| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | added PSK support | Andreas Steffen | 2006-09-18 | 1 | -18/+39 |
| | | |||||
| * | handle certificate parsing error more generous | Martin Willi | 2006-09-14 | 1 | -9/+16 |
| | | |||||
| * | fixed memleak when receiving invalid certificate | Martin Willi | 2006-09-14 | 1 | -0/+1 |
| | | |||||
| * | implemented updown script to handle firewalling | Martin Willi | 2006-09-12 | 2 | -4/+18 |
| | | |||||
| * | add priority management for kernel policy | Martin Willi | 2006-09-08 | 2 | -3/+23 |
| | | | | | | | | let ROUTED policies installed, until manuall removed introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs ike_sa_manager cleanups | ||||
| * | implemented handling of dpdaction and dpddelay ipsec.conf parameters | Martin Willi | 2006-09-08 | 1 | -2/+5 |
| | | |||||
| * | reuse reqid when a ROUTED child_sa gets INSTALLED | Martin Willi | 2006-09-05 | 6 | -28/+108 |
| | | | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes | ||||
| * | fixed a at-least-one-year-old bug which caused crashed in the scheduler | Martin Willi | 2006-08-31 | 1 | -1/+1 |
| | | |||||
| * | implemented NAT detection for IPv6 | Martin Willi | 2006-08-31 | 1 | -36/+19 |
| | | |||||
| * | initial support for IPv6 (more testing needed) | Martin Willi | 2006-08-30 | 1 | -0/+2 |
| | | | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support | ||||
| * | moved interface enumeration code to socket, where it belongs | Martin Willi | 2006-08-28 | 1 | -4/+5 |
| | | | | | | query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall" | ||||
| * | added name property in CHILD_SA, allows proper status output | Martin Willi | 2006-08-25 | 2 | -0/+4 |
| | | |||||
| * | (no commit message) | Martin Willi | 2006-08-25 | 1 | -5/+0 |
| | | |||||
| * | fixed bug which prevented port float when nat is detected | Martin Willi | 2006-08-25 | 1 | -0/+8 |
| | | |||||
| * | fixed rekeying behavior when proposing an inacceptable DH group ↵4.0.3 | Martin Willi | 2006-08-23 | 2 | -35/+26 |
| | | | | | (INVALID_KE_PAYLOAD) | ||||
| * | implement proper handling of most simultaneous IKE_SA rekeying cases | Martin Willi | 2006-08-23 | 5 | -21/+177 |
| | | |||||
| * | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 6 | -50/+956 |
| | | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | ||||
| * | reuse an existing IKE_SA to set up additional CHILD_SAs | Martin Willi | 2006-07-20 | 2 | -1/+9 |
| | | |||||
| * | introduced refcounting on policy and connections | Martin Willi | 2006-07-20 | 9 | -202/+276 |
| | | | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors | ||||
| * | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 2 | -6/+6 |
| | | | | | | | added proper traffic selector to string conversion some cleanups here & there | ||||
| * | fixed bug which erroneously detected KE payload when rekeying | Martin Willi | 2006-07-14 | 1 | -0/+1 |
| | | |||||
| * | improved logging on verify errors for some payloads | Martin Willi | 2006-07-13 | 1 | -7/+16 |
| | | | | | | | enforcing IKE_SA shutdown, even when transactions are outstanding proper reject of CREATE_CHILD_SA message with KE payload | ||||
| * | fixed CREATE_CHILD_SA transaction dispatching | Martin Willi | 2006-07-13 | 1 | -37/+28 |
| | | |||||
| * | added CHILD_SA states, which allows us to detect further simultaneous ↵ | Martin Willi | 2006-07-13 | 13 | -89/+111 |
| | | | | | | | | transactions reimplemented the buggy message id handling | ||||
| * | updated some inline docs | Martin Willi | 2006-07-12 | 2 | -1/+3 |
| | | |||||
| * | fixed payload order | Martin Willi | 2006-07-12 | 1 | -5/+4 |
| | | |||||
| * | added policy cache to kernel interface | Martin Willi | 2006-07-12 | 2 | -19/+11 |
| | | | | | | | allows refcounting of multiple installed policies finally brings us stable simultaneous rekeying | ||||
| * | identification_t.matches() supports multiple wildcard counts | Andreas Steffen | 2006-07-11 | 1 | -8/+10 |
| | | |||||
| * | further work done for simultaneous rekeying/delete | Martin Willi | 2006-07-10 | 4 | -20/+160 |
| | | | | | | still some cases which cause trouble | ||||
| * | updated copyright information | Martin Willi | 2006-07-07 | 2 | -2/+4 |
| | | |||||
| * | reimplemented CHILD_SA rekeying & delete | Martin Willi | 2006-07-07 | 8 | -40/+1372 |
| | | | | | | no simultanous transaction with CHILD_SAs yet! | ||||
| * | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 10 | -0/+3185 |
| removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |