Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | implemented routeability checks for mobike (experimental) | Martin Willi | 2007-09-03 | 1 | -6/+38 | |
| | ||||||
* | fixed compiler warning | Martin Willi | 2007-07-16 | 1 | -3/+3 | |
| | ||||||
* | include default route also in src address evaluation | Andreas Steffen | 2007-07-13 | 1 | -4/+4 | |
| | ||||||
* | include default route with missing dst field into route evaluation | Andreas Steffen | 2007-07-13 | 1 | -6/+7 | |
| | ||||||
* | doing route lookup in userspace to ignore routes installed by us | Martin Willi | 2007-07-11 | 1 | -29/+121 | |
| | ||||||
* | using own routing table for installed routes (table 100, prio 100) | Martin Willi | 2007-07-11 | 1 | -1/+51 | |
| | ||||||
* | using correct nexthop for inserted route | Martin Willi | 2007-07-04 | 1 | -15/+30 | |
| | ||||||
* | improved MOBIKE: | Martin Willi | 2007-07-03 | 1 | -32/+58 | |
| | | | | | | | | prefer address family already used do not change address implicit when mobike supported handle multiple simultaneous roaming requests more properly proper enabling/disabling of UDP encapsulation | |||||
* | fixed typo | Andreas Steffen | 2007-07-02 | 1 | -3/+3 | |
| | ||||||
* | proper update of IPsec SA when roaming a host-to-host tunnel | Martin Willi | 2007-07-02 | 1 | -9/+14 | |
| | | | | roaming of IPsec SAs using virtual IPs | |||||
* | further mobike improvements, regarding to NAT-T | Martin Willi | 2007-06-27 | 1 | -5/+5 | |
| | ||||||
* | simple roaming of the client works (not MOBIKE conform yet!) | Martin Willi | 2007-06-26 | 1 | -25/+22 | |
| | ||||||
* | further fixed for mobike roaming | Martin Willi | 2007-06-25 | 1 | -8/+24 | |
| | ||||||
* | further MOBIKE stuff: | Martin Willi | 2007-06-21 | 1 | -216/+223 | |
| | | | | | | | | | kernel properly reports network reconfiguration and informs all IKE_SAs MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange reestablishment of IKE_SAs on network reconfiguration kinda works not stable yet! | |||||
* | fixed virtua IP: adding virtual IP to interface address list cache directly | Martin Willi | 2007-06-19 | 1 | -16/+30 | |
| | | | | corrected debug targets | |||||
* | source address lookup in kernel interface | Martin Willi | 2007-06-18 | 1 | -1/+79 | |
| | | | | | | use it for NAT detection if no source address known from config support for %any...%any connections | |||||
* | increased receive buffer to handle more interfaces | Martin Willi | 2007-06-18 | 1 | -1/+1 | |
| | ||||||
* | implemented more flexible iterator hook API | Martin Willi | 2007-06-15 | 1 | -195/+345 | |
| | | | | kernel interface handles interface changes and updates address list | |||||
* | implemented address change notification (for MOBIKE) | Martin Willi | 2007-06-14 | 1 | -176/+346 | |
| | | | | | implemented up to date address list cache to list interfaces | |||||
* | introduced callback_job: | Martin Willi | 2007-06-11 | 1 | -91/+86 | |
| | | | | | | | | | | | | simple asynchronous method invocation use daemons thread pool for all threads proper cancellation and cleanups cancellation mechanism to dynamically unload multithreaded code unified event_queue and scheduler => scheduler unified job_queue and thread_pool => processor removed job_type_t, not really needed fixes here, there and everywhere | |||||
* | fixed crash when using 0.0.0.0/0 subnets | Martin Willi | 2007-05-23 | 1 | -0/+1 | |
| | ||||||
* | using local address as gateway in installed routes | Martin Willi | 2007-05-22 | 1 | -2/+1 | |
| | ||||||
* | simplified capability dropping | Martin Willi | 2007-05-09 | 1 | -2/+1 | |
| | ||||||
* | changing UID/GID after startup of pluto/charon | Martin Willi | 2007-05-07 | 1 | -1/+1 | |
| | | | | added --with-uid/--with-gid configure option | |||||
* | reducing capabilities of the threads to a minimum | Martin Willi | 2007-05-03 | 1 | -0/+11 | |
| | | | | | | proper flush of pending packets on daemon shutdown adding local address as gateway address in dynamic route | |||||
* | added support for AES-XCBC in kernel using e.g. esp=aes128-aesxcbc ↵ | Martin Willi | 2007-04-23 | 1 | -1/+1 | |
| | | | | (>=linux-2.6.20) | |||||
* | not using %m printf handler, as late errno interpration over bus may be ↵ | Martin Willi | 2007-04-12 | 1 | -2/+2 | |
| | | | | problematic | |||||
* | restructured file layout | Martin Willi | 2007-04-10 | 1 | -0/+1964 | |
new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads |