Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | restructured file layout | Martin Willi | 2007-04-10 | 10 | -144/+135 | |
| | | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads | |||||
* | added IKE_SA_INIT retransmission detection | Martin Willi | 2007-03-29 | 1 | -8/+4 | |
| | | | | fixed thread exhaustion when IKE_SA is blocked for a longer time | |||||
* | added retry limit for IKE_SA_INIT (give up after 5 cookie failures) | Martin Willi | 2007-03-29 | 1 | -0/+15 | |
| | ||||||
* | fixed state and logging of IKE_SA when using EAP authentication | Martin Willi | 2007-03-27 | 1 | -5/+16 | |
| | ||||||
* | fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progress | Martin Willi | 2007-03-27 | 1 | -2/+2 | |
| | ||||||
* | added CHILD_SA compare check for rekeying collisions | Martin Willi | 2007-03-22 | 5 | -8/+47 | |
| | ||||||
* | fixed some rekey collision issues | Martin Willi | 2007-03-21 | 2 | -4/+20 | |
| | | | | added retry with jitter when rekeying fails | |||||
* | fixed child rekey collision | Martin Willi | 2007-03-21 | 7 | -64/+147 | |
| | | | | | implemented ike rekey collision | |||||
* | handling of CHILD_SA rekeying collisions | Martin Willi | 2007-03-21 | 5 | -45/+124 | |
| | ||||||
* | fixed inproper delete of CHILD_SA | Martin Willi | 2007-03-21 | 1 | -4/+7 | |
| | ||||||
* | fixed some exchange collisions (except IKE/CHILD rekeying) | Martin Willi | 2007-03-20 | 5 | -64/+84 | |
| | ||||||
* | fixed nat detection bug | Martin Willi | 2007-03-20 | 1 | -2/+2 | |
| | ||||||
* | adjusted loglevels | Martin Willi | 2007-03-20 | 1 | -13/+6 | |
| | ||||||
* | fixed CHILD_SA rekeying/delete bug on 64bit machines | Martin Willi | 2007-03-19 | 1 | -3/+3 | |
| | | | | removed obsolete methods in delete_payload | |||||
* | removed cfg-payload dns test code | Martin Willi | 2007-03-14 | 1 | -2/+2 | |
| | ||||||
* | not detaching from bus when IKE_SA_INIT is retried | Martin Willi | 2007-03-13 | 2 | -7/+10 | |
| | ||||||
* | fixed memleaks when using EAP authentication | Martin Willi | 2007-03-08 | 2 | -43/+64 | |
| | | | | | fixed configuration payloads when using EAP | |||||
* | including peers certificate when his certreq is empty | Martin Willi | 2007-03-08 | 1 | -2/+11 | |
| | ||||||
* | implemented cookies as initiator | Martin Willi | 2007-03-08 | 2 | -9/+44 | |
| | | | | proper logging of notifies in IKE_SA setup | |||||
* | some cleanups | Martin Willi | 2007-03-08 | 2 | -11/+10 | |
| | | | | | not installing %any DNS servers | |||||
* | allocation fixes, not complete | Martin Willi | 2007-03-08 | 1 | -8/+16 | |
| | ||||||
* | handling "No policy found" properly | Martin Willi | 2007-03-08 | 1 | -4/+4 | |
| | ||||||
* | fixed CHILD_SA creation within existing IKE_SA | Martin Willi | 2007-03-08 | 1 | -0/+1 | |
| | ||||||
* | ported changes from EAP branch, renabling EAP framework | Martin Willi | 2007-03-08 | 2 | -126/+371 | |
| | ||||||
* | added parsing level to x509_create_from_chunk() | Andreas Steffen | 2007-03-07 | 1 | -1/+1 | |
| | ||||||
* | fixed notify handling in IKE_AUTH | Martin Willi | 2007-03-06 | 2 | -16/+25 | |
| | | | | moved nonce payload before TS in CHILD_SA setup | |||||
* | moved REKEY_SA notify to the beginning of the message | Martin Willi | 2007-03-06 | 1 | -7/+7 | |
| | ||||||
* | some cleanups | Martin Willi | 2007-03-05 | 1 | -8/+6 | |
| | | | | | | not assigning %any virtual IPs to peer anymore | |||||
* | fixed double free bug | Martin Willi | 2007-03-05 | 4 | -11/+17 | |
| | ||||||
* | fixed ID selection bug when peer doesn't include IDr payload | Martin Willi | 2007-03-05 | 1 | -39/+23 | |
| | | | | | allowing vendor ID in any messag | |||||
* | fixed netlink socket receiver code | Martin Willi | 2007-03-03 | 1 | -1/+1 | |
| | | | | implemented interface enumeration code with netlink: no getifaddrs reqired anymore | |||||
* | added firewalling support when using virtual IPs | Martin Willi | 2007-03-01 | 1 | -1/+3 | |
| | ||||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 24 | -0/+4897 | |