Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | fixed testing build4.0.1 | Martin Willi | 2006-06-21 | 1 | -1/+1 |
| | |||||
* | reworked function ignore mechanism to not-report whitelist | Martin Willi | 2006-06-20 | 1 | -2/+2 |
| | | | | rather than overriding functions | ||||
* | fixed bug: usage of already freed mem | Martin Willi | 2006-06-20 | 1 | -1/+2 |
| | |||||
* | readded local_credential_store | Martin Willi | 2006-06-20 | 10 | -88/+256 |
| | | | | | | added sendcert policy to connection some other cleanups | ||||
* | implemented rereadcrls rereadcacerts | Andreas Steffen | 2006-06-20 | 4 | -10/+702 |
| | |||||
* | removed local_credential_store | Andreas Steffen | 2006-06-20 | 4 | -696/+8 |
| | |||||
* | fixed SPI when acting as initiator of rekeying | Martin Willi | 2006-06-19 | 1 | -2/+2 |
| | |||||
* | fixed SPI when rekeying and deleting CHILD_SAs | Martin Willi | 2006-06-19 | 5 | -14/+19 |
| | |||||
* | change key derivation order to fullfill RFC | Martin Willi | 2006-06-19 | 1 | -11/+26 |
| | |||||
* | (no commit message) | Martin Willi | 2006-06-16 | 2 | -6/+6 |
| | |||||
* | added crl support | Andreas Steffen | 2006-06-16 | 3 | -15/+188 |
| | |||||
* | added listcrls | Andreas Steffen | 2006-06-16 | 1 | -1/+7 |
| | |||||
* | fixed compilation error | Martin Willi | 2006-06-15 | 1 | -2/+1 |
| | |||||
* | fixed aes code, we support now aes128, aes192, aes256 in IKE | Martin Willi | 2006-06-15 | 4 | -9/+108 |
| | |||||
* | added support for "ike" and "esp" keywords | Martin Willi | 2006-06-15 | 15 | -97/+367 |
| | | | | | | | fixed bugs in proposal code algorithm selection for charon works now with ipsec.conf a lot of other fixes | ||||
* | implemented clean spi allocation behavior when using multiple proposals | Martin Willi | 2006-06-15 | 1 | -35/+104 |
| | |||||
* | added default CRL directory path | Andreas Steffen | 2006-06-14 | 1 | -0/+7 |
| | |||||
* | added option parsing | Andreas Steffen | 2006-06-14 | 1 | -11/+59 |
| | |||||
* | debug and logging improvements | Martin Willi | 2006-06-13 | 8 | -16/+43 |
| | |||||
* | support for stroke listcerts|listcacerts|listall and left|rightca= | Andreas Steffen | 2006-06-12 | 1 | -55/+91 |
| | |||||
* | using same reqid if a child sa rekeys an existing one | Martin Willi | 2006-06-12 | 7 | -20/+37 |
| | |||||
* | add_certificate() now returns pointer to added cert | Andreas Steffen | 2006-06-12 | 2 | -8/+8 |
| | |||||
* | cosmetics | Andreas Steffen | 2006-06-12 | 4 | -101/+101 |
| | |||||
* | workaround for peers rekeying at the same time | Martin Willi | 2006-06-12 | 9 | -16/+87 |
| | | | | | loading lifetime policies from ipsec.conf | ||||
* | old child_sa gets deleted after rekeying | Martin Willi | 2006-06-09 | 19 | -99/+583 |
| | | | | | | rekeying almost complete, but: IKE_SA get in an invalid state when both initiate rekeying at the same time, | ||||
* | improved kernel interface logging | Martin Willi | 2006-06-09 | 5 | -63/+50 |
| | |||||
* | fixed clone/destroy behavior when not using CAs | Martin Willi | 2006-06-09 | 1 | -5/+17 |
| | |||||
* | specifying keysize in bits, as it is required in IKEv2 | Martin Willi | 2006-06-09 | 8 | -142/+171 |
| | | | | | | added generic kernel SA algorithm handling, which brings us: aes-128, aes-256, blowfish, des, 3des and null encryption for CHILD_SAs | ||||
* | added support for leftsendcert= and left|rightca= parameters | Andreas Steffen | 2006-06-09 | 3 | -10/+66 |
| | |||||
* | discard cert if CA basic constraints flag is not set and warn if cert is not ↵ | Andreas Steffen | 2006-06-09 | 1 | -5/+16 |
| | | | | valide | ||||
* | fixed compile warnings when using -Wall | Martin Willi | 2006-06-08 | 25 | -206/+829 |
| | | | | | | | | further CHILD_SA rekeying work done: creation of a new CHILD_SA on a expire from a kernel works delete of old CHILD_SA still missing some issues when both initiate rekeing | ||||
* | further work for rekeying: | Martin Willi | 2006-06-07 | 36 | -1398/+1392 |
| | | | | | | | | | get liftimes from policy added new state initiation of rekeying done proposal redone: removed support for AH+ESP proposals | ||||
* | fixed a memleak | Martin Willi | 2006-06-07 | 1 | -1/+5 |
| | |||||
* | created IPv6 environment | Andreas Steffen | 2006-06-06 | 1 | -4/+4 |
| | |||||
* | job management: | Martin Willi | 2006-05-31 | 31 | -738/+929 |
| | | | | | | | | | | | | | moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-) | ||||
* | - fixed some memleaks/freebugs | Martin Willi | 2006-05-31 | 3 | -9/+6 |
| | | | | | - leak detective works almost usable now (?!) | ||||
* | - fixed host-host tunnel traffic selection, host-host works now | Martin Willi | 2006-05-31 | 4 | -8/+30 |
| | |||||
* | minimized prefixed on stroke logger output | Andreas Steffen | 2006-05-31 | 1 | -1/+1 |
| | |||||
* | charon outputs strongSwan version | Andreas Steffen | 2006-05-31 | 1 | -0/+3 |
| | |||||
* | (no commit message) | Martin Willi | 2006-05-30 | 1 | -10/+13 |
| | |||||
* | - fixed event queue for events >36min | Martin Willi | 2006-05-30 | 1 | -30/+17 |
| | |||||
* | (no commit message) | Martin Willi | 2006-05-30 | 1 | -0/+1 |
| | |||||
* | - included charons module tests to build & dist | Martin Willi | 2006-05-30 | 9 | -11/+44 |
| | |||||
* | full support of ikev1 and ikev2 connection flags | Andreas Steffen | 2006-05-30 | 1 | -6/+7 |
| | |||||
* | cosmetics in log_status output | Andreas Steffen | 2006-05-30 | 1 | -1/+1 |
| | |||||
* | use of streq | Andreas Steffen | 2006-05-30 | 1 | -1/+1 |
| | |||||
* | lookup of private key based on keyid of public key | Andreas Steffen | 2006-05-30 | 1 | -24/+47 |
| | |||||
* | new functions to add certificates and retrieve private and public keys | Andreas Steffen | 2006-05-30 | 3 | -120/+182 |
| | |||||
* | changed log level | Andreas Steffen | 2006-05-30 | 1 | -2/+2 |
| | |||||
* | list ca certificates | Andreas Steffen | 2006-05-30 | 1 | -2/+3 |
| |