| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Add a return value to keymat_v1_t.{get,update,confirm}_iv | Martin Willi | 2012-07-16 | 2 | -9/+13 | |
| | | ||||||
| * | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 2 | -2/+4 | |
| | | ||||||
| * | Make rescheduling a job more predictable | Tobias Brunner | 2012-06-25 | 1 | -6/+1 | |
| | | | | | | | | | | | | | | This avoids race conditions between calls to cancel() and jobs that like to be rescheduled. If jobs were able to reschedule themselves it would theoretically be possible that two worker threads have the same job assigned (the one currently executing the job and the one executing the same but rescheduled job if it already is time to execute it), this means that cancel() could be called twice for that job. Creating a new job based on the current one and reschedule that is also OK, but rescheduling itself is more efficient for jobs that need to be executed often. | |||||
| * | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 3 | -34/+19 | |
| | | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
| * | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -2/+2 | |
| | | ||||||
| * | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -1/+1 | |
| | | ||||||
| * | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 3 | -10/+12 | |
| | | | | | Also fixes several whitespace errors. | |||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 6 | -59/+365 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | * | Store the major IKE version on ike_sa_id_t. | Tobias Brunner | 2012-03-20 | 2 | -3/+6 | |
| | | | ||||||
| | * | Adopt children after syncing a rekeyed IKEv1 SA | Martin Willi | 2012-03-20 | 1 | -0/+6 | |
| | | | ||||||
| | * | Synchronize IKEv1 DPD sequence numbers | Martin Willi | 2012-03-20 | 1 | -0/+30 | |
| | | | ||||||
| | * | Sync remote virtual IP for IKEv1 SAs | Martin Willi | 2012-03-20 | 1 | -0/+13 | |
| | | | ||||||
| | * | Sync new IKE_SA condition/extension flags | Martin Willi | 2012-03-20 | 2 | -2/+10 | |
| | | | ||||||
| | * | Added support for Phase1 IV synchronization to HA plugin | Martin Willi | 2012-03-20 | 5 | -27/+129 | |
| | | | ||||||
| | * | Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵ | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | | | | | | | encrypted | |||||
| | * | Create IKEv1 keymat hasher explicitly on sync | Martin Willi | 2012-03-20 | 1 | -3/+6 | |
| | | | ||||||
| | * | Added support to sync IKEv1 SAs key material in HA plugin | Martin Willi | 2012-03-20 | 4 | -10/+95 | |
| | | | ||||||
| | * | Pass IKEv1 specific keymat to ike_keys hook | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Use a more complete implementation of a HA specific diffie_hellman_t | Martin Willi | 2012-03-20 | 1 | -11/+50 | |
| | | | ||||||
| | * | Apply proposal to a HA synced IKE_SA | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Updated HA plugin to new IKEv2 specific keymat functions | Martin Willi | 2012-03-20 | 2 | -12/+24 | |
| | | | ||||||
| | * | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Do not query CHILD_SA during delete if they already expired | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Don't compare initiator flag in IKE_SA manager, pass initiator parameter to ↵ | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | | | | | | | IKE_SA constructor | |||||
| | * | Store IKE version of an SA on ike_sa_t. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 | |
| | | | | | | | | | Replaced all those magic numbers. | |||||
| * | | Clear peer addresses during HA update. | Tobias Brunner | 2012-03-09 | 1 | -1/+6 | |
| | | | ||||||
| * | | Renamed list of additional peer addresses as it now stores all known addresses. | Tobias Brunner | 2012-03-09 | 4 | -9/+8 | |
| | | | ||||||
| * | | Check if ClusterIP directory could be opened before enumerating it | Martin Willi | 2012-02-06 | 1 | -17/+26 | |
| | | | ||||||
| * | | Fixed additional typos in comments and log messages. | Tobias Brunner | 2012-01-12 | 1 | -2/+2 | |
| |/ | ||||||
| * | Fix file descriptor leak | Thomas Jarosch | 2011-08-29 | 1 | -0/+1 | |
| | | | | | | | Credit goes to "cppcheck". Signed-off-by: Thomas Jarosch <thomas.jarosch@intra2net.com> | |||||
| * | Don't rekey but delete CHILD_SA to resying against NATed Windows clients | Martin Willi | 2011-08-19 | 1 | -3/+18 | |
| | | ||||||
| * | Sync newer IKE_SA condition/extension flags in ha plugin | Martin Willi | 2011-08-19 | 2 | -2/+12 | |
| | | ||||||
| * | ha plugin does not need Linux headers anymore | Martin Willi | 2011-08-02 | 1 | -1/+1 | |
| | | ||||||
| * | Check for kernel version and use appropriate jhash version in HA plugin | Martin Willi | 2011-08-02 | 1 | -10/+101 | |
| | | ||||||
| * | Fix parentheses in write() to CLUSTERIP control files | Martin Willi | 2011-07-14 | 1 | -1/+1 | |
| | | ||||||
| * | Replaced ike_sa_t.create_additional_address_iterator with enumerator. | Tobias Brunner | 2011-07-06 | 1 | -4/+4 | |
| | | ||||||
| * | Replaced ike_sa_t.create_child_sa_iterator with enumerator. | Tobias Brunner | 2011-07-06 | 1 | -4/+4 | |
| | | | | | | This required two new methods on ike_sa_t. One returns the number of CHILD_SAs and one allows to remove a CHILD_SA. | |||||
| * | Use CRITICAL job priority class for long running dispatcher jobs | Martin Willi | 2011-05-16 | 5 | -10/+10 | |
| | | ||||||
| * | Added a non-blocking, skipping variant of IKE_SA enumerator | Martin Willi | 2011-05-16 | 2 | -2/+3 | |
| | | ||||||
| * | Synchronize ESN support in HA plugin | Martin Willi | 2011-04-20 | 4 | -0/+13 | |
| | | ||||||
| * | Added a (not yet implemented) plugin_t method to reload plugin configuration | Martin Willi | 2011-04-15 | 1 | -0/+1 | |
| | | ||||||
| * | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 1 | -0/+7 | |
| | | | | | over plugin_t | |||||
| * | Use wrapped threading functions in ha plugin | Martin Willi | 2011-01-20 | 3 | -16/+15 | |
| | | ||||||
| * | set tfcv3 flag TRUE in ha_dispatcher | Andreas Steffen | 2010-12-26 | 1 | -4/+4 | |
| | | ||||||
| * | Added a TFC padding option to child_cfg | Martin Willi | 2010-12-20 | 1 | -1/+1 | |
| | | ||||||
| * | start and route connections defined in an SQL database via start_action ↵ | Andreas Steffen | 2010-11-28 | 1 | -2/+2 | |
| | | | | | field and ipsec up %startall command | |||||
| * | Store proposal number in proposal_t to reuse it in the selected proposal | Martin Willi | 2010-10-28 | 1 | -2/+2 | |
| | | | | | | According to RFC 5996 3.3.1, we MUST reuse the proposal number of the selected proposal in the SA payload reply. | |||||
| * | Set ownership of all HA ClusterIP control files | Martin Willi | 2010-10-20 | 1 | -0/+5 | |
| | | ||||||
| * | Set ownership/permissions of HA control socket | Martin Willi | 2010-10-20 | 1 | -1/+9 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |