aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/plugins/uci
Commit message (Collapse)AuthorAgeFilesLines
* Migrate all enumerators to venumerate() interface changeTobias Brunner2017-05-263-16/+27
|
* peer-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-7/+10
|
* child-cfg: Use struct to pass data to constructorTobias Brunner2016-04-091-9/+10
|
* libhydra: Remove empty unused libraryTobias Brunner2016-03-031-1/+0
|
* controller: Optionally adhere to init limits also when initiating IKE_SAsTobias Brunner2015-08-211-1/+1
|
* plugins: Don't link with -rdynamic on WindowsMartin Willi2014-06-041-1/+1
|
* ike: support multiple addresses, ranges and subnets in IKE address configMartin Willi2013-09-041-6/+4
| | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets.
* peer-cfg: add a pull/push mode option to use with mode configMartin Willi2013-09-041-1/+1
|
* automake: replace INCLUDES by AM_CPPFLAGSMartin Willi2013-07-181-3/+5
| | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only.
* child-sa: replace get_traffic_selectors() with create_ts_enumerator()Martin Willi2013-07-171-3/+5
| | | | | Not directly returning a linked list allows us to change the internals of the CHILD_SA transparently.
* uci: Use plugin features to register backend and credential setTobias Brunner2013-06-111-7/+32
|
* Merge branch 'opaque-ports'Martin Willi2013-03-011-1/+1
|\ | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends.
| * Use a complete port range in traffic_selector_create_from_{subnet,cidr}Martin Willi2013-02-211-2/+1
| |
* | Add a DSCP configuration value to IKE configsMartin Willi2013-02-061-3/+2
|/
* Added an option that allows to force IKEv1 fragmentationTobias Brunner2013-01-121-2/+4
|
* Use a connection specific option to en-/disable IKEv1 fragmentationTobias Brunner2012-12-241-2/+2
|
* Moved data structures to new collections subfolderTobias Brunner2012-10-241-1/+1
|
* Make use of new CIDR string ts constructor where appropriateMartin Willi2012-10-241-20/+4
|
* Remove version argument on peer_cfg constructor, use ike_cfg version insteadMartin Willi2012-10-241-1/+1
|
* Add IKE version information to ike_cfg_tMartin Willi2012-10-241-5/+7
|
* Support multiple address pools configured on a peer_cfgMartin Willi2012-08-301-1/+0
|
* Support multiple virtual IPs on peer_cfg and ike_sa classesMartin Willi2012-08-301-1/+1
|
* Replaced usages of CHARON_*_PORT with calls to get_port().Tobias Brunner2012-08-081-2/+2
|
* Make the UDP ports charon listens for packets on (and uses as source ports) ↵Tobias Brunner2012-08-081-2/+2
| | | | configurable.
* Centralized thread cancellation in processor_tTobias Brunner2012-06-251-9/+4
| | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation.
* implemented the right|leftallowany featureAndreas Steffen2012-06-081-3/+5
|
* make IKEv1 DPD timeout configurable in charonAndreas Steffen2012-05-171-1/+2
|
* Added an aggressive mode peer_cfg optionMartin Willi2012-03-201-1/+1
|
* Pass IKE version to peer config enumerator, filter configsMartin Willi2012-03-201-1/+1
|
* Use enum to define IKE version on peer_cfg_t.Tobias Brunner2012-03-201-1/+1
| | | | Replaced all those magic numbers.
* Migrated uci_config_t to INIT/METHOD macros.Tobias Brunner2011-10-041-59/+53
|
* Migrated uci_parser_t to INIT/METHOD macros.Tobias Brunner2011-10-041-24/+19
|
* Migrated uci_creds_t to INIT/METHOD macros.Tobias Brunner2011-10-041-36/+34
|
* Migrated uci_control_t to INIT/METHOD macros.Tobias Brunner2011-10-041-6/+8
|
* bus->listen() and the controller wrappers accept a timeout to wait for callbacksMartin Willi2011-08-261-3/+3
|
* Properly initialize the UCI plugin.Tobias Brunner2011-08-011-2/+2
|
* Replaced ike_sa_t.create_child_sa_iterator with enumerator.Tobias Brunner2011-07-061-4/+3
| | | | | This required two new methods on ike_sa_t. One returns the number of CHILD_SAs and one allows to remove a CHILD_SA.
* Use CRITICAL job priority class for long running dispatcher jobsMartin Willi2011-05-161-2/+2
|
* Added a non-blocking, skipping variant of IKE_SA enumeratorMartin Willi2011-05-161-2/+4
|
* Added a (not yet implemented) plugin_t method to reload plugin configurationMartin Willi2011-04-151-0/+1
|
* Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵Martin Willi2011-04-151-0/+7
| | | | over plugin_t
* Migrated remaining plugin_t implementations to INIT/METHOD macrosMartin Willi2011-04-151-11/+15
|
* Added a TFC padding option to child_cfgMartin Willi2010-12-201-1/+1
|
* start and route connections defined in an SQL database via start_action ↵Andreas Steffen2010-11-281-2/+2
| | | | field and ipsec up %startall command
* Refer to scheduler and processor via lib and not hydra.Tobias Brunner2010-09-021-2/+1
|
* Refer to processor via hydra and not charon.Tobias Brunner2010-09-021-1/+2
|
* Moved credential manager to libstrongswanMartin Willi2010-07-131-2/+2
|
* configuration of different marks for inbound and outbound directionAndreas Steffen2010-07-091-1/+2
|
* support of xfrm marks for IKEv2Andreas Steffen2010-07-021-1/+1
|
* Add reqid field and getter function to child_cfg_t.Reto Buerki2010-05-041-1/+1
|