| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
| |
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
|
|
|
|
|
|
|
|
|
| |
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
|
| |
|
|
|
|
| |
added iterator hook to manipulate iterator the clean way
|
|
|
|
|
| |
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
|
|
|
|
|
|
|
| |
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
|
|
|
|
|
|
|
|
|
|
|
| |
host_t (%H)
identification_t (%D)
chunk pointers (%B)
memory pointer/length (%b)
added a signaling bus:
receives event and debug messages, sends them to its listeners
stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
aren't stored in the IKE_SA anymore, they are queried on the fly
are immutable now, allows it to share them
policy selection based on traffic selectors, leads to valid lookup results
rekeying queries the policy based on its traffic selectors
|
|
|
|
|
|
| |
added proper traffic selector to string conversion
some cleanups here & there
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
further CHILD_SA rekeying work done:
creation of a new CHILD_SA on a expire from a kernel works
delete of old CHILD_SA still missing
some issues when both initiate rekeing
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
- used for initiate and delete
- connections won't get initiated twice anymore
- deleting of connections is now possible, which allows us to use
ipsec update and ipsec reload
|
|
|
|
|
| |
- don't complain on termination of IKEv1 connections
|
|
|
|
|
|
|
| |
- logger output improvements
- testin gupdates
- and a lot more
|
|
|