Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | task-manager: Add retransmit cleared alert | Tobias Brunner | 2016-06-06 | 1 | -0/+3 |
| | |||||
* | task-manager: Add retransmit count to retransmit send alert | Thomas Egerer | 2016-06-06 | 1 | -2/+3 |
| | | | | Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com> | ||||
* | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 3 | -3/+3 |
| | |||||
* | charon: Add custom logger to daemon | Thomas Egerer | 2016-03-01 | 1 | -0/+65 |
| | | | | | | | | | | | This logger can be used to easily register custom logging instances using __attribute__((constructor)) benefiting from the global reload mechanism (with reset of log levels). Note that this is not intended to be used from plugins, which are loaded after loggers have already been initialized. Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com> | ||||
* | file-logger: Add option to print milliseconds within the current second ↵ | Tobias Brunner | 2015-11-09 | 2 | -9/+30 |
| | | | | | | | | after timestamp For this to look right time_format should end with %S or %T. Closes strongswan/strongswan#18. | ||||
* | bus: Add new hook called when IKEv1 CHILD_SAs are migrated to a new IKE_SA | Tobias Brunner | 2015-05-21 | 3 | -3/+58 |
| | | | | | | The interface is currently not very nice, but if we ever were able to safely checkout multiple SAs concurrently we could add something similar to ike_rekey() and call that when we detect a reauthentication. | ||||
* | Add bool param to ALERT_KEEP_ON_CHILD_SA_FAILURE alert | Adrian-Ken Rueegsegger | 2015-05-04 | 1 | -1/+2 |
| | | | | | The parameter indicates if the alert is raised upon failure to establish the first CHILD SA of an IKE SA. | ||||
* | bus: Add an ike_update() hook invoked when peer endpoints change | Martin Willi | 2015-02-20 | 3 | -0/+48 |
| | |||||
* | ikev1: Move fragment generation to message_t | Tobias Brunner | 2014-10-10 | 1 | -2/+4 |
| | |||||
* | bus: Add ike_reestablish_pre hook, called before DNS resolution | Tobias Brunner | 2014-07-22 | 3 | -8/+64 |
| | | | | | The old hook is renamed to ike_reestablish_post and is now also called when the initiation of the new IKE_SA failed. | ||||
* | bus: Properly va_copy() argument list before passing it to printf() functions | Martin Willi | 2014-06-19 | 1 | -1/+3 |
| | | | | | | | | As we later potentially use args again, we can't consume it with printf functions without copying it first. Clone list before passing it to any consuming function. Fixes #621. | ||||
* | bus: Add a handle_vips() hook invoked after handling configuration attributes | Martin Willi | 2014-06-17 | 3 | -0/+48 |
| | | | | | | | | | Similar to assign_vips() used by a peer assigning virtual IPs to the other peer, the handle_vips() hook gets invoked on a peers after receiving attributes. On release of the same attributes the hook gets invoked again. This is useful to inspect handled attributes, as the ike_updown() hook is invoked after authentication, when attributes have not been handled yet. | ||||
* | ikev1: Invoke the assign_vips() bus hook for IKEv1 as well | Martin Willi | 2014-06-16 | 1 | -3/+3 |
| | |||||
* | file-logger: Emulate setlinebuf() if not supported by using fflush() | Martin Willi | 2014-06-04 | 1 | -0/+12 |
| | |||||
* | filelog: Ignore flush_line option if setlinebuf() not supported | Martin Willi | 2014-06-04 | 1 | -0/+2 |
| | |||||
* | bus: Add a fast-path if log messages don't have to be logged | Tobias Brunner | 2014-04-24 | 1 | -7/+53 |
| | | | | | | | For some rwlock_t implementations acquiring the read lock could be quite expensive even if there are no writers (e.g. because the implementation requires acquiring a mutex to check for writers) particularly if the lock is highly contended, like it is for the vlog() method. | ||||
* | Fix various API doc issues and typos | Tobias Brunner | 2013-07-18 | 1 | -1/+1 |
| | | | | Partially based on an old patch by Adrian-Ken Rueegsegger. | ||||
* | bus: raise certificate validation alerts using credential manager hook | Martin Willi | 2013-07-18 | 2 | -0/+43 |
| | |||||
* | syslog: setlogmask() to include LOG_INFO | Martin Willi | 2013-07-18 | 1 | -0/+1 |
| | | | | LOG_INFO seems to be excluded by default on some systems (OS X). | ||||
* | Raise an alert if the responding peer narrowed traffic selectors | Martin Willi | 2013-06-19 | 1 | -0/+4 |
| | |||||
* | Raise LOCAL_AUTH_FAILED alert after receiving AUTHENTICATION_FAILURE | Martin Willi | 2013-05-15 | 1 | -1/+1 |
| | |||||
* | Introduce an optional logger_t.vlog() method with format string and arguments | Martin Willi | 2013-05-06 | 2 | -16/+85 |
| | | | | | | | To have more flexibility in the logging backend, receiving the original format string and do printf() substitution in the logger may be preferable. An additional but optional logger method does not touch the behavior of existing loggers. | ||||
* | emit a single assig_vips bus message for all VIPs | Andreas Steffen | 2013-04-06 | 3 | -13/+9 |
| | |||||
* | ifmap plugin subscribes to assing_vip bus signal | Andreas Steffen | 2013-04-06 | 3 | -0/+53 |
| | |||||
* | When IKEv1 DPD times out, raise missing SEND_RETRANSMIT_TIMOUT alert | Martin Willi | 2013-03-14 | 1 | -1/+1 |
| | |||||
* | Raise an alert if an IKE_SA could not have been reauthenticated and expires | Martin Willi | 2013-03-14 | 1 | -0/+2 |
| | |||||
* | Fixed some typos, courtesy of codespell | Tobias Brunner | 2012-12-20 | 1 | -1/+1 |
| | |||||
* | Raise an alert if IKE SA is kept | Adrian-Ken Rueegsegger | 2012-12-20 | 1 | -0/+2 |
| | | | | | This alert is raised when the establishment of a child SA fails but the IKE SA is kept. | ||||
* | Raise an alert if half-open timeout limit reached | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | |||||
* | Raise an alert if an authorize() hook fails | Martin Willi | 2012-12-19 | 2 | -0/+6 |
| | |||||
* | Raise an alert if allocating virtual IPs fails | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | |||||
* | Raise an alert if kernel policy installation fails | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | |||||
* | Raise an alert if kernel SA installation fails | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | |||||
* | Raise an alert on traffic selector mismatch | Martin Willi | 2012-12-19 | 1 | -0/+3 |
| | |||||
* | Raise alerts when enforcing IKE_SA unique policy | Martin Willi | 2012-12-19 | 1 | -0/+4 |
| | |||||
* | Raise an alert if CHILD_SA proposals mismatch | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | |||||
* | Raise an alert if IKE proposals mismatch | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | |||||
* | Raise an alert of generating local authentication data fails | Martin Willi | 2012-12-19 | 1 | -0/+2 |
| | |||||
* | Add alerts for sent/received message retransmissions and timeout | Martin Willi | 2012-11-29 | 1 | -0/+6 |
| | |||||
* | Fixed output of longer debug messages | Tobias Brunner | 2012-11-07 | 1 | -0/+1 |
| | | | | | (v)snprintf(3) returns the length without terminating null byte but the length given as parameter must include it. | ||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Raise a bus alert when IKE message body parsing fails | Martin Willi | 2012-10-24 | 1 | -0/+3 |
| | |||||
* | Raise a bus alert when IKE message header parsing fails | Martin Willi | 2012-10-24 | 1 | -0/+2 |
| | |||||
* | Raise a bus alert when a received message contains unknown SPIs | Martin Willi | 2012-10-24 | 1 | -0/+2 |
| | |||||
* | Make syslog and file loggers configurable at runtime | Tobias Brunner | 2012-10-18 | 4 | -21/+157 |
| | |||||
* | Added a new alert that is raised if peer does not respond to initial IKE message | Tobias Brunner | 2012-10-16 | 1 | -0/+2 |
| | |||||
* | Add a responder narrow() hook to change TS in the kernel, but not on the wire | Martin Willi | 2012-09-11 | 1 | -0/+2 |
| | |||||
* | Add ike_reestablish() event that is triggered when an IKE_SA is reestablished | Tobias Brunner | 2012-09-06 | 3 | -0/+48 |
| | | | | | This is particularly useful during reauthentication to get the new IKE_SA. | ||||
* | Don't modify the message string passed to logger, as it gets reused | Martin Willi | 2012-07-13 | 3 | -21/+25 |
| | |||||
* | Log to a malloc()ed buffer if the on-stack buffer is not large enough | Martin Willi | 2012-07-13 | 1 | -3/+23 |
| |