Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Log message size for in- and outbound IKE messages | Tobias Brunner | 2012-12-24 | 1 | -2/+3 |
| | |||||
* | Raise an alert if half-open timeout limit reached | Martin Willi | 2012-12-19 | 1 | -0/+1 |
| | |||||
* | Properly trigger ike_updown() event if IKEv1 DPD times out | Martin Willi | 2012-12-04 | 1 | -0/+1 |
| | | | | Fixes missing RADIUS Accounting Stop, #257. | ||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Moved host_t and host_resolver_t to a new networking subfolder | Tobias Brunner | 2012-10-24 | 2 | -2/+2 |
| | |||||
* | Support multiple virtual IPs on peer_cfg and ike_sa classes | Martin Willi | 2012-08-30 | 1 | -3/+12 |
| | |||||
* | Replaced usages of CHARON_*_PORT with calls to get_port(). | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | |||||
* | Make the UDP ports charon listens for packets on (and uses as source ports) ↵ | Tobias Brunner | 2012-08-08 | 1 | -1/+1 |
| | | | | configurable. | ||||
* | Make rescheduling a job more predictable | Tobias Brunner | 2012-06-25 | 1 | -6/+4 |
| | | | | | | | | | | | | | This avoids race conditions between calls to cancel() and jobs that like to be rescheduled. If jobs were able to reschedule themselves it would theoretically be possible that two worker threads have the same job assigned (the one currently executing the job and the one executing the same but rescheduled job if it already is time to execute it), this means that cancel() could be called twice for that job. Creating a new job based on the current one and reschedule that is also OK, but rescheduling itself is more efficient for jobs that need to be executed often. | ||||
* | Give processor_t more control over the lifecycle of a job | Tobias Brunner | 2012-06-25 | 19 | -59/+51 |
| | | | | | | | | | | | Jobs are now destroyed by the processor, but they are allowed to reschedule themselves. That is, parts of the reschedule functionality already provided by callback_job_t is moved to the processor. Not yet fully supported is JOB_REQUEUE_DIRECT and canceling jobs. Note: job_t.destroy() is now called not only for queued jobs but also after execution or cancellation of jobs. job_t.status can be used to decide what to do in said method. | ||||
* | Use XAuth/EAP remote identity for uniqueness check | Martin Willi | 2012-06-25 | 1 | -2/+2 |
| | |||||
* | Avoid queueing more than one retry initiate job. | Tobias Brunner | 2012-05-30 | 1 | -1/+1 |
| | |||||
* | Job added to re-initiate an IKE_SA. | Tobias Brunner | 2012-05-30 | 2 | -0/+143 |
| | |||||
* | Fix IKEv1 DPD clear, destroying IKE_SA even if reestablish not needed | Martin Willi | 2012-05-21 | 1 | -9/+3 |
| | |||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 1 | -1/+1 |
| | |||||
* | Consider inbound ESP as a sign of liveness for DPD timeout | Martin Willi | 2012-05-15 | 1 | -2/+15 |
| | |||||
* | Schedule a DPD timeout job that enforces the IKE message timeout policy | Martin Willi | 2012-05-15 | 2 | -0/+163 |
| | |||||
* | Loggers specify what log messages they want to receive during registration. | Tobias Brunner | 2012-05-02 | 1 | -1/+1 |
| | | | | | | | This also allows us to generate the log message only once for all loggers that need it (avoids calls to custom printf specifier callbacks). To update the log levels loggers can simply be registered again. | ||||
* | Adopt children after syncing a rekeyed IKEv1 SA | Martin Willi | 2012-03-20 | 1 | -1/+2 |
| | |||||
* | Invoke ike_updown hooks for reauthenticated IKEv1 SAs | Martin Willi | 2012-03-20 | 1 | -0/+1 |
| | |||||
* | Try to detect reauthentication as responder and adopt children to new SA | Martin Willi | 2012-03-20 | 2 | -0/+224 |
| | |||||
* | Do not query CHILD_SA during delete if they already expired | Martin Willi | 2012-03-20 | 3 | -6/+11 |
| | |||||
* | Removed obsolete XAuth job | Martin Willi | 2012-03-20 | 2 | -133/+0 |
| | |||||
* | Pass IKE version to peer config enumerator, filter configs | Martin Willi | 2012-03-20 | 1 | -1/+1 |
| | |||||
* | IKEv1 XAuth: Adding "initiate" flag parameter to the initiate_xauth method, ↵ | Clavister OpenSource | 2012-03-20 | 1 | -2/+1 |
| | | | | signalling whether or not to call the task_manager->initiate method after queueing the task. | ||||
* | IKEv1 XAuth: Added a job to call the initiate_xauth method of ike_sa after ↵ | Clavister OpenSource | 2012-03-20 | 2 | -0/+134 |
| | | | | the completion of the current set of tasks is complete. | ||||
* | Do not ignore configs for IKEv1 in charon anymore | Martin Willi | 2012-03-20 | 1 | -5/+0 |
| | |||||
* | Use enum to define IKE version on peer_cfg_t. | Tobias Brunner | 2012-03-20 | 1 | -1/+1 |
| | | | | Replaced all those magic numbers. | ||||
* | Migrated initiate_mediation_job_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-03 | 1 | -30/+19 |
| | |||||
* | Migrated mediation_job_t to INIT/METHOD macros. | Tobias Brunner | 2011-10-03 | 1 | -28/+16 |
| | |||||
* | Add missing semicolon | Martin Willi | 2011-09-12 | 1 | -1/+1 |
| | |||||
* | bus->listen() and the controller wrappers accept a timeout to wait for callbacks | Martin Willi | 2011-08-26 | 2 | -2/+2 |
| | |||||
* | Replaced ike_sa_t.create_child_sa_iterator with enumerator. | Tobias Brunner | 2011-07-06 | 2 | -7/+7 |
| | | | | | This required two new methods on ike_sa_t. One returns the number of CHILD_SAs and one allows to remove a CHILD_SA. | ||||
* | implemented PASS and DROP shunt policies | Andreas Steffen | 2011-06-28 | 1 | -1/+11 |
| | |||||
* | Added a non-blocking, skipping variant of IKE_SA enumerator | Martin Willi | 2011-05-16 | 1 | -1/+2 |
| | |||||
* | Use high priority for retransmit/dpd/keepalive jobs | Martin Willi | 2011-05-16 | 3 | -3/+3 |
| | |||||
* | Use job priorities in process_message job based on exchange types | Martin Willi | 2011-05-16 | 1 | -1/+16 |
| | |||||
* | Introduce priority classes for jobs | Martin Willi | 2011-05-16 | 16 | -1/+117 |
| | |||||
* | Invert check to delete unestablished IKE_SAs to not delete them once established | Martin Willi | 2011-02-28 | 1 | -2/+2 |
| | |||||
* | Migrated update_sa_job_t to INIT/METHOD macros | Andreas Steffen | 2011-02-10 | 1 | -15/+16 |
| | |||||
* | Migrated send_keepalive_job_t to INIT/METHOD macros | Andreas Steffen | 2011-02-10 | 1 | -15/+14 |
| | |||||
* | Migrated send_dpd_job_t to INIT/METHOD macros | Andreas Steffen | 2011-02-10 | 1 | -15/+14 |
| | |||||
* | Migrated roam_job_t to INIT/METHOD macros | Andreas Steffen | 2011-02-10 | 1 | -14/+15 |
| | |||||
* | Migrated retransmit_job_t to INIT/METHOD macros | Andreas Steffen | 2011-02-10 | 1 | -16/+15 |
| | |||||
* | Migrated rekey_ike_sa_job_t to INIT/METHOD macros | Andreas Steffen | 2011-02-10 | 1 | -16/+15 |
| | |||||
* | Migrated rekey_child_sa_job_t to INIT/METHOD macros | Andreas Steffen | 2011-02-10 | 1 | -17/+16 |
| | |||||
* | Migrated process_message_job_t to INIT/METHOD macros | Andreas Steffen | 2011-02-10 | 1 | -15/+14 |
| | |||||
* | Migrated migrate_job_t to INIT/METHOD macros | Andreas Steffen | 2011-02-10 | 1 | -20/+19 |
| | |||||
* | _ prefix not required | Andreas Steffen | 2011-02-10 | 4 | -4/+4 |
| | |||||
* | Migrated delete_ike_sa_job_t to INIT/METHOD macros | Andreas Steffen | 2011-02-10 | 1 | -17/+16 |
| |