tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	ike: Create an enumerator for (un-)handled configuration attributes on IKE_SA	Martin Willi	2014-06-16	2	-0/+32
\|
*	ike: Store unhandled attributes on IKE_SA as well	Martin Willi	2014-06-16	4	-12/+12
\|
*	Split swanctl --raw mode into single-line and --pretty mode	Andreas Steffen	2014-06-14	4	-31/+70
\|
*	windows: Use WINAPI call convention for Windows API callbacks	Martin Willi	2014-06-06	3	-10/+13
\| \| \| \| \|	For x86_64 it does not actually matter, but for i686 builds the call convention is different with WINAPI.
*	kernel-wfp: Include Windows header patch for MinGW 4.8.1	Martin Willi	2014-06-04	2	-0/+29
\|
*	kernel-wfp: Clone acquire traffic selectors only if they exist	Martin Willi	2014-06-04	1	-1/+3
\|
*	kernel-wfp: Install routes for trap policies	Martin Willi	2014-06-04	1	-3/+21
\|
*	kernel-wfp: Refactor route management to separate function	Martin Willi	2014-06-04	1	-39/+47
\|
*	kernel-wfp: Install tunnel mode policies to appropriate sub-layers	Martin Willi	2014-06-04	2	-6/+22
\| \| \| \| \|	While it is unclear if this has any effect at all, we prefer specific sublayers to install policies as suggested.
*	kernel-wfp: Declare GUIDs and auth/cipher configs missing in some MinGW builds	Martin Willi	2014-06-04	1	-0/+89
\|
*	kernel-wfp: Support multiple traffic selectors on tunnel mode SAs	Martin Willi	2014-06-04	1	-36/+80
\|
*	child-sa: Pass the number of total policies tied to an SA to the kernel	Martin Willi	2014-06-04	1	-0/+8
\| \| \| \| \|	This will be useful if the kernel backend has to know how many policies follow an SA install, for example if it must install all policies concurrently.
*	kernel-iph: Implicitly enable IP forwarding when installing routes	Martin Willi	2014-06-04	1	-0/+26
\|
*	kernel-wfp: Show a warning for packets the kernel drops in its IPsec layers	Martin Willi	2014-06-04	1	-0/+6
\|
*	kernel-wfp: Set flag to get UDP encapsulation with tunnel mode working	Martin Willi	2014-06-04	2	-0/+22
\| \| \| \| \| \|	Having this flag set fixes connections initiated by the Windows host, but unfortunately does not yet fix incoming connections. Connection state issue? We still see 0xc00000e2 error events, translating to INTERNAL_ERROR.
*	kernel-wfp: Install tunnel and trap forward policies	Martin Willi	2014-06-04	3	-136/+275
\|
*	kernel-wfp: Manually create a ProviderContext to attach individual filters	Martin Willi	2014-06-04	4	-79/+73
\| \| \| \| \| \|	This gives us more flexibility than using the intransparent FwpmIPsecTunnelAdd, and fixes the issues we have seen with trap policies. Forward filters are still missing, but required for site-to-site tunnels.
*	kernel-wfp: Print filter weight in "ipsecdump filters"	Martin Willi	2014-06-04	1	-0/+4
\|
*	kernel-wfp: Add support for trap policies and acquires	Martin Willi	2014-06-04	2	-1/+304
\|
*	socket-win: Install IKE bypass policies using bypass_socket()	Martin Willi	2014-06-04	2	-0/+12
\|
*	kernel-wfp: Implement bypass_socket() using dedicated filter rules	Martin Willi	2014-06-04	1	-2/+117
\|
*	kernel-wfp: Register for WFP Net events	Martin Willi	2014-06-04	2	-0/+48
\|
*	kernel-wfp: Add some missing IPv6 GUIDs, fix IPv6 host conversion	Martin Willi	2014-06-04	2	-2/+29
\|
*	kernel-wfp: Add an ipsecdump "filters" command to print IPsec related filters	Martin Willi	2014-06-04	1	-1/+282
\|
*	kernel-wfp: Add an ipsecdump utility to show installed SAs/SPs on Windows	Martin Willi	2014-06-04	3	-0/+432
\|
*	kernel-wfp: Depend on used RNG plugin features	Martin Willi	2014-06-04	1	-0/+2
\|
*	kernel-wfp: Implement update_sa()	Martin Willi	2014-06-04	3	-1/+114
\|
*	kernel-wfp: Configure ports for SAs using UDP encapsulation	Martin Willi	2014-06-04	1	-0/+31
\|
*	kernel-wfp: Refactor SA context construction, and use IPsecSaContextCreate1()	Martin Willi	2014-06-04	1	-19/+32
\|
*	kernel-iph: Fire roam events for detected address changes	Martin Willi	2014-06-04	1	-0/+60
\|
*	kernel-wfp: Allocate SPIs pseudo-randomly using a 0xc prefix	Martin Willi	2014-06-04	1	-2/+59
\|
*	kernel-wfp: Install appropriate routes for tunnel mode policies	Martin Willi	2014-06-04	1	-1/+208
\|
*	kernel-iph: Implement add/del_route()	Martin Willi	2014-06-04	1	-6/+80
\|
*	kernel-iph: Implement get_nexthop()	Martin Willi	2014-06-04	1	-0/+32
\|
*	kernel-iph: Implement get_source_addr()	Martin Willi	2014-06-04	1	-1/+23
\|
*	kernel-iph: Implement address enumeration	Martin Willi	2014-06-04	1	-1/+79
\|
*	kernel-iph: Implement get_interface() method	Martin Willi	2014-06-04	1	-1/+38
\|
*	kernel-iph: Create and maintain a cache of interfaces and associated addresses	Martin Willi	2014-06-04	1	-0/+328
\|
*	kernel-iph: Add a stub for a Windows IP Helper based networking backend	Martin Willi	2014-06-04	6	-0/+306
\|
*	kernel-wfp: Disable IPsec policy updates	Martin Willi	2014-06-04	1	-4/+11
\| \| \| \| \|	It seems that WFP requires an update of the SA context only, but not for the filters. This allows us to omit support for (fallback) drop policies.
*	kernel-interface: Add a flag to indicate no policy updates required	Martin Willi	2014-06-04	1	-3/+14
\|
*	kernel-wfp: Increment SPIs properly, that is while in host order	Martin Willi	2014-06-04	1	-2/+2
\|
*	kernel-wfp: Triggering expire events for SAs to rekey/delete	Martin Willi	2014-06-04	1	-0/+108
\|
*	kernel-wfp: Enforce hard lifetimes of SAs	Martin Willi	2014-06-04	1	-0/+8
\|
*	kernel-wfp: Add some notes about query_sa/policy() support	Martin Willi	2014-06-04	1	-0/+5
\|
*	kernel-wfp: Reference SA/SP sets by SPI and destination, not reqid	Martin Willi	2014-06-04	1	-255/+149
\| \| \| \| \|	This allows us to have multiple CHILD_SAs for the same reqid, and brings rekeying support.
*	kernel-wfp: Add support for tunnel mode connections	Martin Willi	2014-06-04	2	-25/+215
\|
*	kernel-wfp: Register a WFP provider to manage IPsec tunnels	Martin Willi	2014-06-04	1	-0/+22
\|
*	kernel-wfp: Preliminary support for transport mode connections	Martin Willi	2014-06-04	2	-3/+698
\|
*	kernel-wfp: Fix/Complete some fwpuclnt functionality in MinGW	Martin Willi	2014-06-04	4	-3/+133
\| \| \| \| \| \| \| \| \|	While MinGW declares all the required symbols, some of them are missing in the library files. We provide missing variables locally, functions get a stub that call the GetProcAddress()ed function from the DLL. Also some MinGW headers define some enum values incorrectly, we overload these using defines.