| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
|
|
|
|
|
|
|
|
| |
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
|
|
|
|
|
|
|
| |
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
added iterator hook to manipulate iterator the clean way
|
|
|
|
|
| |
added list methods invoke(), destroy_offset(), destroy_function()
simplified list destruction when destroying its items
|
|
|
|
|
|
|
| |
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
|
| |
|
|
|
|
|
|
|
|
|
| |
socket works (without v6 filter)
traffic selector handle IPv4/v4 cleanly
improvements in traffic selector code
kernel interface accepts v6 traffic selectors and hosts
host_t class has full IPv6 support
|
|
|
|
|
| |
query interfaces every time we need it to respect changes in network config
added address listing on startup and "ipsec statusall"
|
|
|
|
|
|
| |
uses ikelifetime, rekeymargin and rekeyfuzz config settings
no handling of simultaneus exchanges yet!
|
|
|
|
|
|
| |
added proper traffic selector to string conversion
some cleanups here & there
|
|
|
|
|
|
| |
enforcing IKE_SA shutdown, even when transactions are outstanding
proper reject of CREATE_CHILD_SA message with KE payload
|
| |
|
| |
|
|
|
|
|
|
| |
allows refcounting of multiple installed policies
finally brings us stable simultaneous rekeying
|
| |
|
| |
|
|
|
|
|
| |
no simultanous transaction with CHILD_SAs yet!
|
|
|
|
|
|
|
|
|
|
|
|
| |
removed old state machine
reimplemented IKE_SA setup and delete
implemented dead peer detection
implemented keep-alives
a lot of fixes
no rekeying yet
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
fixed bugs in proposal code
algorithm selection for charon works now with ipsec.conf
a lot of other fixes
|
| |
|
|
|
|
|
|
| |
rekeying almost complete, but:
IKE_SA get in an invalid state when both initiate rekeying at the same time,
|
|
|
|
|
|
| |
added generic kernel SA algorithm handling, which brings us:
aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
|
|
|
|
|
|
|
|
|
| |
get liftimes from policy
added new state
initiation of rekeying done
proposal redone:
removed support for AH+ESP proposals
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
moved job code from thread_pool to job, jobs have an "execute" method now
added two new jobs: delete_child_sa & rekey_child_sa
kernel interface:
listens now for ACQUIRE & EXPIRE
supports hard and soft lifetimes
fires jobs for delete and rekey child sa
ike sa manager:
can checkout IKE SAs by requid of owned CHILD SAs
we have now the infrastructure to do the rekeying... :-)
|
| |
|
|
|
|
|
| |
more IKEv2 conform
|
|
|
|
|
| |
should conform now to IKEv2
|
|
|
|
|
|
|
|
|
|
| |
- first working version
- make dist should work
- things to do:
- UML testing!
- more cleanups
|
|
|