aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon
Commit message (Collapse)AuthorAgeFilesLines
...
* Use recursive source address lookup if we get a gateway onlyMartin Willi2009-09-031-45/+40
|
* Fixed load_secrets to acquire/release lock in level 0 onlyMarius Tomaschewski2009-09-031-2/+6
| | | | | The write_lock call fails with EDEADLK and unlocks in the next recursion level.
* Simplified the search for ME_CONNECTID notifies.Tobias Brunner2009-09-021-42/+5
|
* Fixed some typos; whitespace cleanup.Tobias Brunner2009-09-0218-267/+266
|
* Missing commas added.Tobias Brunner2009-09-022-2/+2
|
* handle plugin loading failuresMartin Willi2009-09-012-7/+13
|
* Refactored the lifetime_cfg_t struct to be simpler and more expressive. ↵Tobias Brunner2009-09-0112-124/+104
| | | | Initialization is now static.
* Handling of new lifetime limits added to stroke.Tobias Brunner2009-09-012-3/+19
|
* If no inbound CHILD_SA is found, try to find an outbound SA.Tobias Brunner2009-09-012-4/+18
| | | | | Due to the new lifetime limits in- and outbound SAs may expire individually.
* Set the packet and byte limits in the netlink and pfkey kernel interfaces.Tobias Brunner2009-09-012-5/+16
|
* Terminology and return value of get_lifetime of child_sa_t corrected.Tobias Brunner2009-09-012-5/+5
|
* child_sa_t adapted to the new lifetime configuration.Tobias Brunner2009-09-011-13/+21
|
* Adapted the kernel interfaces to the new lifetime configuration.Tobias Brunner2009-09-017-46/+42
|
* Adapted the config backends to the new lifetime configuration.Tobias Brunner2009-09-016-19/+39
|
* child_cfg_t now takes a lifetime_cfg_t to configure the lifetime limits. ↵Tobias Brunner2009-09-012-51/+47
| | | | Also adjusted the jitter calculation, so it works for values > RAND_MAX.
* lifetime_cfg_t added to configure lifetime limits of a CHILD_SA.Tobias Brunner2009-09-011-1/+50
|
* use time_monotonic() instead of time() for statistics and time difference ↵Martin Willi2009-08-3110-33/+56
| | | | calculations
* use time_monotonic() instead of gettimeofday() for time difference calculationsMartin Willi2009-08-317-35/+24
|
* use monotonic time source in convar->timed_wait, and in the scheduler using itMartin Willi2009-08-312-3/+6
|
* fixed crash in crl listingMartin Willi2009-08-311-1/+1
|
* moved chunk_increment() function to libstrongswanMartin Willi2009-08-261-18/+2
|
* updated medsrv and test to new fingerprint/encoding APIMartin Willi2009-08-261-4/+7
|
* updated load-tester plugin to new fingerprinting APIMartin Willi2009-08-261-11/+19
|
* use only KEY_ID_PUBKEY_SHA1 fingerprint charon internallyMartin Willi2009-08-262-18/+10
|
* updated nm plugin to new fingerprinting APIMartin Willi2009-08-261-3/+4
|
* updated stroke plugin to fingerprinting APIMartin Willi2009-08-263-128/+135
|
* updated charon to new fingerprinting APIMartin Willi2009-08-263-91/+85
|
* added support for %prompt-ing private key passhprases in strokes "ipsec secrets"Martin Willi2009-08-263-16/+85
|
* make use of the pem helper plugin to load credentialsMartin Willi2009-08-262-31/+62
|
* disable lifetimes of allocated SPIsMartin Willi2009-08-251-1/+11
| | | | | | | The default lifetime of 30 seconds is too short, as a tunnel setup may need several minutes if we have high packet loss. Instead of increasing the value, we disable lifetimes completely, as we handle the removal of such SAs from userland just fine.
* remove incomplete SAs with PROTO_ESPMartin Willi2009-08-251-0/+6
|
* check integrity of pool code fileAndreas Steffen2009-08-171-0/+6
|
* check success of library_init()Andreas Steffen2009-08-141-1/+6
|
* OpenSolaris needs libsocket and libnsl for socket().Tobias Brunner2009-08-141-1/+1
|
* Enable CMSG headers and macros on OpenSolaris.Tobias Brunner2009-08-141-0/+4
|
* Added define to get sigwait with two parameters on OpenSolaris.Tobias Brunner2009-08-141-0/+2
|
* LOG_AUTHPRIV is not defined on OpenSolaris.Tobias Brunner2009-08-141-0/+4
|
* OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the ↵Tobias Brunner2009-08-1431-46/+46
| | | | enums mutex/condvar/rwlock_type_t.
* prepare CAMELLIA_CCM ESP encryptionAndreas Steffen2009-08-103-0/+9
|
* set protocol to ESP for policies installed as a trapMartin Willi2009-08-071-0/+4
|
* %llu correctly prints u_int64_tAndreas Steffen2009-08-072-5/+5
|
* printing u_int64_t caused segfault on 32-bit platformsAndreas Steffen2009-08-072-5/+5
|
* do not set usetime if query_policy() failsAndreas Steffen2009-08-071-2/+10
|
* Use LONG_MAX instead of a hard-coded value.Tobias Brunner2009-08-061-1/+5
|
* FreeBSD returns the current policy use time only after specifying a hard ↵Tobias Brunner2009-08-061-1/+13
| | | | lifetime when installing the policy.
* Fixed a race condition when querying stats of a child_sa in different order.Tobias Brunner2009-08-065-61/+53
|
* abort pluto or charon if initialization failsAndreas Steffen2009-08-061-1/+1
|
* Don't query the policy usetime if there was no traffic on the SA.Tobias Brunner2009-08-061-38/+66
| | | | | This helps in cases where a policy is assigned to more than one SA. That is, SAs now should have different usetimes even if they use the same policy.
* Reverted the interface changes introduced in 3f720dc7.Tobias Brunner2009-08-065-35/+15
|
* added support for ipsec.secrets "include" directiveMartin Willi2009-08-061-13/+81
|