Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | fixing IKE_SA rekeying if charon.ikesa_table_size > 1 | Tobias Brunner | 2009-04-17 | 1 | -0/+3 |
| | |||||
* | updated Doxyfile | Martin Willi | 2009-03-24 | 1 | -1/+1 |
| | | | | | | properly close all doxygen groups fixed remaining doxygen warnings | ||||
* | updated documentation | Martin Willi | 2008-12-17 | 1 | -20/+15 |
| | | | | | some minor cleanups calloc does not need an additional memset(0) | ||||
* | improved IKE_SA uniqueness check | Tobias Brunner | 2008-12-16 | 1 | -5/+11 |
| | |||||
* | checkin of non-existing IKE_SAs | Martin Willi | 2008-11-26 | 1 | -8/+3 |
| | | | | removed unneeded checkin() return values | ||||
* | some typos | Tobias Brunner | 2008-11-11 | 1 | -3/+3 |
| | |||||
* | splitted IKE_SA manager destroy to allow plugin interaction | Martin Willi | 2008-04-17 | 1 | -1/+8 |
| | |||||
* | implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater | Martin Willi | 2008-04-14 | 1 | -0/+8 |
| | | | | additionally supports a "keep" value to keep the old IKE_SA | ||||
* | ike_sa_manager enumerable, not iterable | Martin Willi | 2008-04-14 | 1 | -5/+4 |
| | |||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -41/+22 |
| | |||||
* | split connections with different virtual IPs in different peer_cfgs | Martin Willi | 2008-02-05 | 1 | -12/+9 |
| | | | | respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA | ||||
* | added IKE_SA_INIT retransmission detection | Martin Willi | 2007-03-29 | 1 | -10/+37 |
| | | | | fixed thread exhaustion when IKE_SA is blocked for a longer time | ||||
* | removed send_queue, handled internally in sender_t know | Martin Willi | 2007-03-28 | 1 | -0/+16 |
| | | | | | do header parsing in receiver, ready for cookie integration | ||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 1 | -54/+32 |
| | |||||
* | implemented reauthentication using the new reauth=yes|no parameter | Martin Willi | 2006-12-19 | 1 | -1/+2 |
| | |||||
* | better split up of library files "types.h" & "definitions.h" | Martin Willi | 2006-10-31 | 1 | -1/+1 |
| | | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements | ||||
* | moved typedefs to beginning of files to solve some include problems | Martin Willi | 2006-10-30 | 1 | -2/+2 |
| | | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups | ||||
* | removed deprecated iterator methods (has_next & current) | Martin Willi | 2006-10-24 | 1 | -2/+1 |
| | | | | added iterator hook to manipulate iterator the clean way | ||||
* | introduced new logging subsystem using bus: | Martin Willi | 2006-10-18 | 1 | -26/+11 |
| | | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more... | ||||
* | add priority management for kernel policy | Martin Willi | 2006-09-08 | 1 | -9/+23 |
| | | | | | | | let ROUTED policies installed, until manuall removed introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs ike_sa_manager cleanups | ||||
* | reuse reqid when a ROUTED child_sa gets INSTALLED | Martin Willi | 2006-09-05 | 1 | -6/+10 |
| | | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes | ||||
* | added possibility to route CHILD_SAs, without to set them up | Martin Willi | 2006-07-21 | 1 | -7/+4 |
| | | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires | ||||
* | reuse an existing IKE_SA to set up additional CHILD_SAs | Martin Willi | 2006-07-20 | 1 | -16/+19 |
| | |||||
* | updated copyright information | Martin Willi | 2006-07-07 | 1 | -1/+2 |
| | |||||
* | reimplemented CHILD_SA rekeying & delete | Martin Willi | 2006-07-07 | 1 | -12/+13 |
| | | | | | no simultanous transaction with CHILD_SAs yet! | ||||
* | job management: | Martin Willi | 2006-05-31 | 1 | -12/+12 |
| | | | | | | | | | | | | | moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-) | ||||
* | - reimplemented proper IKE SA deletion using a seperate state, | Martin Willi | 2006-05-23 | 1 | -4/+15 |
| | | | | | should conform now to IKEv2 | ||||
* | (no commit message) | Martin Willi | 2006-05-10 | 1 | -0/+194 |