| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
|
| |
|
| |
|
|
|
|
|
| |
support for the type=transport/tunnel parameter in charon
|
|
|
|
|
|
|
|
|
| |
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
|
|
|
|
|
|
|
| |
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
|
|
|
|
|
|
|
| |
passive listeners can register on the bus
active listeners wait for signals actively
multiplexing allows multiple listeners to receive debug signals
a lot more...
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
support for auto=route parameter
support for ipsec route and ipsec unroute
initiating of CHILD and/or IKE_SAs based on kernel acquires
|
|
|
|
|
|
|
|
|
| |
aren't stored in the IKE_SA anymore, they are queried on the fly
are immutable now, allows it to share them
policy selection based on traffic selectors, leads to valid lookup results
rekeying queries the policy based on its traffic selectors
|
|
|
|
|
|
| |
added proper traffic selector to string conversion
some cleanups here & there
|
|
|
|
|
|
|
| |
transactions
reimplemented the buggy message id handling
|
|
|
|
|
|
| |
allows refcounting of multiple installed policies
finally brings us stable simultaneous rekeying
|
|
|
|
|
| |
still some cases which cause trouble
|
|
|
|
|
| |
DPD only done when no IPsec and IKE traffic processed
minor changes here and there
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
rekeying almost complete, but:
IKE_SA get in an invalid state when both initiate rekeying at the same time,
|
|
|
|
|
|
|
|
|
| |
get liftimes from policy
added new state
initiation of rekeying done
proposal redone:
removed support for AH+ESP proposals
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
moved job code from thread_pool to job, jobs have an "execute" method now
added two new jobs: delete_child_sa & rekey_child_sa
kernel interface:
listens now for ACQUIRE & EXPIRE
supports hard and soft lifetimes
fires jobs for delete and rekey child sa
ike sa manager:
can checkout IKE SAs by requid of owned CHILD SAs
we have now the infrastructure to do the rekeying... :-)
|
| |
|
|
|