aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/bus
Commit message (Collapse)AuthorAgeFilesLines
* task-manager: Add retransmit cleared alertTobias Brunner2016-06-061-0/+3
|
* task-manager: Add retransmit count to retransmit send alertThomas Egerer2016-06-061-2/+3
| | | | Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
* Use standard unsigned integer typesAndreas Steffen2016-03-243-3/+3
|
* charon: Add custom logger to daemonThomas Egerer2016-03-011-0/+65
| | | | | | | | | | | This logger can be used to easily register custom logging instances using __attribute__((constructor)) benefiting from the global reload mechanism (with reset of log levels). Note that this is not intended to be used from plugins, which are loaded after loggers have already been initialized. Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
* file-logger: Add option to print milliseconds within the current second ↵Tobias Brunner2015-11-092-9/+30
| | | | | | | | after timestamp For this to look right time_format should end with %S or %T. Closes strongswan/strongswan#18.
* bus: Add new hook called when IKEv1 CHILD_SAs are migrated to a new IKE_SATobias Brunner2015-05-213-3/+58
| | | | | | The interface is currently not very nice, but if we ever were able to safely checkout multiple SAs concurrently we could add something similar to ike_rekey() and call that when we detect a reauthentication.
* Add bool param to ALERT_KEEP_ON_CHILD_SA_FAILURE alertAdrian-Ken Rueegsegger2015-05-041-1/+2
| | | | | The parameter indicates if the alert is raised upon failure to establish the first CHILD SA of an IKE SA.
* bus: Add an ike_update() hook invoked when peer endpoints changeMartin Willi2015-02-203-0/+48
|
* ikev1: Move fragment generation to message_tTobias Brunner2014-10-101-2/+4
|
* bus: Add ike_reestablish_pre hook, called before DNS resolutionTobias Brunner2014-07-223-8/+64
| | | | | The old hook is renamed to ike_reestablish_post and is now also called when the initiation of the new IKE_SA failed.
* bus: Properly va_copy() argument list before passing it to printf() functionsMartin Willi2014-06-191-1/+3
| | | | | | | | As we later potentially use args again, we can't consume it with printf functions without copying it first. Clone list before passing it to any consuming function. Fixes #621.
* bus: Add a handle_vips() hook invoked after handling configuration attributesMartin Willi2014-06-173-0/+48
| | | | | | | | | Similar to assign_vips() used by a peer assigning virtual IPs to the other peer, the handle_vips() hook gets invoked on a peers after receiving attributes. On release of the same attributes the hook gets invoked again. This is useful to inspect handled attributes, as the ike_updown() hook is invoked after authentication, when attributes have not been handled yet.
* ikev1: Invoke the assign_vips() bus hook for IKEv1 as wellMartin Willi2014-06-161-3/+3
|
* file-logger: Emulate setlinebuf() if not supported by using fflush()Martin Willi2014-06-041-0/+12
|
* filelog: Ignore flush_line option if setlinebuf() not supportedMartin Willi2014-06-041-0/+2
|
* bus: Add a fast-path if log messages don't have to be loggedTobias Brunner2014-04-241-7/+53
| | | | | | | For some rwlock_t implementations acquiring the read lock could be quite expensive even if there are no writers (e.g. because the implementation requires acquiring a mutex to check for writers) particularly if the lock is highly contended, like it is for the vlog() method.
* Fix various API doc issues and typosTobias Brunner2013-07-181-1/+1
| | | | Partially based on an old patch by Adrian-Ken Rueegsegger.
* bus: raise certificate validation alerts using credential manager hookMartin Willi2013-07-182-0/+43
|
* syslog: setlogmask() to include LOG_INFOMartin Willi2013-07-181-0/+1
| | | | LOG_INFO seems to be excluded by default on some systems (OS X).
* Raise an alert if the responding peer narrowed traffic selectorsMartin Willi2013-06-191-0/+4
|
* Raise LOCAL_AUTH_FAILED alert after receiving AUTHENTICATION_FAILUREMartin Willi2013-05-151-1/+1
|
* Introduce an optional logger_t.vlog() method with format string and argumentsMartin Willi2013-05-062-16/+85
| | | | | | | To have more flexibility in the logging backend, receiving the original format string and do printf() substitution in the logger may be preferable. An additional but optional logger method does not touch the behavior of existing loggers.
* emit a single assig_vips bus message for all VIPsAndreas Steffen2013-04-063-13/+9
|
* ifmap plugin subscribes to assing_vip bus signalAndreas Steffen2013-04-063-0/+53
|
* When IKEv1 DPD times out, raise missing SEND_RETRANSMIT_TIMOUT alertMartin Willi2013-03-141-1/+1
|
* Raise an alert if an IKE_SA could not have been reauthenticated and expiresMartin Willi2013-03-141-0/+2
|
* Fixed some typos, courtesy of codespellTobias Brunner2012-12-201-1/+1
|
* Raise an alert if IKE SA is keptAdrian-Ken Rueegsegger2012-12-201-0/+2
| | | | | This alert is raised when the establishment of a child SA fails but the IKE SA is kept.
* Raise an alert if half-open timeout limit reachedMartin Willi2012-12-191-0/+2
|
* Raise an alert if an authorize() hook failsMartin Willi2012-12-192-0/+6
|
* Raise an alert if allocating virtual IPs failsMartin Willi2012-12-191-0/+2
|
* Raise an alert if kernel policy installation failsMartin Willi2012-12-191-0/+2
|
* Raise an alert if kernel SA installation failsMartin Willi2012-12-191-0/+2
|
* Raise an alert on traffic selector mismatchMartin Willi2012-12-191-0/+3
|
* Raise alerts when enforcing IKE_SA unique policyMartin Willi2012-12-191-0/+4
|
* Raise an alert if CHILD_SA proposals mismatchMartin Willi2012-12-191-0/+2
|
* Raise an alert if IKE proposals mismatchMartin Willi2012-12-191-0/+2
|
* Raise an alert of generating local authentication data failsMartin Willi2012-12-191-0/+2
|
* Add alerts for sent/received message retransmissions and timeoutMartin Willi2012-11-291-0/+6
|
* Fixed output of longer debug messagesTobias Brunner2012-11-071-0/+1
| | | | | (v)snprintf(3) returns the length without terminating null byte but the length given as parameter must include it.
* Moved debug.[ch] to utils folderTobias Brunner2012-10-241-1/+1
|
* Raise a bus alert when IKE message body parsing failsMartin Willi2012-10-241-0/+3
|
* Raise a bus alert when IKE message header parsing failsMartin Willi2012-10-241-0/+2
|
* Raise a bus alert when a received message contains unknown SPIsMartin Willi2012-10-241-0/+2
|
* Make syslog and file loggers configurable at runtimeTobias Brunner2012-10-184-21/+157
|
* Added a new alert that is raised if peer does not respond to initial IKE messageTobias Brunner2012-10-161-0/+2
|
* Add a responder narrow() hook to change TS in the kernel, but not on the wireMartin Willi2012-09-111-0/+2
|
* Add ike_reestablish() event that is triggered when an IKE_SA is reestablishedTobias Brunner2012-09-063-0/+48
| | | | | This is particularly useful during reauthentication to get the new IKE_SA.
* Don't modify the message string passed to logger, as it gets reusedMartin Willi2012-07-133-21/+25
|
* Log to a malloc()ed buffer if the on-stack buffer is not large enoughMartin Willi2012-07-131-3/+23
|