| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Check if for some reason we handle a HA segment on both nodes | Martin Willi | 2013-03-19 | 1 | -1/+15 | |
| | | ||||||
| * | Acquire HA segment lock while sending heartbeat | Martin Willi | 2013-03-19 | 1 | -0/+2 | |
| | | ||||||
| * | Fix scheduling of heartbeat sending in HA plugin | Martin Willi | 2013-03-19 | 1 | -2/+11 | |
| | | | | | | | e0efd7c1 switches to automated job rescheduling for HA heartbeat. However, send_status() is initially called directly, which will not reschedule the job as required. | |||||
| * | Fix compiler warning in HA plugin | Martin Willi | 2013-03-19 | 1 | -1/+1 | |
| | | ||||||
| * | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -2/+1 | |
| | | ||||||
| * | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -1/+1 | |
| | | ||||||
| * | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -1/+1 | |
| | | ||||||
| * | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 4 | -5/+5 | |
| | | ||||||
| * | Moved host_t and host_resolver_t to a new networking subfolder | Tobias Brunner | 2012-10-24 | 2 | -2/+2 | |
| | | ||||||
| * | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 | |
| | | ||||||
| * | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -1/+1 | |
| | | ||||||
| * | Added missing continue statement in ha socket error handling | Tobias Brunner | 2012-09-28 | 1 | -0/+1 | |
| | | ||||||
| * | Pass full pool list to release_address | Martin Willi | 2012-09-11 | 1 | -3/+17 | |
| | | ||||||
| * | Pass the full list of pools to acquire_address, enumerate in providers | Martin Willi | 2012-09-11 | 1 | -5/+13 | |
| | | | | | | | | | If the provider has access to the full pool list, it can enumerate them twice, for example to search for existing leases first, and only search for new leases in a second step. Fixes lease enumeration in attr-sql using multiple pools. | |||||
| * | Clear virtual IPs before storing assigned ones on the IKE_SA | Tobias Brunner | 2012-09-05 | 1 | -1/+10 | |
| | | | | | | Otherwise we'll end up with duplicate or invalid VIPs stored on the IKE_SA. | |||||
| * | Check address family in HA virtual IP backend | Martin Willi | 2012-08-30 | 1 | -0/+6 | |
| | | ||||||
| * | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 2 | -7/+8 | |
| | | ||||||
| * | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 3 | -28/+41 | |
| | | ||||||
| * | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 1 | -1/+2 | |
| | | ||||||
| * | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -1/+1 | |
| | | | | | configurable. | |||||
| * | Cleaned up memory management and return values for encryption payload | Martin Willi | 2012-07-16 | 1 | -1/+0 | |
| | | ||||||
| * | Add a return value to keymat_v1_t.{get,update,confirm}_iv | Martin Willi | 2012-07-16 | 2 | -9/+13 | |
| | | ||||||
| * | Refactored heavily #ifdefd capability code to its own libstrongswan class | Martin Willi | 2012-07-04 | 2 | -2/+4 | |
| | | ||||||
| * | Make rescheduling a job more predictable | Tobias Brunner | 2012-06-25 | 1 | -6/+1 | |
| | | | | | | | | | | | | | | This avoids race conditions between calls to cancel() and jobs that like to be rescheduled. If jobs were able to reschedule themselves it would theoretically be possible that two worker threads have the same job assigned (the one currently executing the job and the one executing the same but rescheduled job if it already is time to execute it), this means that cancel() could be called twice for that job. Creating a new job based on the current one and reschedule that is also OK, but rescheduling itself is more efficient for jobs that need to be executed often. | |||||
| * | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 3 | -34/+19 | |
| | | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
| * | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -2/+2 | |
| | | ||||||
| * | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -1/+1 | |
| | | ||||||
| * | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 3 | -10/+12 | |
| | | | | | Also fixes several whitespace errors. | |||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 6 | -59/+365 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | * | Store the major IKE version on ike_sa_id_t. | Tobias Brunner | 2012-03-20 | 2 | -3/+6 | |
| | | | ||||||
| | * | Adopt children after syncing a rekeyed IKEv1 SA | Martin Willi | 2012-03-20 | 1 | -0/+6 | |
| | | | ||||||
| | * | Synchronize IKEv1 DPD sequence numbers | Martin Willi | 2012-03-20 | 1 | -0/+30 | |
| | | | ||||||
| | * | Sync remote virtual IP for IKEv1 SAs | Martin Willi | 2012-03-20 | 1 | -0/+13 | |
| | | | ||||||
| | * | Sync new IKE_SA condition/extension flags | Martin Willi | 2012-03-20 | 2 | -2/+10 | |
| | | | ||||||
| | * | Added support for Phase1 IV synchronization to HA plugin | Martin Willi | 2012-03-20 | 5 | -27/+129 | |
| | | | ||||||
| | * | Invoke bus_t.message hook twice, once plain and parsed, once encoded and ↵ | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | | | | | | | encrypted | |||||
| | * | Create IKEv1 keymat hasher explicitly on sync | Martin Willi | 2012-03-20 | 1 | -3/+6 | |
| | | | ||||||
| | * | Added support to sync IKEv1 SAs key material in HA plugin | Martin Willi | 2012-03-20 | 4 | -10/+95 | |
| | | | ||||||
| | * | Pass IKEv1 specific keymat to ike_keys hook | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Use a more complete implementation of a HA specific diffie_hellman_t | Martin Willi | 2012-03-20 | 1 | -11/+50 | |
| | | | ||||||
| | * | Apply proposal to a HA synced IKE_SA | Martin Willi | 2012-03-20 | 1 | -0/+1 | |
| | | | ||||||
| | * | Updated HA plugin to new IKEv2 specific keymat functions | Martin Willi | 2012-03-20 | 2 | -12/+24 | |
| | | | ||||||
| | * | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Do not query CHILD_SA during delete if they already expired | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | ||||||
| | * | Don't compare initiator flag in IKE_SA manager, pass initiator parameter to ↵ | Martin Willi | 2012-03-20 | 1 | -1/+2 | |
| | | | | | | | | | IKE_SA constructor | |||||
| | * | Store IKE version of an SA on ike_sa_t. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 | |
| | | | ||||||
| | * | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 | |
| | | | | | | | | | Replaced all those magic numbers. | |||||
| * | | Clear peer addresses during HA update. | Tobias Brunner | 2012-03-09 | 1 | -1/+6 | |
| | | | ||||||
| * | | Renamed list of additional peer addresses as it now stores all known addresses. | Tobias Brunner | 2012-03-09 | 4 | -9/+8 | |
| | | | ||||||
| * | | Check if ClusterIP directory could be opened before enumerating it | Martin Willi | 2012-02-06 | 1 | -17/+26 | |
| | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |