Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Reenabled acq_expires SA timer using rekey timeout | Martin Willi | 2009-10-07 | 1 | -1/+1 |
| | | | | | | | While not using a SA expiration for allocating SPIs works fine, the situation is much more problematic for kernel-created temporary SAs from acquires. If the negotiation of such a CHILD_SA fails, the created temporary SA can not be deleted. | ||||
* | Fixed a crash in source address lookup | Martin Willi | 2009-09-23 | 1 | -8/+11 |
| | |||||
* | Fixed nexthop lookup, used by source route installation | Martin Willi | 2009-09-16 | 1 | -7/+4 |
| | |||||
* | Use continue to advance to next iteration | Martin Willi | 2009-09-16 | 1 | -12/+11 |
| | |||||
* | Use macros to define --with options | Martin Willi | 2009-09-07 | 2 | -12/+6 |
| | |||||
* | remove spaces before tabs at the beginning of lines (^( )+\t) | Martin Willi | 2009-09-04 | 1 | -2/+2 |
| | |||||
* | remove spaces within tabs (\t( )+\t) | Martin Willi | 2009-09-04 | 2 | -2/+2 |
| | |||||
* | replaces four spaces by tabs, where appropriate | Martin Willi | 2009-09-04 | 1 | -6/+6 |
| | |||||
* | removed trailing spaces ([[:space:]]+$) | Martin Willi | 2009-09-04 | 5 | -310/+310 |
| | |||||
* | Use recursive source address lookup if we get a gateway only | Martin Willi | 2009-09-03 | 1 | -45/+40 |
| | |||||
* | Refactored the lifetime_cfg_t struct to be simpler and more expressive. ↵ | Tobias Brunner | 2009-09-01 | 1 | -7/+7 |
| | | | | Initialization is now static. | ||||
* | Set the packet and byte limits in the netlink and pfkey kernel interfaces. | Tobias Brunner | 2009-09-01 | 1 | -5/+10 |
| | |||||
* | Adapted the kernel interfaces to the new lifetime configuration. | Tobias Brunner | 2009-09-01 | 1 | -6/+7 |
| | |||||
* | use time_monotonic() instead of time() for statistics and time difference ↵ | Martin Willi | 2009-08-31 | 1 | -1/+10 |
| | | | | calculations | ||||
* | use time_monotonic() instead of gettimeofday() for time difference calculations | Martin Willi | 2009-08-31 | 2 | -15/+11 |
| | |||||
* | disable lifetimes of allocated SPIs | Martin Willi | 2009-08-25 | 1 | -1/+11 |
| | | | | | | | The default lifetime of 30 seconds is too short, as a tunnel setup may need several minutes if we have high packet loss. Instead of increasing the value, we disable lifetimes completely, as we handle the removal of such SAs from userland just fine. | ||||
* | OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the ↵ | Tobias Brunner | 2009-08-14 | 3 | -4/+4 |
| | | | | enums mutex/condvar/rwlock_type_t. | ||||
* | prepare CAMELLIA_CCM ESP encryption | Andreas Steffen | 2009-08-10 | 1 | -0/+3 |
| | |||||
* | display transmitted bytes per SA | Andreas Steffen | 2009-07-30 | 1 | -0/+69 |
| | |||||
* | put variable definitions up front | Andreas Steffen | 2009-07-12 | 1 | -5/+8 |
| | |||||
* | added -avoid-version to LDFLAGS, plugins are not versioned | Martin Willi | 2009-07-03 | 1 | -1/+1 |
| | |||||
* | added a charon.install_virtual_ip option to disable IP installation for testing | Martin Willi | 2009-06-02 | 1 | -3/+19 |
| | |||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 8 | -16/+0 |
| | |||||
* | merging changes from portability branch back to trunk | Tobias Brunner | 2009-04-30 | 2 | -11/+30 |
| | | | | | important change for developers: %Y replaces %D to print identities! | ||||
* | added support for AES counter mode in ESP | Martin Willi | 2009-04-27 | 1 | -1/+1 |
| | | | | proposal keywords: aes128ctr aes192ctr aes256ctr | ||||
* | schedule_job uses seconds to support time values larger than 49 days | Martin Willi | 2009-04-21 | 1 | -1/+1 |
| | | | | added schedule_job_ms for ms resolution events | ||||
* | support of the ESP CAMELLIA-CBC cipher by charon | Andreas Steffen | 2009-04-17 | 1 | -3/+9 |
| | |||||
* | updated Doxyfile | Martin Willi | 2009-03-24 | 3 | -3/+3 |
| | | | | | | properly close all doxygen groups fixed remaining doxygen warnings | ||||
* | hiding XFRM message names from netlink | Andreas Steffen | 2009-01-09 | 2 | -26/+30 |
| | |||||
* | renamed chunk | Andreas Steffen | 2009-01-09 | 1 | -2/+2 |
| | |||||
* | refactored DBG3 output of sent XFRM messages | Andreas Steffen | 2009-01-09 | 2 | -72/+41 |
| | |||||
* | DBG3 output of sent XFRM messages | Andreas Steffen | 2009-01-09 | 1 | -3/+74 |
| | |||||
* | initial size of 1 is nonsense | Tobias Brunner | 2008-12-10 | 1 | -1/+1 |
| | |||||
* | hashtable enumerator enumerates over both, key and values | Martin Willi | 2008-12-05 | 1 | -1/+1 |
| | |||||
* | implemented the policy cache in kernel_netlink_ipsec_t with a hash table ↵ | Tobias Brunner | 2008-12-04 | 1 | -41/+54 |
| | | | | instead of a linked list. | ||||
* | fixed double free of host in selector2ts | Martin Willi | 2008-12-03 | 1 | -27/+24 |
| | |||||
* | moved the IPV6_IPSEC_POLICY definition to the ipsec plugins, fixes uClibc build | Martin Willi | 2008-11-24 | 1 | -0/+5 |
| | |||||
* | consider interfaces we do not monitor as up (e.g. lo) | Martin Willi | 2008-11-18 | 1 | -1/+2 |
| | | | | fixes load-testing against 127.0.0.1 | ||||
* | completed migration of MIPv6 connections | Andreas Steffen | 2008-11-16 | 1 | -3/+2 |
| | |||||
* | using aligned buffers for netlink | Martin Willi | 2008-11-14 | 3 | -14/+23 |
| | |||||
* | fixed encap enabling in xfrm (using new encap state, not the old one) | Martin Willi | 2008-11-14 | 1 | -3/+3 |
| | |||||
* | do not use a route if outgoing interface is down | Martin Willi | 2008-11-14 | 1 | -54/+81 |
| | | | | other cleanups | ||||
* | rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead! | Martin Willi | 2008-11-14 | 1 | -2/+3 |
| | |||||
* | do not use public interface for functions which are local anyway | Martin Willi | 2008-11-14 | 1 | -57/+54 |
| | |||||
* | fixed compiler warning | Martin Willi | 2008-11-11 | 1 | -2/+2 |
| | |||||
* | fixing a memory leak | Tobias Brunner | 2008-11-11 | 1 | -3/+7 |
| | |||||
* | merging kernel_klips plugin back into trunk | Tobias Brunner | 2008-11-11 | 1 | -19/+121 |
| | |||||
* | added retrieval of remote kmaddress via PF_KEY | Andreas Steffen | 2008-11-07 | 1 | -1/+1 |
| | |||||
* | replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant | Martin Willi | 2008-11-05 | 3 | -47/+55 |
| | |||||
* | got rid of deprecated create_iterator_locked() | Martin Willi | 2008-11-05 | 3 | -51/+72 |
| |