Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | maemo: Remove unused plugin | Tobias Brunner | 2016-09-15 | 1 | -530/+0 |
| | |||||
* | peer-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -8/+9 |
| | |||||
* | child-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -9/+10 |
| | |||||
* | ike: Add an additional but separate AEAD proposal to CHILD config | Martin Willi | 2014-05-16 | 1 | -0/+1 |
| | | | | | | | This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless. | ||||
* | ike: Add an additional but separate AEAD proposal to IKE config, if supported | Martin Willi | 2014-05-16 | 1 | -0/+1 |
| | |||||
* | ike: support multiple addresses, ranges and subnets in IKE address config | Martin Willi | 2013-09-04 | 1 | -3/+2 |
| | | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets. | ||||
* | peer-cfg: add a pull/push mode option to use with mode config | Martin Willi | 2013-09-04 | 1 | -1/+1 |
| | |||||
* | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -2/+2 |
| | |||||
* | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -1/+1 |
| | |||||
* | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -1/+1 |
| | |||||
* | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | |||||
* | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | |||||
* | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 1 | -1/+2 |
| | |||||
* | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | | | | configurable. | ||||
* | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 1 | -4/+12 |
| | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | ||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -2/+2 |
| | |||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -1/+2 |
| | |||||
* | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | |||||
* | Handle initiation of not supported IKE versions properly | Martin Willi | 2012-03-20 | 1 | -2/+8 |
| | |||||
* | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 1 | -1/+2 |
| | | | | Replaced all those magic numbers. | ||||
* | bus->listen() and the controller wrappers accept a timeout to wait for callbacks | Martin Willi | 2011-08-26 | 1 | -1/+1 |
| | |||||
* | Use CRITICAL job priority class for long running dispatcher jobs | Martin Willi | 2011-05-16 | 1 | -1/+2 |
| | |||||
* | maemo: Listen for IKE_SA state changes insted of CHILD_SA state changes. | Tobias Brunner | 2011-02-04 | 1 | -7/+6 |
| | | | | | If the IKE_SA_INIT request fails, there is not yet a CHILD_SA that could trigger state changes. | ||||
* | Added a TFC padding option to child_cfg | Martin Willi | 2010-12-20 | 1 | -1/+1 |
| | |||||
* | start and route connections defined in an SQL database via start_action ↵ | Andreas Steffen | 2010-11-28 | 1 | -1/+1 |
| | | | | field and ipsec up %startall command | ||||
* | Maemo: Load CA certificates from system directories. | Tobias Brunner | 2010-10-14 | 1 | -6/+58 |
| | |||||
* | Maemo: Track the status of the current SA and send changes to the frontend. | Tobias Brunner | 2010-10-14 | 1 | -31/+97 |
| | |||||
* | Maemo: Properly unregister the RPC callbacks. | Tobias Brunner | 2010-10-14 | 1 | -0/+6 |
| | |||||
* | Maemo: Plugin implements the listener_t interface. | Tobias Brunner | 2010-10-14 | 1 | -0/+44 |
| | |||||
* | Maemo: Extracted most plugin code to a separate class, so we can use that as ↵ | Tobias Brunner | 2010-10-14 | 1 | -0/+342 |
listener. |