Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | disable lifetimes of allocated SPIs | Martin Willi | 2009-08-25 | 1 | -1/+11 | |
| | | | | | | | The default lifetime of 30 seconds is too short, as a tunnel setup may need several minutes if we have high packet loss. Instead of increasing the value, we disable lifetimes completely, as we handle the removal of such SAs from userland just fine. | |||||
* | remove incomplete SAs with PROTO_ESP | Martin Willi | 2009-08-25 | 1 | -0/+6 | |
| | ||||||
* | check integrity of pool code file | Andreas Steffen | 2009-08-17 | 1 | -0/+6 | |
| | ||||||
* | check success of library_init() | Andreas Steffen | 2009-08-14 | 1 | -1/+6 | |
| | ||||||
* | OpenSolaris needs libsocket and libnsl for socket(). | Tobias Brunner | 2009-08-14 | 1 | -1/+1 | |
| | ||||||
* | Enable CMSG headers and macros on OpenSolaris. | Tobias Brunner | 2009-08-14 | 1 | -0/+4 | |
| | ||||||
* | Added define to get sigwait with two parameters on OpenSolaris. | Tobias Brunner | 2009-08-14 | 1 | -0/+2 | |
| | ||||||
* | LOG_AUTHPRIV is not defined on OpenSolaris. | Tobias Brunner | 2009-08-14 | 1 | -0/+4 | |
| | ||||||
* | OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the ↵ | Tobias Brunner | 2009-08-14 | 31 | -46/+46 | |
| | | | | enums mutex/condvar/rwlock_type_t. | |||||
* | prepare CAMELLIA_CCM ESP encryption | Andreas Steffen | 2009-08-10 | 3 | -0/+9 | |
| | ||||||
* | set protocol to ESP for policies installed as a trap | Martin Willi | 2009-08-07 | 1 | -0/+4 | |
| | ||||||
* | %llu correctly prints u_int64_t | Andreas Steffen | 2009-08-07 | 2 | -5/+5 | |
| | ||||||
* | printing u_int64_t caused segfault on 32-bit platforms | Andreas Steffen | 2009-08-07 | 2 | -5/+5 | |
| | ||||||
* | do not set usetime if query_policy() fails | Andreas Steffen | 2009-08-07 | 1 | -2/+10 | |
| | ||||||
* | Use LONG_MAX instead of a hard-coded value. | Tobias Brunner | 2009-08-06 | 1 | -1/+5 | |
| | ||||||
* | FreeBSD returns the current policy use time only after specifying a hard ↵ | Tobias Brunner | 2009-08-06 | 1 | -1/+13 | |
| | | | | lifetime when installing the policy. | |||||
* | Fixed a race condition when querying stats of a child_sa in different order. | Tobias Brunner | 2009-08-06 | 5 | -61/+53 | |
| | ||||||
* | abort pluto or charon if initialization fails | Andreas Steffen | 2009-08-06 | 1 | -1/+1 | |
| | ||||||
* | Don't query the policy usetime if there was no traffic on the SA. | Tobias Brunner | 2009-08-06 | 1 | -38/+66 | |
| | | | | | This helps in cases where a policy is assigned to more than one SA. That is, SAs now should have different usetimes even if they use the same policy. | |||||
* | Reverted the interface changes introduced in 3f720dc7. | Tobias Brunner | 2009-08-06 | 5 | -35/+15 | |
| | ||||||
* | added support for ipsec.secrets "include" directive | Martin Willi | 2009-08-06 | 1 | -13/+81 | |
| | ||||||
* | Reversed the check for udp.h, fixes compilation on Linux. | Tobias Brunner | 2009-08-06 | 1 | -4/+4 | |
| | ||||||
* | Enabling UDP encapsulation via setsockopt fails on Mac OS X (it is also not ↵ | Tobias Brunner | 2009-08-05 | 1 | -6/+10 | |
| | | | | required as this is done using sysctl). | |||||
* | output number of transmitted bytes in closing CHILD_SA statement | Andreas Steffen | 2009-08-04 | 1 | -1/+5 | |
| | ||||||
* | FreeBSD only reports a policy's usetime if a lifetime has been specified ↵ | Tobias Brunner | 2009-08-04 | 1 | -0/+7 | |
| | | | | when the policy was added (we only specify a lifetime on the SA, not on the policy). | |||||
* | FreeBSD and Mac OS X both set the sequence number of an SADB_X_SPDGET ↵ | Tobias Brunner | 2009-08-04 | 1 | -5/+16 | |
| | | | | response to zero, we accept that for now. | |||||
* | compare IKE config when reusing an existing IKE_SA to initiate a CHILD_SA | Martin Willi | 2009-08-03 | 1 | -8/+13 | |
| | ||||||
* | implemented query_sa() for PFKEYv2 | Andreas Steffen | 2009-08-02 | 1 | -2/+53 | |
| | ||||||
* | corrected interface definition | Andreas Steffen | 2009-07-31 | 1 | -1/+1 | |
| | ||||||
* | update usetime only if usebytes increase | Andreas Steffen | 2009-07-30 | 4 | -14/+73 | |
| | ||||||
* | display transmitted bytes per SA | Andreas Steffen | 2009-07-30 | 10 | -19/+203 | |
| | ||||||
* | Handling of unsupported policy directions (FWD) fixed. | Tobias Brunner | 2009-07-30 | 1 | -1/+19 | |
| | ||||||
* | Enabling NAT-T on Mac OS X using the private SADB_X_EXT_NATT flag and ↵ | Tobias Brunner | 2009-07-30 | 1 | -5/+45 | |
| | | | | sadb_sa_2 struct. | |||||
* | Configure the NAT-T port via sysctl on Mac OS X to enable handling of ↵ | Tobias Brunner | 2009-07-30 | 1 | -0/+15 | |
| | | | | incoming UDP encapsulated ESP packets in the kernel. | |||||
* | Make accept(2) and recvfrom(2) cancellation points on Mac OS X. | Tobias Brunner | 2009-07-30 | 1 | -0/+1 | |
| | ||||||
* | streamlined integrity test output some more | Andreas Steffen | 2009-07-18 | 1 | -0/+2 | |
| | ||||||
* | stop strongswan if integrity check of libstrongswan or daemon fails | Andreas Steffen | 2009-07-17 | 1 | -2/+2 | |
| | ||||||
* | streamlined debug output of integrity tests | Andreas Steffen | 2009-07-17 | 1 | -0/+5 | |
| | ||||||
* | accelerate lookup in non-concatenated pools | Andreas Steffen | 2009-07-17 | 1 | -22/+40 | |
| | ||||||
* | check for an existing lease over all assigned pools first | Andreas Steffen | 2009-07-17 | 1 | -24/+55 | |
| | ||||||
* | fixed problem with static leases over multiple pools | Andreas Steffen | 2009-07-16 | 1 | -8/+36 | |
| | ||||||
* | fixed memleak in SQL config lookup | Martin Willi | 2009-07-16 | 1 | -2/+2 | |
| | ||||||
* | raise an alert() if the RADIUS server is not responding | Martin Willi | 2009-07-16 | 2 | -0/+3 | |
| | ||||||
* | added an alert() bus hook to raise critical system errors and notifications | Martin Willi | 2009-07-16 | 3 | -4/+67 | |
| | ||||||
* | updated debian package | Martin Willi | 2009-07-15 | 1 | -0/+8 | |
| | ||||||
* | updated Standards-Version to 3.8.2 | Martin Willi | 2009-07-15 | 1 | -1/+1 | |
| | ||||||
* | added ${misc:Depends} dependency, fixes debhelper-but-no-misc-depends ↵ | Martin Willi | 2009-07-15 | 1 | -1/+1 | |
| | | | | lintian warning | |||||
* | added copyright information, fixes copyright-without-copyright-notice ↵ | Martin Willi | 2009-07-15 | 1 | -4/+7 | |
| | | | | lintian warning | |||||
* | report installation failure of inbound and/or outbound IPsec SA, separately | Andreas Steffen | 2009-07-13 | 1 | -8/+11 | |
| | ||||||
* | put variable definitions up front | Andreas Steffen | 2009-07-12 | 1 | -5/+8 | |
| |