007-04-11 | 1 | -1/+0 |
| | | | | | | added some comments removed configuration.[ch], as it does not make sense like it is | ||||
* | restructured file layout | Martin Willi | 2007-04-10 | 1 | -52/+77 |
| | | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads | ||||
* | removed send_queue, handled internally in sender_t know | Martin Willi | 2007-03-28 | 1 | -3/+3 |
| | | | | | do header parsing in receiver, ready for cookie integration | ||||
* | added EAP-SIM authentication | Martin Willi | 2007-03-13 | 1 | -1/+10 |
| | | | | | | | client side only uses an external SIM reader library specified with SIM_READER_LIB untested | ||||
* | moved credential_store.h from charon/config/credentials to libstrongswan | Andreas Steffen | 2007-03-09 | 1 | -1/+1 |
| | |||||
* | http post fetching using libcurl implemented | Andreas Steffen | 2007-03-07 | 1 | -0/+5 |
| | |||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 1 | -14/+18 |
| | |||||
* | merged EAP framework from branch into trunk | Martin Willi | 2007-02-12 | 1 | -2/+8 |
| | | | | | includes a lot of other modifications | ||||
* | moved typedefs to beginning of files to solve some include problems | Martin Willi | 2006-10-30 | 1 | -1/+4 |
| | | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups | ||||
* | introduced new logging subsystem using bus: | Martin Willi | 2006-10-18 | 1 | -1/+0 |
| | | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more... | ||||
* | introduced printf() specifiers for: | Martin Willi | 2006-09-27 | 1 | -0/+4 |
| | | | | | | | | | | | host_t (%H) identification_t (%D) chunk pointers (%B) memory pointer/length (%b) added a signaling bus: receives event and debug messages, sends them to its listeners stream_logger, sys_logger, file_logger added, listen to bus some other tweaks here and there | ||||
* | reuse reqid when a ROUTED child_sa gets INSTALLED | Martin Willi | 2006-09-05 | 1 | -4/+4 |
| | | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes | ||||
* | moved interface enumeration code to socket, where it belongs | Martin Willi | 2006-08-28 | 1 | -1/+1 |
| | | | | | query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall" | ||||
* | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 1 | -5/+4 |
| | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | ||||
* | added possibility to route CHILD_SAs, without to set them up | Martin Willi | 2006-07-21 | 1 | -0/+2 |
| | | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires |