aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/config/connections/connection.c
Commit message (Collapse)AuthorAgeFilesLines
* reuse reqid when a ROUTED child_sa gets INSTALLEDMartin Willi2006-09-051-0/+32
| | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes
* implemented proper refcounting using atomic operationsMartin Willi2006-07-281-3/+3
|
* implemented IKE_SA rekeyingMartin Willi2006-07-271-3/+57
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* introduced refcounting on policy and connectionsMartin Willi2006-07-201-57/+26
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* updated copyright informationMartin Willi2006-07-071-3/+4
|
* redesigned IKE_SA using a transaction mechanism:Martin Willi2006-07-051-1/+1
| | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet
* support of cert payloadsAndreas Steffen2006-07-031-8/+10
|
* applied new changes from NATT teamMartin Willi2006-06-231-1/+1
| | | | | DPD only done when no IPsec and IKE traffic processed minor changes here and there
* readded local_credential_storeMartin Willi2006-06-201-3/+50
| | | | | | added sendcert policy to connection some other cleanups
* added support for "ike" and "esp" keywordsMartin Willi2006-06-151-5/+5
| | | | | | | fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes
* workaround for peers rekeying at the same timeMartin Willi2006-06-121-1/+1
| | | | | loading lifetime policies from ipsec.conf
* further work for rekeying:Martin Willi2006-06-071-5/+4
| | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals
* - policies contain a connections name nowMartin Willi2006-05-291-63/+9
| | | | | | | | - used for initiate and delete - connections won't get initiated twice anymore - deleting of connections is now possible, which allows us to use ipsec update and ipsec reload
* - changed config load strategy:Martin Willi2006-05-231-2/+18
| | | | | | | starter loads both connections in charon & pluto, charon ignores anything with keyexchange!=ikev2. pluto needs the same behavior.
* (no commit message)Martin Willi2006-05-101-0/+367