| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
allows easier merging of ipsec.conf connections
replaced some iterators through enumerators
made proposals algorithm_t private using enumerator
|
| |
|
|
|
|
|
|
|
|
|
| |
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
|
| |
|
|
|
|
| |
added iterator hook to manipulate iterator the clean way
|
|
|
|
|
| |
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
|
|
|
|
|
|
|
| |
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
|
|
|
|
|
| |
query interfaces every time we need it to respect changes in network config
added address listing on startup and "ipsec statusall"
|
|
|
|
|
|
| |
uses ikelifetime, rekeymargin and rekeyfuzz config settings
no handling of simultaneus exchanges yet!
|
|
|
|
|
|
| |
enforcing IKE_SA shutdown, even when transactions are outstanding
proper reject of CREATE_CHILD_SA message with KE payload
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
removed old state machine
reimplemented IKE_SA setup and delete
implemented dead peer detection
implemented keep-alives
a lot of fixes
no rekeying yet
|
|
|
|
|
|
|
|
|
| |
get liftimes from policy
added new state
initiation of rekeying done
proposal redone:
removed support for AH+ESP proposals
|
|
|