| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | bus: Add new hooks for derived IKE_SA and CHILD_SA keys | Tobias Brunner | 2016-10-04 | 1 | -5/+30 |
| | | |||||
| * | task-manager: Add retransmit cleared alert | Tobias Brunner | 2016-06-06 | 1 | -0/+3 |
| | | |||||
| * | task-manager: Add retransmit count to retransmit send alert | Thomas Egerer | 2016-06-06 | 1 | -2/+3 |
| | | | | | Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com> | ||||
| * | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -1/+1 |
| | | |||||
| * | bus: Add new hook called when IKEv1 CHILD_SAs are migrated to a new IKE_SA | Tobias Brunner | 2015-05-21 | 1 | -1/+9 |
| | | | | | | | The interface is currently not very nice, but if we ever were able to safely checkout multiple SAs concurrently we could add something similar to ike_rekey() and call that when we detect a reauthentication. | ||||
| * | Add bool param to ALERT_KEEP_ON_CHILD_SA_FAILURE alert | Adrian-Ken Rueegsegger | 2015-05-04 | 1 | -1/+2 |
| | | | | | | The parameter indicates if the alert is raised upon failure to establish the first CHILD SA of an IKE SA. | ||||
| * | bus: Add an ike_update() hook invoked when peer endpoints change | Martin Willi | 2015-02-20 | 1 | -0/+9 |
| | | |||||
| * | ikev1: Move fragment generation to message_t | Tobias Brunner | 2014-10-10 | 1 | -2/+4 |
| | | |||||
| * | bus: Add ike_reestablish_pre hook, called before DNS resolution | Tobias Brunner | 2014-07-22 | 1 | -3/+14 |
| | | | | | | The old hook is renamed to ike_reestablish_post and is now also called when the initiation of the new IKE_SA failed. | ||||
| * | bus: Add a handle_vips() hook invoked after handling configuration attributes | Martin Willi | 2014-06-17 | 1 | -0/+8 |
| | | | | | | | | | | Similar to assign_vips() used by a peer assigning virtual IPs to the other peer, the handle_vips() hook gets invoked on a peers after receiving attributes. On release of the same attributes the hook gets invoked again. This is useful to inspect handled attributes, as the ike_updown() hook is invoked after authentication, when attributes have not been handled yet. | ||||
| * | bus: raise certificate validation alerts using credential manager hook | Martin Willi | 2013-07-18 | 1 | -0/+14 |
| | | |||||
| * | Raise an alert if the responding peer narrowed traffic selectors | Martin Willi | 2013-06-19 | 1 | -0/+4 |
| | | |||||
| * | Raise LOCAL_AUTH_FAILED alert after receiving AUTHENTICATION_FAILURE | Martin Willi | 2013-05-15 | 1 | -1/+1 |
| | | |||||
| * | emit a single assig_vips bus message for all VIPs | Andreas Steffen | 2013-04-06 | 1 | -3/+2 |
| | | |||||
| * | ifmap plugin subscribes to assing_vip bus signal | Andreas Steffen | 2013-04-06 | 1 | -0/+9 |
| | | |||||
| * | When IKEv1 DPD times out, raise missing SEND_RETRANSMIT_TIMOUT alert | Martin Willi | 2013-03-14 | 1 | -1/+1 |
| | | |||||
| * | Raise an alert if an IKE_SA could not have been reauthenticated and expires | Martin Willi | 2013-03-14 | 1 | -0/+2 |
| | | |||||
| * | Fixed some typos, courtesy of codespell | Tobias Brunner | 2012-12-20 | 1 | -1/+1 |
| | | |||||
| * | Raise an alert if IKE SA is kept | Adrian-Ken Rueegsegger | 2012-12-20 | 1 | -0/+2 |
| | | | | | | This alert is raised when the establishment of a child SA fails but the IKE SA is kept. | ||||
| * | Raise an alert if half-open timeout limit reached | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | | |||||
| * | Raise an alert if an authorize() hook fails | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | | |||||
| * | Raise an alert if allocating virtual IPs fails | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | | |||||
| * | Raise an alert if kernel policy installation fails | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | | |||||
| * | Raise an alert if kernel SA installation fails | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | | |||||
| * | Raise an alert on traffic selector mismatch | Martin Willi | 2012-12-19 | 1 | -0/+3 |
| | | |||||
| * | Raise alerts when enforcing IKE_SA unique policy | Martin Willi | 2012-12-19 | 1 | -0/+4 |
| | | |||||
| * | Raise an alert if CHILD_SA proposals mismatch | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | | |||||
| * | Raise an alert if IKE proposals mismatch | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | | |||||
| * | Raise an alert of generating local authentication data fails | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | | |||||
| * | Add alerts for sent/received message retransmissions and timeout | Martin Willi | 2012-11-29 | 1 | -0/+6 |
| | | |||||
| * | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | | |||||
| * | Raise a bus alert when IKE message body parsing fails | Martin Willi | 2012-10-24 | 1 | -0/+3 |
| | | |||||
| * | Raise a bus alert when IKE message header parsing fails | Martin Willi | 2012-10-24 | 1 | -0/+2 |
| | | |||||
| * | Raise a bus alert when a received message contains unknown SPIs | Martin Willi | 2012-10-24 | 1 | -0/+2 |
| | | |||||
| * | Added a new alert that is raised if peer does not respond to initial IKE message | Tobias Brunner | 2012-10-16 | 1 | -0/+2 |
| | | |||||
| * | Add a responder narrow() hook to change TS in the kernel, but not on the wire | Martin Willi | 2012-09-11 | 1 | -0/+2 |
| | | |||||
| * | Add ike_reestablish() event that is triggered when an IKE_SA is reestablished | Tobias Brunner | 2012-09-06 | 1 | -0/+8 |
| | | | | | | This is particularly useful during reauthentication to get the new IKE_SA. | ||||
| * | Removed superfluous @param in bus.h. | Tobias Brunner | 2012-05-18 | 1 | -1/+0 |
| | | |||||
| * | Loggers specify what log messages they want to receive during registration. | Tobias Brunner | 2012-05-02 | 1 | -0/+8 |
| | | | | | | | | This also allows us to generate the log message only once for all loggers that need it (avoids calls to custom printf specifier callbacks). To update the log levels loggers can simply be registered again. | ||||
| * | Use a separate interface for loggers. | Tobias Brunner | 2012-05-02 | 1 | -6/+22 |
| | | | | | | | | | The new interface does not allow loggers to unregister themselves from the bus. This allows us to use a rwlock_t for them. The latter also means that loggers can now be called concurrently by multiple threads. | ||||
| * | Use a separate list and mutex for loggers. | Tobias Brunner | 2012-05-02 | 1 | -2/+6 |
| | | | | | | | | | | | | This avoids deadlocks caused by extensive listener_t implementations which might want to acquire a lock which is currently held by another thread wanting to log messages. Since the latter requires that thread to acquire the same lock the initial thread currently holds this previously resulted in a deadlock. With this change logging messages does not require threads to acquire the main lock in bus_t and thus avoids the deadlock. | ||||
| * | Remove obsolete bus_t.listen() method. | Tobias Brunner | 2012-05-02 | 1 | -23/+7 |
| | | |||||
| * | Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵ | Martin Willi | 2012-03-20 | 1 | -1/+6 |
| | | | | | encrypted | ||||
| * | Pass IKEv1 specific keymat to ike_keys hook | Martin Willi | 2012-03-20 | 1 | -2/+5 |
| | | |||||
| * | bus->listen() and the controller wrappers accept a timeout to wait for callbacks | Martin Willi | 2011-08-26 | 1 | -1/+3 |
| | | |||||
| * | Throw an alert if authentication of the peer fails (not only for initiator). | Tobias Brunner | 2011-08-12 | 1 | -2/+2 |
| | | |||||
| * | Throw an alert when the peer address cannot be resolved during initiation. | Tobias Brunner | 2011-08-12 | 1 | -0/+2 |
| | | |||||
| * | Throw an alert via bus_t when remote authentication fails. | Tobias Brunner | 2011-08-12 | 1 | -2/+4 |
| | | |||||
| * | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 1 | -1/+1 |
| | | | | | Mostly found by 'codespell'. | ||||
| * | Pass the CREATE_CHILD_SA initiator flag to the child_keys parameter | Martin Willi | 2010-07-26 | 1 | -2/+3 |
| | | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |