| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | implement proper handling of most simultaneous IKE_SA rekeying cases | Martin Willi | 2006-08-23 | 1 | -13/+52 |
| | | |||||
| * | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 1 | -140/+236 |
| | | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | ||||
| * | added possibility to route CHILD_SAs, without to set them up | Martin Willi | 2006-07-21 | 1 | -29/+319 |
| | | | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires | ||||
| * | reuse an existing IKE_SA to set up additional CHILD_SAs | Martin Willi | 2006-07-20 | 1 | -15/+47 |
| | | |||||
| * | introduced refcounting on policy and connections | Martin Willi | 2006-07-20 | 1 | -205/+243 |
| | | | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors | ||||
| * | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 1 | -6/+8 |
| | | | | | | | added proper traffic selector to string conversion some cleanups here & there | ||||
| * | improved logging on verify errors for some payloads | Martin Willi | 2006-07-13 | 1 | -0/+7 |
| | | | | | | | enforcing IKE_SA shutdown, even when transactions are outstanding proper reject of CREATE_CHILD_SA message with KE payload | ||||
| * | added CHILD_SA states, which allows us to detect further simultaneous ↵ | Martin Willi | 2006-07-13 | 1 | -36/+26 |
| | | | | | | | | transactions reimplemented the buggy message id handling | ||||
| * | fixed crypter/signer in/out to conform with standard | Martin Willi | 2006-07-12 | 1 | -9/+9 |
| | | |||||
| * | updated copyright information | Martin Willi | 2006-07-07 | 1 | -1/+2 |
| | | |||||
| * | reimplemented CHILD_SA rekeying & delete | Martin Willi | 2006-07-07 | 1 | -138/+66 |
| | | | | | | no simultanous transaction with CHILD_SAs yet! | ||||
| * | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 1 | -1049/+874 |
| | | | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet | ||||
| * | support of cert payloads | Andreas Steffen | 2006-07-03 | 1 | -93/+117 |
| | | |||||
| * | applied new changes from NATT team | Martin Willi | 2006-06-23 | 1 | -20/+95 |
| | | | | | | DPD only done when no IPsec and IKE traffic processed minor changes here and there | ||||
| * | first merge of NATT code | Martin Willi | 2006-06-22 | 1 | -16/+273 |
| | | |||||
| * | fixed SPI when acting as initiator of rekeying | Martin Willi | 2006-06-19 | 1 | -2/+2 |
| | | |||||
| * | fixed SPI when rekeying and deleting CHILD_SAs | Martin Willi | 2006-06-19 | 1 | -3/+3 |
| | | |||||
| * | fixed aes code, we support now aes128, aes192, aes256 in IKE | Martin Willi | 2006-06-15 | 1 | -6/+6 |
| | | |||||
| * | added support for "ike" and "esp" keywords | Martin Willi | 2006-06-15 | 1 | -8/+5 |
| | | | | | | | | fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes | ||||
| * | using same reqid if a child sa rekeys an existing one | Martin Willi | 2006-06-12 | 1 | -1/+2 |
| | | |||||
| * | old child_sa gets deleted after rekeying | Martin Willi | 2006-06-09 | 1 | -7/+93 |
| | | | | | | | rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time, | ||||
| * | specifying keysize in bits, as it is required in IKEv2 | Martin Willi | 2006-06-09 | 1 | -2/+2 |
| | | | | | | | added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs | ||||
| * | fixed compile warnings when using -Wall | Martin Willi | 2006-06-08 | 1 | -139/+20 |
| | | | | | | | | | further CHILD_SA rekeying work done: creation of a new CHILD_SA on a expire from a kernel works delete of old CHILD_SA still missing some issues when both initiate rekeing | ||||
| * | further work for rekeying: | Martin Willi | 2006-06-07 | 1 | -205/+389 |
| | | | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals | ||||
| * | job management: | Martin Willi | 2006-05-31 | 1 | -5/+29 |
| | | | | | | | | | | | | | | moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-) | ||||
| * | use of streq | Andreas Steffen | 2006-05-30 | 1 | -1/+1 |
| | | |||||
| * | - policies contain a connections name now | Martin Willi | 2006-05-29 | 1 | -12/+24 |
| | | | | | | | | | - used for initiate and delete - connections won't get initiated twice anymore - deleting of connections is now possible, which allows us to use ipsec update and ipsec reload | ||||
| * | - some logging improvements and cosmetics | Martin Willi | 2006-05-24 | 1 | -1/+3 |
| | | |||||
| * | - show connection templates in status & statusall | Martin Willi | 2006-05-23 | 1 | -2/+2 |
| | | | | | | - don't complain on termination of IKEv1 connections | ||||
| * | - reimplemented proper IKE SA deletion using a seperate state, | Martin Willi | 2006-05-23 | 1 | -133/+113 |
| | | | | | | should conform now to IKEv2 | ||||
| * | - applied patch from the NAT-T team fixing several typos | Martin Willi | 2006-05-19 | 1 | -6/+6 |
| | | |||||
| * | (no commit message) | Martin Willi | 2006-05-10 | 1 | -0/+1199 |
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |