Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | changing UID/GID after startup of pluto/charon | Martin Willi | 2007-05-07 | 2 | -3/+5 | |
| | | | | added --with-uid/--with-gid configure option | |||||
* | reducing capabilities of the threads to a minimum | Martin Willi | 2007-05-03 | 2 | -2/+12 | |
| | | | | | | proper flush of pending packets on daemon shutdown adding local address as gateway address in dynamic route | |||||
* | forcing proper autoload of af_key kernel module in charon | Martin Willi | 2007-04-27 | 1 | -0/+10 | |
| | ||||||
* | not using %m printf handler, as late errno interpration over bus may be ↵ | Martin Willi | 2007-04-12 | 1 | -13/+21 | |
| | | | | problematic | |||||
* | cleaned up apidoc | Martin Willi | 2007-04-11 | 2 | -4/+4 | |
| | | | | | | added some comments removed configuration.[ch], as it does not make sense like it is | |||||
* | restructured file layout | Martin Willi | 2007-04-10 | 4 | -0/+676 | |
| | | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads | |||||
* | removed unneded includes | Martin Willi | 2007-03-30 | 1 | -1/+0 | |
| | ||||||
* | fixed netlink socket receiver code | Martin Willi | 2007-03-03 | 2 | -206/+0 | |
| | | | | implemented interface enumeration code with netlink: no getifaddrs reqired anymore | |||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 1 | -8/+2 | |
| | ||||||
* | respecting source address when sending packets | Martin Willi | 2007-02-15 | 1 | -2/+51 | |
| | ||||||
* | added address listing without getifaddrs for uclibc (only IPv4 yet) | Martin Willi | 2007-02-02 | 1 | -1/+75 | |
| | ||||||
* | renamed all static clone() functions to avoid naming conflicts with uclibc | Martin Willi | 2007-02-01 | 1 | -2/+2 | |
| | ||||||
* | fixed more uClibc issues | Martin Willi | 2006-12-15 | 1 | -6/+7 | |
| | | | | | should compile against a uClibc > 0.9.28 (untested) | |||||
* | better split up of library files "types.h" & "definitions.h" | Martin Willi | 2006-10-31 | 3 | -3/+3 | |
| | | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements | |||||
* | moved typedefs to beginning of files to solve some include problems | Martin Willi | 2006-10-30 | 2 | -12/+7 | |
| | | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups | |||||
* | improved signal handling and emitting | Martin Willi | 2006-10-26 | 1 | -32/+32 | |
| | ||||||
* | introduced new logging subsystem using bus: | Martin Willi | 2006-10-18 | 1 | -71/+36 | |
| | | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more... | |||||
* | fixed auxillary message data parsing for IPV6 socket | Martin Willi | 2006-10-09 | 1 | -14/+12 | |
| | | | | using SOL_* constants for socket level | |||||
* | fixed IPV6_PKTINFO setsockopt() to work with most kernel headers | Martin Willi | 2006-10-09 | 1 | -28/+22 | |
| | | | | | replaced strerror(errno) with %m printf specifier | |||||
* | introduced printf() specifiers for: | Martin Willi | 2006-09-27 | 1 | -9/+6 | |
| | | | | | | | | | | | host_t (%H) identification_t (%D) chunk pointers (%B) memory pointer/length (%b) added a signaling bus: receives event and debug messages, sends them to its listeners stream_logger, sys_logger, file_logger added, listen to bus some other tweaks here and there | |||||
* | proper error handling for socket creation | Martin Willi | 2006-09-18 | 1 | -12/+23 | |
| | ||||||
* | implemented updown script to handle firewalling | Martin Willi | 2006-09-12 | 2 | -3/+12 | |
| | ||||||
* | added raw socket filter for IPv6 | Martin Willi | 2006-08-31 | 2 | -23/+16 | |
| | ||||||
* | initial support for IPv6 (more testing needed) | Martin Willi | 2006-08-30 | 2 | -141/+452 | |
| | | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support | |||||
* | moved interface enumeration code to socket, where it belongs | Martin Willi | 2006-08-28 | 4 | -268/+135 | |
| | | | | | query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall" | |||||
* | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 2 | -6/+6 | |
| | | | | | | added proper traffic selector to string conversion some cleanups here & there | |||||
* | fixed UDP decapsulation by adding inbound bypass policy for send socket | Martin Willi | 2006-07-14 | 1 | -10/+17 | |
| | ||||||
* | added IPsec bypass policy to receiving socket, allows incoming IKE traffic ↵ | Martin Willi | 2006-07-14 | 1 | -26/+29 | |
| | | | | on host2host tunnels when using NAT | |||||
* | further work done for simultaneous rekeying/delete | Martin Willi | 2006-07-10 | 1 | -17/+1 | |
| | | | | | still some cases which cause trouble | |||||
* | updated copyright information | Martin Willi | 2006-07-07 | 4 | -8/+8 | |
| | ||||||
* | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 3 | -11/+11 | |
| | | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet | |||||
* | applied new changes from NATT team | Martin Willi | 2006-06-23 | 2 | -2/+3 | |
| | | | | | DPD only done when no IPsec and IKE traffic processed minor changes here and there | |||||
* | cleaner error handling on UDP encapsultion sockopt failure | Martin Willi | 2006-06-22 | 1 | -8/+7 | |
| | ||||||
* | added mysterious UDP encapsulation socket option to get encapsulation working | Martin Willi | 2006-06-22 | 1 | -0/+20 | |
| | ||||||
* | first merge of NATT code | Martin Willi | 2006-06-22 | 4 | -304/+483 | |
| | ||||||
* | debug and logging improvements | Martin Willi | 2006-06-13 | 1 | -2/+24 | |
| | ||||||
* | created IPv6 environment | Andreas Steffen | 2006-06-06 | 1 | -4/+4 | |
| | ||||||
* | - fixed some memleaks/freebugs | Martin Willi | 2006-05-31 | 1 | -8/+5 | |
| | | | | | - leak detective works almost usable now (?!) | |||||
* | - applied andreas's patch | Martin Willi | 2006-05-18 | 1 | -5/+3 | |
| | | | | | | | - logger output improvements - testin gupdates - and a lot more | |||||
* | - introduced autotools | Martin Willi | 2006-05-16 | 1 | -24/+0 | |
| | | | | | | | | | | - first working version - make dist should work - things to do: - UML testing! - more cleanups | |||||
* | (no commit message) | Martin Willi | 2006-05-10 | 5 | -0/+932 | |