Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -1/+1 |
| | |||||
* | android: Moved chunk_from_byte_array and byte_array_from_chunk helper functions | Tobias Brunner | 2013-01-14 | 1 | -24/+0 |
| | |||||
* | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -1/+2 |
| | |||||
* | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -1/+1 |
| | |||||
* | android: Private key bug has been fixed with Android 4.2 | Tobias Brunner | 2012-11-19 | 1 | -1/+1 |
| | |||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 2 | -2/+2 |
| | |||||
* | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | android: Ignore if peer is unreachable when reestablishing an SA | Tobias Brunner | 2012-10-18 | 1 | -2/+7 |
| | |||||
* | android: Use keyingtries=%forever and dpd|closeaction=restart | Tobias Brunner | 2012-10-18 | 1 | -3/+3 |
| | | | | | | | We also ignore the CHILD_SA_DOWN event. This should allow us to keep the connection up as long as the user does not manually disconnect. | ||||
* | android: Handle unreachable peers via alert | Tobias Brunner | 2012-10-16 | 1 | -17/+5 |
| | |||||
* | android: Use 0.0.0.0/0 as local traffic selector | Tobias Brunner | 2012-10-16 | 1 | -1/+2 |
| | | | | | This is helpful if the responder also wants to tunnel e.g. multicast packages. | ||||
* | android: Determine source address dynamically | Tobias Brunner | 2012-10-16 | 2 | -13/+5 |
| | |||||
* | android: Don't use the default ESP proposal as it includes unsupported ↵ | Tobias Brunner | 2012-10-16 | 1 | -1/+4 |
| | | | | algorithms | ||||
* | android: Leak the private key reference on Jelly Bean to avoid a bug in the ↵ | Tobias Brunner | 2012-09-24 | 1 | -1/+10 |
| | | | | | | | | | framework A bug in the framework on Android Jelly Bean causes a SIGSEGV when the private key object returned from KeyChain.getPrivateKey is garbage collected. Leaking the global reference to that object prevents the garbage collection and thereby the crash. | ||||
* | android: Load the private key and certificates separately in android_creds_t | Tobias Brunner | 2012-09-24 | 1 | -27/+28 |
| | |||||
* | android: Added a JNI backed private key implementation | Tobias Brunner | 2012-09-24 | 2 | -0/+323 |
| | | | | | This is required because private keys are provided by an OpenSSL engine in Jelly Bean, which makes them inaccessible directly via getEncoding. | ||||
* | android: Use AUTH_RULE_IDENTITY_LOOSE | Tobias Brunner | 2012-09-18 | 1 | -0/+1 |
| | |||||
* | android: Properly handle reauthentication initiated by the client | Tobias Brunner | 2012-09-06 | 1 | -7/+42 |
| | |||||
* | Merge branch 'android-client-cert' | Tobias Brunner | 2012-09-04 | 4 | -13/+159 |
|\ | | | | | | | Introduces IKEv2 client certificate authentication for the Android App. | ||||
| * | android: Native parts handle ikev2-cert VPN type | Tobias Brunner | 2012-08-31 | 2 | -10/+69 |
| | | |||||
| * | android: android_creds_t can provide a user's private key and certificate | Tobias Brunner | 2012-08-31 | 2 | -3/+89 |
| | | |||||
* | | Pass a list instead of a single virtual IP to attribute enumerators | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | | |||||
* | | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | | |||||
* | | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -8/+22 |
|/ | |||||
* | Job added which handles plain text packets read from TUN device | Tobias Brunner | 2012-08-13 | 1 | -1/+63 |
| | |||||
* | Added a handler that writes inbound plain text packets to the TUN device | Tobias Brunner | 2012-08-13 | 1 | -0/+35 |
| | |||||
* | Add simple callbacks to receive/send ESP packets via libipsec/receiver. | Tobias Brunner | 2012-08-13 | 1 | -0/+31 |
| | |||||
* | Add routes based on the installed IPsec policies to the TUN device builder | Tobias Brunner | 2012-08-13 | 1 | -0/+46 |
| | |||||
* | Add virtual IP to the TUN device builder | Tobias Brunner | 2012-08-13 | 1 | -1/+9 |
| | | | | | After the CHILD_SA is established we can easily get this address from the IKE_SA. | ||||
* | Create a TUN device via VpnService.Builder once the CHILD_SA is established | Tobias Brunner | 2012-08-13 | 1 | -0/+82 |
| | |||||
* | An Android specific attribute handler installs DNS servers via Builder | Tobias Brunner | 2012-08-13 | 2 | -0/+172 |
| | |||||
* | android_service_t handles initiation of an SA and tracks its progress | Tobias Brunner | 2012-08-13 | 2 | -0/+330 |
| | | | | Status updates are delivered via charonservice (JNI). | ||||
* | Android specific credential set also provides user credentials | Tobias Brunner | 2012-08-13 | 2 | -4/+37 |
| | |||||
* | Added an Android specific credential set that provides CA certificates via JNI | Tobias Brunner | 2012-08-13 | 2 | -0/+210 |