aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/sa/transactions/create_child_sa.c
Commit message (Collapse)AuthorAgeFilesLines
* merged tasking branch into trunkMartin Willi2007-02-281-1121/+0
|
* merged EAP framework from branch into trunkMartin Willi2007-02-121-4/+2
| | | | | includes a lot of other modifications
* name the created CHILD_SAAndreas Steffen2007-01-111-2/+4
|
* support for transport in create_child_saMartin Willi2007-01-081-4/+8
| | | | include TRANSPORT/TUNNEL information in statusall
* fixed reuathentication when connections other host is %anyMartin Willi2007-01-031-1/+1
|
* added support for transport mode and (experimental!) BEET modeMartin Willi2006-12-211-21/+146
| | | | | support for the type=transport/tunnel parameter in charon
* better split up of library files "types.h" & "definitions.h"Martin Willi2006-10-311-10/+10
| | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements
* preparations to include certreqs in policy decisionsAndreas Steffen2006-10-311-2/+4
|
* moved typedefs to beginning of files to solve some include problemsMartin Willi2006-10-301-2/+4
| | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups
* fixed SIGSEGV when setup of an additional CHILD_SA failsMartin Willi2006-10-301-2/+8
|
* improved signal handling and emittingMartin Willi2006-10-261-33/+67
|
* removed deprecated iterator methods (has_next & current)Martin Willi2006-10-241-23/+31
| | | | added iterator hook to manipulate iterator the clean way
* linked list cleanupsMartin Willi2006-10-241-41/+11
| | | | | added list methods invoke(), destroy_offset(), destroy_function() simplified list destruction when destroying its items
* introduced new logging subsystem using bus:Martin Willi2006-10-181-64/+34
| | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more...
* added hostaccess supportAndreas Steffen2006-09-251-0/+2
|
* implemented updown script to handle firewallingMartin Willi2006-09-121-2/+12
|
* reuse reqid when a ROUTED child_sa gets INSTALLEDMartin Willi2006-09-051-8/+20
| | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes
* added name property in CHILD_SA, allows proper status outputMartin Willi2006-08-251-0/+2
|
* implement proper handling of most simultaneous IKE_SA rekeying casesMartin Willi2006-08-231-1/+12
|
* implemented IKE_SA rekeyingMartin Willi2006-07-271-15/+18
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* introduced refcounting on policy and connectionsMartin Willi2006-07-201-66/+101
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* fixed bug which erroneously detected KE payload when rekeyingMartin Willi2006-07-141-0/+1
|
* improved logging on verify errors for some payloadsMartin Willi2006-07-131-7/+16
| | | | | | enforcing IKE_SA shutdown, even when transactions are outstanding proper reject of CREATE_CHILD_SA message with KE payload
* added CHILD_SA states, which allows us to detect further simultaneous ↵Martin Willi2006-07-131-38/+61
| | | | | | | transactions reimplemented the buggy message id handling
* fixed payload orderMartin Willi2006-07-121-5/+4
|
* added policy cache to kernel interfaceMartin Willi2006-07-121-17/+6
| | | | | | allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying
* further work done for simultaneous rekeying/deleteMartin Willi2006-07-101-13/+108
| | | | | still some cases which cause trouble
* reimplemented CHILD_SA rekeying & deleteMartin Willi2006-07-071-0/+809
no simultanous transaction with CHILD_SAs yet!