Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | added support for transport mode and (experimental!) BEET mode | Martin Willi | 2006-12-21 | 1 | -1/+2 | |
| | | | | | support for the type=transport/tunnel parameter in charon | |||||
* | fixed encoding rules string | Martin Willi | 2006-12-14 | 1 | -11/+10 | |
| | | | | updated todo | |||||
* | fixed some byte-order issues | Martin Willi | 2006-12-12 | 2 | -6/+9 | |
| | ||||||
* | better split up of library files "types.h" & "definitions.h" | Martin Willi | 2006-10-31 | 44 | -71/+49 | |
| | | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements | |||||
* | moved typedefs to beginning of files to solve some include problems | Martin Willi | 2006-10-30 | 27 | -160/+131 | |
| | | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups | |||||
* | cosmetics in debug output | Andreas Steffen | 2006-10-29 | 1 | -2/+2 | |
| | ||||||
* | support of certreq payload in IKE_AUTH messages | Andreas Steffen | 2006-10-28 | 2 | -6/+63 | |
| | ||||||
* | added function certreq_payload_create_from_x509() | Andreas Steffen | 2006-10-28 | 2 | -13/+35 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2006-10-28 | 1 | -13/+13 | |
| | ||||||
* | improved signal handling and emitting | Martin Willi | 2006-10-26 | 8 | -156/+156 | |
| | ||||||
* | fixed typo in debug statement | Andreas Steffen | 2006-10-25 | 1 | -2/+2 | |
| | ||||||
* | removed deprecated iterator methods (has_next & current) | Martin Willi | 2006-10-24 | 8 | -186/+108 | |
| | | | | added iterator hook to manipulate iterator the clean way | |||||
* | linked list cleanups | Martin Willi | 2006-10-24 | 6 | -71/+15 | |
| | | | | | added list methods invoke(), destroy_offset(), destroy_function() simplified list destruction when destroying its items | |||||
* | introduced new logging subsystem using bus: | Martin Willi | 2006-10-18 | 28 | -1244/+974 | |
| | | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more... | |||||
* | moved auth_method to policy | Andreas Steffen | 2006-09-25 | 1 | -1/+1 | |
| | ||||||
* | initial support for IPv6 (more testing needed) | Martin Willi | 2006-08-30 | 2 | -2/+10 | |
| | | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support | |||||
* | moved interface enumeration code to socket, where it belongs | Martin Willi | 2006-08-28 | 1 | -0/+2 | |
| | | | | | query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall" | |||||
* | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 2 | -82/+62 | |
| | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | |||||
* | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 1 | -100/+8 | |
| | | | | | | added proper traffic selector to string conversion some cleanups here & there | |||||
* | improved logging on verify errors for some payloads | Martin Willi | 2006-07-13 | 4 | -66/+36 | |
| | | | | | | enforcing IKE_SA shutdown, even when transactions are outstanding proper reject of CREATE_CHILD_SA message with KE payload | |||||
* | added message id logging | Martin Willi | 2006-07-12 | 1 | -2/+4 | |
| | ||||||
* | added all currently known notify payload types | Martin Willi | 2006-07-12 | 2 | -1/+34 | |
| | ||||||
* | added policy cache to kernel interface | Martin Willi | 2006-07-12 | 1 | -1/+1 | |
| | | | | | | allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying | |||||
* | fixed compiler warnings in parser when using -O2 | Martin Willi | 2006-07-07 | 1 | -3/+3 | |
| | ||||||
* | updated copyright information | Martin Willi | 2006-07-07 | 52 | -52/+104 | |
| | ||||||
* | reimplemented CHILD_SA rekeying & delete | Martin Willi | 2006-07-07 | 1 | -0/+1 | |
| | | | | | no simultanous transaction with CHILD_SAs yet! | |||||
* | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 12 | -151/+257 | |
| | | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet | |||||
* | support of cert payloads | Andreas Steffen | 2006-07-03 | 3 | -30/+55 | |
| | ||||||
* | some message code cleanups | Martin Willi | 2006-06-23 | 2 | -32/+29 | |
| | ||||||
* | first merge of NATT code | Martin Willi | 2006-06-22 | 4 | -5/+32 | |
| | ||||||
* | added support for "ike" and "esp" keywords | Martin Willi | 2006-06-15 | 5 | -34/+43 | |
| | | | | | | | fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes | |||||
* | cosmetics | Andreas Steffen | 2006-06-12 | 2 | -48/+48 | |
| | ||||||
* | old child_sa gets deleted after rekeying | Martin Willi | 2006-06-09 | 3 | -42/+99 | |
| | | | | | | rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time, | |||||
* | specifying keysize in bits, as it is required in IKEv2 | Martin Willi | 2006-06-09 | 1 | -3/+6 | |
| | | | | | | added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs | |||||
* | further work for rekeying: | Martin Willi | 2006-06-07 | 6 | -117/+152 | |
| | | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals | |||||
* | job management: | Martin Willi | 2006-05-31 | 1 | -0/+26 | |
| | | | | | | | | | | | | | moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-) | |||||
* | - some logging improvements and cosmetics | Martin Willi | 2006-05-24 | 1 | -3/+4 | |
| | ||||||
* | - handle IKE_SA setup without a piggy-packed CHILD_SA | Martin Willi | 2006-05-24 | 3 | -2/+3 | |
| | | | | | more IKEv2 conform | |||||
* | - reimplemented proper IKE SA deletion using a seperate state, | Martin Willi | 2006-05-23 | 2 | -14/+10 | |
| | | | | | should conform now to IKEv2 | |||||
* | - introduced autotools | Martin Willi | 2006-05-16 | 2 | -138/+0 | |
| | | | | | | | | | | - first working version - make dist should work - things to do: - UML testing! - more cleanups | |||||
* | (no commit message) | Martin Willi | 2006-05-10 | 54 | -0/+15671 | |