aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/kernel/kernel_interface.c
Commit message (Collapse)AuthorAgeFilesLines
* do not use a route if outgoing interface is downMartin Willi2008-11-141-1/+1
| | | | other cleanups
* merging kernel_klips plugin back into trunkTobias Brunner2008-11-111-19/+20
|
* passing chunks, not prf+, to kernel interfaceMartin Willi2008-10-141-7/+6
| | | | gives us better control of keymat in CHILD_SA
* merging kernel_pfkey plugin back from kernel-interface branchTobias Brunner2008-10-141-12/+62
|
* mobike: try to keep existing source address before switching to anotherMartin Willi2008-10-081-3/+4
|
* merging renaming of mode_t to ipsec_mode_t back to trunkTobias Brunner2008-09-251-4/+4
|
* merging modularized kernel interface back to trunkTobias Brunner2008-09-251-2939/+162
|
* typosTobias Brunner2008-09-031-6/+5
|
* do not return IPv6 src addresses for IPv4 destinationsMartin Willi2008-08-211-2/+4
|
* charon.process_route = no does not process RTM_NEWROUTE and RTM_DELROUTE ↵Andreas Steffen2008-08-211-3/+14
| | | | events. Useful for taking down hundreds of virtual IPs on the same host
* avoid too many alloca()s in netlink send, problematic on MIPSMartin Willi2008-08-211-2/+7
|
* roam jobs for routing table changes not fired for virtual IP routesMartin Willi2008-08-181-36/+66
|
* do not fire a roam job when virtual IP is deletedAndreas Steffen2008-08-151-1/+1
|
* temporary workaround to prevent roam jobs due to virtual IP installationsAndreas Steffen2008-08-111-1/+2
|
* use condvar broadcasts to signal threads waiting for an IP, there might be ↵Martin Willi2008-07-301-2/+2
| | | | more than one
* use XFRM_MSG_UPDPOLICY for existing policies onlyMartin Willi2008-07-281-1/+1
|
* ipsec status lists IPCOMP CPIsAndreas Steffen2008-07-221-0/+1
|
* consistent logging of SPIs and CPIsAndreas Steffen2008-07-221-36/+54
|
* consistent logging of IKE and CHILD SAsAndreas Steffen2008-07-211-3/+3
|
* ignore IPCOMP acquires, fixes additional CHILD_SA setup with acquired SAs ↵Martin Willi2008-07-171-0/+12
| | | | using compression
* do not distinguish different policy protocols in userland cacheMartin Willi2008-07-161-6/+1
|
* do not complain about existing routesMartin Willi2008-07-161-8/+22
|
* fixed acquire-delay bug by:Martin Willi2008-07-161-5/+7
| | | | | installing policies before states updating policies if protocol has changed
* set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel modeAndreas Steffen2008-07-151-1/+4
|
* The XFRM_STATE_AF_UNSPEC flag added to xfrm.h allows IPv4-over-IPv6 and ↵Andreas Steffen2008-07-151-1/+7
| | | | IPv6-over-IPv6 tunnels with the 2.6.26 and later Linux kernels
* ike/kernel protocol identifier conversion functionsMartin Willi2008-06-261-15/+43
|
* merging the ESP sequence numbers of an SA in update_sa (fixing #52)Tobias Brunner2008-06-241-5/+127
|
* do not use self-installed route for IKE if routing table is 0Martin Willi2008-06-171-0/+7
|
* added strongswan.conf option "routing_table" and "routing_table_prio"Martin Willi2008-06-101-10/+29
|
* added strongswan.conf option to disable route installationMartin Willi2008-06-101-2/+10
|
* Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) ↵Tobias Brunner2008-05-161-35/+90
| | | | in charon.
* IPComp for IKEv2Tobias Brunner2008-05-081-32/+143
|
* made some stuff staticTobias Brunner2008-04-281-3/+3
|
* added equals() method to peer_cfg, ike_cfg, proposals, auth_infoMartin Willi2008-03-261-25/+21
| | | | | | allows easier merging of ipsec.conf connections replaced some iterators through enumerators made proposals algorithm_t private using enumerator
* merged the modularization branch (credentials) back to trunkMartin Willi2008-03-131-7/+2
|
* fixed some typosMartin Willi2007-10-051-2/+2
|
* removed recursive mutex and __USE_UNIX98, should fix uClibc buildMartin Willi2007-10-051-12/+13
|
* made add_ip()/del_ip() calls synchron (waiting until kernel event received)Martin Willi2007-09-271-21/+90
| | | | this should fix MOBIKE route migration with virtual IPs
* improved MOBIKE roaming between interfacesMartin Willi2007-09-241-5/+6
|
* implemented routeability checks for mobike (experimental)Martin Willi2007-09-031-6/+38
|
* fixed compiler warningMartin Willi2007-07-161-3/+3
|
* include default route also in src address evaluationAndreas Steffen2007-07-131-4/+4
|
* include default route with missing dst field into route evaluationAndreas Steffen2007-07-131-6/+7
|
* doing route lookup in userspace to ignore routes installed by usMartin Willi2007-07-111-29/+121
|
* using own routing table for installed routes (table 100, prio 100)Martin Willi2007-07-111-1/+51
|
* using correct nexthop for inserted routeMartin Willi2007-07-041-15/+30
|
* improved MOBIKE:Martin Willi2007-07-031-32/+58
| | | | | | | | prefer address family already used do not change address implicit when mobike supported handle multiple simultaneous roaming requests more properly proper enabling/disabling of UDP encapsulation
* fixed typoAndreas Steffen2007-07-021-3/+3
|
* proper update of IPsec SA when roaming a host-to-host tunnelMartin Willi2007-07-021-9/+14
| | | | roaming of IPsec SAs using virtual IPs
* further mobike improvements, regarding to NAT-TMartin Willi2007-06-271-5/+5
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-04 07:50:26 +0000