Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | include default route with missing dst field into route evaluation | Andreas Steffen | 2007-07-13 | 1 | -6/+7 | |
| | ||||||
* | doing route lookup in userspace to ignore routes installed by us | Martin Willi | 2007-07-11 | 1 | -29/+121 | |
| | ||||||
* | using own routing table for installed routes (table 100, prio 100) | Martin Willi | 2007-07-11 | 1 | -1/+51 | |
| | ||||||
* | added first draft of SMP relax-ng schema | Martin Willi | 2007-07-06 | 1 | -0/+225 | |
| | ||||||
* | ignoring unkown crl/ocsp uris | Martin Willi | 2007-07-04 | 1 | -2/+8 | |
| | ||||||
* | using correct nexthop for inserted route | Martin Willi | 2007-07-04 | 1 | -15/+30 | |
| | ||||||
* | changed mobike behavior to NOT use additional responder addresses until we ↵ | Martin Willi | 2007-07-04 | 1 | -95/+3 | |
| | | | | have path discovery | |||||
* | fixed responder initiated CHILD_SA rekeying when using virtual IPs | Martin Willi | 2007-07-04 | 1 | -11/+45 | |
| | ||||||
* | fixed firewall script invocation when interface is not available anymore | Martin Willi | 2007-07-03 | 1 | -17/+28 | |
| | ||||||
* | improved MOBIKE: | Martin Willi | 2007-07-03 | 10 | -88/+254 | |
| | | | | | | | | prefer address family already used do not change address implicit when mobike supported handle multiple simultaneous roaming requests more properly proper enabling/disabling of UDP encapsulation | |||||
* | added message ID to message log | Martin Willi | 2007-07-03 | 1 | -3/+7 | |
| | ||||||
* | show kind of notify contained in messages in log | Martin Willi | 2007-07-03 | 3 | -12/+76 | |
| | ||||||
* | DBG1 level for 'peer supports MOBIKE' debug message | Andreas Steffen | 2007-07-02 | 1 | -1/+1 | |
| | ||||||
* | fixed typo | Andreas Steffen | 2007-07-02 | 1 | -3/+3 | |
| | ||||||
* | fixed mobike address update from and to NAT | Martin Willi | 2007-07-02 | 2 | -34/+20 | |
| | ||||||
* | proper update of IPsec SA when roaming a host-to-host tunnel | Martin Willi | 2007-07-02 | 5 | -92/+155 | |
| | | | | roaming of IPsec SAs using virtual IPs | |||||
* | updated charons architecture description | Martin Willi | 2007-06-29 | 1 | -41/+64 | |
| | ||||||
* | fixed dpd=hold when using virtual IPs | Martin Willi | 2007-06-29 | 2 | -10/+25 | |
| | ||||||
* | removed accidently checked in debbuging code | Martin Willi | 2007-06-29 | 1 | -2/+0 | |
| | ||||||
* | fixed IKE_SA reestablishment after DPD using port 500 | Martin Willi | 2007-06-28 | 1 | -65/+71 | |
| | ||||||
* | further mobike improvements, regarding to NAT-T | Martin Willi | 2007-06-27 | 9 | -70/+83 | |
| | ||||||
* | simple roaming of the client works (not MOBIKE conform yet!) | Martin Willi | 2007-06-26 | 8 | -303/+250 | |
| | ||||||
* | further fixed for mobike roaming | Martin Willi | 2007-06-25 | 8 | -40/+153 | |
| | ||||||
* | further MOBIKE stuff: | Martin Willi | 2007-06-21 | 22 | -366/+1125 | |
| | | | | | | | | | kernel properly reports network reconfiguration and informs all IKE_SAs MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange reestablishment of IKE_SAs on network reconfiguration kinda works not stable yet! | |||||
* | fixed virtua IP: adding virtual IP to interface address list cache directly | Martin Willi | 2007-06-19 | 1 | -16/+30 | |
| | | | | corrected debug targets | |||||
* | added extensions management to IKE_SA | Martin Willi | 2007-06-18 | 3 | -1/+64 | |
| | | | | fixed NATD payload (port) when using route lookup | |||||
* | source address lookup in kernel interface | Martin Willi | 2007-06-18 | 4 | -19/+125 | |
| | | | | | | use it for NAT detection if no source address known from config support for %any...%any connections | |||||
* | support for left=%any change our address dynamically | Martin Willi | 2007-06-18 | 1 | -4/+6 | |
| | ||||||
* | increased receive buffer to handle more interfaces | Martin Willi | 2007-06-18 | 1 | -1/+1 | |
| | ||||||
* | implemented more flexible iterator hook API | Martin Willi | 2007-06-15 | 3 | -201/+350 | |
| | | | | kernel interface handles interface changes and updates address list | |||||
* | implemented address change notification (for MOBIKE) | Martin Willi | 2007-06-14 | 5 | -204/+364 | |
| | | | | | implemented up to date address list cache to list interfaces | |||||
* | fixed memleak when initiating to %any | Martin Willi | 2007-06-14 | 1 | -0/+1 | |
| | ||||||
* | added missing files to the last commit | Martin Willi | 2007-06-14 | 2 | -0/+232 | |
| | ||||||
* | proper reauthentication: | Martin Willi | 2007-06-14 | 7 | -78/+28 | |
| | | | | | IKE_SA is closed completely before the new is initiated, resolves some issues when a dynamic IP is requested from a pool | |||||
* | ported interfaces to new threading functions (incomplete) | Martin Willi | 2007-06-11 | 2 | -143/+129 | |
| | ||||||
* | documentation fixes and updates | Martin Willi | 2007-06-11 | 4 | -9/+26 | |
| | ||||||
* | introduced callback_job: | Martin Willi | 2007-06-11 | 36 | -1778/+1606 | |
| | | | | | | | | | | | | simple asynchronous method invocation use daemons thread pool for all threads proper cancellation and cleanups cancellation mechanism to dynamically unload multithreaded code unified event_queue and scheduler => scheduler unified job_queue and thread_pool => processor removed job_type_t, not really needed fixes here, there and everywhere | |||||
* | moved assignment of CERT_UNKNOWN4.1.3 | Andreas Steffen | 2007-05-25 | 1 | -2/+2 | |
| | ||||||
* | log trust pathlen | Andreas Steffen | 2007-05-25 | 1 | -4/+6 | |
| | ||||||
* | included a certificate label in the is_trusted() method | Andreas Steffen | 2007-05-25 | 1 | -8/+6 | |
| | ||||||
* | DBG1 level now shows stepping up through the certifiate hierarchy up to the ↵ | Andreas Steffen | 2007-05-25 | 1 | -2/+2 | |
| | | | | trust anchor | |||||
* | set certinfo status to CERT_UNKNOWN before crl and|or ocsp verification | Andreas Steffen | 2007-05-25 | 1 | -3/+7 | |
| | ||||||
* | removed paranoid module checking | Martin Willi | 2007-05-25 | 2 | -26/+0 | |
| | ||||||
* | added compatibility names (pluto) for sha2 algorithms (sha2_256, ...) | Martin Willi | 2007-05-25 | 1 | -4/+11 | |
| | ||||||
* | proper thread cancellation when using the charon->interfaces | Martin Willi | 2007-05-23 | 8 | -5/+100 | |
| | ||||||
* | fixed crash when using 0.0.0.0/0 subnets | Martin Willi | 2007-05-23 | 1 | -0/+1 | |
| | ||||||
* | removed misleading warning when rekeying | Martin Willi | 2007-05-23 | 1 | -1/+0 | |
| | ||||||
* | support for virtual IP definition on client side: | Martin Willi | 2007-05-22 | 5 | -30/+58 | |
| | | | | | | | if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip. | |||||
* | fixed memleak | Martin Willi | 2007-05-22 | 1 | -0/+1 | |
| | ||||||
* | using local address as gateway in installed routes | Martin Willi | 2007-05-22 | 1 | -2/+1 | |
| |