aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/config/connections/connection.h
Commit message (Collapse)AuthorAgeFilesLines
* restructured file layoutMartin Willi2007-04-101-292/+0
| | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads
* renamed keyingtries attributeMartin Willi2007-03-201-6/+3
|
* implemented reauthentication using the new reauth=yes|no parameter Martin Willi2006-12-191-1/+11
|
* better split up of library files "types.h" & "definitions.h"Martin Willi2006-10-311-1/+1
| | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements
* moved typedefs to beginning of files to solve some include problemsMartin Willi2006-10-301-6/+4
| | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups
* improved signal handling and emittingMartin Willi2006-10-261-2/+2
|
* introduced new logging subsystem using bus:Martin Willi2006-10-181-2/+2
| | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more...
* moved auth_method to policyAndreas Steffen2006-09-251-48/+1
|
* reuse reqid when a ROUTED child_sa gets INSTALLEDMartin Willi2006-09-051-5/+31
| | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes
* implemented proper refcounting using atomic operationsMartin Willi2006-07-281-0/+3
|
* implemented IKE_SA rekeyingMartin Willi2006-07-271-3/+25
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* introduced refcounting on policy and connectionsMartin Willi2006-07-201-31/+12
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* updated copyright informationMartin Willi2006-07-071-4/+5
|
* support of cert payloadsAndreas Steffen2006-07-031-1/+1
|
* readded local_credential_storeMartin Willi2006-06-201-8/+62
| | | | | | added sendcert policy to connection some other cleanups
* - policies contain a connections name nowMartin Willi2006-05-291-71/+21
| | | | | | | | - used for initiate and delete - connections won't get initiated twice anymore - deleting of connections is now possible, which allows us to use ipsec update and ipsec reload
* - changed config load strategy:Martin Willi2006-05-231-1/+15
| | | | | | | starter loads both connections in charon & pluto, charon ignores anything with keyexchange!=ikev2. pluto needs the same behavior.
* (no commit message)Martin Willi2006-05-101-0/+283