Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | merging kernel_klips plugin back into trunk | Tobias Brunner | 2008-11-11 | 1 | -17/+24 |
| | |||||
* | passing chunks, not prf+, to kernel interface | Martin Willi | 2008-10-14 | 1 | -7/+5 |
| | | | | gives us better control of keymat in CHILD_SA | ||||
* | merging kernel_pfkey plugin back from kernel-interface branch | Tobias Brunner | 2008-10-14 | 1 | -15/+11 |
| | |||||
* | mobike: try to keep existing source address before switching to another | Martin Willi | 2008-10-08 | 1 | -1/+5 |
| | |||||
* | merging renaming of mode_t to ipsec_mode_t back to trunk | Tobias Brunner | 2008-09-25 | 1 | -2/+2 |
| | |||||
* | merging modularized kernel interface back to trunk | Tobias Brunner | 2008-09-25 | 1 | -33/+103 |
| | |||||
* | IPComp for IKEv2 | Tobias Brunner | 2008-05-08 | 1 | -3/+20 |
| | |||||
* | added equals() method to peer_cfg, ike_cfg, proposals, auth_info | Martin Willi | 2008-03-26 | 1 | -1/+4 |
| | | | | | | allows easier merging of ipsec.conf connections replaced some iterators through enumerators made proposals algorithm_t private using enumerator | ||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -80/+36 |
| | |||||
* | improved MOBIKE: | Martin Willi | 2007-07-03 | 1 | -1/+2 |
| | | | | | | | | prefer address family already used do not change address implicit when mobike supported handle multiple simultaneous roaming requests more properly proper enabling/disabling of UDP encapsulation | ||||
* | proper update of IPsec SA when roaming a host-to-host tunnel | Martin Willi | 2007-07-02 | 1 | -7/+1 |
| | | | | roaming of IPsec SAs using virtual IPs | ||||
* | further mobike improvements, regarding to NAT-T | Martin Willi | 2007-06-27 | 1 | -15/+3 |
| | |||||
* | simple roaming of the client works (not MOBIKE conform yet!) | Martin Willi | 2007-06-26 | 1 | -9/+8 |
| | |||||
* | further MOBIKE stuff: | Martin Willi | 2007-06-21 | 1 | -3/+1 |
| | | | | | | | | | kernel properly reports network reconfiguration and informs all IKE_SAs MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange reestablishment of IKE_SAs on network reconfiguration kinda works not stable yet! | ||||
* | source address lookup in kernel interface | Martin Willi | 2007-06-18 | 1 | -0/+12 |
| | | | | | | use it for NAT detection if no source address known from config support for %any...%any connections | ||||
* | implemented address change notification (for MOBIKE) | Martin Willi | 2007-06-14 | 1 | -3/+7 |
| | | | | | implemented up to date address list cache to list interfaces | ||||
* | cleaned up apidoc | Martin Willi | 2007-04-11 | 1 | -2/+6 |
| | | | | | | added some comments removed configuration.[ch], as it does not make sense like it is | ||||
* | restructured file layout | Martin Willi | 2007-04-10 | 1 | -0/+331 |
new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads |