aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/threads/stroke_interface.c
Commit message (Collapse)AuthorAgeFilesLines
* restructured file layoutMartin Willi2007-04-101-1456/+0
| | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads
* removed list_crls() and list_ocsp() methodsAndreas Steffen2007-04-061-2/+40
|
* implemented ipsec purgeocspAndreas Steffen2007-03-281-1/+8
|
* implemented ipsec listocsp functionAndreas Steffen2007-03-271-0/+4
|
* support if ocsp signing certificatesAndreas Steffen2007-03-081-17/+39
|
* moved listing of crls to local_credential_store and caAndreas Steffen2007-03-031-14/+1
|
* fixed netlink socket receiver codeMartin Willi2007-03-031-6/+16
| | | | implemented interface enumeration code with netlink: no getifaddrs reqired anymore
* added support for 0.0.0.0/0 traffic selectorsMartin Willi2007-03-011-6/+28
| | | | fixed routing to make correct 0.0.0.0/0 routes
* merged tasking branch into trunkMartin Willi2007-02-281-14/+106
|
* changed ca info to caAndreas Steffen2007-02-251-4/+4
|
* full support of ca info recordsAndreas Steffen2007-02-241-7/+45
|
* support of ca info recordsAndreas Steffen2007-02-231-2/+92
|
* using "left" as my host per default, swapping to "right" when neededMartin Willi2007-02-151-10/+10
|
* prepared support of ca information records and ocsp functionalityAndreas Steffen2007-02-141-0/+36
|
* merged EAP framework from branch into trunkMartin Willi2007-02-121-1/+1
| | | | | includes a lot of other modifications
* added threads to support multiple simultaneous stroke requestsMartin Willi2007-02-021-127/+145
|
* corrected typoAndreas Steffen2007-01-101-1/+1
|
* fixed reuathentication when connections other host is %anyMartin Willi2007-01-031-1/+1
|
* added support for transport mode and (experimental!) BEET modeMartin Willi2006-12-211-1/+1
| | | | | support for the type=transport/tunnel parameter in charon
* implemented reauthentication using the new reauth=yes|no parameter Martin Willi2006-12-191-0/+1
|
* improved selection of ipsec status|statusall <name>Andreas Steffen2006-11-021-10/+30
|
* proper "ipsec up" signal handling when initiating to %anyMartin Willi2006-11-021-0/+1
|
* cosmeticsAndreas Steffen2006-11-011-2/+2
|
* fixed ipsec status|statusall <name>Andreas Steffen2006-11-011-11/+14
|
* redesigned formatting of ipsec status|statusallAndreas Steffen2006-11-011-21/+34
|
* solved 64 bit issue in push/pop stroke interfaceAndreas Steffen2006-10-311-3/+3
|
* better split up of library files "types.h" & "definitions.h"Martin Willi2006-10-311-1/+1
| | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements
* some improvements in signaling codeMartin Willi2006-10-271-2/+15
|
* improved signal handling and emittingMartin Willi2006-10-261-62/+57
|
* redesigned list output formatAndreas Steffen2006-10-251-6/+9
|
* added verbosity level to strokeMartin Willi2006-10-241-8/+23
|
* introduced new logging subsystem using bus:Martin Willi2006-10-181-234/+294
| | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more...
* introduced printf() specifiers for:Martin Willi2006-09-271-10/+7
| | | | | | | | | | | host_t (%H) identification_t (%D) chunk pointers (%B) memory pointer/length (%b) added a signaling bus: receives event and debug messages, sends them to its listeners stream_logger, sys_logger, file_logger added, listen to bus some other tweaks here and there
* added hostaccess supportAndreas Steffen2006-09-251-5/+6
|
* extended statusall outputMartin Willi2006-09-211-9/+21
| | | | | added job/event-queue statistics added allocation statistics when using LEAK_DETECTIVE
* added PSK supportAndreas Steffen2006-09-181-1/+1
|
* implemented updown script to handle firewallingMartin Willi2006-09-121-2/+2
|
* add priority management for kernel policyMartin Willi2006-09-081-49/+1
| | | | | | | let ROUTED policies installed, until manuall removed introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs ike_sa_manager cleanups
* implemented handling of dpdaction and dpddelay ipsec.conf parametersMartin Willi2006-09-081-1/+1
|
* reuse reqid when a ROUTED child_sa gets INSTALLEDMartin Willi2006-09-051-1/+3
| | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes
* initial support for IPv6 (more testing needed)Martin Willi2006-08-301-18/+41
| | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support
* moved interface enumeration code to socket, where it belongsMartin Willi2006-08-281-2/+18
| | | | | query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall"
* implemented IKE_SA rekeyingMartin Willi2006-07-271-2/+4
| | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet!
* added possibility to route CHILD_SAs, without to set them upMartin Willi2006-07-211-0/+57
| | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires
* reuse an existing IKE_SA to set up additional CHILD_SAsMartin Willi2006-07-201-41/+19
|
* introduced refcounting on policy and connectionsMartin Willi2006-07-201-16/+41
| | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors
* cleanups in kernel interface codeMartin Willi2006-07-181-2/+2
| | | | | | added proper traffic selector to string conversion some cleanups here & there
* added support for leftprotoport and rightprotoportMartin Willi2006-07-051-4/+6
|
* redesigned IKE_SA using a transaction mechanism:Martin Willi2006-07-051-2/+0
| | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet
* fixed memleak when initiating a connection already upMartin Willi2006-07-041-0/+1
|