Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | moved typedefs to beginning of files to solve some include problems | Martin Willi | 2006-10-30 | 24 | -146/+119 | |
| | | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups | |||||
* | cosmetics in debug output | Andreas Steffen | 2006-10-29 | 1 | -2/+2 | |
| | ||||||
* | support of certreq payload in IKE_AUTH messages | Andreas Steffen | 2006-10-28 | 2 | -6/+63 | |
| | ||||||
* | added function certreq_payload_create_from_x509() | Andreas Steffen | 2006-10-28 | 2 | -13/+35 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2006-10-28 | 1 | -13/+13 | |
| | ||||||
* | improved signal handling and emitting | Martin Willi | 2006-10-26 | 5 | -46/+46 | |
| | ||||||
* | removed deprecated iterator methods (has_next & current) | Martin Willi | 2006-10-24 | 6 | -127/+83 | |
| | | | | added iterator hook to manipulate iterator the clean way | |||||
* | linked list cleanups | Martin Willi | 2006-10-24 | 6 | -71/+15 | |
| | | | | | added list methods invoke(), destroy_offset(), destroy_function() simplified list destruction when destroying its items | |||||
* | introduced new logging subsystem using bus: | Martin Willi | 2006-10-18 | 24 | -728/+545 | |
| | | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more... | |||||
* | moved auth_method to policy | Andreas Steffen | 2006-09-25 | 1 | -1/+1 | |
| | ||||||
* | initial support for IPv6 (more testing needed) | Martin Willi | 2006-08-30 | 1 | -0/+9 | |
| | | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support | |||||
* | moved interface enumeration code to socket, where it belongs | Martin Willi | 2006-08-28 | 1 | -0/+2 | |
| | | | | | query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall" | |||||
* | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 2 | -82/+62 | |
| | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | |||||
* | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 1 | -100/+8 | |
| | | | | | | added proper traffic selector to string conversion some cleanups here & there | |||||
* | improved logging on verify errors for some payloads | Martin Willi | 2006-07-13 | 4 | -66/+36 | |
| | | | | | | enforcing IKE_SA shutdown, even when transactions are outstanding proper reject of CREATE_CHILD_SA message with KE payload | |||||
* | added all currently known notify payload types | Martin Willi | 2006-07-12 | 2 | -1/+34 | |
| | ||||||
* | updated copyright information | Martin Willi | 2006-07-07 | 46 | -46/+92 | |
| | ||||||
* | reimplemented CHILD_SA rekeying & delete | Martin Willi | 2006-07-07 | 1 | -0/+1 | |
| | | | | | no simultanous transaction with CHILD_SAs yet! | |||||
* | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 10 | -81/+158 | |
| | | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet | |||||
* | support of cert payloads | Andreas Steffen | 2006-07-03 | 3 | -30/+55 | |
| | ||||||
* | first merge of NATT code | Martin Willi | 2006-06-22 | 2 | -0/+6 | |
| | ||||||
* | added support for "ike" and "esp" keywords | Martin Willi | 2006-06-15 | 4 | -28/+37 | |
| | | | | | | | fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes | |||||
* | cosmetics | Andreas Steffen | 2006-06-12 | 1 | -3/+3 | |
| | ||||||
* | old child_sa gets deleted after rekeying | Martin Willi | 2006-06-09 | 3 | -42/+99 | |
| | | | | | | rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time, | |||||
* | specifying keysize in bits, as it is required in IKEv2 | Martin Willi | 2006-06-09 | 1 | -3/+6 | |
| | | | | | | added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs | |||||
* | further work for rekeying: | Martin Willi | 2006-06-07 | 5 | -114/+147 | |
| | | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals | |||||
* | - handle IKE_SA setup without a piggy-packed CHILD_SA | Martin Willi | 2006-05-24 | 3 | -2/+3 | |
| | | | | | more IKEv2 conform | |||||
* | - reimplemented proper IKE SA deletion using a seperate state, | Martin Willi | 2006-05-23 | 1 | -7/+0 | |
| | | | | | should conform now to IKEv2 | |||||
* | - introduced autotools | Martin Willi | 2006-05-16 | 1 | -108/+0 | |
| | | | | | | | | | | - first working version - make dist should work - things to do: - UML testing! - more cleanups | |||||
* | (no commit message) | Martin Willi | 2006-05-10 | 47 | -0/+11685 | |