aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins/sql/sql_config.c
Commit message (Collapse)AuthorAgeFilesLines
* sql: Use qualified names in SQL query statementsTobias Brunner2017-07-051-45/+48
| | | | | | | VIRTUAL is a new reserved keyword in MySQL 5.7.6 that caused some of these queries to fail. Fixes #2359.
* sql: Remove redundant enumerator allocationTobias Brunner2017-05-261-1/+1
| | | | | | Interestingly, this doesn't show up in the regression tests because the compiler removes the first assignment (and thus the allocation) due to -O2 that's included in our default CFLAGS.
* Migrate all enumerators to venumerate() interface changeTobias Brunner2017-05-261-33/+38
|
* child-cfg: Use flags for boolean optionsTobias Brunner2017-05-231-2/+2
| | | | Makes it potentially easier to add new flags.
* peer-cfg: Store mediated_by as name and not peer-cfg referenceTobias Brunner2017-02-161-3/+7
| | | | | | | | | This way updates to the mediation config are respected and the order in which configs are configured/loaded does not matter. The SQL plugin currently maintains the strong relationship between mediated and mediation connection (we could theoretically change that to a string too).
* peer-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-6/+24
|
* child-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-5/+15
|
* sql: Also do a reversed ID matchTobias Brunner2015-08-171-2/+9
| | | | | | | This is required for the case where IDr is not sent (i.e. is %any). The backend manager does the same. Fixes #1044.
* ike: Add an additional but separate AEAD proposal to CHILD configMartin Willi2014-05-161-0/+1
| | | | | | | This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless.
* ike: Add an additional but separate AEAD proposal to IKE config, if supportedMartin Willi2014-05-161-0/+1
|
* ike: support multiple addresses, ranges and subnets in IKE address configMartin Willi2013-09-041-4/+2
| | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
* peer-cfg: add a pull/push mode option to use with mode configMartin Willi2013-09-041-1/+1
|
* Add a DSCP configuration value to IKE configsMartin Willi2013-02-061-2/+1
|
* Added an option that allows to force IKEv1 fragmentationTobias Brunner2013-01-121-1/+2
|
* Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-241-1/+1
|
* Remove version argument on peer_cfg constructor, use ike_cfg version insteadMartin Willi2012-10-241-1/+1
|
* Add IKE version information to ike_cfg_tMartin Willi2012-10-241-2/+3
|
* Handle comma separated pools as multiple pool names in SQL pluginMartin Willi2012-08-301-1/+9
|
* Support multiple address pools configured on a peer_cfgMartin Willi2012-08-301-1/+5
|
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-301-1/+5
|
* Replaced usages of CHARON_*_PORT with calls to get_port().Tobias Brunner2012-08-081-1/+1
|
* Make the UDP ports charon listens for packets on (and uses as source ports) ↵Tobias Brunner2012-08-081-1/+1
| | | | configurable.
* implemented the right|leftallowany featureAndreas Steffen2012-06-081-1/+2
|
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-171-1/+1
|
* Added an aggressive mode peer_cfg optionMartin Willi2012-03-201-1/+1
|
* Use enum to define IKE version on peer_cfg_t.Tobias Brunner2012-03-201-1/+1
| | | | Replaced all those magic numbers.
* Added a TFC padding option to child_cfgMartin Willi2010-12-201-1/+1
|
* stupid typoAndreas Steffen2010-12-051-1/+1
|
* support of reqid field in SQL databaseAndreas Steffen2010-12-051-6/+7
|
* check for malformed IKE and ESP proposalsAndreas Steffen2010-12-011-0/+10
|
* Migrated sql_config_t to INIT/METHOD macrosAndreas Steffen2010-11-301-26/+20
|
* renamed algorithm to proposalAndreas Steffen2010-11-301-10/+11
|
* store IKE and ESP proposals in SQL databaseAndreas Steffen2010-11-301-16/+78
|
* start and route connections defined in an SQL database via start_action ↵Andreas Steffen2010-11-281-8/+9
| | | | field and ipsec up %startall command
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-091-1/+1
|
* support of xfrm marks for IKEv2Andreas Steffen2010-07-021-1/+1
|
* Add reqid field and getter function to child_cfg_t.Reto Buerki2010-05-041-1/+1
|
* Moving charon to libcharon.Tobias Brunner2010-03-191-0/+535