Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Properly initialize ike_sa_t. | Tobias Brunner | 2011-08-01 | 1 | -1/+1 | |
| | ||||||
* | Properly initialize the UCI plugin. | Tobias Brunner | 2011-08-01 | 1 | -2/+2 | |
| | ||||||
* | Build libtncif on Android. | Tobias Brunner | 2011-07-29 | 1 | -2/+3 | |
| | ||||||
* | File lists in Android.mk files updated. | Tobias Brunner | 2011-07-29 | 1 | -1/+1 | |
| | ||||||
* | Update fallback drop policies if required. | Tobias Brunner | 2011-07-29 | 1 | -2/+20 | |
| | ||||||
* | Install fallback drop policies for all three directions. | Tobias Brunner | 2011-07-28 | 1 | -65/+66 | |
| | ||||||
* | Install fallback drop policies to avoid transmitting unencrypted packets. | Tobias Brunner | 2011-07-27 | 1 | -0/+17 | |
| | | | | | | | During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy is first uninstalled and then the new one is installed. In the short time in between, where no policy is available in the kernel, unencrypted packets could have been transmitted. | |||||
* | Remove policies in kernel interfaces based on their priority. | Tobias Brunner | 2011-07-27 | 3 | -23/+32 | |
| | | | | | | This allows to unroute a connection while the same connection is currently established. In this case both CHILD_SAs share the same reqid but the installed policies have different priorities. | |||||
* | Inherit authentication information during IKE_SA rekeying | Martin Willi | 2011-07-25 | 1 | -0/+16 | |
| | ||||||
* | Added a log message when roam jobs get created. | Tobias Brunner | 2011-07-21 | 1 | -0/+2 | |
| | ||||||
* | fixed esn type | Andreas Steffen | 2011-07-20 | 1 | -2/+2 | |
| | ||||||
* | fixed some more misspellings | Andreas Steffen | 2011-07-20 | 1 | -3/+3 | |
| | ||||||
* | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 24 | -48/+48 | |
| | | | | Mostly found by 'codespell'. | |||||
* | Count running load-tester threads properly. | Tobias Brunner | 2011-07-18 | 1 | -6/+2 | |
| | ||||||
* | Fix load-tester.shutdown_when_complete option. | Tobias Brunner | 2011-07-18 | 1 | -4/+8 | |
| | | | | It didn't work when used together with delete_after_established=yes. | |||||
* | Fix listener registration in load-tester plugin. | Tobias Brunner | 2011-07-18 | 1 | -3/+2 | |
| | | | | This fixes the load-tester.shutdown_when_complete option. | |||||
* | added log and status output for ESN | Andreas Steffen | 2011-07-16 | 1 | -0/+7 | |
| | ||||||
* | added IKEv2 exchange type IKE_SESSION_RESUME from RFC 5723 | Andreas Steffen | 2011-07-15 | 2 | -4/+10 | |
| | ||||||
* | Fix parentheses in write() to CLUSTERIP control files | Martin Willi | 2011-07-14 | 1 | -1/+1 | |
| | ||||||
* | shunt manager installs policies with %any hosts | Andreas Steffen | 2011-07-14 | 1 | -3/+6 | |
| | ||||||
* | fixed typo | Andreas Steffen | 2011-07-14 | 2 | -2/+2 | |
| | ||||||
* | updated IANA IKEv2 Notify Message Types | Andreas Steffen | 2011-07-14 | 2 | -8/+28 | |
| | ||||||
* | add relative PB-TNC message offset | Andreas Steffen | 2011-07-13 | 1 | -1/+1 | |
| | ||||||
* | return offset value | Andreas Steffen | 2011-07-13 | 1 | -0/+1 | |
| | ||||||
* | Adapted shunt manager to changed kernel interface (reqid in del_policy). | Tobias Brunner | 2011-07-06 | 1 | -3/+6 | |
| | ||||||
* | Use has_more in decrypt_payloads instead of calling enumerate twice. | Tobias Brunner | 2011-07-06 | 1 | -1/+1 | |
| | ||||||
* | Replaced more complex iterator usages. | Tobias Brunner | 2011-07-06 | 3 | -49/+33 | |
| | ||||||
* | Replaced ike_sa_t.create_additional_address_iterator with enumerator. | Tobias Brunner | 2011-07-06 | 4 | -35/+37 | |
| | ||||||
* | Replaced ike_sa_t.create_child_sa_iterator with enumerator. | Tobias Brunner | 2011-07-06 | 15 | -111/+134 | |
| | | | | | This required two new methods on ike_sa_t. One returns the number of CHILD_SAs and one allows to remove a CHILD_SA. | |||||
* | Replaced simple iterator usages. | Tobias Brunner | 2011-07-06 | 10 | -163/+164 | |
| | ||||||
* | Add the reqid to kernel_ipsec_t.del_policy. | Tobias Brunner | 2011-07-06 | 2 | -8/+14 | |
| | ||||||
* | Don't install the libraries directly in lib/. | Tobias Brunner | 2011-07-05 | 1 | -1/+1 | |
| | | | | | Instead use a subdirectory (prefix/lib/ipsec by default). Also moved the plugins from libexec to a subdirectory of that dir. | |||||
* | implemented PASS and DROP shunt policies | Andreas Steffen | 2011-06-28 | 9 | -12/+406 | |
| | ||||||
* | Initialize trap_manager listener with INIT macro, too | Martin Willi | 2011-06-28 | 1 | -8/+9 | |
| | ||||||
* | Migrated trap_manager_t to INIT/METHOD macros | Andreas Steffen | 2011-06-28 | 1 | -45/+32 | |
| | ||||||
* | oops, should have been a bitwise and | Andreas Steffen | 2011-06-25 | 1 | -2/+2 | |
| | ||||||
* | fixed copy-and-paste error | Andreas Steffen | 2011-06-25 | 1 | -1/+1 | |
| | ||||||
* | output all known PA-TNC subtype names | Andreas Steffen | 2011-06-24 | 4 | -39/+42 | |
| | ||||||
* | notify IMVs about handshake retries | Andreas Steffen | 2011-06-23 | 1 | -0/+5 | |
| | ||||||
* | some cosmetics | Andreas Steffen | 2011-06-16 | 2 | -4/+4 | |
| | ||||||
* | fixed XML parsing of TNCCS 1.1 ReasonString message | Andreas Steffen | 2011-06-16 | 1 | -1/+44 | |
| | ||||||
* | clear reason strings after delivering them | Andreas Steffen | 2011-06-15 | 4 | -0/+24 | |
| | ||||||
* | added missing single quotes | Andreas Steffen | 2011-06-14 | 1 | -2/+2 | |
| | ||||||
* | fixed the IF-TNCCS 1.1 ReasonString XML encoding | Andreas Steffen | 2011-06-14 | 1 | -0/+2 | |
| | ||||||
* | added missing single quotes | Andreas Steffen | 2011-06-13 | 1 | -4/+4 | |
| | ||||||
* | fixed length check | Andreas Steffen | 2011-06-12 | 1 | -1/+1 | |
| | ||||||
* | unfinished MS SoH Request | Andreas Steffen | 2011-06-09 | 1 | -0/+15 | |
| | ||||||
* | Properly print time differences. | Tobias Brunner | 2011-06-07 | 1 | -2/+2 | |
| | | | | time_t is not necessarily of type int. | |||||
* | Use proper printf specifiers to print u_int64_t and uintptr_t. | Tobias Brunner | 2011-06-07 | 1 | -4/+5 | |
| | ||||||
* | Fix compilation with GCC 4.6. | Laurent Bigonville | 2011-06-07 | 1 | -1/+1 | |
| |