Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | packet: Define a global default maximum size for IKE packets | Tobias Brunner | 2014-10-10 | 1 | -4/+1 |
| | |||||
* | plugins: Don't link with -rdynamic on Windows | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | |||||
* | libcharon: Use lib->ns instead of charon->name | Tobias Brunner | 2014-02-12 | 1 | -7/+7 |
| | |||||
* | socket-default: Allow setting firewall mark on outbound packets | Tobias Brunner | 2013-10-11 | 1 | -0/+18 |
| | |||||
* | sockets: Initialize the whole ancillary data buffer not only the actual struct | Tobias Brunner | 2013-09-10 | 1 | -2/+2 |
| | | | | | | This avoids uninitialized bytes that Valgrind seems to notice otherwise. Fixes #395. | ||||
* | capabilities: Some plugins don't actually require capabilities at runtime | Tobias Brunner | 2013-07-18 | 1 | -1/+1 |
| | |||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -4/+7 |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
* | socket-default: Add options to disable address families | Tobias Brunner | 2013-07-05 | 1 | -0/+25 |
| | |||||
* | net: Socket implementations report the address families they support | Tobias Brunner | 2013-07-05 | 1 | -1/+18 |
| | |||||
* | socket-default: Require CAP_NET_BIND_SERVICE for ports < 1024 | Tobias Brunner | 2013-06-25 | 1 | -0/+12 |
| | | | | | Since we don't know which ports are used with socket-dynamic we can't demand the capability there, but it might still be required. | ||||
* | socket-default: Make sure sockets are open when checking with FD_ISSET | Tobias Brunner | 2013-06-14 | 1 | -4/+4 |
| | |||||
* | socket-default: Properly initialize NAT-T port if opening regular socket failed | Tobias Brunner | 2013-06-14 | 1 | -1/+2 |
| | |||||
* | Socket plugins soft depend on the kernel-ipsec plugin feature | Tobias Brunner | 2013-06-11 | 1 | -0/+1 |
| | | | | | On most platforms calls to methods to bypass the IKE sockets and enabling UDP decapsulation are required. | ||||
* | socket-default: to bind to one dynamic port on OS X, create v4 socket before v6 | Martin Willi | 2013-05-06 | 1 | -1/+7 |
| | | | | | It seems that the order of binding sockets of different address families to the same dynamic port must be v6-before-v4 on Linux, but v4-before-v6 on OS X. | ||||
* | socket-default: refactor socket pair opening to a function | Martin Willi | 2013-05-06 | 1 | -27/+23 |
| | |||||
* | socket-default: Don't try to send packet if we haven't a socket for given family | Martin Willi | 2013-05-06 | 1 | -3/+4 |
| | |||||
* | socket-default: Use -1 if socket is not available, as 0 is actually a valid fd | Martin Willi | 2013-05-06 | 1 | -20/+23 |
| | |||||
* | Set DSCP values when sending IP packets in socket-default | Martin Willi | 2013-02-06 | 1 | -1/+65 |
| | |||||
* | Don't send a packet in default socket if family is not IPv4 nor IPv6 | Martin Willi | 2013-02-06 | 1 | -12/+18 |
| | |||||
* | Avoid extensive casting of sockaddr types in socket-default by using a union | Martin Willi | 2013-02-06 | 1 | -24/+16 |
| | | | | Additionally fixes a strict-aliasing rule compiler warning with older gcc. | ||||
* | Clarified error message if enabling UDP decapsulation fails | Tobias Brunner | 2012-09-27 | 1 | -1/+2 |
| | |||||
* | Enable UDP decapsulation for both address families | Tobias Brunner | 2012-08-16 | 1 | -7/+9 |
| | | | | | | | | Since the 3.5 Linux kernel both UDP implementations have a separate static flag to indicate whether ANY sockets enabled UDP decapsulation. As we only ever enabled it for one address family (in earlier versions IPv4 only, now for IPv6, if supported, and for IPv4 otherwise) UDP decapsulation wouldn't work anymore (at least for one address family). | ||||
* | Added option to prevent socket-default from setting the source address on ↵ | Tobias Brunner | 2012-08-08 | 1 | -1/+9 |
| | | | | outbound packets | ||||
* | socket-default plugin allocates random ports if configured to 0. | Tobias Brunner | 2012-08-08 | 1 | -36/+84 |
| | | | | Also added strongswan.conf options to change the ports. | ||||
* | Added get_port() method to socket_t to learn the listening port. | Tobias Brunner | 2012-08-08 | 1 | -1/+8 |
| | |||||
* | Improved how NAT-T keepalives are handled in sockets/receiver. | Tobias Brunner | 2012-08-08 | 1 | -10/+0 |
| | |||||
* | Let kernel interfaces decide how to enable UDP decapsulation of ESP packets. | Tobias Brunner | 2012-08-08 | 1 | -36/+6 |
| | |||||
* | Add Non-ESP marker in sender and not individual socket plugins. | Tobias Brunner | 2012-08-08 | 1 | -12/+1 |
| | |||||
* | Handle Non-ESP marker in receiver and not individual socket plugins. | Tobias Brunner | 2012-08-08 | 1 | -13/+4 |
| | |||||
* | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -13/+13 |
| | | | | configurable. | ||||
* | Use proper defines for IPV6_PKTINFO on Mac OS X Lion and newer. | Tobias Brunner | 2012-06-13 | 1 | -0/+2 |
| | |||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 1 | -1/+1 |
| | | | | Also fixes several whitespace errors. | ||||
* | Add features support to socket-default plugin | Martin Willi | 2011-10-14 | 1 | -7/+12 |
| | |||||
* | Fix alignement compiler warning | Martin Willi | 2011-06-03 | 1 | -5/+4 |
| | |||||
* | Added a (not yet implemented) plugin_t method to reload plugin configuration | Martin Willi | 2011-04-15 | 1 | -0/+1 |
| | |||||
* | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 1 | -1/+7 |
| | | | | over plugin_t | ||||
* | Deferred instantiation of socket implmentations until registration. | Tobias Brunner | 2010-10-15 | 3 | -20/+9 |
| | | | | | | Instantiating the implementations on plugin load was problematic in case multiple socket plugins were loaded. Now, the first one registered is instantiated. | ||||
* | Refer to kernel interface via hydra and not charon. | Tobias Brunner | 2010-09-02 | 1 | -2/+3 |
| | |||||
* | Win7 might send up to 7k of certificate requests | Andreas Steffen | 2010-08-27 | 1 | -1/+1 |
| | |||||
* | Use a seperate section for each nested struct member in INIT macro | Martin Willi | 2010-08-18 | 1 | -1/+5 |
| | |||||
* | Discard a packet that exceeds the receive buffer | Martin Willi | 2010-08-11 | 1 | -0/+5 |
| | |||||
* | Added a strongswan.conf option to change socket receive buffer size | Martin Willi | 2010-08-11 | 1 | -8/+9 |
| | |||||
* | Respect line with in Makefile.am's, other cosmetics | Martin Willi | 2010-03-25 | 1 | -1/+2 |
| | |||||
* | Changed all usages of lib->attributes to hydra->attributes. | Tobias Brunner | 2010-03-24 | 1 | -1/+1 |
| | |||||
* | Convert charon into libcharon. | Tobias Brunner | 2010-03-19 | 1 | -1/+1 |
| | |||||
* | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 5 | -0/+807 |