Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | peer-cfg: Use an rwlock instead of a mutex to safely access child-cfgs | Tobias Brunner | 2017-07-27 | 1 | -15/+15 |
| | | | | | | | | | | If multiple threads want to enumerate child-cfgs and potentially lock other locks (e.g. check out IKE_SAs) while doing so a deadlock could be caused (as was the case with VICI configs with start_action=start). It should also improve performance for roadwarrior connections and lots of clients connecting concurrently. Fixes #2374. | ||||
* | Migrate all enumerators to venumerate() interface change | Tobias Brunner | 2017-05-26 | 1 | -7/+15 |
| | |||||
* | peer-cfg: Store mediated_by as name and not peer-cfg reference | Tobias Brunner | 2017-02-16 | 1 | -6/+6 |
| | | | | | | | | | This way updates to the mediation config are respected and the order in which configs are configured/loaded does not matter. The SQL plugin currently maintains the strong relationship between mediated and mediation connection (we could theoretically change that to a string too). | ||||
* | peer-cfg: Fix memory leak when replacing child configs | Tobias Brunner | 2016-11-11 | 1 | -0/+1 |
| | | | | | Fixes: 622c2b2c3386 ("peer-cfg: Add method to atomically replace child configs") | ||||
* | peer-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -37/+26 |
| | |||||
* | Use standard unsigned integer types | Andreas Steffen | 2016-03-24 | 1 | -17/+17 |
| | |||||
* | peer-cfg: Add method to atomically replace child configs | Tobias Brunner | 2016-03-08 | 1 | -1/+113 |
| | |||||
* | peer-cfg: Use new method to compare linked lists in equals() | Tobias Brunner | 2016-03-08 | 1 | -36/+3 |
| | | | | This also compares the complete lists not only the first two items. | ||||
* | peer-cfg: Set DPD timeout to at least DPD delay | Tobias Brunner | 2016-02-01 | 1 | -0/+4 |
| | | | | | | If DPD timeout is set but to a value smaller than the DPD delay the code in task_manager_v1.c:queue_liveliness_check will run into an integer underrun. | ||||
* | traffic-selector: Don't end printf'ed list of traffic selectors with a space | Tobias Brunner | 2015-11-10 | 1 | -1/+1 |
| | |||||
* | peer-cfg: Add missing UNIQUE_NEVER to unique_policy_names | Martin Willi | 2014-05-19 | 1 | -1/+2 |
| | |||||
* | peer-cfg: add a pull/push mode option to use with mode config | Martin Willi | 2013-09-04 | 1 | -2/+16 |
| | |||||
* | Use subset matching instead of is_contained_in() to select a child_cfg | Martin Willi | 2013-06-13 | 1 | -4/+8 |
| | | | | | | | If one selector has a wider IP range than the other, but the other has a wider port/protocol selector than the first one, none is completely contained in the other. The check for a match using is_contained_in() therefore would fail. Using get_subset() can handle such cases, fixing configuration selection. | ||||
* | Include 'aggressive' when comparing peer_cfg_t objects | Tobias Brunner | 2012-11-07 | 1 | -0/+1 |
| | |||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -9/+3 |
| | |||||
* | Move ike_version_t definition from peer_cfg_t to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -6/+0 |
| | |||||
* | Derive a dynamic TS to multiple virtual IPs | Martin Willi | 2012-09-18 | 1 | -5/+5 |
| | |||||
* | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -10/+35 |
| | |||||
* | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -12/+37 |
| | |||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -2/+16 |
| | |||||
* | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -3/+16 |
| | |||||
* | Fix ike_version_t enum names | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | |||||
* | Pass IKE version to peer config enumerator, filter configs | Martin Willi | 2012-03-20 | 1 | -1/+2 |
| | |||||
* | Added a get_rekey/reauth_time() jitter parameter to get time without ↵ | Martin Willi | 2012-03-20 | 1 | -4/+4 |
| | | | | randomization | ||||
* | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 1 | -9/+14 |
| | | | | Replaced all those magic numbers. | ||||
* | Migrated peer_cfg_t to INIT/METHOD macros. | Tobias Brunner | 2011-08-03 | 1 | -169/+117 |
| | |||||
* | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 1 | -1/+1 |
| | | | | Mostly found by 'codespell'. | ||||
* | Added a null-safe strdup variant | Martin Willi | 2011-01-05 | 1 | -1/+1 |
| | |||||
* | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 1 | -0/+699 |