Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 1 | -1121/+0 |
| | |||||
* | merged EAP framework from branch into trunk | Martin Willi | 2007-02-12 | 1 | -4/+2 |
| | | | | | includes a lot of other modifications | ||||
* | name the created CHILD_SA | Andreas Steffen | 2007-01-11 | 1 | -2/+4 |
| | |||||
* | support for transport in create_child_sa | Martin Willi | 2007-01-08 | 1 | -4/+8 |
| | | | | include TRANSPORT/TUNNEL information in statusall | ||||
* | fixed reuathentication when connections other host is %any | Martin Willi | 2007-01-03 | 1 | -1/+1 |
| | |||||
* | added support for transport mode and (experimental!) BEET mode | Martin Willi | 2006-12-21 | 1 | -21/+146 |
| | | | | | support for the type=transport/tunnel parameter in charon | ||||
* | better split up of library files "types.h" & "definitions.h" | Martin Willi | 2006-10-31 | 1 | -10/+10 |
| | | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements | ||||
* | preparations to include certreqs in policy decisions | Andreas Steffen | 2006-10-31 | 1 | -2/+4 |
| | |||||
* | moved typedefs to beginning of files to solve some include problems | Martin Willi | 2006-10-30 | 1 | -2/+4 |
| | | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups | ||||
* | fixed SIGSEGV when setup of an additional CHILD_SA fails | Martin Willi | 2006-10-30 | 1 | -2/+8 |
| | |||||
* | improved signal handling and emitting | Martin Willi | 2006-10-26 | 1 | -33/+67 |
| | |||||
* | removed deprecated iterator methods (has_next & current) | Martin Willi | 2006-10-24 | 1 | -23/+31 |
| | | | | added iterator hook to manipulate iterator the clean way | ||||
* | linked list cleanups | Martin Willi | 2006-10-24 | 1 | -41/+11 |
| | | | | | added list methods invoke(), destroy_offset(), destroy_function() simplified list destruction when destroying its items | ||||
* | introduced new logging subsystem using bus: | Martin Willi | 2006-10-18 | 1 | -64/+34 |
| | | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more... | ||||
* | added hostaccess support | Andreas Steffen | 2006-09-25 | 1 | -0/+2 |
| | |||||
* | implemented updown script to handle firewalling | Martin Willi | 2006-09-12 | 1 | -2/+12 |
| | |||||
* | reuse reqid when a ROUTED child_sa gets INSTALLED | Martin Willi | 2006-09-05 | 1 | -8/+20 |
| | | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes | ||||
* | added name property in CHILD_SA, allows proper status output | Martin Willi | 2006-08-25 | 1 | -0/+2 |
| | |||||
* | implement proper handling of most simultaneous IKE_SA rekeying cases | Martin Willi | 2006-08-23 | 1 | -1/+12 |
| | |||||
* | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 1 | -15/+18 |
| | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | ||||
* | introduced refcounting on policy and connections | Martin Willi | 2006-07-20 | 1 | -66/+101 |
| | | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors | ||||
* | fixed bug which erroneously detected KE payload when rekeying | Martin Willi | 2006-07-14 | 1 | -0/+1 |
| | |||||
* | improved logging on verify errors for some payloads | Martin Willi | 2006-07-13 | 1 | -7/+16 |
| | | | | | | enforcing IKE_SA shutdown, even when transactions are outstanding proper reject of CREATE_CHILD_SA message with KE payload | ||||
* | added CHILD_SA states, which allows us to detect further simultaneous ↵ | Martin Willi | 2006-07-13 | 1 | -38/+61 |
| | | | | | | | transactions reimplemented the buggy message id handling | ||||
* | fixed payload order | Martin Willi | 2006-07-12 | 1 | -5/+4 |
| | |||||
* | added policy cache to kernel interface | Martin Willi | 2006-07-12 | 1 | -17/+6 |
| | | | | | | allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying | ||||
* | further work done for simultaneous rekeying/delete | Martin Willi | 2006-07-10 | 1 | -13/+108 |
| | | | | | still some cases which cause trouble | ||||
* | reimplemented CHILD_SA rekeying & delete | Martin Willi | 2006-07-07 | 1 | -0/+809 |
no simultanous transaction with CHILD_SAs yet! |