aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon
Commit message (Collapse)AuthorAgeFilesLines
...
* display protoport in dynamic/32 traffic selectorsAndreas Steffen2008-07-211-11/+12
|
* fixed bus args copy on non i386 archsMartin Willi2008-07-211-1/+6
|
* consistent logging of IKE and CHILD SAsAndreas Steffen2008-07-215-26/+42
|
* pool performance testingMartin Willi2008-07-213-2/+106
|
* loading unit-tester plugin as the last oneMartin Willi2008-07-211-5/+5
|
* reverted bus to non-recursive mutex due instabilityMartin Willi2008-07-211-1/+1
|
* introduced an additional bus->signal parameter for signal specific dataMartin Willi2008-07-1820-174/+209
| | | | added SIG_IKE/SIG_CHD macros for signal emitting
* allow but filter recursive listener invocationMartin Willi2008-07-181-1/+14
|
* extended UCI plugin by a simple control interface using a fifoMartin Willi2008-07-186-6/+368
|
* avoid heap allocation in bus->signal for performance reasonsMartin Willi2008-07-172-34/+51
|
* fixed potential segfault in resolve_hostsMartin Willi2008-07-171-1/+4
|
* ignore IPCOMP acquires, fixes additional CHILD_SA setup with acquired SAs ↵Martin Willi2008-07-171-0/+12
| | | | using compression
* do not distinguish different policy protocols in userland cacheMartin Willi2008-07-161-6/+1
|
* do not complain about existing routesMartin Willi2008-07-161-8/+22
|
* fixed acquire-delay bug by:Martin Willi2008-07-165-20/+28
| | | | | installing policies before states updating policies if protocol has changed
* set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel modeAndreas Steffen2008-07-151-1/+4
|
* The XFRM_STATE_AF_UNSPEC flag added to xfrm.h allows IPv4-over-IPv6 and ↵Andreas Steffen2008-07-151-1/+7
| | | | IPv6-over-IPv6 tunnels with the 2.6.26 and later Linux kernels
* reverted [4125],[4166], reimplemented the proper wayMartin Willi2008-07-112-44/+16
|
* setting ike_sa on bus in checkout_newMartin Willi2008-07-111-0/+1
|
* update_peerid() does not accept %any as a certificate's subjectAltNameAndreas Steffen2008-07-091-1/+1
|
* do a route lookup to allow routing of left=%any connections Martin Willi2008-07-091-5/+15
|
* ipsec statusall displays dpd optionsAndreas Steffen2008-07-022-5/+21
|
* changed medcli settings keys Martin Willi2008-07-021-2/+2
|
* sql plugin supports a list of pools to fall back, specified by e.g. ↵Martin Willi2008-07-021-10/+29
| | | | rightsourceip=%pool1,pool2
* implementation of a simple "token enumerator"Martin Willi2008-07-023-3/+52
|
* fixed medsrv database uri keyMartin Willi2008-07-011-1/+1
|
* added a "ipsec down-srcip <start> [<end>]" command to terminate IKE_SAs by ↵Martin Willi2008-07-013-0/+95
| | | | remote virtual ip
* logging peer addresses in peer_cfg lookupMartin Willi2008-07-011-1/+2
|
* added host match prio to debugging outputMartin Willi2008-07-011-7/+8
|
* peer_cfg lookup takes peer addresses into accountMartin Willi2008-07-013-82/+103
|
* strongswan.conf's charon.close_ike_on_child_failure closes IKE_SA if ↵Martin Willi2008-07-011-2/+36
| | | | CHILD_SA setup in IKE_AUTH fails
* sending INTERNAL_ADDRESS_FAILURE if virtual IP requested but none foundMartin Willi2008-07-012-14/+46
|
* show authentication method in ipsec statusallAndreas Steffen2008-06-302-4/+12
|
* fixed chunk_increment, fixes reuse of already assigned addressesMartin Willi2008-06-301-1/+1
|
* added strongswan.conf option charon.reuse_iksa=no to create each CHILD_SA in ↵Martin Willi2008-06-301-8/+42
| | | | a new IKE_SA
* log received vendor id as a hex valueAndreas Steffen2008-06-271-0/+9
|
* corrected vendor_id_payload diagramAndreas Steffen2008-06-271-3/+2
|
* ike/kernel protocol identifier conversion functionsMartin Willi2008-06-261-15/+43
|
* flushing task_manager on shutdown while IKE_SA is usableMartin Willi2008-06-251-1/+2
|
* merging the ESP sequence numbers of an SA in update_sa (fixing #52)Tobias Brunner2008-06-241-5/+127
|
* enumerating loaded plugins in "ipsec statusall"Martin Willi2008-06-241-1/+10
|
* changed ipsec.secrets keyword EC to ECDSATobias Brunner2008-06-241-1/+1
|
* cosmeticsAndreas Steffen2008-06-231-5/+5
|
* fixed "double-close" of stroke fd resulting in "bad fd" errors if multiple ↵Martin Willi2008-06-231-15/+9
| | | | threads are active
* fixed medsrv mysql schemeMartin Willi2008-06-231-1/+1
|
* resolving hosts before routeMartin Willi2008-06-231-0/+2
|
* display selected IKE proposal in ipsec statusallAndreas Steffen2008-06-224-17/+87
|
* support in smp for terminate-by-nameMartin Willi2008-06-201-1/+25
|
* fixed identationMartin Willi2008-06-191-2/+2
|
* medcli initiates "active" connections on startupMartin Willi2008-06-191-1/+58
|