Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | added message id logging | Martin Willi | 2006-07-12 | 1 | -2/+4 | |
| | ||||||
* | added all currently known notify payload types | Martin Willi | 2006-07-12 | 2 | -1/+34 | |
| | ||||||
* | added policy cache to kernel interface | Martin Willi | 2006-07-12 | 1 | -1/+1 | |
| | | | | | | allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying | |||||
* | fixed compiler warnings in parser when using -O2 | Martin Willi | 2006-07-07 | 1 | -3/+3 | |
| | ||||||
* | updated copyright information | Martin Willi | 2006-07-07 | 52 | -52/+104 | |
| | ||||||
* | reimplemented CHILD_SA rekeying & delete | Martin Willi | 2006-07-07 | 1 | -0/+1 | |
| | | | | | no simultanous transaction with CHILD_SAs yet! | |||||
* | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 12 | -151/+257 | |
| | | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet | |||||
* | support of cert payloads | Andreas Steffen | 2006-07-03 | 3 | -30/+55 | |
| | ||||||
* | some message code cleanups | Martin Willi | 2006-06-23 | 2 | -32/+29 | |
| | ||||||
* | first merge of NATT code | Martin Willi | 2006-06-22 | 4 | -5/+32 | |
| | ||||||
* | added support for "ike" and "esp" keywords | Martin Willi | 2006-06-15 | 5 | -34/+43 | |
| | | | | | | | fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes | |||||
* | cosmetics | Andreas Steffen | 2006-06-12 | 2 | -48/+48 | |
| | ||||||
* | old child_sa gets deleted after rekeying | Martin Willi | 2006-06-09 | 3 | -42/+99 | |
| | | | | | | rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time, | |||||
* | specifying keysize in bits, as it is required in IKEv2 | Martin Willi | 2006-06-09 | 1 | -3/+6 | |
| | | | | | | added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs | |||||
* | further work for rekeying: | Martin Willi | 2006-06-07 | 6 | -117/+152 | |
| | | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals | |||||
* | job management: | Martin Willi | 2006-05-31 | 1 | -0/+26 | |
| | | | | | | | | | | | | | moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-) | |||||
* | - some logging improvements and cosmetics | Martin Willi | 2006-05-24 | 1 | -3/+4 | |
| | ||||||
* | - handle IKE_SA setup without a piggy-packed CHILD_SA | Martin Willi | 2006-05-24 | 3 | -2/+3 | |
| | | | | | more IKEv2 conform | |||||
* | - reimplemented proper IKE SA deletion using a seperate state, | Martin Willi | 2006-05-23 | 2 | -14/+10 | |
| | | | | | should conform now to IKEv2 | |||||
* | - introduced autotools | Martin Willi | 2006-05-16 | 2 | -138/+0 | |
| | | | | | | | | | | - first working version - make dist should work - things to do: - UML testing! - more cleanups | |||||
* | (no commit message) | Martin Willi | 2006-05-10 | 54 | -0/+15671 | |