tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	kernel-pfkey: Support anti-replay windows > 2k	Tobias Brunner	2017-11-08	1	-1/+14
\| \| \| \| \| \| \|	FreeBSD 11.1 supports a new extension to configure larger anti-replay windows, now configured as number of packets. Fixes #2461.
*	kernel-pfkey: Don't include keys in SADB_UPDATE message to update IPs on FreeBSD	Tobias Brunner	2017-11-08	1	-0/+3
\| \| \| \| \| \|	The FreeBSD kernel explicitly rejects messages containing keys for mature SAs. Fixes #2457.
*	linked-list: Change return value of find_first() and signature of its callback	Tobias Brunner	2017-05-26	1	-25/+20
\| \| \| \|	This avoids the unportable five pointer hack.
*	linked-list: Change interface of callback for invoke_function()	Tobias Brunner	2017-05-26	1	-9/+26
\| \| \| \|	This avoids the unportable five pointer hack.
*	kernel-pfkey: Update SA addresses if supported by the kernel	Tobias Brunner	2017-05-23	1	-21/+16
\| \| \| \| \| \|	Upcoming FreeBSD kernels will support updating the addresses of existing SAs with new SADB_X_EXT_NEW_ADDRESS_SRC\|DST extensions for the SADB_UPDATE message.
*	kernel-pfkey: Use new encap flag on Mac OS X when updating SAs	Tobias Brunner	2017-05-23	1	-1/+1
\|
*	kernel: Make range of SPIs for IPsec SAs configurable	Tobias Brunner	2017-03-02	1	-3/+10
\|
*	kernel-pfkey: Use the same priority range for trap and regular policies	Tobias Brunner	2017-02-08	1	-15/+15
\| \| \| \|	Same as the change in the kernel-netlink plugin.
*	kernel-pfkey: Set state to SADB_SASTATE_MATURE when adding/updating SAs	Tobias Brunner	2017-01-25	1	-0/+2
\| \| \| \| \| \| \|	Picky kernels might otherwise reject our messages as RFC 2367 explicitly mandates this. Fixes #2212.
*	kernel-pfkey: Only set the replay window for inbound SAs	Tobias Brunner	2016-06-17	1	-3/+8
\| \| \| \| \|	It is not necessary for outbound SAs and might waste memory when large window sizes are used.
*	kernel-pfkey: Install routes with OUT policies	Tobias Brunner	2016-06-10	1	-31/+30
\|
*	kernel-pfkey: Don't install routes for drop policies and if protocol/ports ↵	Tobias Brunner	2016-06-10	1	-3/+10
\| \| \| \|	are in the selector
*	kernel-pfkey: Also use interface returned by get_nexthop() for IPsec policies	Tobias Brunner	2016-06-10	1	-1/+3
\| \| \| \| \|	An exception is if the local address is virtual, in which case we want the route to be via TUN device.
*	kernel-pfkey: Use interface to next hop for shunt policies	Tobias Brunner	2016-06-10	1	-2/+3
\|
*	kernel-net: Let get_nexthop() return an optional interface name	Tobias Brunner	2016-06-10	1	-3/+3
\| \| \| \| \|	The returned name should be the interface over which the destination address/net is reachable.
*	kernel-pfkey: Use ipsec_sa_cfg_equals()	Tobias Brunner	2016-06-08	1	-1/+1
\|
*	kernel-pfkey: Add support for manual priorities	Tobias Brunner	2016-04-15	1	-7/+24
\| \| \| \|	Also orders policies with equals priorities by their automatic priority.
*	kernel-pfkey: Update priority calculation formula to the new one in ↵	Tobias Brunner	2016-04-15	1	-14/+25
\| \| \| \| \| \| \|	kernel-netlink Since the selectors are not exactly the same (no port masks, no interface) some small tweaks have been applied.
*	kernel-pfkey: Prefer policies with reqid over those without	Tobias Brunner	2016-04-09	1	-1/+7
\|
*	kernel-pfkey: Only install templates for regular IPsec policies with reqid	Tobias Brunner	2016-04-09	1	-32/+35
\|
*	kernel: Use structs to pass information to the kernel-ipsec interface	Tobias Brunner	2016-04-09	1	-167/+210
\|
*	Use standard unsigned integer types	Andreas Steffen	2016-03-24	1	-55/+55
\|
*	libhydra: Move kernel interface to libcharon	Tobias Brunner	2016-03-03	1	-39/+31
\| \| \| \|	This moves hydra->kernel_interface to charon->kernel.
*	libhydra: Move all kernel plugins to libcharon	Tobias Brunner	2016-03-03	1	-0/+3102
\|
*	Moved all kernel plugins to libhydra.	Tobias Brunner	2010-09-02	1	-2172/+0
\|
*	Refer to kernel interface via hydra and not charon.	Tobias Brunner	2010-09-02	1	-16/+16
\|
*	Removed references to protocol_id_t from kernel interface.	Tobias Brunner	2010-09-02	1	-43/+27
\| \| \| \| \|	Instead we use the actual IP protocol identifier (the conversion now happens in child_sa_t and kernel_handler_t).
*	Moved migrate job creation to kernel event handler.	Tobias Brunner	2010-09-02	1	-7/+2
\|
*	Moved update SA job creation to kernel event handler.	Tobias Brunner	2010-09-02	1	-7/+4
\|
*	Moved delete/rekey CHILD_SA job creation to kernel event handler.	Tobias Brunner	2010-09-02	1	-15/+2
\|
*	Moved acquire job creation to kernel event handler.	Tobias Brunner	2010-09-02	1	-8/+4
\|
*	Refer to processor via hydra and not charon.	Tobias Brunner	2010-09-02	1	-5/+6
\|
*	Use a seperate section for each nested struct member in INIT macro	Martin Willi	2010-08-18	1	-12/+14
\|
*	support of xfrm marks for IKEv2	Andreas Steffen	2010-07-02	1	-11/+14
\|
*	Do not install routes in the PF_KEY kernel interface if interface lookup failed.	Tobias Brunner	2010-06-23	1	-15/+23
\|
*	Fixing the PF_KEY kernel interface on Android.	Tobias Brunner	2010-06-22	1	-0/+2
\| \| \| \|	In Android's in.h IPPROTO_COMP is not #defined but just an enum member.
*	Check for SADB_X_NAT_T_NEW_MAPPING in PF_KEY kernel interface.	Tobias Brunner	2010-06-15	1	-4/+4
\| \| \| \| \|	FreeBSD 8 does not support SADB_X_NAT_T_NEW_MAPPING whereas Linux and the previous FreeBSD NAT-T patch both do.
*	Set the ports of all hosts installed via the PF_KEY kernel interface to zero.	Tobias Brunner	2010-06-15	1	-15/+37
\|
*	Moving charon to libcharon.	Tobias Brunner	2010-03-19	1	-0/+2175