Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | checkin of non-existing IKE_SAs | Martin Willi | 2008-11-26 | 1 | -20/+27 |
| | | | | removed unneeded checkin() return values | ||||
* | some typos | Tobias Brunner | 2008-11-11 | 1 | -3/+3 |
| | |||||
* | reintegrated bus-refactoring branch | Martin Willi | 2008-10-14 | 2 | -258/+259 |
| | |||||
* | introduced an additional bus->signal parameter for signal specific data | Martin Willi | 2008-07-18 | 2 | -29/+36 |
| | | | | added SIG_IKE/SIG_CHD macros for signal emitting | ||||
* | reverted [4125],[4166], reimplemented the proper way | Martin Willi | 2008-07-11 | 1 | -42/+8 |
| | |||||
* | added strongswan.conf option charon.reuse_iksa=no to create each CHILD_SA in ↵ | Martin Willi | 2008-06-30 | 1 | -8/+42 |
| | | | | a new IKE_SA | ||||
* | extended credential_set_t interface by a cache_cert() method | Martin Willi | 2008-04-17 | 1 | -8/+0 |
| | | | | allows persistent or in-memory caching of fetched certificates | ||||
* | ike_sa_manager enumerable, not iterable | Martin Willi | 2008-04-14 | 2 | -7/+7 |
| | |||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 10 | -3834/+79 |
| | |||||
* | split connections with different virtual IPs in different peer_cfgs | Martin Willi | 2008-02-05 | 2 | -12/+24 |
| | | | | respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA | ||||
* | implemented Expanded EAP types to support vendor specific methods | Martin Willi | 2007-12-13 | 1 | -3/+5 |
| | |||||
* | implemented RFC4478 (repeated authentication) | Martin Willi | 2007-11-20 | 1 | -14/+28 |
| | | | | | changed %V printf handler to take a time delta, %#V now takes two arguments | ||||
* | fixed two leaks in stroke_interface | Martin Willi | 2007-11-19 | 1 | -6/+4 |
| | |||||
* | handle right=%any case in strongSwan manager | Andreas Steffen | 2007-11-17 | 1 | -3/+3 |
| | |||||
* | refactored bus and interface to resolve threading issues (WIP) | Martin Willi | 2007-11-15 | 2 | -353/+304 |
| | |||||
* | filtering out IKEv1 configurations for manager | Martin Willi | 2007-11-15 | 1 | -0/+5 |
| | |||||
* | implemented configuration query and IKE_SA initiation in XML interface | Martin Willi | 2007-11-13 | 2 | -46/+324 |
| | |||||
* | implemented IKE/CHILD_SA termination through XML interface | Martin Willi | 2007-11-12 | 2 | -1/+101 |
| | |||||
* | fixed bad cast which resulted in a crash on "ipsec update" | Martin Willi | 2007-10-05 | 1 | -1/+2 |
| | |||||
* | experimental P2P-NAT-T for IKEv2 merged back from branch | Tobias Brunner | 2007-10-03 | 1 | -4/+59 |
| | |||||
* | reverted changeset [3215], as we need NULL callback to do asynchronous calls | Martin Willi | 2007-10-03 | 3 | -35/+62 |
| | | | | added interface_manager_cb_empty function, which calls synchronous but doesn't do anything | ||||
* | fixed "ipsec statusall" SPI formatting | Martin Willi | 2007-10-02 | 1 | -2/+2 |
| | |||||
* | dummy callback added to interface manager | Tobias Brunner | 2007-10-02 | 2 | -48/+34 |
| | |||||
* | remove control sockets on startup, as we don't have privileges on shutdown | Martin Willi | 2007-10-02 | 2 | -9/+5 |
| | |||||
* | moved force_encap to ike_config, enables responder to enforce udp encapsulation | Martin Willi | 2007-10-01 | 1 | -3/+3 |
| | | | | fixed bugs in force_encap code | ||||
* | implemented IKEv2 force_encap connection parameter | Martin Willi | 2007-10-01 | 1 | -2/+3 |
| | | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls | ||||
* | fixed CHILD_SA SPI byte order in XML interface | Martin Willi | 2007-09-28 | 1 | -1/+1 |
| | |||||
* | reduced debbugging level | Martin Willi | 2007-09-27 | 1 | -1/+1 |
| | |||||
* | refactored strongswan manager | Martin Willi | 2007-09-26 | 3 | -30/+90 |
| | | | | | | | | removed buggy request parsing code, use ClearSilvers CGI kit instead fixed CHILD_SA listing in manager (needs better design) using secure XML communication through unix sockets removed images with questionable (non-GPL) license | ||||
* | prototype implemementation of an sqlite configuration backend | Martin Willi | 2007-09-18 | 2 | -83/+5 |
| | |||||
* | adapted format of IKE SPIs to strongSwan Manager's style | Andreas Steffen | 2007-09-15 | 1 | -2/+2 |
| | |||||
* | added subnets of CHILD_SAs to xml interface | Martin Willi | 2007-09-14 | 1 | -1/+36 |
| | | | | a first design of Managers IKE_SA list page | ||||
* | peer_cfg now knows about group memberships | Andreas Steffen | 2007-09-13 | 1 | -1/+21 |
| | |||||
* | fixed 64bit issue with file descriptor | Martin Willi | 2007-09-13 | 1 | -1/+9 |
| | |||||
* | manager can query and list IKE_SA status (no layout yet) | Martin Willi | 2007-09-13 | 1 | -2/+3 |
| | |||||
* | added mobike=yes|no connection option | Martin Willi | 2007-08-29 | 1 | -2/+2 |
| | | | | | | | yes: include mobike support notifies as initiator no: only enable mobike as responder when initiator supports it default: yes | ||||
* | ipsec stroke rereadaacerts|rereadacerts supported | Andreas Steffen | 2007-08-10 | 1 | -0/+8 |
| | |||||
* | support of ipsec rereadsecrets for stroke | Andreas Steffen | 2007-08-10 | 1 | -0/+4 |
| | |||||
* | implemented listing of attribute certificates | Andreas Steffen | 2007-08-07 | 1 | -0/+18 |
| | |||||
* | fixed segfault when sourceip in stroke message is NULL | Martin Willi | 2007-08-06 | 1 | -2/+2 |
| | |||||
* | allow starter to initiate connections simultaneously (on auto=start) | Martin Willi | 2007-08-06 | 2 | -4/+19 |
| | |||||
* | updated XML interface to new schema | Martin Willi | 2007-07-19 | 1 | -79/+267 |
| | |||||
* | added first draft of SMP relax-ng schema | Martin Willi | 2007-07-06 | 1 | -0/+225 |
| | |||||
* | support for left=%any change our address dynamically | Martin Willi | 2007-06-18 | 1 | -4/+6 |
| | |||||
* | implemented more flexible iterator hook API | Martin Willi | 2007-06-15 | 1 | -2/+1 |
| | | | | kernel interface handles interface changes and updates address list | ||||
* | implemented address change notification (for MOBIKE) | Martin Willi | 2007-06-14 | 1 | -7/+6 |
| | | | | | implemented up to date address list cache to list interfaces | ||||
* | ported interfaces to new threading functions (incomplete) | Martin Willi | 2007-06-11 | 2 | -143/+129 |
| | |||||
* | introduced callback_job: | Martin Willi | 2007-06-11 | 2 | -103/+290 |
| | | | | | | | | | | | | simple asynchronous method invocation use daemons thread pool for all threads proper cancellation and cleanups cancellation mechanism to dynamically unload multithreaded code unified event_queue and scheduler => scheduler unified job_queue and thread_pool => processor removed job_type_t, not really needed fixes here, there and everywhere | ||||
* | removed paranoid module checking | Martin Willi | 2007-05-25 | 1 | -13/+0 |
| | |||||
* | proper thread cancellation when using the charon->interfaces | Martin Willi | 2007-05-23 | 4 | -4/+27 |
| |