aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/kernel
Commit message (Collapse)AuthorAgeFilesLines
* Moving charon to libcharon.Tobias Brunner2010-03-195-1238/+0
|
* Pass sockets to bypass to kernel interface, allowing us to register them ↵Martin Willi2010-02-263-0/+28
| | | | dynamically
* Migrated kernel_interface wrapper to METHOD/INIT macrosMartin Willi2010-02-261-163/+109
|
* Using the thread wrapper in charon, libstrongswan and their plugins.Tobias Brunner2009-12-231-2/+0
|
* Fixed BEET mode by installing SAs with negotiated address in traffic selectorMartin Willi2009-12-174-7/+12
|
* replaces four spaces by tabs, where appropriateMartin Willi2009-09-042-2/+2
|
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-044-95/+95
|
* Adapted the kernel interfaces to the new lifetime configuration.Tobias Brunner2009-09-013-28/+23
|
* use time_monotonic() instead of time() for statistics and time difference ↵Martin Willi2009-08-311-3/+4
| | | | calculations
* display transmitted bytes per SAAndreas Steffen2009-07-303-0/+40
|
* instanciate first registered kernel interface immediatelyMartin Willi2009-06-162-71/+78
|
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-305-10/+0
|
* merging changes from portability branch back to trunkTobias Brunner2009-04-303-14/+14
| | | | | important change for developers: %Y replaces %D to print identities!
* updated DoxyfileMartin Willi2009-03-243-3/+3
| | | | | | properly close all doxygen groups fixed remaining doxygen warnings
* do not use a route if outgoing interface is downMartin Willi2008-11-141-1/+1
| | | | other cleanups
* merging kernel_klips plugin back into trunkTobias Brunner2008-11-113-53/+68
|
* passing chunks, not prf+, to kernel interfaceMartin Willi2008-10-143-21/+16
| | | | gives us better control of keymat in CHILD_SA
* merging kernel_pfkey plugin back from kernel-interface branchTobias Brunner2008-10-144-42/+85
|
* mobike: try to keep existing source address before switching to anotherMartin Willi2008-10-083-5/+13
|
* merging renaming of mode_t to ipsec_mode_t back to trunkTobias Brunner2008-09-254-8/+54
|
* merging modularized kernel interface back to trunkTobias Brunner2008-09-254-2972/+653
|
* typosTobias Brunner2008-09-031-6/+5
|
* do not return IPv6 src addresses for IPv4 destinationsMartin Willi2008-08-211-2/+4
|
* charon.process_route = no does not process RTM_NEWROUTE and RTM_DELROUTE ↵Andreas Steffen2008-08-211-3/+14
| | | | events. Useful for taking down hundreds of virtual IPs on the same host
* avoid too many alloca()s in netlink send, problematic on MIPSMartin Willi2008-08-211-2/+7
|
* roam jobs for routing table changes not fired for virtual IP routesMartin Willi2008-08-181-36/+66
|
* do not fire a roam job when virtual IP is deletedAndreas Steffen2008-08-151-1/+1
|
* temporary workaround to prevent roam jobs due to virtual IP installationsAndreas Steffen2008-08-111-1/+2
|
* use condvar broadcasts to signal threads waiting for an IP, there might be ↵Martin Willi2008-07-301-2/+2
| | | | more than one
* use XFRM_MSG_UPDPOLICY for existing policies onlyMartin Willi2008-07-281-1/+1
|
* ipsec status lists IPCOMP CPIsAndreas Steffen2008-07-221-0/+1
|
* consistent logging of SPIs and CPIsAndreas Steffen2008-07-221-36/+54
|
* consistent logging of IKE and CHILD SAsAndreas Steffen2008-07-211-3/+3
|
* ignore IPCOMP acquires, fixes additional CHILD_SA setup with acquired SAs ↵Martin Willi2008-07-171-0/+12
| | | | using compression
* do not distinguish different policy protocols in userland cacheMartin Willi2008-07-161-6/+1
|
* do not complain about existing routesMartin Willi2008-07-161-8/+22
|
* fixed acquire-delay bug by:Martin Willi2008-07-161-5/+7
| | | | | installing policies before states updating policies if protocol has changed
* set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel modeAndreas Steffen2008-07-151-1/+4
|
* The XFRM_STATE_AF_UNSPEC flag added to xfrm.h allows IPv4-over-IPv6 and ↵Andreas Steffen2008-07-151-1/+7
| | | | IPv6-over-IPv6 tunnels with the 2.6.26 and later Linux kernels
* ike/kernel protocol identifier conversion functionsMartin Willi2008-06-261-15/+43
|
* merging the ESP sequence numbers of an SA in update_sa (fixing #52)Tobias Brunner2008-06-241-5/+127
|
* do not use self-installed route for IKE if routing table is 0Martin Willi2008-06-171-0/+7
|
* added strongswan.conf option "routing_table" and "routing_table_prio"Martin Willi2008-06-101-10/+29
|
* added strongswan.conf option to disable route installationMartin Willi2008-06-101-2/+10
|
* Added support for AES-CCM and AES-GCM (authenticated encryption algorithms) ↵Tobias Brunner2008-05-161-35/+90
| | | | in charon.
* IPComp for IKEv2Tobias Brunner2008-05-082-35/+163
|
* made some stuff staticTobias Brunner2008-04-281-3/+3
|
* added equals() method to peer_cfg, ike_cfg, proposals, auth_infoMartin Willi2008-03-262-26/+25
| | | | | | allows easier merging of ipsec.conf connections replaced some iterators through enumerators made proposals algorithm_t private using enumerator
* merged the modularization branch (credentials) back to trunkMartin Willi2008-03-132-87/+38
|
* fixed some typosMartin Willi2007-10-051-2/+2
|