aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon
Commit message (Expand)AuthorAgeFilesLines
* Do a proper cleanup when printing usage info.Tobias Brunner2010-05-041-3/+4
* Integrating libhydra into the Android build system.Tobias Brunner2010-04-121-1/+2
* Moved ha plugin to libcharonMartin Willi2010-04-0721-4202/+0
* Make resync/monitoring functionality optionalMartin Willi2010-04-073-27/+35
* Listen to ike_updown/rekey hook instead of ike_state_changeMartin Willi2010-04-071-56/+59
* Request a complete resync after daemon startupMartin Willi2010-04-073-4/+54
* Do not automatically take over segments, as we need to resync firstMartin Willi2010-04-073-80/+57
* Drop overlapping segments only if we have no active SAs on itMartin Willi2010-04-071-14/+32
* Do not install iptables rules, they should stay active after shutdownMartin Willi2010-04-073-100/+92
* Take over all segments if heartbeat becomes silentMartin Willi2010-04-071-11/+57
* Renamed ha-sync plugin to haMartin Willi2010-04-0722-720/+709
* Try to send HA sync messages synchronouslyMartin Willi2010-04-071-17/+27
* Do not sync a delete for a child in a destroying IKE_SAMartin Willi2010-04-071-1/+4
* Include ICMP traffic in sync tunnelMartin Willi2010-04-071-2/+6
* Refactored segment enabling/disablingMartin Willi2010-04-071-71/+74
* Use a connected UDP socketMartin Willi2010-04-071-8/+18
* Removed obsolete socket subclassesMartin Willi2010-04-072-46/+0
* Automatically segment cluster using periodically sent status messagesMartin Willi2010-04-079-70/+177
* Do not enable/disable our own sync tunnelMartin Willi2010-04-073-10/+24
* Enable/disable inactive/active segments onlyMartin Willi2010-04-071-4/+10
* Deactivate all active segments before shutting downMartin Willi2010-04-073-0/+30
* HA kernel interface can mangle netfilter rules, currently with iptables invoc...Martin Willi2010-04-074-29/+183
* Added support for kernel segment manipulationMartin Willi2010-04-076-38/+197
* Moved segment configuration parsing to ha_sync_pluginMartin Willi2010-04-073-36/+54
* Propagate segment manipulation to cluster nodeMartin Willi2010-04-078-23/+109
* Segment manipulation in HA sync is thread saveMartin Willi2010-04-071-16/+31
* Passing 0 to segments->(de-)activate enables/disables all segmentsMartin Willi2010-04-072-36/+54
* separated auto-tunnel functionality from socketMartin Willi2010-04-0711-316/+461
* create external fifo socket only if "fifo_interface" option is setMartin Willi2010-04-071-2/+10
* updated linuxdir include variableMartin Willi2010-04-071-1/+1
* updated HA sync plugin to new lifetime configMartin Willi2010-04-071-1/+6
* print "none" if not serving any segmentsMartin Willi2010-04-071-1/+1
* automatically establish a PSK authenticated SA between cluster nodesMartin Willi2010-04-074-31/+366
* fixed memleak when installing synced virtual IPsMartin Willi2010-04-071-2/+3
* do not sync CHILD_SAs without an IKE_SAMartin Willi2010-04-071-1/+1
* removed $Id$ from ha pluginMartin Willi2010-04-0716-32/+0
* fixed ike_sa condition/extension parsingMartin Willi2010-04-071-12/+12
* fixed sync of CHILD_SA deleteMartin Willi2010-04-071-5/+2
* added HA resync option to (re-)integrate nodes to a clusterMartin Willi2010-04-073-8/+104
* apply peer config during rekeyingMartin Willi2010-04-071-1/+7
* manage synced SAs in IKE_SA Manager, tag them with IKE_PASSIVE stateMartin Willi2010-04-0715-343/+272
* support for IKE_SA rekeying syncMartin Willi2010-04-075-19/+35
* IKE_SA activation/deactivation magic using a fifo socketMartin Willi2010-04-076-12/+331
* syncing of complete IKE/CHILD_SAs worksMartin Willi2010-04-078-14/+346
* pushing basic CHILD_SA sync data to backup nodeMartin Willi2010-04-074-1/+256
* basic syncing of IKE_SAsMartin Willi2010-04-079-70/+547
* added a dispatcher class to receive HA sync messagesMartin Willi2010-04-078-13/+422
* generating basic IKE_SA sync messagesMartin Willi2010-04-073-57/+289
* set up basic infrastructure ha_sync pluginMartin Willi2010-04-0710-160/+767
* added child_sa serialization to ha_sync pluginMartin Willi2010-04-074-26/+275