| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
some components accept a "component.load" option with a space separated list of plugins to load
libcharon- plugins are now handled the same way as libstrongswan- plugins
|
|
|
|
|
| |
using named users, groups
fixed capability dropping in pluto
|
|
|
|
|
|
| |
updated ipsec.conf sourceip parameter to support
CIDR notatation to serve from a pool
%poolname to query a separate (database?) pool
|
| |
|
|
|
|
| |
of the draft. note: the external interface (config, autotools) has not yet been changed
|
|
|
|
| |
moved auth_info/ocsp_response credset wrapper to separate files
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
simple asynchronous method invocation
use daemons thread pool for all threads
proper cancellation and cleanups
cancellation mechanism to dynamically unload multithreaded code
unified event_queue and scheduler => scheduler
unified job_queue and thread_pool => processor
removed job_type_t, not really needed
fixes here, there and everywhere
|
| |
|
|
|
|
| |
added --with-uid/--with-gid configure option
|
|
|
|
|
|
| |
proper flush of pending packets on daemon shutdown
adding local address as gateway address in dynamic route
|
|
|
|
|
|
|
|
|
| |
added propotypes of new control interfaces (xml & dbus)
introduced loadable:
configuration backends
control interfaces
using pluggable modules as in EAP
|
| |
|
| |
|
|
|
|
|
|
| |
added some comments
removed configuration.[ch], as it does not make sense like it is
|
|
|
|
|
|
|
|
|
| |
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
|
|
|
|
|
| |
do header parsing in receiver, ready for cookie integration
|
| |
|
| |
|
| |
|
|
|
|
|
| |
includes a lot of other modifications
|
| |
|
|
|
|
|
|
|
| |
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
|
|
|
|
|
|
|
| |
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
|
|
|
|
|
|
|
|
|
|
|
| |
host_t (%H)
identification_t (%D)
chunk pointers (%B)
memory pointer/length (%b)
added a signaling bus:
receives event and debug messages, sends them to its listeners
stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
|
|
|
|
|
| |
query interfaces every time we need it to respect changes in network config
added address listing on startup and "ipsec statusall"
|
| |
|
| |
|
|
|
|
|
| |
DPD only done when no IPsec and IKE traffic processed
minor changes here and there
|
| |
|
|
|
|
|
|
| |
added sendcert policy to connection
some other cleanups
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- first working version
- make dist should work
- things to do:
- UML testing!
- more cleanups
|
|
|