Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 1 | -1562/+0 |
| | |||||
* | merged EAP framework from branch into trunk | Martin Willi | 2007-02-12 | 1 | -157/+449 |
| | | | | | includes a lot of other modifications | ||||
* | show name of created CHILD_SA | Andreas Steffen | 2007-01-10 | 1 | -4/+8 |
| | |||||
* | fixed crash when CA for certrequest not found | Martin Willi | 2007-01-08 | 1 | -7/+14 |
| | |||||
* | added support for transport mode and (experimental!) BEET mode | Martin Willi | 2006-12-21 | 1 | -28/+156 |
| | | | | | support for the type=transport/tunnel parameter in charon | ||||
* | better split up of library files "types.h" & "definitions.h" | Martin Willi | 2006-10-31 | 1 | -5/+5 |
| | | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements | ||||
* | preparations to include certreqs in policy decisions | Andreas Steffen | 2006-10-31 | 1 | -6/+20 |
| | |||||
* | moved typedefs to beginning of files to solve some include problems | Martin Willi | 2006-10-30 | 1 | -34/+46 |
| | | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups | ||||
* | changed debug level of certreq log output | Andreas Steffen | 2006-10-29 | 1 | -13/+9 |
| | |||||
* | support of certreq payload in IKE_AUTH messages | Andreas Steffen | 2006-10-28 | 1 | -12/+53 |
| | |||||
* | send a certreq as initiator if other_ca is set | Andreas Steffen | 2006-10-28 | 1 | -2/+19 |
| | |||||
* | some improvements in signaling code | Martin Willi | 2006-10-27 | 1 | -2/+8 |
| | |||||
* | improved signal handling and emitting | Martin Willi | 2006-10-26 | 1 | -40/+62 |
| | |||||
* | removed deprecated iterator methods (has_next & current) | Martin Willi | 2006-10-24 | 1 | -30/+39 |
| | | | | added iterator hook to manipulate iterator the clean way | ||||
* | linked list cleanups | Martin Willi | 2006-10-24 | 1 | -42/+11 |
| | | | | | added list methods invoke(), destroy_offset(), destroy_function() simplified list destruction when destroying its items | ||||
* | introduced new logging subsystem using bus: | Martin Willi | 2006-10-18 | 1 | -77/+41 |
| | | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more... | ||||
* | introduced printf() specifiers for: | Martin Willi | 2006-09-27 | 1 | -5/+4 |
| | | | | | | | | | | | host_t (%H) identification_t (%D) chunk pointers (%B) memory pointer/length (%b) added a signaling bus: receives event and debug messages, sends them to its listeners stream_logger, sys_logger, file_logger added, listen to bus some other tweaks here and there | ||||
* | moved auth_method to policy | Andreas Steffen | 2006-09-25 | 1 | -5/+7 |
| | |||||
* | added PSK support | Andreas Steffen | 2006-09-18 | 1 | -18/+39 |
| | |||||
* | handle certificate parsing error more generous | Martin Willi | 2006-09-14 | 1 | -9/+16 |
| | |||||
* | fixed memleak when receiving invalid certificate | Martin Willi | 2006-09-14 | 1 | -0/+1 |
| | |||||
* | implemented updown script to handle firewalling | Martin Willi | 2006-09-12 | 1 | -2/+6 |
| | |||||
* | implemented handling of dpdaction and dpddelay ipsec.conf parameters | Martin Willi | 2006-09-08 | 1 | -2/+5 |
| | |||||
* | reuse reqid when a ROUTED child_sa gets INSTALLED | Martin Willi | 2006-09-05 | 1 | -2/+17 |
| | | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes | ||||
* | added name property in CHILD_SA, allows proper status output | Martin Willi | 2006-08-25 | 1 | -0/+2 |
| | |||||
* | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 1 | -14/+17 |
| | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | ||||
* | reuse an existing IKE_SA to set up additional CHILD_SAs | Martin Willi | 2006-07-20 | 1 | -1/+1 |
| | |||||
* | introduced refcounting on policy and connections | Martin Willi | 2006-07-20 | 1 | -72/+84 |
| | | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors | ||||
* | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 1 | -4/+4 |
| | | | | | | added proper traffic selector to string conversion some cleanups here & there | ||||
* | added CHILD_SA states, which allows us to detect further simultaneous ↵ | Martin Willi | 2006-07-13 | 1 | -5/+7 |
| | | | | | | | transactions reimplemented the buggy message id handling | ||||
* | identification_t.matches() supports multiple wildcard counts | Andreas Steffen | 2006-07-11 | 1 | -8/+10 |
| | |||||
* | updated copyright information | Martin Willi | 2006-07-07 | 1 | -1/+2 |
| | |||||
* | reimplemented CHILD_SA rekeying & delete | Martin Willi | 2006-07-07 | 1 | -8/+8 |
| | | | | | no simultanous transaction with CHILD_SAs yet! | ||||
* | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 1 | -0/+1007 |
removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet |