aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/plugins
Commit message (Collapse)AuthorAgeFilesLines
...
* added fake_kernel option to make dummy kernel implementation optionalMartin Willi2008-11-032-3/+7
|
* load testing between different hostsMartin Willi2008-11-031-3/+6
|
* removed unused variablesAndreas Steffen2008-11-031-5/+0
|
* migrate_job() finds a matching child_cfgAndreas Steffen2008-11-032-23/+53
|
* fully implemented the parsing of XFRM and PF_KEY MIGRATE messagesAndreas Steffen2008-11-022-36/+94
|
* identify attributes of XFRM ACQUIRE and MIGRATE messagesAndreas Steffen2008-10-311-14/+58
|
* subscribing XFRM socket for MIGRATE messagesAndreas Steffen2008-10-311-2/+3
|
* parse xfrm and pf_key acquire messages and subscribe to migrate messagesAndreas Steffen2008-10-312-31/+186
|
* added hooks for IKE and CHILD keymatMartin Willi2008-10-301-3/+1
|
* moved CHILD_SA key derivation to keymat_tMartin Willi2008-10-291-37/+27
| | | | passing key chunks to CHILD_SA, not the PRF
* moved key derivation and management into keymat objectMartin Willi2008-10-281-6/+10
| | | | | | allows secured implementation of key management (e.g. in kernel or HW) only IKE keys for now
* store IKE proposal implicitly during derive_keysMartin Willi2008-10-281-2/+5
|
* fixed reauthentication time in statusallMartin Willi2008-10-281-1/+1
|
* use more generic stats getter, introducing new statsMartin Willi2008-10-271-3/+8
|
* including a "none" tundev to make NM happyMartin Willi2008-10-271-44/+28
|
* fixed some compiler warningsMartin Willi2008-10-272-0/+4
|
* additional getters for ipcomp and UDP encapMartin Willi2008-10-241-7/+5
|
* more CHILD_SA refactoringsMartin Willi2008-10-241-8/+8
|
* initiate connections simultaneously in load testerMartin Willi2008-10-221-2/+9
|
* a load testing plugin, to:Martin Willi2008-10-219-0/+831
| | | | | find multi-threading issues do performance profiling
* reset threads IKE_SA after checking other IKE_SAsMartin Willi2008-10-201-9/+12
| | | | invoke updown script only if we have valid IKE_SA
* moved updown script invocation to an optional pluginMartin Willi2008-10-163-0/+300
|
* cache keys for in and outbound ESP SAsMartin Willi2008-10-152-11/+5
| | | | | removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t) creating TS pairs dynamically using create_policy_enumerator()
* store ESP keys in CHILD_SAMartin Willi2008-10-152-21/+31
|
* passing chunks, not prf+, to kernel interfaceMartin Willi2008-10-142-161/+130
| | | | gives us better control of keymat in CHILD_SA
* reintegrated bus-refactoring branchMartin Willi2008-10-146-44/+72
|
* merging kernel_pfkey plugin back from kernel-interface branchTobias Brunner2008-10-147-207/+1992
|
* reintegrated two-sim branch providing SIM card plugin APIMartin Willi2008-10-1014-423/+878
|
* faster implementation of addr_in_subnet()Andreas Steffen2008-10-091-13/+14
|
* ignore routing events for our own routesMartin Willi2008-10-081-0/+6
|
* mobike: try to keep existing source address before switching to anotherMartin Willi2008-10-081-6/+13
|
* implemented ipsec listalgs as a stroke commandAndreas Steffen2008-10-081-0/+54
|
* correct fix that replaces Changeset 4378Andreas Steffen2008-10-081-4/+6
|
* removing fix applied by Changeset 4378Andreas Steffen2008-10-081-4/+2
|
* fixed loop termination criterion in addr_in_subnet(). Thanks go to Wolfgang ↵Andreas Steffen2008-10-071-2/+4
| | | | Steudel, TU Ilmenau
* userland support to process notifies for new NAT mappings detected in UDP ↵Martin Willi2008-10-071-1/+62
| | | | encapsulation
* use dpd_action also for remotely closed tunnelsMartin Willi2008-10-021-1/+1
|
* merging renaming of mode_t to ipsec_mode_t back to trunkTobias Brunner2008-09-255-9/+9
|
* merging modularized kernel interface back to trunkTobias Brunner2008-09-2510-5/+3614
|
* stroke parses and lists AC groupsAndreas Steffen2008-09-172-8/+63
|
* ported NM plugin to upstream NetworkManager changesMartin Willi2008-09-123-22/+55
| | | | | splitted secrets (4031) using uuid in auth-dialog (4053)
* NM plugin supports (encrypted) private key filesMartin Willi2008-09-054-89/+210
|
* time values in strongswan.conf can be optionally specified in days (d), ↵Andreas Steffen2008-09-042-6/+4
| | | | hours (h), minutes (m), or seconds (s)
* fixed some translations/encodingMartin Willi2008-09-041-51/+52
|
* an initial German translation for NM pluginMartin Willi2008-09-043-2/+117
|
* reduced nm verbosityMartin Willi2008-09-041-1/+1
|
* implemented NetworkManager certificate/private key authentication using ↵Martin Willi2008-09-048-161/+447
| | | | ssh-agent
* added a configure option to select charon binaryMartin Willi2008-09-043-2/+10
|
* refactored credential builderMartin Willi2008-09-029-13/+90
| | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts
* use libcap for capability droppingMartin Willi2008-08-291-1/+2
| | | | | optional, must be enabled --with-capabilities=libcap will be extended to support --with-capabilities=libcap2