Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | kernel-wfp: Set flag to get UDP encapsulation with tunnel mode working | Martin Willi | 2014-06-04 | 2 | -0/+22 | |
| | | | | | | Having this flag set fixes connections initiated by the Windows host, but unfortunately does not yet fix incoming connections. Connection state issue? We still see 0xc00000e2 error events, translating to INTERNAL_ERROR. | |||||
* | kernel-wfp: Install tunnel and trap forward policies | Martin Willi | 2014-06-04 | 3 | -136/+275 | |
| | ||||||
* | kernel-wfp: Manually create a ProviderContext to attach individual filters | Martin Willi | 2014-06-04 | 4 | -79/+73 | |
| | | | | | | This gives us more flexibility than using the intransparent FwpmIPsecTunnelAdd, and fixes the issues we have seen with trap policies. Forward filters are still missing, but required for site-to-site tunnels. | |||||
* | kernel-wfp: Print filter weight in "ipsecdump filters" | Martin Willi | 2014-06-04 | 1 | -0/+4 | |
| | ||||||
* | kernel-wfp: Add support for trap policies and acquires | Martin Willi | 2014-06-04 | 2 | -1/+304 | |
| | ||||||
* | socket-win: Install IKE bypass policies using bypass_socket() | Martin Willi | 2014-06-04 | 2 | -0/+12 | |
| | ||||||
* | kernel-wfp: Implement bypass_socket() using dedicated filter rules | Martin Willi | 2014-06-04 | 1 | -2/+117 | |
| | ||||||
* | kernel-wfp: Register for WFP Net events | Martin Willi | 2014-06-04 | 2 | -0/+48 | |
| | ||||||
* | kernel-wfp: Add some missing IPv6 GUIDs, fix IPv6 host conversion | Martin Willi | 2014-06-04 | 2 | -2/+29 | |
| | ||||||
* | kernel-wfp: Add an ipsecdump "filters" command to print IPsec related filters | Martin Willi | 2014-06-04 | 1 | -1/+282 | |
| | ||||||
* | kernel-wfp: Add an ipsecdump utility to show installed SAs/SPs on Windows | Martin Willi | 2014-06-04 | 3 | -0/+432 | |
| | ||||||
* | kernel-wfp: Depend on used RNG plugin features | Martin Willi | 2014-06-04 | 1 | -0/+2 | |
| | ||||||
* | kernel-wfp: Implement update_sa() | Martin Willi | 2014-06-04 | 3 | -1/+114 | |
| | ||||||
* | kernel-wfp: Configure ports for SAs using UDP encapsulation | Martin Willi | 2014-06-04 | 1 | -0/+31 | |
| | ||||||
* | kernel-wfp: Refactor SA context construction, and use IPsecSaContextCreate1() | Martin Willi | 2014-06-04 | 1 | -19/+32 | |
| | ||||||
* | kernel-iph: Fire roam events for detected address changes | Martin Willi | 2014-06-04 | 1 | -0/+60 | |
| | ||||||
* | kernel-wfp: Allocate SPIs pseudo-randomly using a 0xc prefix | Martin Willi | 2014-06-04 | 1 | -2/+59 | |
| | ||||||
* | kernel-wfp: Install appropriate routes for tunnel mode policies | Martin Willi | 2014-06-04 | 1 | -1/+208 | |
| | ||||||
* | kernel-iph: Implement add/del_route() | Martin Willi | 2014-06-04 | 1 | -6/+80 | |
| | ||||||
* | kernel-iph: Implement get_nexthop() | Martin Willi | 2014-06-04 | 1 | -0/+32 | |
| | ||||||
* | kernel-iph: Implement get_source_addr() | Martin Willi | 2014-06-04 | 1 | -1/+23 | |
| | ||||||
* | kernel-iph: Implement address enumeration | Martin Willi | 2014-06-04 | 1 | -1/+79 | |
| | ||||||
* | kernel-iph: Implement get_interface() method | Martin Willi | 2014-06-04 | 1 | -1/+38 | |
| | ||||||
* | kernel-iph: Create and maintain a cache of interfaces and associated addresses | Martin Willi | 2014-06-04 | 1 | -0/+328 | |
| | ||||||
* | kernel-iph: Add a stub for a Windows IP Helper based networking backend | Martin Willi | 2014-06-04 | 6 | -0/+306 | |
| | ||||||
* | kernel-wfp: Disable IPsec policy updates | Martin Willi | 2014-06-04 | 1 | -4/+11 | |
| | | | | | It seems that WFP requires an update of the SA context only, but not for the filters. This allows us to omit support for (fallback) drop policies. | |||||
* | kernel-interface: Add a flag to indicate no policy updates required | Martin Willi | 2014-06-04 | 1 | -3/+14 | |
| | ||||||
* | kernel-wfp: Increment SPIs properly, that is while in host order | Martin Willi | 2014-06-04 | 1 | -2/+2 | |
| | ||||||
* | kernel-wfp: Triggering expire events for SAs to rekey/delete | Martin Willi | 2014-06-04 | 1 | -0/+108 | |
| | ||||||
* | kernel-wfp: Enforce hard lifetimes of SAs | Martin Willi | 2014-06-04 | 1 | -0/+8 | |
| | ||||||
* | kernel-wfp: Add some notes about query_sa/policy() support | Martin Willi | 2014-06-04 | 1 | -0/+5 | |
| | ||||||
* | kernel-wfp: Reference SA/SP sets by SPI and destination, not reqid | Martin Willi | 2014-06-04 | 1 | -255/+149 | |
| | | | | | This allows us to have multiple CHILD_SAs for the same reqid, and brings rekeying support. | |||||
* | kernel-wfp: Add support for tunnel mode connections | Martin Willi | 2014-06-04 | 2 | -25/+215 | |
| | ||||||
* | kernel-wfp: Register a WFP provider to manage IPsec tunnels | Martin Willi | 2014-06-04 | 1 | -0/+22 | |
| | ||||||
* | kernel-wfp: Preliminary support for transport mode connections | Martin Willi | 2014-06-04 | 2 | -3/+698 | |
| | ||||||
* | kernel-wfp: Fix/Complete some fwpuclnt functionality in MinGW | Martin Willi | 2014-06-04 | 4 | -3/+133 | |
| | | | | | | | | | While MinGW declares all the required symbols, some of them are missing in the library files. We provide missing variables locally, functions get a stub that call the GetProcAddress()ed function from the DLL. Also some MinGW headers define some enum values incorrectly, we overload these using defines. | |||||
* | kernel-wfp: Open and close a WFP engine | Martin Willi | 2014-06-04 | 1 | -1/+33 | |
| | ||||||
* | kernel-wfp: Create userland state for SAs/policies to install in kernel | Martin Willi | 2014-06-04 | 1 | -5/+364 | |
| | ||||||
* | kernel-wfp: Add a stub for a Windows Filtering Platform based IPsec backend | Martin Willi | 2014-06-04 | 6 | -0/+361 | |
| | ||||||
* | socket-win: Implement a Windows socket plugin using Winsock2 | Martin Willi | 2014-06-04 | 6 | -0/+697 | |
| | ||||||
* | vici: Add Windows support | Martin Willi | 2014-06-04 | 7 | -13/+54 | |
| | ||||||
* | file-logger: Emulate setlinebuf() if not supported by using fflush() | Martin Willi | 2014-06-04 | 1 | -0/+12 | |
| | ||||||
* | bus: Build syslog logger depending on syslog() availability | Martin Willi | 2014-06-04 | 1 | -3/+4 | |
| | ||||||
* | libcharon: Link against Winsock2 on Windows | Martin Willi | 2014-06-04 | 1 | -0/+1 | |
| | ||||||
* | filelog: Ignore flush_line option if setlinebuf() not supported | Martin Willi | 2014-06-04 | 1 | -0/+2 | |
| | ||||||
* | controller: Remove unused <dlfcn.h> include | Martin Willi | 2014-06-04 | 1 | -1/+0 | |
| | ||||||
* | charon: Don't use syslog() if not supported | Martin Willi | 2014-06-04 | 2 | -6/+29 | |
| | ||||||
* | encoding: Don't explicitly include <arpa/inet.h> | Martin Willi | 2014-06-04 | 2 | -2/+0 | |
| | ||||||
* | payload: Use common prefixes for all payload type identifiers | Martin Willi | 2014-06-04 | 90 | -873/+873 | |
| | | | | | The old identifiers did not use a proper namespace and often clashed with other defines. | |||||
* | plugins: Don't link with -rdynamic on Windows | Martin Willi | 2014-06-04 | 56 | -56/+56 | |
| |