aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/plugins/kernel_netlink
Commit message (Collapse)AuthorAgeFilesLines
* Whitespace cleanup.Tobias Brunner2009-12-231-16/+16
|
* Using the thread wrapper in charon, libstrongswan and their plugins.Tobias Brunner2009-12-232-8/+12
|
* Separated the public interfaces of the threading primitives.Tobias Brunner2009-12-233-3/+3
|
* Moved mutex.c to a separate folder in order to cleanly wrap other threading ↵Tobias Brunner2009-12-233-3/+3
| | | | primitives (and utils/mutex.h is now threading.h).
* Fixed BEET mode by installing SAs with negotiated address in traffic selectorMartin Willi2009-12-171-6/+18
|
* Install v6 routes via outgoing interface for nowMartin Willi2009-12-141-18/+7
|
* some code optimizationsAndreas Steffen2009-12-091-34/+37
|
* Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP ↵Martin Willi2009-11-261-3/+11
| | | | header
* Use full algorithm name for SHA384/512 HMACsMartin Willi2009-11-261-2/+2
|
* Support the Linux specific SHA256 96 bit truncation HMAC via "sha256_96" keywordMartin Willi2009-11-261-1/+1
|
* Install SHA256_128 auth algorithm with specified 128 bit truncationMartin Willi2009-11-261-1/+25
|
* Added support for IPv6 source route installationMartin Willi2009-11-262-17/+44
|
* Install bypass policies after creating XFRM netlink socket, loading ↵Martin Willi2009-11-091-6/+6
| | | | xfrm_user module
* Use XFRM instead of PF_KEY IKE bypass policies in netlink based kernel interfaceMartin Willi2009-10-301-23/+12
|
* Reenabled acq_expires SA timer using rekey timeoutMartin Willi2009-10-071-1/+1
| | | | | | | While not using a SA expiration for allocating SPIs works fine, the situation is much more problematic for kernel-created temporary SAs from acquires. If the negotiation of such a CHILD_SA fails, the created temporary SA can not be deleted.
* Fixed a crash in source address lookupMartin Willi2009-09-231-8/+11
|
* Fixed nexthop lookup, used by source route installationMartin Willi2009-09-161-7/+4
|
* Use continue to advance to next iterationMartin Willi2009-09-161-12/+11
|
* Use macros to define --with optionsMartin Willi2009-09-072-12/+6
|
* remove spaces before tabs at the beginning of lines (^( )+\t)Martin Willi2009-09-041-2/+2
|
* remove spaces within tabs (\t( )+\t)Martin Willi2009-09-042-2/+2
|
* replaces four spaces by tabs, where appropriateMartin Willi2009-09-041-6/+6
|
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-045-310/+310
|
* Use recursive source address lookup if we get a gateway onlyMartin Willi2009-09-031-45/+40
|
* Refactored the lifetime_cfg_t struct to be simpler and more expressive. ↵Tobias Brunner2009-09-011-7/+7
| | | | Initialization is now static.
* Set the packet and byte limits in the netlink and pfkey kernel interfaces.Tobias Brunner2009-09-011-5/+10
|
* Adapted the kernel interfaces to the new lifetime configuration.Tobias Brunner2009-09-011-6/+7
|
* use time_monotonic() instead of time() for statistics and time difference ↵Martin Willi2009-08-311-1/+10
| | | | calculations
* use time_monotonic() instead of gettimeofday() for time difference calculationsMartin Willi2009-08-312-15/+11
|
* disable lifetimes of allocated SPIsMartin Willi2009-08-251-1/+11
| | | | | | | The default lifetime of 30 seconds is too short, as a tunnel setup may need several minutes if we have high packet loss. Instead of increasing the value, we disable lifetimes completely, as we handle the removal of such SAs from userland just fine.
* OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the ↵Tobias Brunner2009-08-143-4/+4
| | | | enums mutex/condvar/rwlock_type_t.
* prepare CAMELLIA_CCM ESP encryptionAndreas Steffen2009-08-101-0/+3
|
* display transmitted bytes per SAAndreas Steffen2009-07-301-0/+69
|
* put variable definitions up frontAndreas Steffen2009-07-121-5/+8
|
* added -avoid-version to LDFLAGS, plugins are not versionedMartin Willi2009-07-031-1/+1
|
* added a charon.install_virtual_ip option to disable IP installation for testingMartin Willi2009-06-021-3/+19
|
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-308-16/+0
|
* merging changes from portability branch back to trunkTobias Brunner2009-04-302-11/+30
| | | | | important change for developers: %Y replaces %D to print identities!
* added support for AES counter mode in ESPMartin Willi2009-04-271-1/+1
| | | | proposal keywords: aes128ctr aes192ctr aes256ctr
* schedule_job uses seconds to support time values larger than 49 daysMartin Willi2009-04-211-1/+1
| | | | added schedule_job_ms for ms resolution events
* support of the ESP CAMELLIA-CBC cipher by charonAndreas Steffen2009-04-171-3/+9
|
* updated DoxyfileMartin Willi2009-03-243-3/+3
| | | | | | properly close all doxygen groups fixed remaining doxygen warnings
* hiding XFRM message names from netlinkAndreas Steffen2009-01-092-26/+30
|
* renamed chunkAndreas Steffen2009-01-091-2/+2
|
* refactored DBG3 output of sent XFRM messagesAndreas Steffen2009-01-092-72/+41
|
* DBG3 output of sent XFRM messagesAndreas Steffen2009-01-091-3/+74
|
* initial size of 1 is nonsenseTobias Brunner2008-12-101-1/+1
|
* hashtable enumerator enumerates over both, key and valuesMartin Willi2008-12-051-1/+1
|
* implemented the policy cache in kernel_netlink_ipsec_t with a hash table ↵Tobias Brunner2008-12-041-41/+54
| | | | instead of a linked list.
* fixed double free of host in selector2tsMartin Willi2008-12-031-27/+24
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-07 08:44:39 +0000