Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | kernel-libipsec: Fail route installation if remote TS matches peer | Tobias Brunner | 2013-07-18 | 1 | -0/+9 |
| | |||||
* | capabilities: Some plugins don't actually require capabilities at runtime | Tobias Brunner | 2013-07-18 | 1 | -1/+1 |
| | |||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -3/+4 |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
* | kernel-libipsec: Log error if no local address is found when installing routes | Tobias Brunner | 2013-07-15 | 1 | -0/+5 |
| | |||||
* | capabilities: Only plugins that require CAP_NET_ADMIN demand it | Tobias Brunner | 2013-06-25 | 1 | -0/+7 |
| | | | | The daemon as such does not require this capability. | ||||
* | kernel-libipsec: Ignore failures when installing routes for multicast or ↵ | Tobias Brunner | 2013-06-21 | 1 | -1/+23 |
| | | | | broadcast policies | ||||
* | kernel-libipsec: Add a feature to request UDP encapsulation of ESP packets | Tobias Brunner | 2013-06-21 | 1 | -0/+7 |
| | |||||
* | kernel-libipsec: Install a gateway for routes on platforms other than Linux | Tobias Brunner | 2013-06-21 | 1 | -9/+26 |
| | | | | This seems required e.g. on FreeBSD but doesn't work on Linux. | ||||
* | kernel-libipsec: Router reads packets from multiple TUN devices | Tobias Brunner | 2013-06-21 | 4 | -16/+268 |
| | | | | These devices are collected via kernel_listener_t interface. | ||||
* | kernel-libipsec: Use separate class to route packets between charon, ↵ | Tobias Brunner | 2013-06-21 | 4 | -74/+188 |
| | | | | libipsec and TUN device | ||||
* | kernel-libipsec: Track policies and automatically install routes | Tobias Brunner | 2013-06-21 | 1 | -5/+455 |
| | | | | | | | | The routes direct traffic matching the remote traffic selector to the TUN device. If the remote traffic selector includes the IKE peer a very specific route is installed to allow IKE traffic. | ||||
* | kernel-libipsec: Handle packets between charon socket, libipsec and TUN device | Tobias Brunner | 2013-06-21 | 1 | -0/+85 |
| | |||||
* | kernel-libipsec: Create a TUN device and use it to install virtual IPs | Tobias Brunner | 2013-06-21 | 2 | -0/+40 |
| | |||||
* | kernel-libipsec: Add plugin that implements kernel_ipsec_t using libipsec | Tobias Brunner | 2013-06-21 | 5 | -0/+385 |