Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | restructuring of configuration backends | Martin Willi | 2007-04-27 | 1 | -14/+6 | |
| | | | | | | | | | added propotypes of new control interfaces (xml & dbus) introduced loadable: configuration backends control interfaces using pluggable modules as in EAP | |||||
* | implementation of strictcrlpolicy=ifuri | Andreas Steffen | 2007-04-20 | 1 | -9/+8 | |
| | ||||||
* | moved initiate() code to the generic controller_t class | Martin Willi | 2007-04-16 | 1 | -0/+3 | |
| | ||||||
* | started support of X.509 attribute certificates | Andreas Steffen | 2007-04-12 | 1 | -0/+2 | |
| | ||||||
* | cleaned up apidoc | Martin Willi | 2007-04-11 | 1 | -3/+0 | |
| | | | | | | added some comments removed configuration.[ch], as it does not make sense like it is | |||||
* | restructured file layout | Martin Willi | 2007-04-10 | 1 | -9/+10 | |
| | | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads | |||||
* | support cachecrls=yes | Andreas Steffen | 2007-04-05 | 1 | -2/+8 | |
| | ||||||
* | support of crlcheckinterval=0 to disable IKEv2 CRL fetching | Andreas Steffen | 2007-04-04 | 1 | -0/+12 | |
| | ||||||
* | removed send_queue, handled internally in sender_t know | Martin Willi | 2007-03-28 | 1 | -3/+0 | |
| | | | | | do header parsing in receiver, ready for cookie integration | |||||
* | added fetcher_finalize() to clean up libcurl | Andreas Steffen | 2007-03-08 | 1 | -0/+1 | |
| | ||||||
* | support if ocsp signing certificates | Andreas Steffen | 2007-03-08 | 1 | -0/+1 | |
| | ||||||
* | http post fetching using libcurl implemented | Andreas Steffen | 2007-03-07 | 1 | -0/+4 | |
| | ||||||
* | fixed netlink socket receiver code | Martin Willi | 2007-03-03 | 1 | -1/+1 | |
| | | | | implemented interface enumeration code with netlink: no getifaddrs reqired anymore | |||||
* | merged EAP framework from branch into trunk | Martin Willi | 2007-02-12 | 1 | -0/+10 | |
| | | | | | includes a lot of other modifications | |||||
* | fixed HAVE_BACKTRACE checks | Martin Willi | 2006-12-11 | 1 | -2/+4 | |
| | | | | starter Makefile now uses proper $(COMPILE) to build pluto objects | |||||
* | made backtrace() calls optional to support uClibc | Martin Willi | 2006-12-06 | 1 | -1/+6 | |
| | ||||||
* | better split up of library files "types.h" & "definitions.h" | Martin Willi | 2006-10-31 | 1 | -1/+1 | |
| | | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements | |||||
* | improved signal handling and emitting | Martin Willi | 2006-10-26 | 1 | -28/+29 | |
| | ||||||
* | introduced new logging subsystem using bus: | Martin Willi | 2006-10-18 | 1 | -75/+139 | |
| | | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more... | |||||
* | introduced printf() specifiers for: | Martin Willi | 2006-09-27 | 1 | -75/+63 | |
| | | | | | | | | | | | host_t (%H) identification_t (%D) chunk pointers (%B) memory pointer/length (%b) added a signaling bus: receives event and debug messages, sends them to its listeners stream_logger, sys_logger, file_logger added, listen to bus some other tweaks here and there | |||||
* | added PSK support | Andreas Steffen | 2006-09-18 | 1 | -2/+2 | |
| | ||||||
* | initial support for IPv6 (more testing needed) | Martin Willi | 2006-08-30 | 1 | -3/+8 | |
| | | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support | |||||
* | moved interface enumeration code to socket, where it belongs | Martin Willi | 2006-08-28 | 1 | -67/+38 | |
| | | | | | query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall" | |||||
* | implemented proper refcounting using atomic operations | Martin Willi | 2006-07-28 | 1 | -0/+1 | |
| | ||||||
* | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 1 | -0/+4 | |
| | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | |||||
* | updated copyright information | Martin Willi | 2006-07-07 | 1 | -1/+2 | |
| | ||||||
* | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 1 | -1/+1 | |
| | | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet | |||||
* | first merge of NATT code | Martin Willi | 2006-06-22 | 1 | -1/+8 | |
| | ||||||
* | reworked function ignore mechanism to not-report whitelist | Martin Willi | 2006-06-20 | 1 | -2/+2 | |
| | | | | rather than overriding functions | |||||
* | readded local_credential_store | Martin Willi | 2006-06-20 | 1 | -5/+4 | |
| | | | | | | added sendcert policy to connection some other cleanups | |||||
* | implemented rereadcrls rereadcacerts | Andreas Steffen | 2006-06-20 | 1 | -7/+9 | |
| | ||||||
* | (no commit message) | Martin Willi | 2006-06-16 | 1 | -1/+1 | |
| | ||||||
* | fixed compilation error | Martin Willi | 2006-06-15 | 1 | -2/+1 | |
| | ||||||
* | added option parsing | Andreas Steffen | 2006-06-14 | 1 | -11/+59 | |
| | ||||||
* | charon outputs strongSwan version | Andreas Steffen | 2006-05-31 | 1 | -0/+3 | |
| | ||||||
* | load all ca certificates | Andreas Steffen | 2006-05-30 | 1 | -1/+1 | |
| | ||||||
* | - fixed daemon destruction order to prevent | Martin Willi | 2006-05-30 | 1 | -25/+33 | |
| | | | | | crashes on termination | |||||
* | (no commit message) | Martin Willi | 2006-05-10 | 1 | -0/+390 | |