aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/plugins/kernel_netlink
Commit message (Collapse)AuthorAgeFilesLines
* Reenabled acq_expires SA timer using rekey timeoutMartin Willi2009-10-071-1/+1
| | | | | | | While not using a SA expiration for allocating SPIs works fine, the situation is much more problematic for kernel-created temporary SAs from acquires. If the negotiation of such a CHILD_SA fails, the created temporary SA can not be deleted.
* Fixed a crash in source address lookupMartin Willi2009-09-231-8/+11
|
* Fixed nexthop lookup, used by source route installationMartin Willi2009-09-161-7/+4
|
* Use continue to advance to next iterationMartin Willi2009-09-161-12/+11
|
* Use macros to define --with optionsMartin Willi2009-09-072-12/+6
|
* remove spaces before tabs at the beginning of lines (^( )+\t)Martin Willi2009-09-041-2/+2
|
* remove spaces within tabs (\t( )+\t)Martin Willi2009-09-042-2/+2
|
* replaces four spaces by tabs, where appropriateMartin Willi2009-09-041-6/+6
|
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-045-310/+310
|
* Use recursive source address lookup if we get a gateway onlyMartin Willi2009-09-031-45/+40
|
* Refactored the lifetime_cfg_t struct to be simpler and more expressive. ↵Tobias Brunner2009-09-011-7/+7
| | | | Initialization is now static.
* Set the packet and byte limits in the netlink and pfkey kernel interfaces.Tobias Brunner2009-09-011-5/+10
|
* Adapted the kernel interfaces to the new lifetime configuration.Tobias Brunner2009-09-011-6/+7
|
* use time_monotonic() instead of time() for statistics and time difference ↵Martin Willi2009-08-311-1/+10
| | | | calculations
* use time_monotonic() instead of gettimeofday() for time difference calculationsMartin Willi2009-08-312-15/+11
|
* disable lifetimes of allocated SPIsMartin Willi2009-08-251-1/+11
| | | | | | | The default lifetime of 30 seconds is too short, as a tunnel setup may need several minutes if we have high packet loss. Instead of increasing the value, we disable lifetimes completely, as we handle the removal of such SAs from userland just fine.
* OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the ↵Tobias Brunner2009-08-143-4/+4
| | | | enums mutex/condvar/rwlock_type_t.
* prepare CAMELLIA_CCM ESP encryptionAndreas Steffen2009-08-101-0/+3
|
* display transmitted bytes per SAAndreas Steffen2009-07-301-0/+69
|
* put variable definitions up frontAndreas Steffen2009-07-121-5/+8
|
* added -avoid-version to LDFLAGS, plugins are not versionedMartin Willi2009-07-031-1/+1
|
* added a charon.install_virtual_ip option to disable IP installation for testingMartin Willi2009-06-021-3/+19
|
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-308-16/+0
|
* merging changes from portability branch back to trunkTobias Brunner2009-04-302-11/+30
| | | | | important change for developers: %Y replaces %D to print identities!
* added support for AES counter mode in ESPMartin Willi2009-04-271-1/+1
| | | | proposal keywords: aes128ctr aes192ctr aes256ctr
* schedule_job uses seconds to support time values larger than 49 daysMartin Willi2009-04-211-1/+1
| | | | added schedule_job_ms for ms resolution events
* support of the ESP CAMELLIA-CBC cipher by charonAndreas Steffen2009-04-171-3/+9
|
* updated DoxyfileMartin Willi2009-03-243-3/+3
| | | | | | properly close all doxygen groups fixed remaining doxygen warnings
* hiding XFRM message names from netlinkAndreas Steffen2009-01-092-26/+30
|
* renamed chunkAndreas Steffen2009-01-091-2/+2
|
* refactored DBG3 output of sent XFRM messagesAndreas Steffen2009-01-092-72/+41
|
* DBG3 output of sent XFRM messagesAndreas Steffen2009-01-091-3/+74
|
* initial size of 1 is nonsenseTobias Brunner2008-12-101-1/+1
|
* hashtable enumerator enumerates over both, key and valuesMartin Willi2008-12-051-1/+1
|
* implemented the policy cache in kernel_netlink_ipsec_t with a hash table ↵Tobias Brunner2008-12-041-41/+54
| | | | instead of a linked list.
* fixed double free of host in selector2tsMartin Willi2008-12-031-27/+24
|
* moved the IPV6_IPSEC_POLICY definition to the ipsec plugins, fixes uClibc buildMartin Willi2008-11-241-0/+5
|
* consider interfaces we do not monitor as up (e.g. lo)Martin Willi2008-11-181-1/+2
| | | | fixes load-testing against 127.0.0.1
* completed migration of MIPv6 connectionsAndreas Steffen2008-11-161-3/+2
|
* using aligned buffers for netlinkMartin Willi2008-11-143-14/+23
|
* fixed encap enabling in xfrm (using new encap state, not the old one)Martin Willi2008-11-141-3/+3
|
* do not use a route if outgoing interface is downMartin Willi2008-11-141-54/+81
| | | | other cleanups
* rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead!Martin Willi2008-11-141-2/+3
|
* do not use public interface for functions which are local anywayMartin Willi2008-11-141-57/+54
|
* fixed compiler warningMartin Willi2008-11-111-2/+2
|
* fixing a memory leakTobias Brunner2008-11-111-3/+7
|
* merging kernel_klips plugin back into trunkTobias Brunner2008-11-111-19/+121
|
* added retrieval of remote kmaddress via PF_KEYAndreas Steffen2008-11-071-1/+1
|
* replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variantMartin Willi2008-11-053-47/+55
|
* got rid of deprecated create_iterator_locked()Martin Willi2008-11-053-51/+72
|