| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 1 | -2/+4 |
| | | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | ||||
| * | added possibility to route CHILD_SAs, without to set them up | Martin Willi | 2006-07-21 | 1 | -0/+57 |
| | | | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires | ||||
| * | reuse an existing IKE_SA to set up additional CHILD_SAs | Martin Willi | 2006-07-20 | 1 | -41/+19 |
| | | |||||
| * | introduced refcounting on policy and connections | Martin Willi | 2006-07-20 | 1 | -16/+41 |
| | | | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors | ||||
| * | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 1 | -2/+2 |
| | | | | | | | added proper traffic selector to string conversion some cleanups here & there | ||||
| * | added support for leftprotoport and rightprotoport | Martin Willi | 2006-07-05 | 1 | -4/+6 |
| | | |||||
| * | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 1 | -2/+0 |
| | | | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet | ||||
| * | fixed memleak when initiating a connection already up | Martin Willi | 2006-07-04 | 1 | -0/+1 |
| | | |||||
| * | support of cert payloads | Andreas Steffen | 2006-07-03 | 1 | -48/+33 |
| | | |||||
| * | added X.509 trust chain verification | Andreas Steffen | 2006-06-27 | 1 | -2/+17 |
| | | |||||
| * | first merge of NATT code | Martin Willi | 2006-06-22 | 1 | -2/+2 |
| | | |||||
| * | readded local_credential_store | Martin Willi | 2006-06-20 | 1 | -2/+3 |
| | | | | | | | added sendcert policy to connection some other cleanups | ||||
| * | implemented rereadcrls rereadcacerts | Andreas Steffen | 2006-06-20 | 1 | -3/+24 |
| | | |||||
| * | added listcrls | Andreas Steffen | 2006-06-16 | 1 | -1/+7 |
| | | |||||
| * | added support for "ike" and "esp" keywords | Martin Willi | 2006-06-15 | 1 | -30/+88 |
| | | | | | | | | fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes | ||||
| * | support for stroke listcerts|listcacerts|listall and left|rightca= | Andreas Steffen | 2006-06-12 | 1 | -55/+91 |
| | | |||||
| * | workaround for peers rekeying at the same time | Martin Willi | 2006-06-12 | 1 | -1/+4 |
| | | | | | | loading lifetime policies from ipsec.conf | ||||
| * | specifying keysize in bits, as it is required in IKEv2 | Martin Willi | 2006-06-09 | 1 | -2/+7 |
| | | | | | | | added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs | ||||
| * | added support for leftsendcert= and left|rightca= parameters | Andreas Steffen | 2006-06-09 | 1 | -8/+25 |
| | | |||||
| * | fixed compile warnings when using -Wall | Martin Willi | 2006-06-08 | 1 | -1/+1 |
| | | | | | | | | | further CHILD_SA rekeying work done: creation of a new CHILD_SA on a expire from a kernel works delete of old CHILD_SA still missing some issues when both initiate rekeing | ||||
| * | further work for rekeying: | Martin Willi | 2006-06-07 | 1 | -16/+15 |
| | | | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals | ||||
| * | minimized prefixed on stroke logger output | Andreas Steffen | 2006-05-31 | 1 | -1/+1 |
| | | |||||
| * | list ca certificates | Andreas Steffen | 2006-05-30 | 1 | -2/+3 |
| | | |||||
| * | - fixed memleak when deleting a connection | Martin Willi | 2006-05-29 | 1 | -1/+5 |
| | | |||||
| * | - policies contain a connections name now | Martin Willi | 2006-05-29 | 1 | -6/+44 |
| | | | | | | | | | - used for initiate and delete - connections won't get initiated twice anymore - deleting of connections is now possible, which allows us to use ipsec update and ipsec reload | ||||
| * | stroke now uses constant size string buffer | Andreas Steffen | 2006-05-29 | 1 | -28/+44 |
| | | |||||
| * | - handle IKE_SA setup without a piggy-packed CHILD_SA | Martin Willi | 2006-05-24 | 1 | -0/+2 |
| | | | | | | more IKEv2 conform | ||||
| * | - show connection templates in status & statusall | Martin Willi | 2006-05-23 | 1 | -15/+47 |
| | | | | | | - don't complain on termination of IKEv1 connections | ||||
| * | - changed config load strategy: | Martin Willi | 2006-05-23 | 1 | -7/+8 |
| | | | | | | | | starter loads both connections in charon & pluto, charon ignores anything with keyexchange!=ikev2. pluto needs the same behavior. | ||||
| * | load_end_certificate() now loads certificates | Andreas Steffen | 2006-05-23 | 1 | -27/+46 |
| | | |||||
| * | - applied patch from andreas, which allows certificate listing via stroke | Martin Willi | 2006-05-19 | 1 | -31/+27 |
| | | |||||
| * | - applied andreas's patch | Martin Willi | 2006-05-18 | 1 | -7/+8 |
| | | | | | | | | - logger output improvements - testin gupdates - and a lot more | ||||
| * | (no commit message) | Martin Willi | 2006-05-10 | 1 | -0/+646 |
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |