aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/config/traffic_selector.c
Commit message (Collapse)AuthorAgeFilesLines
* proper update of IPsec SA when roaming a host-to-host tunnelMartin Willi2007-07-021-7/+13
| | | | roaming of IPsec SAs using virtual IPs
* restructured file layoutMartin Willi2007-04-101-0/+20
| | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads
* fixed traffic selector redundancy removal code (not completely tested)Martin Willi2007-03-061-1/+2
|
* fixed double free bugMartin Willi2007-03-051-0/+23
|
* added support for 0.0.0.0/0 traffic selectorsMartin Willi2007-03-011-17/+52
| | | | fixed routing to make correct 0.0.0.0/0 routes
* merged tasking branch into trunkMartin Willi2007-02-281-0/+25
|
* added support for transport mode and (experimental!) BEET modeMartin Willi2006-12-211-8/+20
| | | | | support for the type=transport/tunnel parameter in charon
* fixed output of proto/port selectorsAndreas Steffen2006-11-021-33/+38
|
* better split up of library files "types.h" & "definitions.h"Martin Willi2006-10-311-15/+3
| | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements
* code cleanups in printf handlersMartin Willi2006-10-201-13/+12
|
* introduced new logging subsystem using bus:Martin Willi2006-10-181-80/+83
| | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more...
* implemented updown script to handle firewallingMartin Willi2006-09-121-8/+2
|
* add priority management for kernel policyMartin Willi2006-09-081-0/+1
| | | | | | | let ROUTED policies installed, until manuall removed introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs ike_sa_manager cleanups
* reuse reqid when a ROUTED child_sa gets INSTALLEDMartin Willi2006-09-051-17/+9
| | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes
* initial support for IPv6 (more testing needed)Martin Willi2006-08-301-91/+245
| | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support
* added possibility to route CHILD_SAs, without to set them upMartin Willi2006-07-211-0/+24
| | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires
* introduced refcounting on policy and connectionsMartin Willi2006-07-201-8/+9
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* cleanups in kernel interface codeMartin Willi2006-07-181-57/+142
| | | | | | added proper traffic selector to string conversion some cleanups here & there
* updated copyright informationMartin Willi2006-07-071-1/+2
|
* added support for leftprotoport and rightprotoportMartin Willi2006-07-051-6/+15
|
* - fixed host-host tunnel traffic selection, host-host works nowMartin Willi2006-05-311-6/+24
|
* (no commit message)Martin Willi2006-05-101-0/+425
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-05 21:10:11 +0000