Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 1 | -337/+0 |
| | |||||
* | Fixed BEET mode by installing SAs with negotiated address in traffic selector | Martin Willi | 2009-12-17 | 1 | -1/+4 |
| | |||||
* | removed trailing spaces ([[:space:]]+$) | Martin Willi | 2009-09-04 | 1 | -30/+30 |
| | |||||
* | Terminology and return value of get_lifetime of child_sa_t corrected. | Tobias Brunner | 2009-09-01 | 1 | -3/+3 |
| | |||||
* | Fixed a race condition when querying stats of a child_sa in different order. | Tobias Brunner | 2009-08-06 | 1 | -24/+18 |
| | |||||
* | Reverted the interface changes introduced in 3f720dc7. | Tobias Brunner | 2009-08-06 | 1 | -4/+2 |
| | |||||
* | update usetime only if usebytes increase | Andreas Steffen | 2009-07-30 | 1 | -4/+6 |
| | |||||
* | display transmitted bytes per SA | Andreas Steffen | 2009-07-30 | 1 | -0/+8 |
| | |||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 1 | -2/+0 |
| | |||||
* | updated Doxyfile | Martin Willi | 2009-03-24 | 1 | -3/+1 |
| | | | | | | properly close all doxygen groups fixed remaining doxygen warnings | ||||
* | refactored and cleaned up child_sa interface | Martin Willi | 2008-11-19 | 1 | -105/+98 |
| | | | | | | | replaced add/update calls by a install() call allocating SPIs always externally support installation of non-allocated CHILD_SAs some other cleanups | ||||
* | merging kernel_klips plugin back into trunk | Tobias Brunner | 2008-11-11 | 1 | -0/+5 |
| | |||||
* | deleted obsolete parameter descriptions | Andreas Steffen | 2008-11-11 | 1 | -2/+0 |
| | |||||
* | preliminary support of Mobile IPv6 | Andreas Steffen | 2008-11-11 | 1 | -8/+10 |
| | |||||
* | moved CHILD_SA key derivation to keymat_t | Martin Willi | 2008-10-29 | 1 | -24/+19 |
| | | | | passing key chunks to CHILD_SA, not the PRF | ||||
* | additional getters for ipcomp and UDP encap | Martin Willi | 2008-10-24 | 1 | -0/+14 |
| | |||||
* | more CHILD_SA refactorings | Martin Willi | 2008-10-24 | 1 | -27/+38 |
| | |||||
* | moved updown script invocation to an optional plugin | Martin Willi | 2008-10-16 | 1 | -14/+9 |
| | |||||
* | cache keys for in and outbound ESP SAs | Martin Willi | 2008-10-15 | 1 | -2/+11 |
| | | | | | removed redundant storing of traffic selectors in CHILD_SA (sa_policy_t) creating TS pairs dynamically using create_policy_enumerator() | ||||
* | store ESP keys in CHILD_SA | Martin Willi | 2008-10-15 | 1 | -4/+4 |
| | |||||
* | reintegrated bus-refactoring branch | Martin Willi | 2008-10-14 | 1 | -0/+5 |
| | |||||
* | merging renaming of mode_t to ipsec_mode_t back to trunk | Tobias Brunner | 2008-09-25 | 1 | -4/+4 |
| | |||||
* | cosmetics | Andreas Steffen | 2008-07-22 | 1 | -1/+1 |
| | |||||
* | ipsec status lists IPCOMP CPIs | Andreas Steffen | 2008-07-22 | 1 | -2/+14 |
| | |||||
* | fixed acquire-delay bug by: | Martin Willi | 2008-07-16 | 1 | -1/+3 |
| | | | | | installing policies before states updating policies if protocol has changed | ||||
* | IPComp for IKEv2 | Tobias Brunner | 2008-05-08 | 1 | -1/+18 |
| | |||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -55/+29 |
| | |||||
* | further mobike improvements, regarding to NAT-T | Martin Willi | 2007-06-27 | 1 | -8/+5 |
| | |||||
* | simple roaming of the client works (not MOBIKE conform yet!) | Martin Willi | 2007-06-26 | 1 | -10/+7 |
| | |||||
* | removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to go | Martin Willi | 2007-04-11 | 1 | -0/+19 |
| | |||||
* | restructured file layout | Martin Willi | 2007-04-10 | 1 | -16/+9 |
| | | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads | ||||
* | added firewalling support when using virtual IPs | Martin Willi | 2007-03-01 | 1 | -0/+11 |
| | |||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 1 | -36/+13 |
| | |||||
* | added support for transport mode and (experimental!) BEET mode | Martin Willi | 2006-12-21 | 1 | -5/+9 |
| | | | | | support for the type=transport/tunnel parameter in charon | ||||
* | better split up of library files "types.h" & "definitions.h" | Martin Willi | 2006-10-31 | 1 | -6/+1 |
| | | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements | ||||
* | moved typedefs to beginning of files to solve some include problems | Martin Willi | 2006-10-30 | 1 | -11/+6 |
| | | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups | ||||
* | introduced new logging subsystem using bus: | Martin Willi | 2006-10-18 | 1 | -16/+7 |
| | | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more... | ||||
* | added hostaccess support | Andreas Steffen | 2006-09-25 | 1 | -1/+2 |
| | |||||
* | implemented updown script to handle firewalling | Martin Willi | 2006-09-12 | 1 | -2/+6 |
| | |||||
* | implemented handling of dpdaction and dpddelay ipsec.conf parameters | Martin Willi | 2006-09-08 | 1 | -3/+5 |
| | |||||
* | added name property in CHILD_SA, allows proper status output | Martin Willi | 2006-08-25 | 1 | -4/+18 |
| | |||||
* | added possibility to route CHILD_SAs, without to set them up | Martin Willi | 2006-07-21 | 1 | -0/+5 |
| | | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires | ||||
* | introduced refcounting on policy and connections | Martin Willi | 2006-07-20 | 1 | -1/+17 |
| | | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors | ||||
* | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 1 | -5/+7 |
| | | | | | | added proper traffic selector to string conversion some cleanups here & there | ||||
* | added CHILD_SA states, which allows us to detect further simultaneous ↵ | Martin Willi | 2006-07-13 | 1 | -0/+47 |
| | | | | | | | transactions reimplemented the buggy message id handling | ||||
* | added policy cache to kernel interface | Martin Willi | 2006-07-12 | 1 | -12/+5 |
| | | | | | | allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying | ||||
* | further work done for simultaneous rekeying/delete | Martin Willi | 2006-07-10 | 1 | -6/+26 |
| | | | | | still some cases which cause trouble | ||||
* | applied new changes from NATT team | Martin Willi | 2006-06-23 | 1 | -0/+10 |
| | | | | | DPD only done when no IPsec and IKE traffic processed minor changes here and there | ||||
* | first merge of NATT code | Martin Willi | 2006-06-22 | 1 | -21/+35 |
| | |||||
* | fixed SPI when rekeying and deleting CHILD_SAs | Martin Willi | 2006-06-19 | 1 | -2/+1 |
| |