aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon
Commit message (Collapse)AuthorAgeFilesLines
...
* Check for SADB_X_NAT_T_NEW_MAPPING in PF_KEY kernel interface.Tobias Brunner2010-06-151-4/+4
| | | | | FreeBSD 8 does not support SADB_X_NAT_T_NEW_MAPPING whereas Linux and the previous FreeBSD NAT-T patch both do.
* Set the ports of all hosts installed via the PF_KEY kernel interface to zero.Tobias Brunner2010-06-151-15/+37
|
* Adding a basic unit test for hashtable_t.Tobias Brunner2010-06-073-1/+114
|
* Add extra information in debug output for IKE_SA check{out, in}Thomas Egerer2010-06-072-10/+27
| | | | | | | This output helps tracing checkout and checkin of IKE_SAs when there is more than one IKE_SAs with the same name. I also added the type of in-air-exchange to the debug output issued by the task_manager in case a task initiation is delayed, came in handy for me.
* traffic_selector_t is gone into libstrongswan, migrate printf hook ↵Martin Willi2010-06-071-5/+0
| | | | registration, too.
* Flush auth configs, create new keymat during SA resetMartin Willi2010-06-071-12/+16
|
* Recreate IKE_INIT/IKE_NATD/IKE_VENDOR tasks if we reset SA during IKE_AUTHMartin Willi2010-06-071-0/+11
|
* Reacquire keymat from new IKE_SA during task migrationMartin Willi2010-06-071-0/+1
|
* Flush certificate cache on CA deleteMartin Willi2010-06-071-1/+2
|
* Log non-empty task queues in statusallMartin Willi2010-06-071-0/+31
|
* Wrap task enumerator in ike_saMartin Willi2010-06-072-1/+16
|
* Migrated ike_sa_t to INIT/METHOD macrosMartin Willi2010-06-071-407/+239
|
* Added support for task enumeration in task_manager_tMartin Willi2010-06-072-0/+38
|
* Migrated task_manager_t to INIT/METHOD macrosMartin Willi2010-06-071-65/+45
|
* Accept ARP requests with an ethernet trailer, but trim itMartin Willi2010-06-031-2/+2
|
* Added a EAP-SIM/AKA backend reading triplets/quintuplets from a SQL databaseMartin Willi2010-06-0211-0/+682
|
* Disable close action for a redundant CHILD_SA resulting from a rekey collisionMartin Willi2010-06-021-0/+5
| | | | | | | | If a rekey collision is detected, the winning peer of the nonce compare will delete the redundant CHILD_SA. The other peer should not enforce the close action on this CHILD, as it would reestablish the redundat CHILD_SA. Thanks to Thomas Egerer from secunet for pointing this out and the initial patchset.
* Use wrapped getters for close/dpd actionMartin Willi2010-06-022-8/+10
|
* Wrap getters for dpd/close action into CHILD_SA, allows us to override themMartin Willi2010-06-022-0/+76
|
* Do not install trap policy if remote host is %any.Tobias Brunner2010-05-281-1/+1
|
* Send empty SIM/AKA-NOTIFICATION response for non-success codes, tooMartin Willi2010-05-272-2/+0
|
* Added generic implementations for crl_is_newer/certificate_is_newerMartin Willi2010-05-212-6/+6
|
* Handle collisions between rekey and the following delete properlyMartin Willi2010-05-181-27/+63
|
* Added simple conditional packet receive delayMartin Willi2010-05-181-9/+38
|
* Added simple conditional packet send delayMartin Willi2010-05-181-2/+39
|
* encoding of MODE_TUNNEL changedAndreas Steffen2010-05-152-2/+2
|
* moved resolve plugin from libcharon to libhydraAndreas Steffen2010-05-046-430/+0
|
* Moved syslog.h include.Tobias Brunner2010-05-043-2/+2
|
* Compiler warning fixed.Tobias Brunner2010-05-041-1/+1
|
* Add 'flush_line' option to filelog section.Adrian-Ken Rueegsegger2010-05-041-0/+5
| | | | | | The new boolean 'flush_line' option in the filelog section of strongswan.conf specifies if log messages should be flushed to the given file for each new line.
* Use reqid from connection config if present.Reto Buerki2010-05-041-2/+6
|
* Add reqid field and getter function to child_cfg_t.Reto Buerki2010-05-049-11/+34
|
* Fixing out-of-tree build after adding dependency to config.status.Tobias Brunner2010-04-291-1/+1
|
* Users of PLUGINS depend on config.status, rebuilding them if plugin ↵Martin Willi2010-04-291-0/+2
| | | | configuration is updated
* include dhcp-client-identifier in the DHCP requestAndreas Steffen2010-04-231-1/+11
|
* make DHCP debug messages consistentAndreas Steffen2010-04-231-1/+1
|
* fixed typoAndreas Steffen2010-04-231-1/+1
|
* Ignore DH exchange in CHILD_SA rekeying if the selected proposal contains no ↵Martin Willi2010-04-211-5/+5
| | | | DH group
* Added support for DH groups 22, 23 and 24, patch contributed by Joy LattenMartin Willi2010-04-191-0/+3
|
* Accept DHCP replies on bootps port, as we act as a relay agent if server ↵Martin Willi2010-04-191-5/+7
| | | | address configured
* Integrating libhydra into the Android build system.Tobias Brunner2010-04-121-1/+2
|
* When logging to the database, the IDs of an IKE SA are initially NULL.Tobias Brunner2010-04-122-4/+4
|
* Updated HA plugin to new APIsMartin Willi2010-04-079-54/+42
|
* Updated location of traffic selector headerMartin Willi2010-04-071-1/+1
|
* Moved ha plugin to libcharonMartin Willi2010-04-0722-0/+4215
|
* manage synced SAs in IKE_SA Manager, tag them with IKE_PASSIVE stateMartin Willi2010-04-071-1/+1
|
* Adding support for debug groups in libstrongswan's logger.Tobias Brunner2010-04-061-5/+5
|
* Move debug groups from charon's bus.h to libstrongswan's debug.h.Tobias Brunner2010-04-062-85/+7
|
* Moved attr plugin from libcharon to libhydra.Tobias Brunner2010-04-066-415/+0
|
* Use a read-write lock in stroke_attribute to increase concurrency.Tobias Brunner2010-04-061-19/+19
|