aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/sa/child_sa.c
Commit message (Collapse)AuthorAgeFilesLines
* fixed _updown target for ipv6Andreas Steffen2007-11-061-1/+1
|
* removed accidentally checked in debugging codeMartin Willi2007-10-011-4/+0
|
* implemented IKEv2 force_encap connection parameterMartin Willi2007-10-011-0/+4
| | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls
* improved MOBIKE roaming between interfacesMartin Willi2007-09-241-0/+10
|
* fixed firewall script invocation when interface is not available anymoreMartin Willi2007-07-031-17/+28
|
* improved MOBIKE:Martin Willi2007-07-031-4/+6
| | | | | | | | prefer address family already used do not change address implicit when mobike supported handle multiple simultaneous roaming requests more properly proper enabling/disabling of UDP encapsulation
* fixed mobike address update from and to NATMartin Willi2007-07-021-33/+14
|
* proper update of IPsec SA when roaming a host-to-host tunnelMartin Willi2007-07-021-9/+36
| | | | roaming of IPsec SAs using virtual IPs
* further mobike improvements, regarding to NAT-TMartin Willi2007-06-271-20/+8
|
* simple roaming of the client works (not MOBIKE conform yet!)Martin Willi2007-06-261-107/+47
|
* cosmeticsAndreas Steffen2007-05-151-2/+2
|
* removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to goMartin Willi2007-04-111-122/+48
|
* restructured file layoutMartin Willi2007-04-101-34/+29
| | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads
* fixed statusall rekey time jitter bug (again)Martin Willi2007-03-201-4/+9
|
* fixed CHILD_SA rekeying time in statusallMartin Willi2007-03-201-2/+2
|
* fixed netlink socket receiver codeMartin Willi2007-03-031-2/+3
| | | | implemented interface enumeration code with netlink: no getifaddrs reqired anymore
* added firewalling support when using virtual IPsMartin Willi2007-03-011-15/+26
|
* preparations for PLUTO_MY_SOURCEIPAndreas Steffen2007-03-011-3/+22
|
* merged tasking branch into trunkMartin Willi2007-02-281-98/+49
|
* combined use_in and use_fwdAndreas Steffen2007-01-101-18/+18
|
* support for transport in create_child_saMartin Willi2007-01-081-2/+3
| | | | include TRANSPORT/TUNNEL information in statusall
* added support for transport mode and (experimental!) BEET modeMartin Willi2006-12-211-22/+34
| | | | | support for the type=transport/tunnel parameter in charon
* redesigned formatting of ipsec status|statusallAndreas Steffen2006-11-011-12/+12
|
* better split up of library files "types.h" & "definitions.h"Martin Willi2006-10-311-13/+1
| | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements
* moved typedefs to beginning of files to solve some include problemsMartin Willi2006-10-301-5/+5
| | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups
* improved signal handling and emittingMartin Willi2006-10-261-10/+10
|
* removed deprecated iterator methods (has_next & current)Martin Willi2006-10-241-12/+5
| | | | added iterator hook to manipulate iterator the clean way
* code cleanups in printf handlersMartin Willi2006-10-201-30/+27
|
* introduced new logging subsystem using bus:Martin Willi2006-10-181-143/+121
| | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more...
* introduced printf() specifiers for:Martin Willi2006-09-271-17/+14
| | | | | | | | | | | host_t (%H) identification_t (%D) chunk pointers (%B) memory pointer/length (%b) added a signaling bus: receives event and debug messages, sends them to its listeners stream_logger, sys_logger, file_logger added, listen to bus some other tweaks here and there
* added hostaccess supportAndreas Steffen2006-09-251-4/+11
|
* added HOST_ACCESS for firewall script as defaultMartin Willi2006-09-181-0/+1
|
* implemented updown script to handle firewallingMartin Willi2006-09-121-10/+165
|
* add priority management for kernel policyMartin Willi2006-09-081-8/+18
| | | | | | | let ROUTED policies installed, until manuall removed introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs ike_sa_manager cleanups
* implemented handling of dpdaction and dpddelay ipsec.conf parametersMartin Willi2006-09-081-0/+5
|
* moved interface enumeration code to socket, where it belongsMartin Willi2006-08-281-0/+2
| | | | | query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall"
* added name property in CHILD_SA, allows proper status outputMartin Willi2006-08-251-7/+33
|
* implemented IKE_SA rekeyingMartin Willi2006-07-271-1/+1
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* added possibility to route CHILD_SAs, without to set them upMartin Willi2006-07-211-50/+67
| | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires
* reuse an existing IKE_SA to set up additional CHILD_SAsMartin Willi2006-07-201-1/+47
|
* introduced refcounting on policy and connectionsMartin Willi2006-07-201-0/+35
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* cleanups in kernel interface codeMartin Willi2006-07-181-158/+123
| | | | | | added proper traffic selector to string conversion some cleanups here & there
* added CHILD_SA states, which allows us to detect further simultaneous ↵Martin Willi2006-07-131-2/+42
| | | | | | | transactions reimplemented the buggy message id handling
* added policy cache to kernel interfaceMartin Willi2006-07-121-125/+34
| | | | | | allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying
* further work done for simultaneous rekeying/deleteMartin Willi2006-07-101-23/+50
| | | | | still some cases which cause trouble
* updated copyright informationMartin Willi2006-07-071-1/+2
|
* reimplemented CHILD_SA rekeying & deleteMartin Willi2006-07-071-2/+2
| | | | | no simultanous transaction with CHILD_SAs yet!
* improved CHILD_SA output for "ipsec statusall"Martin Willi2006-07-051-61/+106
|
* redesigned IKE_SA using a transaction mechanism:Martin Willi2006-07-051-0/+1
| | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet
* applied latest NATT patch with some fixes and cleanupsMartin Willi2006-07-041-1/+1
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-01 21:23:13 +0000