aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/sa/ike_sa_manager.c
Commit message (Collapse)AuthorAgeFilesLines
* splitted IKE_SA manager destroy to allow plugin interactionMartin Willi2008-04-171-4/+16
|
* slightly optimized IKE_SA checkinMartin Willi2008-04-161-3/+7
|
* optimized half-open IKE_SA lookup (no checkout)Martin Willi2008-04-161-3/+13
|
* added API for random number generators, served through credential factoryMartin Willi2008-04-151-6/+12
| | | | ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random)
* implemented IKE_SA uniqueness using ipsec.conf uniqueids paramaterMartin Willi2008-04-141-0/+39
| | | | additionally supports a "keep" value to keep the old IKE_SA
* ike_sa_manager enumerable, not iterableMartin Willi2008-04-141-66/+74
|
* correctly unregister IKE_SA at the bus Martin Willi2008-03-151-1/+1
|
* merged the modularization branch (credentials) back to trunkMartin Willi2008-03-131-12/+12
|
* split connections with different virtual IPs in different peer_cfgsMartin Willi2008-02-051-7/+16
| | | | respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA
* added missing 'break' in checkout_by_peerTobias Brunner2007-09-131-0/+1
|
* backports from the p2p-nat-t branch:Tobias Brunner2007-07-191-2/+2
| | | | | | * double assignment of function ''destroy'' in some jobs * typos
* fixed dpd=hold when using virtual IPsMartin Willi2007-06-291-4/+6
|
* removed accidently checked in debbuging codeMartin Willi2007-06-291-2/+0
|
* further mobike improvements, regarding to NAT-TMartin Willi2007-06-271-0/+2
|
* further fixed for mobike roamingMartin Willi2007-06-251-0/+1
|
* implemented more flexible iterator hook APIMartin Willi2007-06-151-4/+4
| | | | kernel interface handles interface changes and updates address list
* fixed memleak in IKE_SA managerMartin Willi2007-04-191-0/+1
|
* removed IKE_SA_ID (%J) printf hook, two more to goMartin Willi2007-04-111-12/+12
|
* restructured file layoutMartin Willi2007-04-101-0/+1
| | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads
* improved log output for checkout_by_message()Martin Willi2007-04-041-21/+28
|
* added IKE_SA_INIT retransmission detectionMartin Willi2007-03-291-94/+154
| | | | fixed thread exhaustion when IKE_SA is blocked for a longer time
* removed send_queue, handled internally in sender_t knowMartin Willi2007-03-281-0/+39
| | | | | do header parsing in receiver, ready for cookie integration
* merged tasking branch into trunkMartin Willi2007-02-281-272/+203
|
* implemented reauthentication using the new reauth=yes|no parameter Martin Willi2006-12-191-0/+6
|
* improved signal handling and emittingMartin Willi2006-10-261-30/+30
|
* removed deprecated iterator methods (has_next & current)Martin Willi2006-10-241-32/+17
| | | | added iterator hook to manipulate iterator the clean way
* linked list cleanupsMartin Willi2006-10-241-5/+1
| | | | | added list methods invoke(), destroy_offset(), destroy_function() simplified list destruction when destroying its items
* introduced new logging subsystem using bus:Martin Willi2006-10-181-214/+107
| | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more...
* introduced printf() specifiers for:Martin Willi2006-09-271-6/+10
| | | | | | | | | | | host_t (%H) identification_t (%D) chunk pointers (%B) memory pointer/length (%b) added a signaling bus: receives event and debug messages, sends them to its listeners stream_logger, sys_logger, file_logger added, listen to bus some other tweaks here and there
* add priority management for kernel policyMartin Willi2006-09-081-126/+147
| | | | | | | let ROUTED policies installed, until manuall removed introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs ike_sa_manager cleanups
* reuse reqid when a ROUTED child_sa gets INSTALLEDMartin Willi2006-09-051-7/+19
| | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes
* implemented IKE_SA rekeyingMartin Willi2006-07-271-6/+26
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* added possibility to route CHILD_SAs, without to set them upMartin Willi2006-07-211-9/+7
| | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires
* reuse an existing IKE_SA to set up additional CHILD_SAsMartin Willi2006-07-201-109/+131
|
* introduced refcounting on policy and connectionsMartin Willi2006-07-201-7/+3
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* leak detective blanks memory on free & alloc, allows further membug detectionMartin Willi2006-07-121-1/+1
|
* updated copyright informationMartin Willi2006-07-071-1/+2
|
* reimplemented CHILD_SA rekeying & deleteMartin Willi2006-07-071-6/+7
| | | | | no simultanous transaction with CHILD_SAs yet!
* redesigned IKE_SA using a transaction mechanism:Martin Willi2006-07-051-38/+98
| | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet
* log entries start with lowcercase characterAndreas Steffen2006-07-041-23/+27
|
* job management:Martin Willi2006-05-311-52/+43
| | | | | | | | | | | | | moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-)
* cosmetics in log_status outputAndreas Steffen2006-05-301-1/+1
|
* - initiate IKE_SA deletion befor manager destructionMartin Willi2006-05-241-7/+14
|
* - show connection templates in status & statusallMartin Willi2006-05-231-0/+2
| | | | | - don't complain on termination of IKEv1 connections
* - reimplemented proper IKE SA deletion using a seperate state,Martin Willi2006-05-231-41/+56
| | | | | should conform now to IKEv2
* - applied andreas's patchMartin Willi2006-05-181-3/+3
| | | | | | | - logger output improvements - testin gupdates - and a lot more
* (no commit message)Martin Willi2006-05-101-0/+843
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-22 16:09:46 +0000