Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Migrate all enumerators to venumerate() interface change | Tobias Brunner | 2017-05-26 | 3 | -16/+27 |
| | |||||
* | peer-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -7/+10 |
| | |||||
* | child-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -9/+10 |
| | |||||
* | libhydra: Remove empty unused library | Tobias Brunner | 2016-03-03 | 1 | -1/+0 |
| | |||||
* | controller: Optionally adhere to init limits also when initiating IKE_SAs | Tobias Brunner | 2015-08-21 | 1 | -1/+1 |
| | |||||
* | plugins: Don't link with -rdynamic on Windows | Martin Willi | 2014-06-04 | 1 | -1/+1 |
| | |||||
* | ike: support multiple addresses, ranges and subnets in IKE address config | Martin Willi | 2013-09-04 | 1 | -6/+4 |
| | | | | | | | Replace the allowany semantic by a more powerful subnet and IP range matching. Multiple addresses, DNS names, subnets and ranges can be specified in a comma separated list. Initiators ignore the ranges/subnets, responders match configurations against all addresses, ranges and subnets. | ||||
* | peer-cfg: add a pull/push mode option to use with mode config | Martin Willi | 2013-09-04 | 1 | -1/+1 |
| | |||||
* | automake: replace INCLUDES by AM_CPPFLAGS | Martin Willi | 2013-07-18 | 1 | -3/+5 |
| | | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only. | ||||
* | child-sa: replace get_traffic_selectors() with create_ts_enumerator() | Martin Willi | 2013-07-17 | 1 | -3/+5 |
| | | | | | Not directly returning a linked list allows us to change the internals of the CHILD_SA transparently. | ||||
* | uci: Use plugin features to register backend and credential set | Tobias Brunner | 2013-06-11 | 1 | -7/+32 |
| | |||||
* | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 1 | -1/+1 |
|\ | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | ||||
| * | Use a complete port range in traffic_selector_create_from_{subnet,cidr} | Martin Willi | 2013-02-21 | 1 | -2/+1 |
| | | |||||
* | | Add a DSCP configuration value to IKE configs | Martin Willi | 2013-02-06 | 1 | -3/+2 |
|/ | |||||
* | Added an option that allows to force IKEv1 fragmentation | Tobias Brunner | 2013-01-12 | 1 | -2/+4 |
| | |||||
* | Use a connection specific option to en-/disable IKEv1 fragmentation | Tobias Brunner | 2012-12-24 | 1 | -2/+2 |
| | |||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Make use of new CIDR string ts constructor where appropriate | Martin Willi | 2012-10-24 | 1 | -20/+4 |
| | |||||
* | Remove version argument on peer_cfg constructor, use ike_cfg version instead | Martin Willi | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Add IKE version information to ike_cfg_t | Martin Willi | 2012-10-24 | 1 | -5/+7 |
| | |||||
* | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 1 | -1/+0 |
| | |||||
* | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -1/+1 |
| | |||||
* | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 1 | -2/+2 |
| | |||||
* | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -2/+2 |
| | | | | configurable. | ||||
* | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 1 | -9/+4 |
| | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | ||||
* | implemented the right|leftallowany feature | Andreas Steffen | 2012-06-08 | 1 | -3/+5 |
| | |||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -1/+2 |
| | |||||
* | Added an aggressive mode peer_cfg option | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | |||||
* | Pass IKE version to peer config enumerator, filter configs | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | |||||
* | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 |
| | | | | Replaced all those magic numbers. | ||||
* | Migrated uci_config_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-04 | 1 | -59/+53 |
| | |||||
* | Migrated uci_parser_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-04 | 1 | -24/+19 |
| | |||||
* | Migrated uci_creds_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-04 | 1 | -36/+34 |
| | |||||
* | Migrated uci_control_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-04 | 1 | -6/+8 |
| | |||||
* | bus->listen() and the controller wrappers accept a timeout to wait for callbacks | Martin Willi | 2011-08-26 | 1 | -3/+3 |
| | |||||
* | Properly initialize the UCI plugin. | Tobias Brunner | 2011-08-01 | 1 | -2/+2 |
| | |||||
* | Replaced ike_sa_t.create_child_sa_iterator with enumerator. | Tobias Brunner | 2011-07-06 | 1 | -4/+3 |
| | | | | | This required two new methods on ike_sa_t. One returns the number of CHILD_SAs and one allows to remove a CHILD_SA. | ||||
* | Use CRITICAL job priority class for long running dispatcher jobs | Martin Willi | 2011-05-16 | 1 | -2/+2 |
| | |||||
* | Added a non-blocking, skipping variant of IKE_SA enumerator | Martin Willi | 2011-05-16 | 1 | -2/+4 |
| | |||||
* | Added a (not yet implemented) plugin_t method to reload plugin configuration | Martin Willi | 2011-04-15 | 1 | -0/+1 |
| | |||||
* | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 1 | -0/+7 |
| | | | | over plugin_t | ||||
* | Migrated remaining plugin_t implementations to INIT/METHOD macros | Martin Willi | 2011-04-15 | 1 | -11/+15 |
| | |||||
* | Added a TFC padding option to child_cfg | Martin Willi | 2010-12-20 | 1 | -1/+1 |
| | |||||
* | start and route connections defined in an SQL database via start_action ↵ | Andreas Steffen | 2010-11-28 | 1 | -2/+2 |
| | | | | field and ipsec up %startall command | ||||
* | Refer to scheduler and processor via lib and not hydra. | Tobias Brunner | 2010-09-02 | 1 | -2/+1 |
| | |||||
* | Refer to processor via hydra and not charon. | Tobias Brunner | 2010-09-02 | 1 | -1/+2 |
| | |||||
* | Moved credential manager to libstrongswan | Martin Willi | 2010-07-13 | 1 | -2/+2 |
| | |||||
* | configuration of different marks for inbound and outbound direction | Andreas Steffen | 2010-07-09 | 1 | -1/+2 |
| | |||||
* | support of xfrm marks for IKEv2 | Andreas Steffen | 2010-07-02 | 1 | -1/+1 |
| | |||||
* | Add reqid field and getter function to child_cfg_t. | Reto Buerki | 2010-05-04 | 1 | -1/+1 |
| |