aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/config/peer_cfg.c
Commit message (Collapse)AuthorAgeFilesLines
* peer-cfg: Use an rwlock instead of a mutex to safely access child-cfgsTobias Brunner2017-07-271-15/+15
| | | | | | | | | | If multiple threads want to enumerate child-cfgs and potentially lock other locks (e.g. check out IKE_SAs) while doing so a deadlock could be caused (as was the case with VICI configs with start_action=start). It should also improve performance for roadwarrior connections and lots of clients connecting concurrently. Fixes #2374.
* Migrate all enumerators to venumerate() interface changeTobias Brunner2017-05-261-7/+15
|
* peer-cfg: Store mediated_by as name and not peer-cfg referenceTobias Brunner2017-02-161-6/+6
| | | | | | | | | This way updates to the mediation config are respected and the order in which configs are configured/loaded does not matter. The SQL plugin currently maintains the strong relationship between mediated and mediation connection (we could theoretically change that to a string too).
* peer-cfg: Fix memory leak when replacing child configsTobias Brunner2016-11-111-0/+1
| | | | | Fixes: 622c2b2c3386 ("peer-cfg: Add method to atomically replace child configs")
* peer-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-37/+26
|
* Use standard unsigned integer typesAndreas Steffen2016-03-241-17/+17
|
* peer-cfg: Add method to atomically replace child configsTobias Brunner2016-03-081-1/+113
|
* peer-cfg: Use new method to compare linked lists in equals()Tobias Brunner2016-03-081-36/+3
| | | | This also compares the complete lists not only the first two items.
* peer-cfg: Set DPD timeout to at least DPD delayTobias Brunner2016-02-011-0/+4
| | | | | | If DPD timeout is set but to a value smaller than the DPD delay the code in task_manager_v1.c:queue_liveliness_check will run into an integer underrun.
* traffic-selector: Don't end printf'ed list of traffic selectors with a spaceTobias Brunner2015-11-101-1/+1
|
* peer-cfg: Add missing UNIQUE_NEVER to unique_policy_namesMartin Willi2014-05-191-1/+2
|
* peer-cfg: add a pull/push mode option to use with mode configMartin Willi2013-09-041-2/+16
|
* Use subset matching instead of is_contained_in() to select a child_cfgMartin Willi2013-06-131-4/+8
| | | | | | | If one selector has a wider IP range than the other, but the other has a wider port/protocol selector than the first one, none is completely contained in the other. The check for a match using is_contained_in() therefore would fail. Using get_subset() can handle such cases, fixing configuration selection.
* Include 'aggressive' when comparing peer_cfg_t objectsTobias Brunner2012-11-071-0/+1
|
* Moved data structures to new collections subfolderTobias Brunner2012-10-241-1/+1
|
* Remove version argument on peer_cfg constructor, use ike_cfg version insteadMartin Willi2012-10-241-9/+3
|
* Move ike_version_t definition from peer_cfg_t to ike_cfg_tMartin Willi2012-10-241-6/+0
|
* Derive a dynamic TS to multiple virtual IPsMartin Willi2012-09-181-5/+5
|
* Support multiple address pools configured on a peer_cfgMartin Willi2012-08-301-10/+35
|
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-301-12/+37
|
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-171-2/+16
|
* Added an aggressive mode peer_cfg optionMartin Willi2012-03-201-3/+16
|
* Fix ike_version_t enum namesMartin Willi2012-03-201-1/+1
|
* Pass IKE version to peer config enumerator, filter configsMartin Willi2012-03-201-1/+2
|
* Added a get_rekey/reauth_time() jitter parameter to get time without ↵Martin Willi2012-03-201-4/+4
| | | | randomization
* Use enum to define IKE version on peer_cfg_t.Tobias Brunner2012-03-201-9/+14
| | | | Replaced all those magic numbers.
* Migrated peer_cfg_t to INIT/METHOD macros.Tobias Brunner2011-08-031-169/+117
|
* Fixed common misspellings.Tobias Brunner2011-07-201-1/+1
| | | | Mostly found by 'codespell'.
* Added a null-safe strdup variantMartin Willi2011-01-051-1/+1
|
* Moving charon to libcharon.Tobias Brunner2010-03-191-0/+699