aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon
Commit message (Collapse)AuthorAgeFilesLines
...
* include default route with missing dst field into route evaluationAndreas Steffen2007-07-131-6/+7
|
* doing route lookup in userspace to ignore routes installed by usMartin Willi2007-07-111-29/+121
|
* using own routing table for installed routes (table 100, prio 100)Martin Willi2007-07-111-1/+51
|
* added first draft of SMP relax-ng schemaMartin Willi2007-07-061-0/+225
|
* ignoring unkown crl/ocsp urisMartin Willi2007-07-041-2/+8
|
* using correct nexthop for inserted routeMartin Willi2007-07-041-15/+30
|
* changed mobike behavior to NOT use additional responder addresses until we ↵Martin Willi2007-07-041-95/+3
| | | | have path discovery
* fixed responder initiated CHILD_SA rekeying when using virtual IPsMartin Willi2007-07-041-11/+45
|
* fixed firewall script invocation when interface is not available anymoreMartin Willi2007-07-031-17/+28
|
* improved MOBIKE:Martin Willi2007-07-0310-88/+254
| | | | | | | | prefer address family already used do not change address implicit when mobike supported handle multiple simultaneous roaming requests more properly proper enabling/disabling of UDP encapsulation
* added message ID to message logMartin Willi2007-07-031-3/+7
|
* show kind of notify contained in messages in logMartin Willi2007-07-033-12/+76
|
* DBG1 level for 'peer supports MOBIKE' debug messageAndreas Steffen2007-07-021-1/+1
|
* fixed typoAndreas Steffen2007-07-021-3/+3
|
* fixed mobike address update from and to NATMartin Willi2007-07-022-34/+20
|
* proper update of IPsec SA when roaming a host-to-host tunnelMartin Willi2007-07-025-92/+155
| | | | roaming of IPsec SAs using virtual IPs
* updated charons architecture descriptionMartin Willi2007-06-291-41/+64
|
* fixed dpd=hold when using virtual IPsMartin Willi2007-06-292-10/+25
|
* removed accidently checked in debbuging codeMartin Willi2007-06-291-2/+0
|
* fixed IKE_SA reestablishment after DPD using port 500Martin Willi2007-06-281-65/+71
|
* further mobike improvements, regarding to NAT-TMartin Willi2007-06-279-70/+83
|
* simple roaming of the client works (not MOBIKE conform yet!)Martin Willi2007-06-268-303/+250
|
* further fixed for mobike roamingMartin Willi2007-06-258-40/+153
|
* further MOBIKE stuff:Martin Willi2007-06-2122-366/+1125
| | | | | | | | | kernel properly reports network reconfiguration and informs all IKE_SAs MOBIKE in IKE_AUTH: MOBIKE_SUPPORTED notify and address exchange reestablishment of IKE_SAs on network reconfiguration kinda works not stable yet!
* fixed virtua IP: adding virtual IP to interface address list cache directlyMartin Willi2007-06-191-16/+30
| | | | corrected debug targets
* added extensions management to IKE_SAMartin Willi2007-06-183-1/+64
| | | | fixed NATD payload (port) when using route lookup
* source address lookup in kernel interfaceMartin Willi2007-06-184-19/+125
| | | | | | use it for NAT detection if no source address known from config support for %any...%any connections
* support for left=%any change our address dynamicallyMartin Willi2007-06-181-4/+6
|
* increased receive buffer to handle more interfacesMartin Willi2007-06-181-1/+1
|
* implemented more flexible iterator hook APIMartin Willi2007-06-153-201/+350
| | | | kernel interface handles interface changes and updates address list
* implemented address change notification (for MOBIKE)Martin Willi2007-06-145-204/+364
| | | | | implemented up to date address list cache to list interfaces
* fixed memleak when initiating to %anyMartin Willi2007-06-141-0/+1
|
* added missing files to the last commitMartin Willi2007-06-142-0/+232
|
* proper reauthentication:Martin Willi2007-06-147-78/+28
| | | | | IKE_SA is closed completely before the new is initiated, resolves some issues when a dynamic IP is requested from a pool
* ported interfaces to new threading functions (incomplete)Martin Willi2007-06-112-143/+129
|
* documentation fixes and updatesMartin Willi2007-06-114-9/+26
|
* introduced callback_job:Martin Willi2007-06-1136-1778/+1606
| | | | | | | | | | | | simple asynchronous method invocation use daemons thread pool for all threads proper cancellation and cleanups cancellation mechanism to dynamically unload multithreaded code unified event_queue and scheduler => scheduler unified job_queue and thread_pool => processor removed job_type_t, not really needed fixes here, there and everywhere
* moved assignment of CERT_UNKNOWN4.1.3Andreas Steffen2007-05-251-2/+2
|
* log trust pathlenAndreas Steffen2007-05-251-4/+6
|
* included a certificate label in the is_trusted() methodAndreas Steffen2007-05-251-8/+6
|
* DBG1 level now shows stepping up through the certifiate hierarchy up to the ↵Andreas Steffen2007-05-251-2/+2
| | | | trust anchor
* set certinfo status to CERT_UNKNOWN before crl and|or ocsp verificationAndreas Steffen2007-05-251-3/+7
|
* removed paranoid module checkingMartin Willi2007-05-252-26/+0
|
* added compatibility names (pluto) for sha2 algorithms (sha2_256, ...)Martin Willi2007-05-251-4/+11
|
* proper thread cancellation when using the charon->interfacesMartin Willi2007-05-238-5/+100
|
* fixed crash when using 0.0.0.0/0 subnetsMartin Willi2007-05-231-0/+1
|
* removed misleading warning when rekeyingMartin Willi2007-05-231-1/+0
|
* support for virtual IP definition on client side:Martin Willi2007-05-225-30/+58
| | | | | | | if leftsourceip is defined, it is requested. server may define rightsourceip=%config to accept any, or it may overwrite it using rightsourceip. if server does not return an IP, client enforces its configured leftsourceip.
* fixed memleakMartin Willi2007-05-221-0/+1
|
* using local address as gateway in installed routesMartin Willi2007-05-221-2/+1
|