aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/config
Commit message (Collapse)AuthorAgeFilesLines
* support for transport in create_child_saMartin Willi2007-01-082-2/+15
| | | | include TRANSPORT/TUNNEL information in statusall
* added support for transport mode and (experimental!) BEET modeMartin Willi2006-12-214-13/+65
| | | | | support for the type=transport/tunnel parameter in charon
* implemented reauthentication using the new reauth=yes|no parameter Martin Willi2006-12-192-3/+28
|
* fixed output of proto/port selectorsAndreas Steffen2006-11-021-33/+38
|
* cosmeticsAndreas Steffen2006-11-011-3/+3
|
* better split up of library files "types.h" & "definitions.h"Martin Willi2006-10-3116-47/+23
| | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements
* preparations to include certreqs in policy decisionsAndreas Steffen2006-10-312-15/+19
|
* moved typedefs to beginning of files to solve some include problemsMartin Willi2006-10-3013-100/+46
| | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups
* support of certreq payload in IKE_AUTH messagesAndreas Steffen2006-10-282-0/+39
|
* added method get_ca_certificate()Andreas Steffen2006-10-282-10/+54
|
* added methods get_my_ca() and get_other_ca()Andreas Steffen2006-10-281-0/+18
|
* added methods get_my_ca() and get_other_ca()Andreas Steffen2006-10-281-2/+22
|
* improved signal handling and emittingMartin Willi2006-10-265-59/+59
|
* removed deprecated iterator methods (has_next & current)Martin Willi2006-10-246-88/+50
| | | | added iterator hook to manipulate iterator the clean way
* linked list cleanupsMartin Willi2006-10-246-122/+19
| | | | | added list methods invoke(), destroy_offset(), destroy_function() simplified list destruction when destroying its items
* code cleanups in printf handlersMartin Willi2006-10-201-13/+12
|
* introduced new logging subsystem using bus:Martin Willi2006-10-1814-460/+305
| | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more...
* introduced printf() specifiers for:Martin Willi2006-09-273-28/+18
| | | | | | | | | | | host_t (%H) identification_t (%D) chunk pointers (%B) memory pointer/length (%b) added a signaling bus: receives event and debug messages, sends them to its listeners stream_logger, sys_logger, file_logger added, listen to bus some other tweaks here and there
* moved auth_method to policyAndreas Steffen2006-09-252-74/+1
|
* added hostaccess support; moved auth_method to policyAndreas Steffen2006-09-253-31/+138
|
* support of encrypted private key filesAndreas Steffen2006-09-201-1/+19
|
* added copyright notice to sha2_hasherMartin Willi2006-09-191-1/+1
| | | | included SHA2 in build process
* added support for 3DES encryption algorithm in IKEMartin Willi2006-09-191-0/+1
|
* fixed the ids parsing bugAndreas Steffen2006-09-191-1/+4
|
* fixed memleakMartin Willi2006-09-181-10/+27
| | | | | fixed proper handling of id parsing errors proper return value when no PSK found
* added PSK supportAndreas Steffen2006-09-183-23/+274
|
* implemented updown script to handle firewallingMartin Willi2006-09-121-8/+2
|
* add priority management for kernel policyMartin Willi2006-09-082-1/+2
| | | | | | | let ROUTED policies installed, until manuall removed introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs ike_sa_manager cleanups
* implemented handling of dpdaction and dpddelay ipsec.conf parametersMartin Willi2006-09-083-7/+56
|
* reuse reqid when a ROUTED child_sa gets INSTALLEDMartin Willi2006-09-057-77/+157
| | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes
* initial support for IPv6 (more testing needed)Martin Willi2006-08-301-91/+245
| | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support
* fixed crash bug when doing "ipsec down" with an unknown connectionMartin Willi2006-08-251-2/+5
|
* implemented proper refcounting using atomic operationsMartin Willi2006-07-284-6/+12
|
* implemented IKE_SA rekeyingMartin Willi2006-07-274-10/+96
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* added possibility to route CHILD_SAs, without to set them upMartin Willi2006-07-212-0/+33
| | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires
* introduced refcounting on policy and connectionsMartin Willi2006-07-208-416/+314
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* cleanups in kernel interface codeMartin Willi2006-07-184-127/+223
| | | | | | added proper traffic selector to string conversion some cleanups here & there
* identification_t.matches() supports multiple wildcard countsAndreas Steffen2006-07-111-23/+9
|
* updated copyright informationMartin Willi2006-07-078-14/+21
|
* added support for leftprotoport and rightprotoportMartin Willi2006-07-052-7/+18
|
* redesigned IKE_SA using a transaction mechanism:Martin Willi2006-07-055-21/+18
| | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet
* log entries start with lowcercase characterAndreas Steffen2006-07-041-2/+6
|
* support of cert payloadsAndreas Steffen2006-07-036-64/+205
|
* added X.509 trust chain verificationAndreas Steffen2006-06-272-4/+248
|
* applied new changes from NATT teamMartin Willi2006-06-233-27/+1
| | | | | DPD only done when no IPsec and IKE traffic processed minor changes here and there
* first merge of NATT codeMartin Willi2006-06-222-13/+89
|
* readded local_credential_storeMartin Willi2006-06-205-78/+242
| | | | | | added sendcert policy to connection some other cleanups
* implemented rereadcrls rereadcacertsAndreas Steffen2006-06-202-0/+669
|
* removed local_credential_storeAndreas Steffen2006-06-202-689/+0
|
* added crl supportAndreas Steffen2006-06-163-15/+188
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-02-26 06:40:11 +0000