Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | added PSK support | Andreas Steffen | 2006-09-18 | 1 | -18/+39 |
| | |||||
* | handle certificate parsing error more generous | Martin Willi | 2006-09-14 | 1 | -9/+16 |
| | |||||
* | fixed memleak when receiving invalid certificate | Martin Willi | 2006-09-14 | 1 | -0/+1 |
| | |||||
* | implemented updown script to handle firewalling | Martin Willi | 2006-09-12 | 1 | -2/+6 |
| | |||||
* | implemented handling of dpdaction and dpddelay ipsec.conf parameters | Martin Willi | 2006-09-08 | 1 | -2/+5 |
| | |||||
* | reuse reqid when a ROUTED child_sa gets INSTALLED | Martin Willi | 2006-09-05 | 1 | -2/+17 |
| | | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes | ||||
* | added name property in CHILD_SA, allows proper status output | Martin Willi | 2006-08-25 | 1 | -0/+2 |
| | |||||
* | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 1 | -14/+17 |
| | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | ||||
* | reuse an existing IKE_SA to set up additional CHILD_SAs | Martin Willi | 2006-07-20 | 1 | -1/+1 |
| | |||||
* | introduced refcounting on policy and connections | Martin Willi | 2006-07-20 | 1 | -72/+84 |
| | | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors | ||||
* | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 1 | -4/+4 |
| | | | | | | added proper traffic selector to string conversion some cleanups here & there | ||||
* | added CHILD_SA states, which allows us to detect further simultaneous ↵ | Martin Willi | 2006-07-13 | 1 | -5/+7 |
| | | | | | | | transactions reimplemented the buggy message id handling | ||||
* | identification_t.matches() supports multiple wildcard counts | Andreas Steffen | 2006-07-11 | 1 | -8/+10 |
| | |||||
* | updated copyright information | Martin Willi | 2006-07-07 | 1 | -1/+2 |
| | |||||
* | reimplemented CHILD_SA rekeying & delete | Martin Willi | 2006-07-07 | 1 | -8/+8 |
| | | | | | no simultanous transaction with CHILD_SAs yet! | ||||
* | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 1 | -0/+1007 |
removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet |