Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Change interface for enumerator_create_filter() callback | Tobias Brunner | 2017-05-26 | 1 | -13/+16 |
| | | | | | This avoids the unportable 5 pointer hack, but requires enumerating in the callback. | ||||
* | Migrate all enumerators to venumerate() interface change | Tobias Brunner | 2017-05-26 | 1 | -3/+7 |
| | |||||
* | shunt-manager: Add an optional namespace for each shunt | Tobias Brunner | 2017-02-16 | 1 | -2/+3 |
| | | | | | This will allow us to reuse the names of child configs e.g. when they are defined in different connections. | ||||
* | child-cfg: Use struct to pass data to constructor | Tobias Brunner | 2016-04-09 | 1 | -4/+4 |
| | |||||
* | attribute-handler: Pass full IKE_SA to handler backends | Martin Willi | 2015-02-20 | 1 | -4/+3 |
| | |||||
* | unity: Reference IKE_SAs by the IKEv1 COOKIEs, improving lookup performance | Martin Willi | 2015-02-20 | 1 | -10/+12 |
| | | | | | When handling thousands of IKE_SAs, the unique ID based lookup is rather slow, as we have no indexing. | ||||
* | ike-sa-manager: Remove IKE_SA checkout by CHILD_SA reqid | Martin Willi | 2015-02-20 | 1 | -1/+1 |
| | |||||
* | unity: Handle multi-valued UNITY_SPLIT_INCLUDE/UNITY_LOCAL_LAN attributes | Tobias Brunner | 2013-07-29 | 1 | -50/+97 |
| | | | | | | | Cisco devices seem to add 6 bytes of padding between each address/mask pair. Fixes #366. | ||||
* | unity: Allow UNITY_LOCAL_LAN to be longer than 8 bytes | Tobias Brunner | 2013-07-17 | 1 | -1/+1 |
| | |||||
* | unity: Check IKE_SA in only after enumerating virtual IPs | Tobias Brunner | 2013-04-05 | 1 | -2/+1 |
| | |||||
* | Merge branch 'vip-shunts' | Martin Willi | 2013-03-01 | 1 | -11/+6 |
|\ | | | | | | | | | | | | | | | | | Installs bypass policies for the physical address if a virtual address is assigned, and installs a proper source route to actually use the physical address for bypassed destinations. Conflicts: src/libcharon/plugins/unity/unity_handler.c | ||||
| * | Include local address for Unity Split-Exclude shunt policies | Martin Willi | 2013-02-20 | 1 | -10/+5 |
| | | | | | | | | | | If we use a virtual IP, having a shunt policy for just that wouldn't work, as we want a shunt bypass using the local address. | ||||
* | | Use a complete port range in traffic_selector_create_from_{subnet,cidr} | Martin Willi | 2013-02-21 | 1 | -2/+4 |
|/ | |||||
* | Fixed some typos, courtesy of codespell | Tobias Brunner | 2012-12-20 | 1 | -1/+1 |
| | |||||
* | Compiler warning fixed | Tobias Brunner | 2012-11-02 | 1 | -1/+1 |
| | |||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Enable Cisco Unity only if Unity vendor id received | Martin Willi | 2012-09-18 | 1 | -1/+2 |
| | |||||
* | Request Unity configuration attributes for IKEv1 only | Martin Willi | 2012-09-18 | 1 | -0/+6 |
| | |||||
* | Add Cisco Unity client support for Split-Include and Local-LAN | Martin Willi | 2012-09-18 | 1 | -0/+426 |