Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | sql: Use qualified names in SQL query statements | Tobias Brunner | 2017-07-05 | 1 | -45/+48 |
| | | | | | | | VIRTUAL is a new reserved keyword in MySQL 5.7.6 that caused some of these queries to fail. Fixes #2359. | ||||
* | sql: Remove redundant enumerator allocation | Tobias Brunner | 2017-05-26 | 1 | -1/+1 |
| | | | | | | Interestingly, this doesn't show up in the regression tests because the compiler removes the first assignment (and thus the allocation) due to -O2 that's included in our default CFLAGS. | ||||
* | Migrate all enumerators to venumerate() interface change | Tobias Brunner | 2017-05-26 | 1 | -33/+38 |
| | |||||
* | child-cfg: Use flags for boolean options | Tobias Brunner | 2017-05-23 | 1 | -2/+2 |
| | | | | Makes it potentially easier to add new flags. | ||||
* | peer-cfg: Store mediated_by as name and not peer-cfg reference | Tobias Brunner | 2017-02-16 | 1 | -3/+7 |
| | | | | | | | | | This way updates to the mediation config are respected and the order in which configs are configured/loaded does not matter. The SQL plugin currently maintains the strong relationship between mediated and mediation connection (we could theoretically change that to a string too). | ||||
* | peer-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -6/+24 |
| | |||||
* | child-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -5/+15 |
| | |||||
* | sql: Also do a reversed ID match | Tobias Brunner | 2015-08-17 | 1 | -2/+9 |
| | | | | | | | This is required for the case where IDr is not sent (i.e. is %any). The backend manager does the same. Fixes #1044. | ||||
* | ike: Add an additional but separate AEAD proposal to CHILD config | Martin Willi | 2014-05-16 | 1 | -0/+1 |
| | | | | | | | This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless. | ||||
* | ike: Add an additional but separate AEAD proposal to IKE config, if supported | Martin Willi | 2014-05-16 | 1 | -0/+1 |
| | |||||
* | ike: support multiple addresses, ranges and subnets in IKE address config | Martin Willi | 2013-09-04 | 1 | -4/+2 |
| | | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets. | ||||
* | peer-cfg: add a pull/push mode option to use with mode config | Martin Willi | 2013-09-04 | 1 | -1/+1 |
| | |||||
* | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -2/+1 |
| | |||||
* | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -1/+2 |
| | |||||
* | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -1/+1 |
| | |||||
* | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -2/+3 |
| | |||||
* | Handle comma separated pools as multiple pool names in SQL plugin | Martin Willi | 2012-08-30 | 1 | -1/+9 |
| | |||||
* | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -1/+5 |
| | |||||
* | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -1/+5 |
| | |||||
* | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | |||||
* | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | | | | configurable. | ||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -1/+2 |
| | |||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -1/+1 |
| | |||||
* | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | |||||
* | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 |
| | | | | Replaced all those magic numbers. | ||||
* | Added a TFC padding option to child_cfg | Martin Willi | 2010-12-20 | 1 | -1/+1 |
| | |||||
* | stupid typo | Andreas Steffen | 2010-12-05 | 1 | -1/+1 |
| | |||||
* | support of reqid field in SQL database | Andreas Steffen | 2010-12-05 | 1 | -6/+7 |
| | |||||
* | check for malformed IKE and ESP proposals | Andreas Steffen | 2010-12-01 | 1 | -0/+10 |
| | |||||
* | Migrated sql_config_t to INIT/METHOD macros | Andreas Steffen | 2010-11-30 | 1 | -26/+20 |
| | |||||
* | renamed algorithm to proposal | Andreas Steffen | 2010-11-30 | 1 | -10/+11 |
| | |||||
* | store IKE and ESP proposals in SQL database | Andreas Steffen | 2010-11-30 | 1 | -16/+78 |
| | |||||
* | start and route connections defined in an SQL database via start_action ↵ | Andreas Steffen | 2010-11-28 | 1 | -8/+9 |
| | | | | field and ipsec up %startall command | ||||
* | configuration of different marks for inbound and outbound direction | Andreas Steffen | 2010-07-09 | 1 | -1/+1 |
| | |||||
* | support of xfrm marks for IKEv2 | Andreas Steffen | 2010-07-02 | 1 | -1/+1 |
| | |||||
* | Add reqid field and getter function to child_cfg_t. | Reto Buerki | 2010-05-04 | 1 | -1/+1 |
| | |||||
* | Moving charon to libcharon. | Tobias Brunner | 2010-03-19 | 1 | -0/+535 |