Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | restructured file layout | Martin Willi | 2007-04-10 | 12 | -4926/+0 |
| | | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads | ||||
* | removed list_crls() and list_ocsp() methods | Andreas Steffen | 2007-04-06 | 1 | -2/+40 |
| | |||||
* | removed unneded includes | Martin Willi | 2007-03-30 | 1 | -1/+0 |
| | |||||
* | using IFA_LOCAL for interface enumeration to support ppp links | Martin Willi | 2007-03-30 | 1 | -5/+20 |
| | |||||
* | implemented DoS protection with cookies and IP filter | Martin Willi | 2007-03-29 | 2 | -106/+252 |
| | |||||
* | implemented ipsec purgeocsp | Andreas Steffen | 2007-03-28 | 1 | -1/+8 |
| | |||||
* | removed send_queue, handled internally in sender_t know | Martin Willi | 2007-03-28 | 4 | -85/+162 |
| | | | | | do header parsing in receiver, ready for cookie integration | ||||
* | implemented a simple IP blocking filter in receiver thread | Martin Willi | 2007-03-28 | 2 | -11/+119 |
| | |||||
* | implemented ipsec listocsp function | Andreas Steffen | 2007-03-27 | 1 | -0/+4 |
| | |||||
* | fixed SPI byte order | Martin Willi | 2007-03-21 | 1 | -1/+1 |
| | |||||
* | not installing a route when policy gets updated | Martin Willi | 2007-03-20 | 1 | -2/+8 |
| | |||||
* | always update reqid on policy install, fixes dpdaction=hold issue | Martin Willi | 2007-03-19 | 1 | -9/+1 |
| | |||||
* | disabling routing for IPv6, does not work correctly | Martin Willi | 2007-03-08 | 1 | -1/+2 |
| | |||||
* | support if ocsp signing certificates | Andreas Steffen | 2007-03-08 | 1 | -17/+39 |
| | |||||
* | added (not yet supported) sha2 algorithms to kernel | Martin Willi | 2007-03-08 | 1 | -7/+10 |
| | | | | only adding a route if using tunnel mode | ||||
* | fixed ID selection bug when peer doesn't include IDr payload | Martin Willi | 2007-03-05 | 1 | -1/+1 |
| | | | | | allowing vendor ID in any messag | ||||
* | moved listing of crls to local_credential_store and ca | Andreas Steffen | 2007-03-03 | 1 | -14/+1 |
| | |||||
* | fixed netlink socket receiver code | Martin Willi | 2007-03-03 | 3 | -79/+185 |
| | | | | implemented interface enumeration code with netlink: no getifaddrs reqired anymore | ||||
* | refactored kernel interface, works reliable again | Martin Willi | 2007-03-03 | 1 | -1151/+942 |
| | |||||
* | implemented get_iface() using RTM_GETADDR | Martin Willi | 2007-03-02 | 1 | -71/+177 |
| | | | | | added support for multi-header netlink messages really ugly now, need a lot of refactoring | ||||
* | added debuggin for interface lookup | Martin Willi | 2007-03-01 | 1 | -0/+3 |
| | |||||
* | fixed address lookup when !using getifaddrs() | Martin Willi | 2007-03-01 | 1 | -2/+2 |
| | |||||
* | added support for 0.0.0.0/0 traffic selectors | Martin Willi | 2007-03-01 | 2 | -9/+72 |
| | | | | fixed routing to make correct 0.0.0.0/0 routes | ||||
* | merged tasking branch into trunk | Martin Willi | 2007-02-28 | 3 | -120/+855 |
| | |||||
* | changed ca info to ca | Andreas Steffen | 2007-02-25 | 1 | -4/+4 |
| | |||||
* | full support of ca info records | Andreas Steffen | 2007-02-24 | 1 | -7/+45 |
| | |||||
* | support of ca info records | Andreas Steffen | 2007-02-23 | 1 | -2/+92 |
| | |||||
* | using "left" as my host per default, swapping to "right" when needed | Martin Willi | 2007-02-15 | 1 | -10/+10 |
| | |||||
* | prepared support of ca information records and ocsp functionality | Andreas Steffen | 2007-02-14 | 1 | -0/+36 |
| | |||||
* | merged EAP framework from branch into trunk | Martin Willi | 2007-02-12 | 1 | -1/+1 |
| | | | | | includes a lot of other modifications | ||||
* | added threads to support multiple simultaneous stroke requests | Martin Willi | 2007-02-02 | 1 | -127/+145 |
| | |||||
* | corrected typo | Andreas Steffen | 2007-01-10 | 1 | -1/+1 |
| | |||||
* | fixed reuathentication when connections other host is %any | Martin Willi | 2007-01-03 | 1 | -1/+1 |
| | |||||
* | fixed host conversion length check | Martin Willi | 2007-01-03 | 1 | -2/+2 |
| | |||||
* | added support for transport mode and (experimental!) BEET mode | Martin Willi | 2006-12-21 | 3 | -10/+15 |
| | | | | | support for the type=transport/tunnel parameter in charon | ||||
* | implemented reauthentication using the new reauth=yes|no parameter | Martin Willi | 2006-12-19 | 1 | -0/+1 |
| | |||||
* | improved selection of ipsec status|statusall <name> | Andreas Steffen | 2006-11-02 | 1 | -10/+30 |
| | |||||
* | proper "ipsec up" signal handling when initiating to %any | Martin Willi | 2006-11-02 | 1 | -0/+1 |
| | |||||
* | cosmetics | Andreas Steffen | 2006-11-01 | 1 | -2/+2 |
| | |||||
* | fixed ipsec status|statusall <name> | Andreas Steffen | 2006-11-01 | 1 | -11/+14 |
| | |||||
* | redesigned formatting of ipsec status|statusall | Andreas Steffen | 2006-11-01 | 1 | -21/+34 |
| | |||||
* | solved 64 bit issue in push/pop stroke interface | Andreas Steffen | 2006-10-31 | 1 | -3/+3 |
| | |||||
* | fixed 64 bit issue | Andreas Steffen | 2006-10-31 | 1 | -1/+1 |
| | |||||
* | better split up of library files "types.h" & "definitions.h" | Martin Willi | 2006-10-31 | 6 | -6/+5 |
| | | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements | ||||
* | moved typedefs to beginning of files to solve some include problems | Martin Willi | 2006-10-30 | 6 | -25/+19 |
| | | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups | ||||
* | some improvements in signaling code | Martin Willi | 2006-10-27 | 1 | -2/+15 |
| | |||||
* | improved signal handling and emitting | Martin Willi | 2006-10-26 | 6 | -131/+127 |
| | |||||
* | redesigned list output format | Andreas Steffen | 2006-10-25 | 1 | -6/+9 |
| | |||||
* | removed deprecated iterator methods (has_next & current) | Martin Willi | 2006-10-24 | 1 | -4/+4 |
| | | | | added iterator hook to manipulate iterator the clean way | ||||
* | added verbosity level to stroke | Martin Willi | 2006-10-24 | 1 | -8/+23 |
| |