tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Scheduler and processor have been moved to libstrongswan.	Tobias Brunner	2010-09-02	1	-1/+1
\| \| \| \| \|	Also reverts 0c21dc000d3cd5c82eb22c4481e6459978456364 as the dependency to libcharon is no longer required.
*	Adapted child_sa_t to changed kernel interface.	Tobias Brunner	2010-09-02	1	-25/+49
\|
*	Fixing installation of trap policies (SPI=0) in kernel interface.	Tobias Brunner	2010-09-02	1	-3/+2
\|
*	Added an option to specify the type of a policy to kernel_ipsec.add_policy.	Tobias Brunner	2010-09-02	1	-18/+18
\| \| \| \| \|	This will later allow us to support pluto's passthrough and drop policies in charon.
*	Replaced the protocol argument in add_policy with an optional SPI for an AH SA.	Tobias Brunner	2010-09-02	2	-19/+38
\|
*	Refer to scheduler and processor via lib and not hydra.	Tobias Brunner	2010-09-02	30	-89/+67
\|
*	Moved all kernel plugins to libhydra.	Tobias Brunner	2010-09-02	27	-10728/+0
\|
*	Moved ipsec_transform_t to kernel_ipsec.h in libhydra.	Tobias Brunner	2010-09-02	2	-26/+0
\| \| \| \| \|	Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations.
*	Refer to kernel interface via hydra and not charon.	Tobias Brunner	2010-09-02	24	-144/+161
\|
*	Moved kernel interface to libhydra.	Tobias Brunner	2010-09-02	12	-1620/+8
\|
*	Removed references to protocol_id_t from kernel interface.	Tobias Brunner	2010-09-02	10	-199/+193
\| \| \| \| \|	Instead we use the actual IP protocol identifier (the conversion now happens in child_sa_t and kernel_handler_t).
*	Migrated child_sa_t to INIT/METHOD macros.	Tobias Brunner	2010-09-02	1	-202/+132
\|
*	Moved roam job creation to kernel event handler.	Tobias Brunner	2010-09-02	3	-21/+56
\|
*	Refer to scheduler via hydra and not charon.	Tobias Brunner	2010-09-02	14	-29/+32
\|
*	Moved scheduler_t to libhydra.	Tobias Brunner	2010-09-02	6	-499/+0
\|
*	Moved migrate job creation to kernel event handler.	Tobias Brunner	2010-09-02	3	-15/+22
\|
*	Moved update SA job creation to kernel event handler.	Tobias Brunner	2010-09-02	4	-19/+22
\|
*	Moved delete/rekey CHILD_SA job creation to kernel event handler.	Tobias Brunner	2010-09-02	4	-53/+39
\|
*	Moved acquire job creation to kernel event handler.	Tobias Brunner	2010-09-02	4	-21/+31
\|
*	Added kernel event handler stub.	Tobias Brunner	2010-09-02	5	-0/+120
\|
*	All kernel listener hooks are optional.	Tobias Brunner	2010-09-02	2	-5/+11
\|
*	Added listener handling to kernel interface.	Tobias Brunner	2010-09-02	2	-2/+202
\|
*	Added an interface for kernel event listeners.	Tobias Brunner	2010-09-02	3	-0/+96
\|
*	Some whitespace and code style fixes.	Tobias Brunner	2010-09-02	4	-25/+33
\|
*	Move callback_job_t to libhydra.	Tobias Brunner	2010-09-02	4	-392/+0
\|
*	Fixing Doxygen groups after moving processor.	Tobias Brunner	2010-09-02	18	-20/+20
\|
*	Refer to processor via hydra and not charon.	Tobias Brunner	2010-09-02	33	-71/+100
\|
*	Move processor_t (thread-pool) to libhydra.	Tobias Brunner	2010-09-02	7	-437/+3
\|
*	Respect key types in stroke key/certificate backend	Martin Willi	2010-09-02	1	-15/+24
\|
*	increase number of message due to large certificate payloads	Andreas Steffen	2010-09-01	1	-1/+1
\|
*	Load a left/rightcert2 for EAP-TLS even if no left/rightauth2 is defined	Martin Willi	2010-08-31	1	-1/+10
\|
*	Use the AAA Identity for EAP authentication, if given	Martin Willi	2010-08-31	2	-1/+14
\|
*	Added support for the ipsec.conf aaa_identity keyword	Martin Willi	2010-08-31	2	-0/+7
\|
*	Added strongswan.conf options for EAP-TLS/TTLS fragment size	Martin Willi	2010-08-31	2	-9/+20
\|
*	Migrated EAP-TTLS to the generic TLS helper	Martin Willi	2010-08-31	1	-281/+21
\|
*	Migrated EAP-TLS to the generic TLS helper	Martin Willi	2010-08-31	1	-272/+19
\|
*	Support output fragmentation of TLS records	Martin Willi	2010-08-31	2	-4/+6
\|
*	Moved EAP type/code definitions to a seprate header file in libstrongswan	Martin Willi	2010-08-31	2	-35/+1
\|
*	Enable the generation of unencrypted messages (e.g. ME connectivity checks).	Tobias Brunner	2010-08-30	1	-9/+10
\|
*	fixed copy-and-paste errors	Andreas Steffen	2010-08-30	2	-2/+2
\|
*	created an eap-tnc method hull	Andreas Steffen	2010-08-30	6	-0/+363
\|
*	for the time being assume a single request/response exchange for a given EAP ↵	Andreas Steffen	2010-08-30	1	-2/+3
\| \| \| \|	method
*	Port floating patch partially reversed.	Tobias Brunner	2010-08-30	2	-12/+8
\| \| \| \| \| \|	If MOBIKE is enabled, we do have to switch to port 4500 with the IKE_AUTH request, that is, before we know whether the other peer actually supports MOBIKE or not.
*	Slightly refactored port floating.	Tobias Brunner	2010-08-30	5	-35/+39
\| \| \| \|	In case of MOBIKE, only float to port 4500 if the other peer actually supports MOBIKE.
*	Fixed ME after introduction of AEAD wrapper.	Tobias Brunner	2010-08-30	1	-1/+1
\|
*	Win7 might send up to 7k of certificate requests	Andreas Steffen	2010-08-27	3	-3/+3
\|
*	Update delete_payload length when adding SPIs	Martin Willi	2010-08-25	1	-0/+1
\|
*	Migrated delete_payload to INIT/METHOD macros, replaced iterator	Martin Willi	2010-08-25	3	-130/+108
\|
*	Use different return values in payload decryption to distinguish between ↵	Martin Willi	2010-08-25	3	-12/+16
\| \| \| \|	integrity and syntax errors
*	Check if colliding rekey actually created an IKE_INIT	Thomas Egerer	2010-08-25	1	-37/+42
\| \| \| \| \| \|	In some cases (especially if a child is half-open) the colliding rekey-job might not have created the ike_init member. If so, the nonce check fails with SIGSEGV.