aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon
Commit message (Collapse)AuthorAgeFilesLines
...
* increased stroke socket backlog to 10Martin Willi2008-07-301-1/+1
|
* using a entry cache for duplicate checks, avoids deadlocksMartin Willi2008-07-301-4/+37
|
* use condvar broadcasts to signal threads waiting for an IP, there might be ↵Martin Willi2008-07-301-2/+2
| | | | more than one
* using shared read locks in credential set enumerators to avoid deadlocksMartin Willi2008-07-305-70/+119
|
* added strongswan.conf option "charon.dos_protection" to disable ↵Martin Willi2008-07-301-1/+9
| | | | cookies/aggressiveness check
* demoted IKE state change output to debug level 2Andreas Steffen2008-07-281-1/+1
|
* ignore AUTH_LIFETIME value if reauthentication has already been scheduled ↵Andreas Steffen2008-07-281-8/+13
| | | | earlier
* use XFRM_MSG_UPDPOLICY for existing policies onlyMartin Willi2008-07-281-1/+1
|
* added tests.h to distributionMartin Willi2008-07-241-1/+1
|
* fixed UCI thread cancellation on ARMMartin Willi2008-07-241-22/+19
|
* added option charon.plugins.sql.lease_history to disable lease history loggingMartin Willi2008-07-241-4/+17
|
* fixed statistic calcuation for static leasesMartin Willi2008-07-241-11/+14
|
* completed IKE_SA logging at the AUDIT levelAndreas Steffen2008-07-233-8/+43
|
* fixed pool statisticsMartin Willi2008-07-231-2/+2
|
* IKE_SA rekeying inherits other_host from old IKE_SAAndreas Steffen2008-07-231-0/+3
|
* cosmeticsAndreas Steffen2008-07-231-1/+1
|
* some more changes to IKE_SA and CHILD_SA loggingAndreas Steffen2008-07-226-22/+46
|
* experimental and untested reimplementation of sql based IP poolMartin Willi2008-07-224-232/+300
| | | | | uses address preallocation and separate address/lease tables for linear lookup time
* cosmeticsAndreas Steffen2008-07-222-2/+2
|
* ipsec status lists IPCOMP CPIsAndreas Steffen2008-07-225-7/+43
|
* own CPI was not deleted due to copy-and-paste errorAndreas Steffen2008-07-221-1/+1
|
* consistent logging of SPIs and CPIsAndreas Steffen2008-07-223-40/+58
|
* missing FETCH_END caused SEGFAULT in ikev2/rw-hash-and-url scenarioAndreas Steffen2008-07-221-1/+1
|
* display protoport in dynamic/32 traffic selectorsAndreas Steffen2008-07-211-11/+12
|
* fixed bus args copy on non i386 archsMartin Willi2008-07-211-1/+6
|
* consistent logging of IKE and CHILD SAsAndreas Steffen2008-07-215-26/+42
|
* pool performance testingMartin Willi2008-07-213-2/+106
|
* loading unit-tester plugin as the last oneMartin Willi2008-07-211-5/+5
|
* reverted bus to non-recursive mutex due instabilityMartin Willi2008-07-211-1/+1
|
* introduced an additional bus->signal parameter for signal specific dataMartin Willi2008-07-1820-174/+209
| | | | added SIG_IKE/SIG_CHD macros for signal emitting
* allow but filter recursive listener invocationMartin Willi2008-07-181-1/+14
|
* extended UCI plugin by a simple control interface using a fifoMartin Willi2008-07-186-6/+368
|
* avoid heap allocation in bus->signal for performance reasonsMartin Willi2008-07-172-34/+51
|
* fixed potential segfault in resolve_hostsMartin Willi2008-07-171-1/+4
|
* ignore IPCOMP acquires, fixes additional CHILD_SA setup with acquired SAs ↵Martin Willi2008-07-171-0/+12
| | | | using compression
* do not distinguish different policy protocols in userland cacheMartin Willi2008-07-161-6/+1
|
* do not complain about existing routesMartin Willi2008-07-161-8/+22
|
* fixed acquire-delay bug by:Martin Willi2008-07-165-20/+28
| | | | | installing policies before states updating policies if protocol has changed
* set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel modeAndreas Steffen2008-07-151-1/+4
|
* The XFRM_STATE_AF_UNSPEC flag added to xfrm.h allows IPv4-over-IPv6 and ↵Andreas Steffen2008-07-151-1/+7
| | | | IPv6-over-IPv6 tunnels with the 2.6.26 and later Linux kernels
* reverted [4125],[4166], reimplemented the proper wayMartin Willi2008-07-112-44/+16
|
* setting ike_sa on bus in checkout_newMartin Willi2008-07-111-0/+1
|
* update_peerid() does not accept %any as a certificate's subjectAltNameAndreas Steffen2008-07-091-1/+1
|
* do a route lookup to allow routing of left=%any connections Martin Willi2008-07-091-5/+15
|
* ipsec statusall displays dpd optionsAndreas Steffen2008-07-022-5/+21
|
* changed medcli settings keys Martin Willi2008-07-021-2/+2
|
* sql plugin supports a list of pools to fall back, specified by e.g. ↵Martin Willi2008-07-021-10/+29
| | | | rightsourceip=%pool1,pool2
* implementation of a simple "token enumerator"Martin Willi2008-07-023-3/+52
|
* fixed medsrv database uri keyMartin Willi2008-07-011-1/+1
|
* added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by ↵Martin Willi2008-07-013-0/+95
| | | | remote virtual ip
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-04 19:28:57 +0000