Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 20 | -6073/+0 |
| | | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet | ||||
* | fixed natd_hash memory leak | Andreas Steffen | 2006-07-03 | 1 | -2/+7 |
| | |||||
* | support of cert payloads | Andreas Steffen | 2006-07-03 | 6 | -366/+529 |
| | |||||
* | applied new changes from NATT team | Martin Willi | 2006-06-23 | 3 | -8/+26 |
| | | | | | DPD only done when no IPsec and IKE traffic processed minor changes here and there | ||||
* | first merge of NATT code | Martin Willi | 2006-06-22 | 7 | -23/+535 |
| | |||||
* | fixed bug: usage of already freed mem | Martin Willi | 2006-06-20 | 1 | -1/+2 |
| | |||||
* | fixed SPI when rekeying and deleting CHILD_SAs | Martin Willi | 2006-06-19 | 2 | -3/+9 |
| | |||||
* | added support for "ike" and "esp" keywords | Martin Willi | 2006-06-15 | 2 | -8/+11 |
| | | | | | | | fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes | ||||
* | using same reqid if a child sa rekeys an existing one | Martin Willi | 2006-06-12 | 3 | -14/+26 |
| | |||||
* | cosmetics | Andreas Steffen | 2006-06-12 | 2 | -53/+53 |
| | |||||
* | workaround for peers rekeying at the same time | Martin Willi | 2006-06-12 | 4 | -4/+31 |
| | | | | | loading lifetime policies from ipsec.conf | ||||
* | old child_sa gets deleted after rekeying | Martin Willi | 2006-06-09 | 5 | -8/+291 |
| | | | | | | rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time, | ||||
* | fixed compile warnings when using -Wall | Martin Willi | 2006-06-08 | 8 | -38/+776 |
| | | | | | | | | further CHILD_SA rekeying work done: creation of a new CHILD_SA on a expire from a kernel works delete of old CHILD_SA still missing some issues when both initiate rekeing | ||||
* | further work for rekeying: | Martin Willi | 2006-06-07 | 9 | -161/+247 |
| | | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals | ||||
* | fixed a memleak | Martin Willi | 2006-06-07 | 1 | -1/+5 |
| | |||||
* | - fixed host-host tunnel traffic selection, host-host works now | Martin Willi | 2006-05-31 | 3 | -2/+6 |
| | |||||
* | - policies contain a connections name now | Martin Willi | 2006-05-29 | 3 | -32/+30 |
| | | | | | | | | - used for initiate and delete - connections won't get initiated twice anymore - deleting of connections is now possible, which allows us to use ipsec update and ipsec reload | ||||
* | changed to standard connection log output | Andreas Steffen | 2006-05-29 | 1 | -4/+7 |
| | |||||
* | - some logging improvements and cosmetics | Martin Willi | 2006-05-24 | 2 | -4/+12 |
| | |||||
* | - handle IKE_SA setup without a piggy-packed CHILD_SA | Martin Willi | 2006-05-24 | 2 | -40/+67 |
| | | | | | more IKEv2 conform | ||||
* | - reimplemented proper IKE SA deletion using a seperate state, | Martin Willi | 2006-05-23 | 11 | -166/+378 |
| | | | | | should conform now to IKEv2 | ||||
* | - applied patch from the NAT-T team fixing several typos | Martin Willi | 2006-05-19 | 2 | -4/+4 |
| | |||||
* | - introduced autotools | Martin Willi | 2006-05-16 | 1 | -43/+0 |
| | | | | | | | | | | - first working version - make dist should work - things to do: - UML testing! - more cleanups | ||||
* | (no commit message) | Martin Willi | 2006-05-10 | 15 | -0/+4006 |