| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
| |
new configuration structure:
peer_cfg: configuration related to a peer (authenitcation, ...=
ike_cfg: config to use for IKE setup (proposals)
child_Cfg: config for CHILD_SA (proposals, traffic selectors)
a peer_cfg has one ike_cfg and multiple child_cfg's
stroke now uses fixed count of threads
|
|
|
|
| |
implemented interface enumeration code with netlink: no getifaddrs reqired anymore
|
| |
|
|
|
|
|
| |
support for the type=transport/tunnel parameter in charon
|
|
|
|
|
|
|
| |
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
|
|
|
|
|
|
|
| |
let ROUTED policies installed, until manuall removed
introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs
ike_sa_manager cleanups
|
|
|
|
|
|
| |
added proper traffic selector to string conversion
some cleanups here & there
|
|
|
|
|
|
| |
allows refcounting of multiple installed policies
finally brings us stable simultaneous rekeying
|
| |
|
|
|
|
|
| |
DPD only done when no IPsec and IKE traffic processed
minor changes here and there
|
| |
|
| |
|
|
|
|
|
|
| |
added generic kernel SA algorithm handling, which brings us:
aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
moved job code from thread_pool to job, jobs have an "execute" method now
added two new jobs: delete_child_sa & rekey_child_sa
kernel interface:
listens now for ACQUIRE & EXPIRE
supports hard and soft lifetimes
fires jobs for delete and rekey child sa
ike sa manager:
can checkout IKE SAs by requid of owned CHILD SAs
we have now the infrastructure to do the rekeying... :-)
|
|
|