aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/sa/ike_sa_manager.c
Commit message (Collapse)AuthorAgeFilesLines
* implemented IKE_SA rekeyingMartin Willi2006-07-271-6/+26
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* added possibility to route CHILD_SAs, without to set them upMartin Willi2006-07-211-9/+7
| | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires
* reuse an existing IKE_SA to set up additional CHILD_SAsMartin Willi2006-07-201-109/+131
|
* introduced refcounting on policy and connectionsMartin Willi2006-07-201-7/+3
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* leak detective blanks memory on free & alloc, allows further membug detectionMartin Willi2006-07-121-1/+1
|
* updated copyright informationMartin Willi2006-07-071-1/+2
|
* reimplemented CHILD_SA rekeying & deleteMartin Willi2006-07-071-6/+7
| | | | | no simultanous transaction with CHILD_SAs yet!
* redesigned IKE_SA using a transaction mechanism:Martin Willi2006-07-051-38/+98
| | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet
* log entries start with lowcercase characterAndreas Steffen2006-07-041-23/+27
|
* job management:Martin Willi2006-05-311-52/+43
| | | | | | | | | | | | | moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-)
* cosmetics in log_status outputAndreas Steffen2006-05-301-1/+1
|
* - initiate IKE_SA deletion befor manager destructionMartin Willi2006-05-241-7/+14
|
* - show connection templates in status & statusallMartin Willi2006-05-231-0/+2
| | | | | - don't complain on termination of IKEv1 connections
* - reimplemented proper IKE SA deletion using a seperate state,Martin Willi2006-05-231-41/+56
| | | | | should conform now to IKEv2
* - applied andreas's patchMartin Willi2006-05-181-3/+3
| | | | | | | - logger output improvements - testin gupdates - and a lot more
* (no commit message)Martin Willi2006-05-101-0/+843