Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 2 | -82/+62 |
| | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | ||||
* | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 1 | -100/+8 |
| | | | | | | added proper traffic selector to string conversion some cleanups here & there | ||||
* | improved logging on verify errors for some payloads | Martin Willi | 2006-07-13 | 4 | -66/+36 |
| | | | | | | enforcing IKE_SA shutdown, even when transactions are outstanding proper reject of CREATE_CHILD_SA message with KE payload | ||||
* | added all currently known notify payload types | Martin Willi | 2006-07-12 | 2 | -1/+34 |
| | |||||
* | updated copyright information | Martin Willi | 2006-07-07 | 46 | -46/+92 |
| | |||||
* | reimplemented CHILD_SA rekeying & delete | Martin Willi | 2006-07-07 | 1 | -0/+1 |
| | | | | | no simultanous transaction with CHILD_SAs yet! | ||||
* | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 10 | -81/+158 |
| | | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet | ||||
* | support of cert payloads | Andreas Steffen | 2006-07-03 | 3 | -30/+55 |
| | |||||
* | first merge of NATT code | Martin Willi | 2006-06-22 | 2 | -0/+6 |
| | |||||
* | added support for "ike" and "esp" keywords | Martin Willi | 2006-06-15 | 4 | -28/+37 |
| | | | | | | | fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes | ||||
* | cosmetics | Andreas Steffen | 2006-06-12 | 1 | -3/+3 |
| | |||||
* | old child_sa gets deleted after rekeying | Martin Willi | 2006-06-09 | 3 | -42/+99 |
| | | | | | | rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time, | ||||
* | specifying keysize in bits, as it is required in IKEv2 | Martin Willi | 2006-06-09 | 1 | -3/+6 |
| | | | | | | added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs | ||||
* | further work for rekeying: | Martin Willi | 2006-06-07 | 5 | -114/+147 |
| | | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals | ||||
* | - handle IKE_SA setup without a piggy-packed CHILD_SA | Martin Willi | 2006-05-24 | 3 | -2/+3 |
| | | | | | more IKEv2 conform | ||||
* | - reimplemented proper IKE SA deletion using a seperate state, | Martin Willi | 2006-05-23 | 1 | -7/+0 |
| | | | | | should conform now to IKEv2 | ||||
* | - introduced autotools | Martin Willi | 2006-05-16 | 1 | -108/+0 |
| | | | | | | | | | | - first working version - make dist should work - things to do: - UML testing! - more cleanups | ||||
* | (no commit message) | Martin Willi | 2006-05-10 | 47 | -0/+11685 |