Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | added hooks for IKE and CHILD keymat | Martin Willi | 2008-10-30 | 1 | -0/+8 |
| | |||||
* | moved CHILD_SA key derivation to keymat_t | Martin Willi | 2008-10-29 | 1 | -2/+2 |
| | | | | passing key chunks to CHILD_SA, not the PRF | ||||
* | do not store DH redundant in keymat | Martin Willi | 2008-10-29 | 1 | -12/+11 |
| | |||||
* | moved key derivation and management into keymat object | Martin Willi | 2008-10-28 | 1 | -61/+35 |
| | | | | | | allows secured implementation of key management (e.g. in kernel or HW) only IKE keys for now | ||||
* | store IKE proposal implicitly during derive_keys | Martin Willi | 2008-10-28 | 1 | -17/+1 |
| | |||||
* | re-established all previous AUD level messages | Andreas Steffen | 2008-10-17 | 1 | -2/+2 |
| | |||||
* | reintegrated bus-refactoring branch | Martin Willi | 2008-10-14 | 1 | -19/+18 |
| | |||||
* | some more changes to IKE_SA and CHILD_SA logging | Andreas Steffen | 2008-07-22 | 1 | -1/+2 |
| | |||||
* | introduced an additional bus->signal parameter for signal specific data | Martin Willi | 2008-07-18 | 1 | -13/+13 |
| | | | | added SIG_IKE/SIG_CHD macros for signal emitting | ||||
* | log received vendor id as a hex value | Andreas Steffen | 2008-06-27 | 1 | -0/+9 |
| | |||||
* | display selected IKE proposal in ipsec statusall | Andreas Steffen | 2008-06-22 | 1 | -4/+20 |
| | |||||
* | DNS resolving of ike_cfg hosts dynamically on demand | Martin Willi | 2008-06-06 | 1 | -1/+1 |
| | |||||
* | added API for random number generators, served through credential factory | Martin Willi | 2008-04-15 | 1 | -14/+13 |
| | | | | ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random) | ||||
* | demoted more notify debug messages to level 24.2.0 | Andreas Steffen | 2008-04-02 | 1 | -2/+2 |
| | |||||
* | demoted received notify debug message to level 2 | Andreas Steffen | 2008-04-01 | 1 | -1/+1 |
| | |||||
* | stopping connectivity checks on the responders side after receiving an ↵ | Tobias Brunner | 2008-04-01 | 1 | -1/+61 |
| | | | | IKE_SA_INIT request with the proper ME_CONNECTID | ||||
* | signal fixed | Tobias Brunner | 2008-03-31 | 1 | -2/+2 |
| | |||||
* | added equals() method to peer_cfg, ike_cfg, proposals, auth_info | Martin Willi | 2008-03-26 | 1 | -3/+3 |
| | | | | | | allows easier merging of ipsec.conf connections replaced some iterators through enumerators made proposals algorithm_t private using enumerator | ||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 1 | -10/+5 |
| | |||||
* | connection name to IKE_SA initiating | Andreas Steffen | 2007-09-15 | 1 | -1/+2 |
| | |||||
* | fixed payload order (Nonce, KE) for IKE_SA_INIT | Martin Willi | 2007-07-16 | 1 | -3/+11 |
| | |||||
* | added PDF support for CHILD_SAs | Martin Willi | 2007-04-19 | 1 | -66/+47 |
| | | | | support for INVALID_KE_PAYLOAD negotiation for rekeying | ||||
* | restructured file layout | Martin Willi | 2007-04-10 | 1 | -16/+14 |
| | | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads | ||||
* | added retry limit for IKE_SA_INIT (give up after 5 cookie failures) | Martin Willi | 2007-03-29 | 1 | -0/+15 |
| | |||||
* | fixed child rekey collision | Martin Willi | 2007-03-21 | 1 | -0/+17 |
| | | | | | implemented ike rekey collision | ||||
* | not detaching from bus when IKE_SA_INIT is retried | Martin Willi | 2007-03-13 | 1 | -4/+3 |
| | |||||
* | implemented cookies as initiator | Martin Willi | 2007-03-08 | 1 | -8/+40 |
| | | | | proper logging of notifies in IKE_SA setup | ||||
* | fixed double free bug | Martin Willi | 2007-03-05 | 1 | -4/+3 |
| | |||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 1 | -0/+536 |