aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/sa/child_sa.c
Commit message (Collapse)AuthorAgeFilesLines
* Moving charon to libcharon.Tobias Brunner2010-03-191-1015/+0
|
* Fixed BEET mode by installing SAs with negotiated address in traffic selectorMartin Willi2009-12-171-3/+22
|
* remove spaces before tabs at the beginning of lines (^( )+\t)Martin Willi2009-09-041-3/+3
|
* remove spaces within tabs (\t( )+\t)Martin Willi2009-09-041-1/+1
|
* replaces four spaces by tabs, where appropriateMartin Willi2009-09-041-1/+1
|
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-041-57/+57
|
* Refactored the lifetime_cfg_t struct to be simpler and more expressive. ↵Tobias Brunner2009-09-011-6/+6
| | | | Initialization is now static.
* Terminology and return value of get_lifetime of child_sa_t corrected.Tobias Brunner2009-09-011-2/+2
|
* child_sa_t adapted to the new lifetime configuration.Tobias Brunner2009-09-011-13/+21
|
* use time_monotonic() instead of time() for statistics and time difference ↵Martin Willi2009-08-311-1/+1
| | | | calculations
* remove incomplete SAs with PROTO_ESPMartin Willi2009-08-251-0/+6
|
* do not set usetime if query_policy() failsAndreas Steffen2009-08-071-2/+10
|
* Fixed a race condition when querying stats of a child_sa in different order.Tobias Brunner2009-08-061-15/+19
|
* Don't query the policy usetime if there was no traffic on the SA.Tobias Brunner2009-08-061-38/+66
| | | | | This helps in cases where a policy is assigned to more than one SA. That is, SAs now should have different usetimes even if they use the same policy.
* Reverted the interface changes introduced in 3f720dc7.Tobias Brunner2009-08-061-16/+6
|
* corrected interface definitionAndreas Steffen2009-07-311-1/+1
|
* update usetime only if usebytes increaseAndreas Steffen2009-07-301-5/+56
|
* display transmitted bytes per SAAndreas Steffen2009-07-301-0/+30
|
* simplified SPI allocation after refactoringsMartin Willi2009-05-141-19/+4
|
* do not report a CHILD_SA rekey time if rekeying disabledMartin Willi2009-05-121-2/+10
|
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-301-2/+0
|
* merging changes from portability branch back to trunkTobias Brunner2009-04-301-4/+4
| | | | | important change for developers: %Y replaces %D to print identities!
* refactored and cleaned up child_sa interfaceMartin Willi2008-11-191-263/+146
| | | | | | | replaced add/update calls by a install() call allocating SPIs always externally support installation of non-allocated CHILD_SAs some other cleanups
* fixed virtual IP re-installation failure in MOBIKE scenarios introduced with ↵Andreas Steffen2008-11-171-13/+19
| | | | changeset 4662
* completed migration of MIPv6 connectionsAndreas Steffen2008-11-161-31/+40
|
* BEET mode might want forwarding policiesMartin Willi2008-11-121-11/+11
|
* ported some hard-to-merge cherries back to trunk :-/Martin Willi2008-11-121-11/+9
| | | | | shame, svn, shame: this was ways to complicated we should consider a switch to git...
* merging kernel_klips plugin back into trunkTobias Brunner2008-11-111-66/+52
|
* preliminary support of Mobile IPv6Andreas Steffen2008-11-111-78/+161
|
* got rid of deprecated create_iterator_locked()Martin Willi2008-11-051-0/+1
|
* moved CHILD_SA key derivation to keymat_tMartin Willi2008-10-291-309/+167
| | | | passing key chunks to CHILD_SA, not the PRF
* additional getters for ipcomp and UDP encapMartin Willi2008-10-241-0/+18
|
* more CHILD_SA refactoringsMartin Willi2008-10-241-82/+77
|
* fixed enumeration of CHILD_SA traffic selectorsMartin Willi2008-10-211-24/+25
|
* moved updown script invocation to an optional pluginMartin Willi2008-10-161-210/+19
|
* cache keys for in and outbound ESP SAsMartin Willi2008-10-151-189/+225
| | | | | removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t) creating TS pairs dynamically using create_policy_enumerator()
* store ESP keys in CHILD_SAMartin Willi2008-10-151-32/+43
|
* passing chunks, not prf+, to kernel interfaceMartin Willi2008-10-141-18/+107
| | | | gives us better control of keymat in CHILD_SA
* typosTobias Brunner2008-10-141-6/+6
|
* reintegrated bus-refactoring branchMartin Willi2008-10-141-4/+8
|
* merging renaming of mode_t to ipsec_mode_t back to trunkTobias Brunner2008-09-251-10/+10
|
* ipsec status lists IPCOMP CPIsAndreas Steffen2008-07-221-3/+16
|
* own CPI was not deleted due to copy-and-paste errorAndreas Steffen2008-07-221-1/+1
|
* fixed acquire-delay bug by:Martin Willi2008-07-161-3/+8
| | | | | installing policies before states updating policies if protocol has changed
* IPComp for IKEv2Tobias Brunner2008-05-081-10/+84
|
* added equals() method to peer_cfg, ike_cfg, proposals, auth_infoMartin Willi2008-03-261-36/+32
| | | | | | allows easier merging of ipsec.conf connections replaced some iterators through enumerators made proposals algorithm_t private using enumerator
* merged the modularization branch (credentials) back to trunkMartin Willi2008-03-131-7/+2
|
* fixed _updown target for ipv6Andreas Steffen2007-11-061-1/+1
|
* removed accidentally checked in debugging codeMartin Willi2007-10-011-4/+0
|
* implemented IKEv2 force_encap connection parameterMartin Willi2007-10-011-0/+4
| | | | | enforces UDP encapsulation by faking NAT detection payloads to hurdle restrictive firewalls