Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | separated updown listener to its own class4.2.9 | Martin Willi | 2008-11-17 | 4 | -201/+380 |
| | | | | caching interface names to properly remove rules if interface has changed | ||||
* | completed migration of MIPv6 connections | Andreas Steffen | 2008-11-16 | 2 | -5/+4 |
| | |||||
* | show TRANSPORT_PROXY mode in ipsec status | Andreas Steffen | 2008-11-16 | 1 | -3/+5 |
| | |||||
* | using aligned buffers for netlink | Martin Willi | 2008-11-14 | 3 | -14/+23 |
| | |||||
* | also use correct encap parameter in PF_KEY | Martin Willi | 2008-11-14 | 1 | -1/+1 |
| | |||||
* | fixed encap enabling in xfrm (using new encap state, not the old one) | Martin Willi | 2008-11-14 | 1 | -3/+3 |
| | |||||
* | do not use a route if outgoing interface is down | Martin Willi | 2008-11-14 | 1 | -54/+81 |
| | | | | other cleanups | ||||
* | rta->rta_len is NOT the payload data length, use RTA_PAYLOAD(rta) instead! | Martin Willi | 2008-11-14 | 1 | -2/+3 |
| | |||||
* | do not use public interface for functions which are local anyway | Martin Willi | 2008-11-14 | 1 | -57/+54 |
| | |||||
* | ported some hard-to-merge cherries back to trunk :-/ | Martin Willi | 2008-11-12 | 2 | -29/+5 |
| | | | | | shame, svn, shame: this was ways to complicated we should consider a switch to git... | ||||
* | fixed compiler warnings issued by: | Martin Willi | 2008-11-11 | 2 | -4/+18 |
| | | | | | | gcc 4.3 curl.h gcc type-checking glibc with enabled FORTIFY_SOURCE checking | ||||
* | #defing out compress algs to avoid compiler warning | Martin Willi | 2008-11-11 | 2 | -2/+6 |
| | |||||
* | updated method signature of add_policy | Martin Willi | 2008-11-11 | 1 | -5/+6 |
| | |||||
* | fixed compilation of medcli plugin | Martin Willi | 2008-11-11 | 2 | -28/+50 |
| | |||||
* | added missing include for ULONG_MAX | Martin Willi | 2008-11-11 | 1 | -0/+1 |
| | |||||
* | dynamic logging configuration through strongswan.conf | Martin Willi | 2008-11-11 | 1 | -3/+16 |
| | | | | fallback to existing ipsec.conf/stroke loglevel configuration | ||||
* | fixed compiler warning | Martin Willi | 2008-11-11 | 1 | -2/+2 |
| | |||||
* | fixing a memory leak | Tobias Brunner | 2008-11-11 | 2 | -6/+14 |
| | |||||
* | merging kernel_klips plugin back into trunk | Tobias Brunner | 2008-11-11 | 10 | -69/+3376 |
| | |||||
* | renamed proxy to proxy_mode in stroke_msg.h | Andreas Steffen | 2008-11-11 | 1 | -1/+1 |
| | |||||
* | preliminary support of Mobile IPv6 | Andreas Steffen | 2008-11-11 | 1 | -1/+2 |
| | |||||
* | make load_tester more strict to use it along stroke | Martin Willi | 2008-11-10 | 2 | -4/+17 |
| | |||||
* | iterations = 0 for infinite iterations | Martin Willi | 2008-11-10 | 1 | -3/+3 |
| | |||||
* | added PEM version of keys | Martin Willi | 2008-11-10 | 1 | -1/+28 |
| | |||||
* | fixed copy/paste error | Martin Willi | 2008-11-07 | 1 | -1/+0 |
| | |||||
* | SADB_X_EXT_KMADDRESS is not present in old kernels | Andreas Steffen | 2008-11-07 | 1 | -10/+17 |
| | |||||
* | added retrieval of remote kmaddress via PF_KEY | Andreas Steffen | 2008-11-07 | 2 | -6/+13 |
| | |||||
* | added delete_after_established option | Martin Willi | 2008-11-06 | 4 | -1/+140 |
| | |||||
* | wrapped all pthread_rwlock_t in profilable rwlock_t | Martin Willi | 2008-11-05 | 3 | -55/+51 |
| | |||||
* | added missing includes | Martin Willi | 2008-11-05 | 1 | -0/+1 |
| | |||||
* | replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant | Martin Willi | 2008-11-05 | 4 | -76/+85 |
| | |||||
* | got rid of deprecated create_iterator_locked() | Martin Willi | 2008-11-05 | 6 | -51/+77 |
| | |||||
* | do not install route if interface lookup failed | Martin Willi | 2008-11-05 | 1 | -16/+23 |
| | |||||
* | two new load_testing options: | Martin Willi | 2008-11-04 | 1 | -3/+11 |
| | | | | | request_virtual_ip: request a INTERNAL_IPV4_ADDR as client pool: provide addresses from a named virtual IP pool | ||||
* | added a delay option to delay initiations | Martin Willi | 2008-11-04 | 1 | -9/+41 |
| | |||||
* | corrected a copy-and-paste error | Andreas Steffen | 2008-11-03 | 1 | -1/+1 |
| | |||||
* | updated copyright of kernel interface code | Andreas Steffen | 2008-11-03 | 2 | -0/+2 |
| | |||||
* | added support for xfrm remote kmaddress | Andreas Steffen | 2008-11-03 | 2 | -7/+8 |
| | |||||
* | added fake_kernel option to make dummy kernel implementation optional | Martin Willi | 2008-11-03 | 2 | -3/+7 |
| | |||||
* | load testing between different hosts | Martin Willi | 2008-11-03 | 1 | -3/+6 |
| | |||||
* | removed unused variables | Andreas Steffen | 2008-11-03 | 1 | -5/+0 |
| | |||||
* | migrate_job() finds a matching child_cfg | Andreas Steffen | 2008-11-03 | 2 | -23/+53 |
| | |||||
* | fully implemented the parsing of XFRM and PF_KEY MIGRATE messages | Andreas Steffen | 2008-11-02 | 2 | -36/+94 |
| | |||||
* | identify attributes of XFRM ACQUIRE and MIGRATE messages | Andreas Steffen | 2008-10-31 | 1 | -14/+58 |
| | |||||
* | subscribing XFRM socket for MIGRATE messages | Andreas Steffen | 2008-10-31 | 1 | -2/+3 |
| | |||||
* | parse xfrm and pf_key acquire messages and subscribe to migrate messages | Andreas Steffen | 2008-10-31 | 2 | -31/+186 |
| | |||||
* | added hooks for IKE and CHILD keymat | Martin Willi | 2008-10-30 | 1 | -3/+1 |
| | |||||
* | moved CHILD_SA key derivation to keymat_t | Martin Willi | 2008-10-29 | 1 | -37/+27 |
| | | | | passing key chunks to CHILD_SA, not the PRF | ||||
* | moved key derivation and management into keymat object | Martin Willi | 2008-10-28 | 1 | -6/+10 |
| | | | | | | allows secured implementation of key management (e.g. in kernel or HW) only IKE keys for now | ||||
* | store IKE proposal implicitly during derive_keys | Martin Willi | 2008-10-28 | 1 | -2/+5 |
| |