Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Moved packet_t to libstrongswan | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | |||||
* | Avoid unnecessary copy of packet data when removing Non-ESP marker. | Tobias Brunner | 2012-08-08 | 1 | -2/+1 |
| | |||||
* | Improved how NAT-T keepalives are handled in sockets/receiver. | Tobias Brunner | 2012-08-08 | 1 | -3/+14 |
| | |||||
* | Callback for ESP packets added to receiver. | Tobias Brunner | 2012-08-08 | 1 | -1/+49 |
| | |||||
* | Handle Non-ESP marker in receiver and not individual socket plugins. | Tobias Brunner | 2012-08-08 | 1 | -1/+24 |
| | |||||
* | Add a return value to hasher_t.get_hash() | Martin Willi | 2012-07-16 | 1 | -7/+17 |
| | |||||
* | Check rng return value when generating COOKIE secret in receiver | Tobias Brunner | 2012-07-16 | 1 | -8/+22 |
| | |||||
* | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 1 | -14/+3 |
| | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | ||||
* | Use proper getter for settings in sender and receiver. | Tobias Brunner | 2012-05-03 | 1 | -1/+1 |
| | |||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -9/+10 |
| | | | | Also fixes several whitespace errors. | ||||
* | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 1 | -33/+84 |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | ||||
| * | Send correct INVALID_MAJOR_VERSION when receiving packet with unsupported ↵ | Martin Willi | 2012-03-20 | 1 | -39/+62 |
| | | | | | | | | protocol | ||||
| * | Drop IKEv1 main/aggressive modes if peer to aggressive | Martin Willi | 2012-03-20 | 1 | -4/+17 |
| | | |||||
| * | Don't accept IKEv2 packets if IKEv2 disabled | Martin Willi | 2012-03-20 | 1 | -0/+2 |
| | | |||||
| * | Add a payload.get_header_length() method, remove header length definitions | Martin Willi | 2012-03-20 | 1 | -0/+2 |
| | | |||||
| * | Allow creation of message_t objects for IKEv1 packets. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 |
| | | |||||
| * | Accept and process IKEv1 messages in receiver | Martin Willi | 2012-03-20 | 1 | -7/+18 |
| | | |||||
| * | Extended IKE header for IKEv1 support | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | | |||||
* | | Keep COOKIEs enabled once threshold is hit, until we see no COOKIEs for a ↵ | Martin Willi | 2012-04-17 | 1 | -5/+43 |
|/ | | | | | | | | | | | few secs Toggling COOKIEs on/off is problematic: After doing a COOKIE exchange as initiator, we can't know if the completing IKE_SA_INIT message is to our first request or the one with the COOKIE. If the responder just enabled/disabled COOKIEs and packets get retransmitted, both might be true. Avoiding COOKIE behavior toggling improves the situation, but does not solve the problem during the initial COOKIE activation. | ||||
* | Use CRITICAL job priority class for long running dispatcher jobs | Martin Willi | 2011-05-16 | 1 | -2/+2 |
| | |||||
* | Added init_limit_half_open and a init_limit_job_load (replacing ↵ | Martin Willi | 2011-05-16 | 1 | -92/+107 |
| | | | | job_threshold) options, some refactorings | ||||
* | Added a job_threshold option to drop IKE_SA_INITs if a certain job load reached | Martin Willi | 2011-05-16 | 1 | -0/+28 |
| | |||||
* | Avoid recursive loop if no socket implementations are loaded. | Tobias Brunner | 2010-10-14 | 1 | -2/+13 |
| | |||||
* | Refer to scheduler and processor via lib and not hydra. | Tobias Brunner | 2010-09-02 | 1 | -5/+4 |
| | |||||
* | Refer to scheduler via hydra and not charon. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 |
| | |||||
* | Refer to processor via hydra and not charon. | Tobias Brunner | 2010-09-02 | 1 | -2/+3 |
| | |||||
* | Use AEAD wrapper for encryption payload encryption/decryption | Martin Willi | 2010-08-19 | 1 | -1/+1 |
| | |||||
* | Use a seperate section for each nested struct member in INIT macro | Martin Willi | 2010-08-18 | 1 | -1/+3 |
| | |||||
* | Fixed typo. | Tobias Brunner | 2010-07-05 | 1 | -2/+2 |
| | |||||
* | Added simple conditional packet receive delay | Martin Willi | 2010-05-18 | 1 | -9/+38 |
| | |||||
* | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 1 | -0/+402 |