Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Properly filter IKEv1 proposals consisting of multiple proposal payloads. | Tobias Brunner | 2012-05-24 | 1 | -9/+15 | |
| | | | | | | | Since a proposal_t object is created for each transform contained in the proposal payload, it does not work to simply remove the last proposal_t object added to the list (there may be several other extracted from the previous proposal payload). | |||||
* | Apply IDir before deriving keys as aggressive initiator | Martin Willi | 2012-05-23 | 1 | -4/+4 | |
| | ||||||
* | Use received identity to look up PSK as aggressive responder | Martin Willi | 2012-05-23 | 1 | -2/+9 | |
| | ||||||
* | Check if we actually have an initiating packet to free while processing ↵ | Martin Willi | 2012-05-23 | 1 | -1/+1 | |
| | | | | responses | |||||
* | list IKEv1 Aggressive Mode in ipsec statusall | Andreas Steffen | 2012-05-23 | 1 | -2/+9 | |
| | ||||||
* | Switch to alternative peer config in IKEv1 Main and Aggressive Mode. | Tobias Brunner | 2012-05-21 | 4 | -24/+85 | |
| | ||||||
* | Cancel pending retransmits when flushing active task queue | Martin Willi | 2012-05-21 | 1 | -0/+4 | |
| | ||||||
* | Cancel active quick mode task when receiving INFORMATIONAL error | Martin Willi | 2012-05-21 | 1 | -0/+30 | |
| | ||||||
* | Flush task queues explicitly, not implicitly if task returns ALREADY_DONE | Martin Willi | 2012-05-21 | 6 | -12/+20 | |
| | ||||||
* | Wrap task managers flush_queue() in IKE_SA | Martin Willi | 2012-05-21 | 2 | -0/+14 | |
| | ||||||
* | Make task managers flush_queue() method public | Martin Willi | 2012-05-21 | 3 | -20/+62 | |
| | ||||||
* | Fix IKEv1 DPD clear, destroying IKE_SA even if reestablish not needed | Martin Willi | 2012-05-21 | 1 | -9/+3 | |
| | ||||||
* | Remove executable flag from source files. | Tobias Brunner | 2012-05-18 | 13 | -0/+0 | |
| | ||||||
* | Use separate Doxygen groups for IKEv1 and IKEv2 entities (authenticators, ↵ | Tobias Brunner | 2012-05-18 | 45 | -49/+64 | |
| | | | | tasks etc.). | |||||
* | Removed superfluous @param in bus.h. | Tobias Brunner | 2012-05-18 | 1 | -1/+0 | |
| | ||||||
* | whitelist: Make sure listed IDs are null-terminated. | Tobias Brunner | 2012-05-18 | 1 | -0/+1 | |
| | ||||||
* | List registered nonce generators in statusall output. | Tobias Brunner | 2012-05-18 | 1 | -2/+18 | |
| | ||||||
* | Use nonce_gen instead of rng to generate nonces | Adrian-Ken Rueegsegger | 2012-05-18 | 4 | -34/+34 | |
| | | | | | Replace usage of rng plugin with nonce generator to create nonces in IKE_INIT, CHILD_CREATE and QUICK_MODE tasks and the IKEv1 phase 1 helper. | |||||
* | Add create_nonce_gen function to keymat interface | Adrian-Ken Rueegsegger | 2012-05-18 | 3 | -0/+24 | |
| | | | | This function returns a nonce generator object. | |||||
* | make IKEv1 DPD timeout configurable in charon | Andreas Steffen | 2012-05-17 | 14 | -22/+70 | |
| | ||||||
* | Moved IKEv1 DPD processing to task manager, fix sequence issues | Martin Willi | 2012-05-15 | 3 | -73/+72 | |
| | ||||||
* | Consider inbound ESP as a sign of liveness for DPD timeout | Martin Willi | 2012-05-15 | 1 | -2/+15 | |
| | ||||||
* | Schedule a DPD timeout job that enforces the IKE message timeout policy | Martin Willi | 2012-05-15 | 4 | -0/+177 | |
| | ||||||
* | Send unanswered follow up R_U_THERE messages with the same DPD seq | Martin Willi | 2012-05-15 | 1 | -1/+7 | |
| | ||||||
* | Do not send IKEv1 DPD retransmit, but create a new INFORMATIONAL | Martin Willi | 2012-05-15 | 1 | -11/+0 | |
| | ||||||
* | Free name of application using libcharon. | Tobias Brunner | 2012-05-15 | 1 | -0/+1 | |
| | ||||||
* | Register load-tester faked kernel interface before other kernel interfaces | Martin Willi | 2012-05-14 | 1 | -8/+9 | |
| | ||||||
* | Load tester can enforce a local IP to use | Martin Willi | 2012-05-14 | 1 | -2/+9 | |
| | ||||||
* | Add plugin features support to load-tester plugin | Martin Willi | 2012-05-14 | 1 | -48/+76 | |
| | ||||||
* | Fixed #include in tnc-ifmap plugin. | Tobias Brunner | 2012-05-07 | 1 | -0/+1 | |
| | ||||||
* | allow private algorithms | Andreas Steffen | 2012-05-05 | 2 | -4/+16 | |
| | ||||||
* | fixed mapping of IKEv1 algorithms | Andreas Steffen | 2012-05-05 | 1 | -29/+184 | |
| | ||||||
* | vendor ID cosmetics | Andreas Steffen | 2012-05-05 | 2 | -4/+4 | |
| | ||||||
* | inserted space | Andreas Steffen | 2012-05-05 | 5 | -1/+1 | |
| | ||||||
* | missing references to daemon.h | Andreas Steffen | 2012-05-05 | 4 | -0/+6 | |
| | ||||||
* | fixed feature dependencies for CERT_TRUSTED_PUBKEY | Andreas Steffen | 2012-05-05 | 1 | -0/+2 | |
| | ||||||
* | Use proper getter for settings in sender and receiver. | Tobias Brunner | 2012-05-03 | 2 | -2/+2 | |
| | ||||||
* | Use name from initialization to access settings in libcharon. | Tobias Brunner | 2012-05-03 | 56 | -220/+279 | |
| | | | | Also fixes several whitespace errors. | |||||
* | Store the name of the binary using libcharon to enable specific settings. | Tobias Brunner | 2012-05-03 | 2 | -4/+11 | |
| | ||||||
* | Integrate nm plugin directly in charon-nm. | Tobias Brunner | 2012-05-03 | 10 | -1819/+0 | |
| | ||||||
* | Provide plugin list from charon, not internally in libcharon. | Tobias Brunner | 2012-05-03 | 4 | -22/+11 | |
| | ||||||
* | display (soft) same as (not loaded) | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | ||||||
* | charon is now an IKE daemon | Andreas Steffen | 2012-05-03 | 1 | -1/+1 | |
| | ||||||
* | stroke plugin sdepends on building CERT_ANY certificates | Martin Willi | 2012-05-03 | 1 | -0/+1 | |
| | ||||||
* | Updated Android.mk for 5.0 (no IKEv1 support yet). | Tobias Brunner | 2012-05-03 | 1 | -25/+33 | |
| | ||||||
* | updated tnc-pdp plugin for 5.0.0 | Andreas Steffen | 2012-05-02 | 3 | -4/+4 | |
| | ||||||
* | Loggers specify what log messages they want to receive during registration. | Tobias Brunner | 2012-05-02 | 13 | -163/+328 | |
| | | | | | | | This also allows us to generate the log message only once for all loggers that need it (avoids calls to custom printf specifier callbacks). To update the log levels loggers can simply be registered again. | |||||
* | Ensure that multi-line log messages are not torn apart. | Tobias Brunner | 2012-05-02 | 3 | -1/+30 | |
| | ||||||
* | Use a separate interface for loggers. | Tobias Brunner | 2012-05-02 | 16 | -291/+279 | |
| | | | | | | | | The new interface does not allow loggers to unregister themselves from the bus. This allows us to use a rwlock_t for them. The latter also means that loggers can now be called concurrently by multiple threads. | |||||
* | Use a separate list and mutex for loggers. | Tobias Brunner | 2012-05-02 | 3 | -73/+168 | |
| | | | | | | | | | | | This avoids deadlocks caused by extensive listener_t implementations which might want to acquire a lock which is currently held by another thread wanting to log messages. Since the latter requires that thread to acquire the same lock the initial thread currently holds this previously resulted in a deadlock. With this change logging messages does not require threads to acquire the main lock in bus_t and thus avoids the deadlock. |