Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Check for SADB_X_NAT_T_NEW_MAPPING in PF_KEY kernel interface. | Tobias Brunner | 2010-06-15 | 1 | -4/+4 | |
| | | | | | FreeBSD 8 does not support SADB_X_NAT_T_NEW_MAPPING whereas Linux and the previous FreeBSD NAT-T patch both do. | |||||
* | Set the ports of all hosts installed via the PF_KEY kernel interface to zero. | Tobias Brunner | 2010-06-15 | 1 | -15/+37 | |
| | ||||||
* | Adding a basic unit test for hashtable_t. | Tobias Brunner | 2010-06-07 | 3 | -1/+114 | |
| | ||||||
* | Add extra information in debug output for IKE_SA check{out, in} | Thomas Egerer | 2010-06-07 | 2 | -10/+27 | |
| | | | | | | | This output helps tracing checkout and checkin of IKE_SAs when there is more than one IKE_SAs with the same name. I also added the type of in-air-exchange to the debug output issued by the task_manager in case a task initiation is delayed, came in handy for me. | |||||
* | traffic_selector_t is gone into libstrongswan, migrate printf hook ↵ | Martin Willi | 2010-06-07 | 1 | -5/+0 | |
| | | | | registration, too. | |||||
* | Flush auth configs, create new keymat during SA reset | Martin Willi | 2010-06-07 | 1 | -12/+16 | |
| | ||||||
* | Recreate IKE_INIT/IKE_NATD/IKE_VENDOR tasks if we reset SA during IKE_AUTH | Martin Willi | 2010-06-07 | 1 | -0/+11 | |
| | ||||||
* | Reacquire keymat from new IKE_SA during task migration | Martin Willi | 2010-06-07 | 1 | -0/+1 | |
| | ||||||
* | Flush certificate cache on CA delete | Martin Willi | 2010-06-07 | 1 | -1/+2 | |
| | ||||||
* | Log non-empty task queues in statusall | Martin Willi | 2010-06-07 | 1 | -0/+31 | |
| | ||||||
* | Wrap task enumerator in ike_sa | Martin Willi | 2010-06-07 | 2 | -1/+16 | |
| | ||||||
* | Migrated ike_sa_t to INIT/METHOD macros | Martin Willi | 2010-06-07 | 1 | -407/+239 | |
| | ||||||
* | Added support for task enumeration in task_manager_t | Martin Willi | 2010-06-07 | 2 | -0/+38 | |
| | ||||||
* | Migrated task_manager_t to INIT/METHOD macros | Martin Willi | 2010-06-07 | 1 | -65/+45 | |
| | ||||||
* | Accept ARP requests with an ethernet trailer, but trim it | Martin Willi | 2010-06-03 | 1 | -2/+2 | |
| | ||||||
* | Added a EAP-SIM/AKA backend reading triplets/quintuplets from a SQL database | Martin Willi | 2010-06-02 | 11 | -0/+682 | |
| | ||||||
* | Disable close action for a redundant CHILD_SA resulting from a rekey collision | Martin Willi | 2010-06-02 | 1 | -0/+5 | |
| | | | | | | | | If a rekey collision is detected, the winning peer of the nonce compare will delete the redundant CHILD_SA. The other peer should not enforce the close action on this CHILD, as it would reestablish the redundat CHILD_SA. Thanks to Thomas Egerer from secunet for pointing this out and the initial patchset. | |||||
* | Use wrapped getters for close/dpd action | Martin Willi | 2010-06-02 | 2 | -8/+10 | |
| | ||||||
* | Wrap getters for dpd/close action into CHILD_SA, allows us to override them | Martin Willi | 2010-06-02 | 2 | -0/+76 | |
| | ||||||
* | Do not install trap policy if remote host is %any. | Tobias Brunner | 2010-05-28 | 1 | -1/+1 | |
| | ||||||
* | Send empty SIM/AKA-NOTIFICATION response for non-success codes, too | Martin Willi | 2010-05-27 | 2 | -2/+0 | |
| | ||||||
* | Added generic implementations for crl_is_newer/certificate_is_newer | Martin Willi | 2010-05-21 | 2 | -6/+6 | |
| | ||||||
* | Handle collisions between rekey and the following delete properly | Martin Willi | 2010-05-18 | 1 | -27/+63 | |
| | ||||||
* | Added simple conditional packet receive delay | Martin Willi | 2010-05-18 | 1 | -9/+38 | |
| | ||||||
* | Added simple conditional packet send delay | Martin Willi | 2010-05-18 | 1 | -2/+39 | |
| | ||||||
* | encoding of MODE_TUNNEL changed | Andreas Steffen | 2010-05-15 | 2 | -2/+2 | |
| | ||||||
* | moved resolve plugin from libcharon to libhydra | Andreas Steffen | 2010-05-04 | 6 | -430/+0 | |
| | ||||||
* | Moved syslog.h include. | Tobias Brunner | 2010-05-04 | 3 | -2/+2 | |
| | ||||||
* | Compiler warning fixed. | Tobias Brunner | 2010-05-04 | 1 | -1/+1 | |
| | ||||||
* | Add 'flush_line' option to filelog section. | Adrian-Ken Rueegsegger | 2010-05-04 | 1 | -0/+5 | |
| | | | | | | The new boolean 'flush_line' option in the filelog section of strongswan.conf specifies if log messages should be flushed to the given file for each new line. | |||||
* | Use reqid from connection config if present. | Reto Buerki | 2010-05-04 | 1 | -2/+6 | |
| | ||||||
* | Add reqid field and getter function to child_cfg_t. | Reto Buerki | 2010-05-04 | 9 | -11/+34 | |
| | ||||||
* | Fixing out-of-tree build after adding dependency to config.status. | Tobias Brunner | 2010-04-29 | 1 | -1/+1 | |
| | ||||||
* | Users of PLUGINS depend on config.status, rebuilding them if plugin ↵ | Martin Willi | 2010-04-29 | 1 | -0/+2 | |
| | | | | configuration is updated | |||||
* | include dhcp-client-identifier in the DHCP request | Andreas Steffen | 2010-04-23 | 1 | -1/+11 | |
| | ||||||
* | make DHCP debug messages consistent | Andreas Steffen | 2010-04-23 | 1 | -1/+1 | |
| | ||||||
* | fixed typo | Andreas Steffen | 2010-04-23 | 1 | -1/+1 | |
| | ||||||
* | Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no ↵ | Martin Willi | 2010-04-21 | 1 | -5/+5 | |
| | | | | DH group | |||||
* | Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten | Martin Willi | 2010-04-19 | 1 | -0/+3 | |
| | ||||||
* | Accept DHCP replies on bootps port, as we act as a relay agent if server ↵ | Martin Willi | 2010-04-19 | 1 | -5/+7 | |
| | | | | address configured | |||||
* | Integrating libhydra into the Android build system. | Tobias Brunner | 2010-04-12 | 1 | -1/+2 | |
| | ||||||
* | When logging to the database, the IDs of an IKE SA are initially NULL. | Tobias Brunner | 2010-04-12 | 2 | -4/+4 | |
| | ||||||
* | Updated HA plugin to new APIs | Martin Willi | 2010-04-07 | 9 | -54/+42 | |
| | ||||||
* | Updated location of traffic selector header | Martin Willi | 2010-04-07 | 1 | -1/+1 | |
| | ||||||
* | Moved ha plugin to libcharon | Martin Willi | 2010-04-07 | 22 | -0/+4215 | |
| | ||||||
* | manage synced SAs in IKE_SA Manager, tag them with IKE_PASSIVE state | Martin Willi | 2010-04-07 | 1 | -1/+1 | |
| | ||||||
* | Adding support for debug groups in libstrongswan's logger. | Tobias Brunner | 2010-04-06 | 1 | -5/+5 | |
| | ||||||
* | Move debug groups from charon's bus.h to libstrongswan's debug.h. | Tobias Brunner | 2010-04-06 | 2 | -85/+7 | |
| | ||||||
* | Moved attr plugin from libcharon to libhydra. | Tobias Brunner | 2010-04-06 | 6 | -415/+0 | |
| | ||||||
* | Use a read-write lock in stroke_attribute to increase concurrency. | Tobias Brunner | 2010-04-06 | 1 | -19/+19 | |
| |