aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/sa/transactions/ike_sa_init.c
Commit message (Collapse)AuthorAgeFilesLines
* merged tasking branch into trunkMartin Willi2007-02-281-1121/+0
|
* fixed reauthentication when using %any hostsMartin Willi2007-01-081-5/+5
|
* implemented reauthentication using the new reauth=yes|no parameter Martin Willi2006-12-191-1/+3
|
* better split up of library files "types.h" & "definitions.h"Martin Willi2006-10-311-4/+4
| | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements
* include only source NATD payloads really neededMartin Willi2006-10-271-7/+17
|
* improved signal handling and emittingMartin Willi2006-10-261-38/+59
|
* removed deprecated iterator methods (has_next & current)Martin Willi2006-10-241-9/+5
| | | | added iterator hook to manipulate iterator the clean way
* linked list cleanupsMartin Willi2006-10-241-48/+34
| | | | | added list methods invoke(), destroy_offset(), destroy_function() simplified list destruction when destroying its items
* introduced new logging subsystem using bus:Martin Willi2006-10-181-77/+44
| | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more...
* introduced printf() specifiers for:Martin Willi2006-09-271-2/+2
| | | | | | | | | | | host_t (%H) identification_t (%D) chunk pointers (%B) memory pointer/length (%b) added a signaling bus: receives event and debug messages, sends them to its listeners stream_logger, sys_logger, file_logger added, listen to bus some other tweaks here and there
* fixed retransmission policy for responderMartin Willi2006-09-251-2/+1
|
* fixed dpd for responderMartin Willi2006-09-251-0/+2
|
* add priority management for kernel policyMartin Willi2006-09-081-2/+22
| | | | | | | let ROUTED policies installed, until manuall removed introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs ike_sa_manager cleanups
* reuse reqid when a ROUTED child_sa gets INSTALLEDMartin Willi2006-09-051-3/+20
| | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes
* fixed a at-least-one-year-old bug which caused crashed in the schedulerMartin Willi2006-08-311-1/+1
|
* implemented NAT detection for IPv6Martin Willi2006-08-311-36/+19
|
* initial support for IPv6 (more testing needed)Martin Willi2006-08-301-0/+2
| | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support
* moved interface enumeration code to socket, where it belongsMartin Willi2006-08-281-4/+5
| | | | | query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall"
* (no commit message)Martin Willi2006-08-251-5/+0
|
* fixed bug which prevented port float when nat is detectedMartin Willi2006-08-251-0/+8
|
* implement proper handling of most simultaneous IKE_SA rekeying casesMartin Willi2006-08-231-2/+2
|
* implemented IKE_SA rekeyingMartin Willi2006-07-271-19/+36
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* reuse an existing IKE_SA to set up additional CHILD_SAsMartin Willi2006-07-201-0/+8
|
* introduced refcounting on policy and connectionsMartin Willi2006-07-201-23/+35
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* cleanups in kernel interface codeMartin Willi2006-07-181-2/+2
| | | | | | added proper traffic selector to string conversion some cleanups here & there
* added CHILD_SA states, which allows us to detect further simultaneous ↵Martin Willi2006-07-131-8/+8
| | | | | | | transactions reimplemented the buggy message id handling
* updated copyright informationMartin Willi2006-07-071-1/+2
|
* reimplemented CHILD_SA rekeying & deleteMartin Willi2006-07-071-15/+10
| | | | | no simultanous transaction with CHILD_SAs yet!
* redesigned IKE_SA using a transaction mechanism:Martin Willi2006-07-051-0/+1079
removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet