Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | restructured file layout | Martin Willi | 2007-04-10 | 1 | -1456/+0 |
| | | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads | ||||
* | removed list_crls() and list_ocsp() methods | Andreas Steffen | 2007-04-06 | 1 | -2/+40 |
| | |||||
* | implemented ipsec purgeocsp | Andreas Steffen | 2007-03-28 | 1 | -1/+8 |
| | |||||
* | implemented ipsec listocsp function | Andreas Steffen | 2007-03-27 | 1 | -0/+4 |
| | |||||
* | support if ocsp signing certificates | Andreas Steffen | 2007-03-08 | 1 | -17/+39 |
| | |||||
* | moved listing of crls to local_credential_store and ca | Andreas Steffen | 2007-03-03 | 1 | -14/+1 |
| | |||||
* | fixed netlink socket receiver code | Martin Willi | 2007-03-03 | 1 | -6/+16 |
| | | | | implemented interface enumeration code with netlink: no getifaddrs reqired anymore | ||||
* | added support for 0.0.0.0/0 traffic selectors | Martin Willi | 2007-03-01 | 1 | -6/+28 |
| | | | | fixed routing to make correct 0.0.0.0/0 routes | ||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 1 | -14/+106 |
| | |||||
* | changed ca info to ca | Andreas Steffen | 2007-02-25 | 1 | -4/+4 |
| | |||||
* | full support of ca info records | Andreas Steffen | 2007-02-24 | 1 | -7/+45 |
| | |||||
* | support of ca info records | Andreas Steffen | 2007-02-23 | 1 | -2/+92 |
| | |||||
* | using "left" as my host per default, swapping to "right" when needed | Martin Willi | 2007-02-15 | 1 | -10/+10 |
| | |||||
* | prepared support of ca information records and ocsp functionality | Andreas Steffen | 2007-02-14 | 1 | -0/+36 |
| | |||||
* | merged EAP framework from branch into trunk | Martin Willi | 2007-02-12 | 1 | -1/+1 |
| | | | | | includes a lot of other modifications | ||||
* | added threads to support multiple simultaneous stroke requests | Martin Willi | 2007-02-02 | 1 | -127/+145 |
| | |||||
* | corrected typo | Andreas Steffen | 2007-01-10 | 1 | -1/+1 |
| | |||||
* | fixed reuathentication when connections other host is %any | Martin Willi | 2007-01-03 | 1 | -1/+1 |
| | |||||
* | added support for transport mode and (experimental!) BEET mode | Martin Willi | 2006-12-21 | 1 | -1/+1 |
| | | | | | support for the type=transport/tunnel parameter in charon | ||||
* | implemented reauthentication using the new reauth=yes|no parameter | Martin Willi | 2006-12-19 | 1 | -0/+1 |
| | |||||
* | improved selection of ipsec status|statusall <name> | Andreas Steffen | 2006-11-02 | 1 | -10/+30 |
| | |||||
* | proper "ipsec up" signal handling when initiating to %any | Martin Willi | 2006-11-02 | 1 | -0/+1 |
| | |||||
* | cosmetics | Andreas Steffen | 2006-11-01 | 1 | -2/+2 |
| | |||||
* | fixed ipsec status|statusall <name> | Andreas Steffen | 2006-11-01 | 1 | -11/+14 |
| | |||||
* | redesigned formatting of ipsec status|statusall | Andreas Steffen | 2006-11-01 | 1 | -21/+34 |
| | |||||
* | solved 64 bit issue in push/pop stroke interface | Andreas Steffen | 2006-10-31 | 1 | -3/+3 |
| | |||||
* | better split up of library files "types.h" & "definitions.h" | Martin Willi | 2006-10-31 | 1 | -1/+1 |
| | | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements | ||||
* | some improvements in signaling code | Martin Willi | 2006-10-27 | 1 | -2/+15 |
| | |||||
* | improved signal handling and emitting | Martin Willi | 2006-10-26 | 1 | -62/+57 |
| | |||||
* | redesigned list output format | Andreas Steffen | 2006-10-25 | 1 | -6/+9 |
| | |||||
* | added verbosity level to stroke | Martin Willi | 2006-10-24 | 1 | -8/+23 |
| | |||||
* | introduced new logging subsystem using bus: | Martin Willi | 2006-10-18 | 1 | -234/+294 |
| | | | | | | | passive listeners can register on the bus active listeners wait for signals actively multiplexing allows multiple listeners to receive debug signals a lot more... | ||||
* | introduced printf() specifiers for: | Martin Willi | 2006-09-27 | 1 | -10/+7 |
| | | | | | | | | | | | host_t (%H) identification_t (%D) chunk pointers (%B) memory pointer/length (%b) added a signaling bus: receives event and debug messages, sends them to its listeners stream_logger, sys_logger, file_logger added, listen to bus some other tweaks here and there | ||||
* | added hostaccess support | Andreas Steffen | 2006-09-25 | 1 | -5/+6 |
| | |||||
* | extended statusall output | Martin Willi | 2006-09-21 | 1 | -9/+21 |
| | | | | | added job/event-queue statistics added allocation statistics when using LEAK_DETECTIVE | ||||
* | added PSK support | Andreas Steffen | 2006-09-18 | 1 | -1/+1 |
| | |||||
* | implemented updown script to handle firewalling | Martin Willi | 2006-09-12 | 1 | -2/+2 |
| | |||||
* | add priority management for kernel policy | Martin Willi | 2006-09-08 | 1 | -49/+1 |
| | | | | | | | let ROUTED policies installed, until manuall removed introduced new naming scheme to allow proper shutdown of IKE/CHILD_SAs ike_sa_manager cleanups | ||||
* | implemented handling of dpdaction and dpddelay ipsec.conf parameters | Martin Willi | 2006-09-08 | 1 | -1/+1 |
| | |||||
* | reuse reqid when a ROUTED child_sa gets INSTALLED | Martin Willi | 2006-09-05 | 1 | -1/+3 |
| | | | | | | | | | fixed a bug in retransmission code added support for the "keyingtries" ipsec.conf parameter added support for the "dpddelay" ipsec.conf parameter done some work for "dpdaction" behavior some other cleanups and fixes | ||||
* | initial support for IPv6 (more testing needed) | Martin Willi | 2006-08-30 | 1 | -18/+41 |
| | | | | | | | | | socket works (without v6 filter) traffic selector handle IPv4/v4 cleanly improvements in traffic selector code kernel interface accepts v6 traffic selectors and hosts host_t class has full IPv6 support | ||||
* | moved interface enumeration code to socket, where it belongs | Martin Willi | 2006-08-28 | 1 | -2/+18 |
| | | | | | query interfaces every time we need it to respect changes in network config added address listing on startup and "ipsec statusall" | ||||
* | implemented IKE_SA rekeying | Martin Willi | 2006-07-27 | 1 | -2/+4 |
| | | | | | | uses ikelifetime, rekeymargin and rekeyfuzz config settings no handling of simultaneus exchanges yet! | ||||
* | added possibility to route CHILD_SAs, without to set them up | Martin Willi | 2006-07-21 | 1 | -0/+57 |
| | | | | | | | support for auto=route parameter support for ipsec route and ipsec unroute initiating of CHILD and/or IKE_SAs based on kernel acquires | ||||
* | reuse an existing IKE_SA to set up additional CHILD_SAs | Martin Willi | 2006-07-20 | 1 | -41/+19 |
| | |||||
* | introduced refcounting on policy and connections | Martin Willi | 2006-07-20 | 1 | -16/+41 |
| | | | | | | | | | aren't stored in the IKE_SA anymore, they are queried on the fly are immutable now, allows it to share them policy selection based on traffic selectors, leads to valid lookup results rekeying queries the policy based on its traffic selectors | ||||
* | cleanups in kernel interface code | Martin Willi | 2006-07-18 | 1 | -2/+2 |
| | | | | | | added proper traffic selector to string conversion some cleanups here & there | ||||
* | added support for leftprotoport and rightprotoport | Martin Willi | 2006-07-05 | 1 | -4/+6 |
| | |||||
* | redesigned IKE_SA using a transaction mechanism: | Martin Willi | 2006-07-05 | 1 | -2/+0 |
| | | | | | | | | | | | | removed old state machine reimplemented IKE_SA setup and delete implemented dead peer detection implemented keep-alives a lot of fixes no rekeying yet | ||||
* | fixed memleak when initiating a connection already up | Martin Willi | 2006-07-04 | 1 | -0/+1 |
| |