tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	kernel-interface: Add destination prefix to get_nexthop()	Tobias Brunner	2014-06-19	1	-2/+2
\| \| \| \| \|	This allows to determine the next hop to reach a subnet, for instance, when installing routes for shunt policies.
*	kernel-interface: Add a replay_window parameter to add_sa()	Martin Willi	2014-06-17	1	-2/+3
\|
*	plugins: Don't link with -rdynamic on Windows	Martin Willi	2014-06-04	1	-1/+1
\|
*	libcharon: Use lib->ns instead of charon->name	Tobias Brunner	2014-02-12	1	-1/+1
\|
*	libhydra: Use lib->ns instead of hydra->daemon	Tobias Brunner	2014-02-12	1	-1/+1
\|
*	kernel-libipsec: Don't ignore policies of type != POLICY_IPSEC	Tobias Brunner	2013-10-11	1	-5/+0
\| \| \| \| \| \|	This actually broke rekeying due to the DROP policies that are temporarily added, which broke the refcount as the ignored policies were not ignored in del_policy() (the type is not known there).
*	kernel-libipsec: Add an option to allow remote TS to match the IKE peer	Tobias Brunner	2013-10-11	1	-2/+9
\| \| \| \| \| \| \| \|	Setting the fwmark options for the kernel-netlink and socket-default plugins allow this kind of setup. It is probably required to set net.ipv4.conf.all.rp_filter to 2 to make it work.
*	kernel-libipsec: Support ESPv3 TFC padding	Martin Willi	2013-10-11	1	-1/+1
\|
*	kernel-libipsec: Support query_sa() to report usage statistics	Martin Willi	2013-10-11	1	-1/+2
\|
*	kernel: Use a time_t to report use time in query_policy()	Martin Willi	2013-10-11	1	-1/+1
\|
*	kernel: Use a time_t to report use time in query_sa()	Martin Willi	2013-10-11	1	-1/+1
\|
*	kernel-libipsec: Fail route installation if remote TS matches peer	Tobias Brunner	2013-07-18	1	-0/+9
\|
*	capabilities: Some plugins don't actually require capabilities at runtime	Tobias Brunner	2013-07-18	1	-1/+1
\|
*	automake: replace INCLUDES by AM_CPPFLAGS	Martin Willi	2013-07-18	1	-3/+4
\| \| \| \| \| \|	INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only.
*	kernel-libipsec: Log error if no local address is found when installing routes	Tobias Brunner	2013-07-15	1	-0/+5
\|
*	capabilities: Only plugins that require CAP_NET_ADMIN demand it	Tobias Brunner	2013-06-25	1	-0/+7
\| \| \| \|	The daemon as such does not require this capability.
*	kernel-libipsec: Ignore failures when installing routes for multicast or ↵	Tobias Brunner	2013-06-21	1	-1/+23
\| \| \| \|	broadcast policies
*	kernel-libipsec: Add a feature to request UDP encapsulation of ESP packets	Tobias Brunner	2013-06-21	1	-0/+7
\|
*	kernel-libipsec: Install a gateway for routes on platforms other than Linux	Tobias Brunner	2013-06-21	1	-9/+26
\| \| \| \|	This seems required e.g. on FreeBSD but doesn't work on Linux.
*	kernel-libipsec: Router reads packets from multiple TUN devices	Tobias Brunner	2013-06-21	4	-16/+268
\| \| \| \|	These devices are collected via kernel_listener_t interface.
*	kernel-libipsec: Use separate class to route packets between charon, ↵	Tobias Brunner	2013-06-21	4	-74/+188
\| \| \| \|	libipsec and TUN device
*	kernel-libipsec: Track policies and automatically install routes	Tobias Brunner	2013-06-21	1	-5/+455
\| \| \| \| \| \| \| \|	The routes direct traffic matching the remote traffic selector to the TUN device. If the remote traffic selector includes the IKE peer a very specific route is installed to allow IKE traffic.
*	kernel-libipsec: Handle packets between charon socket, libipsec and TUN device	Tobias Brunner	2013-06-21	1	-0/+85
\|
*	kernel-libipsec: Create a TUN device and use it to install virtual IPs	Tobias Brunner	2013-06-21	2	-0/+40
\|
*	kernel-libipsec: Add plugin that implements kernel_ipsec_t using libipsec	Tobias Brunner	2013-06-21	5	-0/+385