aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon
Commit message (Collapse)AuthorAgeFilesLines
...
* using %V time delta for rekeying timesMartin Willi2007-04-111-6/+6
|
* removed IKE_SA (%K) and CHILD_SA (%P) printf handlers, 3 more to goMartin Willi2007-04-115-281/+255
|
* removed %M printf handler, five more to goMartin Willi2007-04-111-54/+27
|
* fixed virtual ip configuration bug introduced with the previous commitMartin Willi2007-04-111-4/+1
|
* cleaned up apidocMartin Willi2007-04-1127-372/+217
| | | | | | added some comments removed configuration.[ch], as it does not make sense like it is
* accepting stroke initiation by a name of a child_cfgMartin Willi2007-04-115-41/+40
|
* fixed bug with roadwarrior and wildcard IDsAndreas Steffen2007-04-101-11/+19
|
* edited comment and debug outputAndreas Steffen2007-04-101-3/+3
|
* best must be initialized to 2*MAX_WILDCARDS+1Andreas Steffen2007-04-101-7/+13
|
* requesting the same virtual IP on reauthenticationMartin Willi2007-04-102-51/+68
|
* proper notification handlingMartin Willi2007-04-101-1/+103
|
* restructured file layoutMartin Willi2007-04-10101-46383/+3449
| | | | | | | | | new configuration structure: peer_cfg: configuration related to a peer (authenitcation, ...= ike_cfg: config to use for IKE setup (proposals) child_Cfg: config for CHILD_SA (proposals, traffic selectors) a peer_cfg has one ike_cfg and multiple child_cfg's stroke now uses fixed count of threads
* removed list_crls() and list_ocsp() methodsAndreas Steffen2007-04-062-59/+42
|
* support cachecrls=yesAndreas Steffen2007-04-052-7/+21
|
* support of crlcheckinterval=0 to disable IKEv2 CRL fetchingAndreas Steffen2007-04-041-0/+12
|
* improved log output for checkout_by_message()Martin Willi2007-04-042-27/+28
|
* implemented dynamic http-based CRL fetchingAndreas Steffen2007-04-031-8/+3
|
* removed unneded includesMartin Willi2007-03-302-2/+0
|
* using IFA_LOCAL for interface enumeration to support ppp linksMartin Willi2007-03-301-5/+20
|
* added IKE_SA_INIT retransmission detectionMartin Willi2007-03-295-130/+204
| | | | fixed thread exhaustion when IKE_SA is blocked for a longer time
* implemented DoS protection with cookies and IP filterMartin Willi2007-03-292-106/+252
|
* fixed task manager message id bug for cookiesMartin Willi2007-03-291-1/+1
|
* added retry limit for IKE_SA_INIT (give up after 5 cookie failures)Martin Willi2007-03-291-0/+15
|
* implemented ipsec purgeocspAndreas Steffen2007-03-281-1/+8
|
* removed send_queue, handled internally in sender_t knowMartin Willi2007-03-2820-641/+407
| | | | | do header parsing in receiver, ready for cookie integration
* implemented a simple IP blocking filter in receiver threadMartin Willi2007-03-282-11/+119
|
* merged changes from eap-aka trunkMartin Willi2007-03-283-29/+63
|
* is_trusted() adds cert_status to cert_to_be_trustedAndreas Steffen2007-03-281-3/+37
|
* fixed state and logging of IKE_SA when using EAP authenticationMartin Willi2007-03-271-5/+16
|
* fixed deferred CHILD_SA rekeying while IKE_SA rekeying in progressMartin Willi2007-03-274-5/+16
|
* giving up EAP-SIM authentication after 3 failed challengesMartin Willi2007-03-271-0/+15
|
* implemented ipsec listocsp functionAndreas Steffen2007-03-272-5/+36
|
* added CERT_ROOFAndreas Steffen2007-03-231-1/+1
|
* added CERT_ROOFAndreas Steffen2007-03-232-2/+3
|
* added certificate encoding OCSP contentAndreas Steffen2007-03-232-3/+5
|
* added CHILD_SA compare check for rekeying collisions Martin Willi2007-03-226-9/+47
|
* adjusted rekey-retry delay and jitterMartin Willi2007-03-211-2/+2
|
* fixed some rekey collision issuesMartin Willi2007-03-215-43/+88
| | | | added retry with jitter when rekeying fails
* fixed SPI byte orderMartin Willi2007-03-211-1/+1
|
* fixed child rekey collisionMartin Willi2007-03-218-67/+150
| | | | | implemented ike rekey collision
* handling of CHILD_SA rekeying collisionsMartin Willi2007-03-216-47/+175
|
* fixed inproper delete of CHILD_SAMartin Willi2007-03-211-4/+7
|
* prevent from initiating to %anyMartin Willi2007-03-211-0/+7
|
* fixed some exchange collisions (except IKE/CHILD rekeying)Martin Willi2007-03-207-126/+188
|
* fixed statusall rekey time jitter bug (again)Martin Willi2007-03-201-4/+9
|
* fixed CHILD_SA rekeying time in statusallMartin Willi2007-03-201-2/+2
|
* fixed nat detection bugMartin Willi2007-03-201-2/+2
|
* respecting "keyingtries" parameter on IKE_SA setupMartin Willi2007-03-201-154/+172
|
* cleanupsMartin Willi2007-03-201-10/+2
| | | | fixed reset()
* not installing a route when policy gets updatedMartin Willi2007-03-201-2/+8
|