aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/sa/child_sa.h
Commit message (Collapse)AuthorAgeFilesLines
* further mobike improvements, regarding to NAT-TMartin Willi2007-06-271-8/+5
|
* simple roaming of the client works (not MOBIKE conform yet!)Martin Willi2007-06-261-10/+7
|
* removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to goMartin Willi2007-04-111-0/+19
|
* restructured file layoutMartin Willi2007-04-101-16/+9
| | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads
* added firewalling support when using virtual IPsMartin Willi2007-03-011-0/+11
|
* merged tasking branch into trunkMartin Willi2007-02-281-36/+13
|
* added support for transport mode and (experimental!) BEET modeMartin Willi2006-12-211-5/+9
| | | | | support for the type=transport/tunnel parameter in charon
* better split up of library files "types.h" & "definitions.h"Martin Willi2006-10-311-6/+1
| | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements
* moved typedefs to beginning of files to solve some include problemsMartin Willi2006-10-301-11/+6
| | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups
* introduced new logging subsystem using bus:Martin Willi2006-10-181-16/+7
| | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more...
* added hostaccess supportAndreas Steffen2006-09-251-1/+2
|
* implemented updown script to handle firewallingMartin Willi2006-09-121-2/+6
|
* implemented handling of dpdaction and dpddelay ipsec.conf parametersMartin Willi2006-09-081-3/+5
|
* added name property in CHILD_SA, allows proper status outputMartin Willi2006-08-251-4/+18
|
* added possibility to route CHILD_SAs, without to set them upMartin Willi2006-07-211-0/+5
| | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires
* introduced refcounting on policy and connectionsMartin Willi2006-07-201-1/+17
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* cleanups in kernel interface codeMartin Willi2006-07-181-5/+7
| | | | | | added proper traffic selector to string conversion some cleanups here & there
* added CHILD_SA states, which allows us to detect further simultaneous ↵Martin Willi2006-07-131-0/+47
| | | | | | | transactions reimplemented the buggy message id handling
* added policy cache to kernel interfaceMartin Willi2006-07-121-12/+5
| | | | | | allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying
* further work done for simultaneous rekeying/deleteMartin Willi2006-07-101-6/+26
| | | | | still some cases which cause trouble
* applied new changes from NATT teamMartin Willi2006-06-231-0/+10
| | | | | DPD only done when no IPsec and IKE traffic processed minor changes here and there
* first merge of NATT codeMartin Willi2006-06-221-21/+35
|
* fixed SPI when rekeying and deleting CHILD_SAsMartin Willi2006-06-191-2/+1
|
* using same reqid if a child sa rekeys an existing oneMartin Willi2006-06-121-1/+3
|
* old child_sa gets deleted after rekeyingMartin Willi2006-06-091-0/+12
| | | | | | rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time,
* further work for rekeying:Martin Willi2006-06-071-2/+26
| | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals
* job management:Martin Willi2006-05-311-0/+11
| | | | | | | | | | | | | moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-)
* - applied patch from the NAT-T team fixing several typosMartin Willi2006-05-191-1/+1
|
* (no commit message)Martin Willi2006-05-101-0/+149