aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/control
Commit message (Collapse)AuthorAgeFilesLines
* experimental P2P-NAT-T for IKEv2 merged back from branchTobias Brunner2007-10-031-4/+59
|
* reverted changeset [3215], as we need NULL callback to do asynchronous callsMartin Willi2007-10-033-35/+62
| | | | added interface_manager_cb_empty function, which calls synchronous but doesn't do anything
* fixed "ipsec statusall" SPI formattingMartin Willi2007-10-021-2/+2
|
* dummy callback added to interface managerTobias Brunner2007-10-022-48/+34
|
* remove control sockets on startup, as we don't have privileges on shutdownMartin Willi2007-10-022-9/+5
|
* moved force_encap to ike_config, enables responder to enforce udp encapsulationMartin Willi2007-10-011-3/+3
| | | | fixed bugs in force_encap code
* implemented IKEv2 force_encap connection parameterMartin Willi2007-10-011-2/+3
| | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls
* fixed CHILD_SA SPI byte order in XML interfaceMartin Willi2007-09-281-1/+1
|
* reduced debbugging levelMartin Willi2007-09-271-1/+1
|
* refactored strongswan managerMartin Willi2007-09-263-30/+90
| | | | | | | | removed buggy request parsing code, use ClearSilvers CGI kit instead fixed CHILD_SA listing in manager (needs better design) using secure XML communication through unix sockets removed images with questionable (non-GPL) license
* prototype implemementation of an sqlite configuration backendMartin Willi2007-09-182-83/+5
|
* adapted format of IKE SPIs to strongSwan Manager's styleAndreas Steffen2007-09-151-2/+2
|
* added subnets of CHILD_SAs to xml interfaceMartin Willi2007-09-141-1/+36
| | | | a first design of Managers IKE_SA list page
* peer_cfg now knows about group membershipsAndreas Steffen2007-09-131-1/+21
|
* fixed 64bit issue with file descriptorMartin Willi2007-09-131-1/+9
|
* manager can query and list IKE_SA status (no layout yet)Martin Willi2007-09-131-2/+3
|
* added mobike=yes|no connection optionMartin Willi2007-08-291-2/+2
| | | | | | | yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes
* ipsec stroke rereadaacerts|rereadacerts supportedAndreas Steffen2007-08-101-0/+8
|
* support of ipsec rereadsecrets for strokeAndreas Steffen2007-08-101-0/+4
|
* implemented listing of attribute certificatesAndreas Steffen2007-08-071-0/+18
|
* fixed segfault when sourceip in stroke message is NULLMartin Willi2007-08-061-2/+2
|
* allow starter to initiate connections simultaneously (on auto=start)Martin Willi2007-08-062-4/+19
|
* updated XML interface to new schemaMartin Willi2007-07-191-79/+267
|
* added first draft of SMP relax-ng schemaMartin Willi2007-07-061-0/+225
|
* support for left=%any change our address dynamicallyMartin Willi2007-06-181-4/+6
|
* implemented more flexible iterator hook APIMartin Willi2007-06-151-2/+1
| | | | kernel interface handles interface changes and updates address list
* implemented address change notification (for MOBIKE)Martin Willi2007-06-141-7/+6
| | | | | implemented up to date address list cache to list interfaces
* ported interfaces to new threading functions (incomplete)Martin Willi2007-06-112-143/+129
|
* introduced callback_job:Martin Willi2007-06-112-103/+290
| | | | | | | | | | | | simple asynchronous method invocation use daemons thread pool for all threads proper cancellation and cleanups cancellation mechanism to dynamically unload multithreaded code unified event_queue and scheduler => scheduler unified job_queue and thread_pool => processor removed job_type_t, not really needed fixes here, there and everywhere
* removed paranoid module checkingMartin Willi2007-05-251-13/+0
|
* proper thread cancellation when using the charon->interfacesMartin Willi2007-05-234-4/+27
|
* support for virtual IP definition on client side:Martin Willi2007-05-221-1/+4
| | | | | | | if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip.
* support of left|rightgroups parameterAndreas Steffen2007-05-201-31/+28
|
* support of CA-based ipsec policiesAndreas Steffen2007-05-181-24/+78
|
* removed route_job, handled all in interface_managerMartin Willi2007-05-161-1/+0
|
* routing/unrouting through interfaceMartin Willi2007-05-162-13/+181
|
* working dummy for NetworkManager DBUS interfaceMartin Willi2007-05-141-8/+68
| | | | | more a tech demo
* simplified capability droppingMartin Willi2007-05-092-4/+2
|
* properly implemented interface_managers initiate, terminte_[ike|child]Martin Willi2007-05-092-119/+303
| | | | | proper thread release when stroke is CTRL+C'ed fixed some permission issues
* changing UID/GID after startup of pluto/charonMartin Willi2007-05-072-2/+2
| | | | added --with-uid/--with-gid configure option
* extended interface_manager (more work needed here)Martin Willi2007-05-032-2/+242
|
* reducing capabilities of the threads to a minimumMartin Willi2007-05-034-30/+127
| | | | | | proper flush of pending packets on daemon shutdown adding local address as gateway address in dynamic route
* added more API documentation to backends/interfacesMartin Willi2007-04-303-9/+25
|
* fixed castingAndreas Steffen2007-04-271-2/+2
|
* restructuring of configuration backendsMartin Willi2007-04-2710-189/+882
| | | | | | | | | added propotypes of new control interfaces (xml & dbus) introduced loadable: configuration backends control interfaces using pluggable modules as in EAP
* moved initiate() code to the generic controller_t classMartin Willi2007-04-163-67/+214
|
* added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts ↵Andreas Steffen2007-04-141-4/+8
| | | | keywords
* fixed output of list_auth_certificates()Andreas Steffen2007-04-121-0/+1
|
* removed %Q, %Y, %W, %U printf handlersMartin Willi2007-04-121-3/+3
|
* not using %m printf handler, as late errno interpration over bus may be ↵Martin Willi2007-04-121-5/+5
| | | | problematic