aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins/kernel_wfp
Commit message (Expand)AuthorAgeFilesLines
* kernel-wfp: Don't redefine IPPROTO_IP* if already definedTobias Brunner2017-03-231-0/+4
* kernel-net: Let get_nexthop() return an optional interface nameTobias Brunner2016-06-101-1/+1
* kernel: Use structs to pass information to the kernel-ipsec interfaceTobias Brunner2016-04-091-79/+75
* Use standard unsigned integer typesAndreas Steffen2016-03-241-61/+61
* libhydra: Remove empty unused libraryTobias Brunner2016-03-031-1/+0
* libhydra: Move kernel interface to libcharonTobias Brunner2016-03-031-15/+10
* kernel-interface: Pass the same data to del_policy() that was passed to add_p...Tobias Brunner2015-11-101-4/+5
* kernel-interface: Add a separate "update" flag to add_sa()Martin Willi2015-03-091-1/+1
* kernel-interface: Raise expires with a proto/SPI/dst tuple instead of reqidMartin Willi2015-02-201-7/+4
* kernel-interface: Pass full list of traffic selectors to add_sa()Martin Willi2015-02-201-1/+1
* kernel-interface: Remove reqid parameter from get_spi/get_cpi() methodsMartin Willi2015-02-201-2/+2
* kernel-wfp: Install outbound ALE connect rules for IPsecMartin Willi2014-12-041-16/+43
* kernel-wfp: Install inbound ALE IP-in-IP filtersMartin Willi2014-12-041-41/+159
* kernel-wfp: Add missing IPsec sublayer GUIDsMartin Willi2014-12-041-0/+6
* kernel-wfp: Define IPsec related ALE layers and callout GUIDsMartin Willi2014-12-042-0/+40
* kernel-wfp: Fix logging of MM/QM/EM NetEvent failuresMartin Willi2014-12-041-0/+12
* kernel-interface: Add destination prefix to get_nexthop()Tobias Brunner2014-06-191-1/+1
* kernel-interface: Add a replay_window parameter to add_sa()Martin Willi2014-06-171-2/+3
* windows: Use WINAPI call convention for Windows API callbacksMartin Willi2014-06-061-3/+3
* kernel-wfp: Include Windows header patch for MinGW 4.8.1Martin Willi2014-06-042-0/+29
* kernel-wfp: Clone acquire traffic selectors only if they existMartin Willi2014-06-041-1/+3
* kernel-wfp: Install routes for trap policiesMartin Willi2014-06-041-3/+21
* kernel-wfp: Refactor route management to separate functionMartin Willi2014-06-041-39/+47
* kernel-wfp: Install tunnel mode policies to appropriate sub-layersMartin Willi2014-06-042-6/+22
* kernel-wfp: Declare GUIDs and auth/cipher configs missing in some MinGW buildsMartin Willi2014-06-041-0/+89
* kernel-wfp: Support multiple traffic selectors on tunnel mode SAsMartin Willi2014-06-041-36/+80
* kernel-wfp: Show a warning for packets the kernel drops in its IPsec layersMartin Willi2014-06-041-0/+6
* kernel-wfp: Set flag to get UDP encapsulation with tunnel mode workingMartin Willi2014-06-042-0/+22
* kernel-wfp: Install tunnel and trap forward policiesMartin Willi2014-06-043-136/+275
* kernel-wfp: Manually create a ProviderContext to attach individual filtersMartin Willi2014-06-044-79/+73
* kernel-wfp: Print filter weight in "ipsecdump filters"Martin Willi2014-06-041-0/+4
* kernel-wfp: Add support for trap policies and acquiresMartin Willi2014-06-042-1/+304
* kernel-wfp: Implement bypass_socket() using dedicated filter rulesMartin Willi2014-06-041-2/+117
* kernel-wfp: Register for WFP Net eventsMartin Willi2014-06-042-0/+48
* kernel-wfp: Add some missing IPv6 GUIDs, fix IPv6 host conversionMartin Willi2014-06-042-2/+29
* kernel-wfp: Add an ipsecdump "filters" command to print IPsec related filtersMartin Willi2014-06-041-1/+282
* kernel-wfp: Add an ipsecdump utility to show installed SAs/SPs on WindowsMartin Willi2014-06-043-0/+432
* kernel-wfp: Depend on used RNG plugin featuresMartin Willi2014-06-041-0/+2
* kernel-wfp: Implement update_sa()Martin Willi2014-06-043-1/+114
* kernel-wfp: Configure ports for SAs using UDP encapsulationMartin Willi2014-06-041-0/+31
* kernel-wfp: Refactor SA context construction, and use IPsecSaContextCreate1()Martin Willi2014-06-041-19/+32
* kernel-wfp: Allocate SPIs pseudo-randomly using a 0xc prefixMartin Willi2014-06-041-2/+59
* kernel-wfp: Install appropriate routes for tunnel mode policiesMartin Willi2014-06-041-1/+208
* kernel-wfp: Disable IPsec policy updatesMartin Willi2014-06-041-4/+11
* kernel-wfp: Increment SPIs properly, that is while in host orderMartin Willi2014-06-041-2/+2
* kernel-wfp: Triggering expire events for SAs to rekey/deleteMartin Willi2014-06-041-0/+108
* kernel-wfp: Enforce hard lifetimes of SAsMartin Willi2014-06-041-0/+8
* kernel-wfp: Add some notes about query_sa/policy() supportMartin Willi2014-06-041-0/+5
* kernel-wfp: Reference SA/SP sets by SPI and destination, not reqidMartin Willi2014-06-041-255/+149
* kernel-wfp: Add support for tunnel mode connectionsMartin Willi2014-06-042-25/+215