Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | kernel-wfp: Register for WFP Net events | Martin Willi | 2014-06-04 | 2 | -0/+48 | |
| | ||||||
* | kernel-wfp: Add some missing IPv6 GUIDs, fix IPv6 host conversion | Martin Willi | 2014-06-04 | 2 | -2/+29 | |
| | ||||||
* | kernel-wfp: Add an ipsecdump "filters" command to print IPsec related filters | Martin Willi | 2014-06-04 | 1 | -1/+282 | |
| | ||||||
* | kernel-wfp: Add an ipsecdump utility to show installed SAs/SPs on Windows | Martin Willi | 2014-06-04 | 3 | -0/+432 | |
| | ||||||
* | kernel-wfp: Depend on used RNG plugin features | Martin Willi | 2014-06-04 | 1 | -0/+2 | |
| | ||||||
* | kernel-wfp: Implement update_sa() | Martin Willi | 2014-06-04 | 3 | -1/+114 | |
| | ||||||
* | kernel-wfp: Configure ports for SAs using UDP encapsulation | Martin Willi | 2014-06-04 | 1 | -0/+31 | |
| | ||||||
* | kernel-wfp: Refactor SA context construction, and use IPsecSaContextCreate1() | Martin Willi | 2014-06-04 | 1 | -19/+32 | |
| | ||||||
* | kernel-iph: Fire roam events for detected address changes | Martin Willi | 2014-06-04 | 1 | -0/+60 | |
| | ||||||
* | kernel-wfp: Allocate SPIs pseudo-randomly using a 0xc prefix | Martin Willi | 2014-06-04 | 1 | -2/+59 | |
| | ||||||
* | kernel-wfp: Install appropriate routes for tunnel mode policies | Martin Willi | 2014-06-04 | 1 | -1/+208 | |
| | ||||||
* | kernel-iph: Implement add/del_route() | Martin Willi | 2014-06-04 | 1 | -6/+80 | |
| | ||||||
* | kernel-iph: Implement get_nexthop() | Martin Willi | 2014-06-04 | 1 | -0/+32 | |
| | ||||||
* | kernel-iph: Implement get_source_addr() | Martin Willi | 2014-06-04 | 1 | -1/+23 | |
| | ||||||
* | kernel-iph: Implement address enumeration | Martin Willi | 2014-06-04 | 1 | -1/+79 | |
| | ||||||
* | kernel-iph: Implement get_interface() method | Martin Willi | 2014-06-04 | 1 | -1/+38 | |
| | ||||||
* | kernel-iph: Create and maintain a cache of interfaces and associated addresses | Martin Willi | 2014-06-04 | 1 | -0/+328 | |
| | ||||||
* | kernel-iph: Add a stub for a Windows IP Helper based networking backend | Martin Willi | 2014-06-04 | 6 | -0/+306 | |
| | ||||||
* | kernel-wfp: Disable IPsec policy updates | Martin Willi | 2014-06-04 | 1 | -4/+11 | |
| | | | | | It seems that WFP requires an update of the SA context only, but not for the filters. This allows us to omit support for (fallback) drop policies. | |||||
* | kernel-interface: Add a flag to indicate no policy updates required | Martin Willi | 2014-06-04 | 1 | -3/+14 | |
| | ||||||
* | kernel-wfp: Increment SPIs properly, that is while in host order | Martin Willi | 2014-06-04 | 1 | -2/+2 | |
| | ||||||
* | kernel-wfp: Triggering expire events for SAs to rekey/delete | Martin Willi | 2014-06-04 | 1 | -0/+108 | |
| | ||||||
* | kernel-wfp: Enforce hard lifetimes of SAs | Martin Willi | 2014-06-04 | 1 | -0/+8 | |
| | ||||||
* | kernel-wfp: Add some notes about query_sa/policy() support | Martin Willi | 2014-06-04 | 1 | -0/+5 | |
| | ||||||
* | kernel-wfp: Reference SA/SP sets by SPI and destination, not reqid | Martin Willi | 2014-06-04 | 1 | -255/+149 | |
| | | | | | This allows us to have multiple CHILD_SAs for the same reqid, and brings rekeying support. | |||||
* | kernel-wfp: Add support for tunnel mode connections | Martin Willi | 2014-06-04 | 2 | -25/+215 | |
| | ||||||
* | kernel-wfp: Register a WFP provider to manage IPsec tunnels | Martin Willi | 2014-06-04 | 1 | -0/+22 | |
| | ||||||
* | kernel-wfp: Preliminary support for transport mode connections | Martin Willi | 2014-06-04 | 2 | -3/+698 | |
| | ||||||
* | kernel-wfp: Fix/Complete some fwpuclnt functionality in MinGW | Martin Willi | 2014-06-04 | 4 | -3/+133 | |
| | | | | | | | | | While MinGW declares all the required symbols, some of them are missing in the library files. We provide missing variables locally, functions get a stub that call the GetProcAddress()ed function from the DLL. Also some MinGW headers define some enum values incorrectly, we overload these using defines. | |||||
* | kernel-wfp: Open and close a WFP engine | Martin Willi | 2014-06-04 | 1 | -1/+33 | |
| | ||||||
* | kernel-wfp: Create userland state for SAs/policies to install in kernel | Martin Willi | 2014-06-04 | 1 | -5/+364 | |
| | ||||||
* | kernel-wfp: Add a stub for a Windows Filtering Platform based IPsec backend | Martin Willi | 2014-06-04 | 6 | -0/+361 | |
| | ||||||
* | socket-win: Implement a Windows socket plugin using Winsock2 | Martin Willi | 2014-06-04 | 6 | -0/+697 | |
| | ||||||
* | vici: Add Windows support | Martin Willi | 2014-06-04 | 7 | -13/+54 | |
| | ||||||
* | file-logger: Emulate setlinebuf() if not supported by using fflush() | Martin Willi | 2014-06-04 | 1 | -0/+12 | |
| | ||||||
* | bus: Build syslog logger depending on syslog() availability | Martin Willi | 2014-06-04 | 1 | -3/+4 | |
| | ||||||
* | libcharon: Link against Winsock2 on Windows | Martin Willi | 2014-06-04 | 1 | -0/+1 | |
| | ||||||
* | filelog: Ignore flush_line option if setlinebuf() not supported | Martin Willi | 2014-06-04 | 1 | -0/+2 | |
| | ||||||
* | controller: Remove unused <dlfcn.h> include | Martin Willi | 2014-06-04 | 1 | -1/+0 | |
| | ||||||
* | charon: Don't use syslog() if not supported | Martin Willi | 2014-06-04 | 2 | -6/+29 | |
| | ||||||
* | encoding: Don't explicitly include <arpa/inet.h> | Martin Willi | 2014-06-04 | 2 | -2/+0 | |
| | ||||||
* | payload: Use common prefixes for all payload type identifiers | Martin Willi | 2014-06-04 | 90 | -873/+873 | |
| | | | | | The old identifiers did not use a proper namespace and often clashed with other defines. | |||||
* | plugins: Don't link with -rdynamic on Windows | Martin Willi | 2014-06-04 | 56 | -56/+56 | |
| | ||||||
* | Detect RADIUS packet retransmissions | Andreas Steffen | 2014-05-31 | 1 | -2/+89 | |
| | ||||||
* | peer-cfg: Add missing UNIQUE_NEVER to unique_policy_names | Martin Willi | 2014-05-19 | 1 | -1/+2 | |
| | ||||||
* | proposal: Don't return a default IKE proposal without encryption/AEAD algs | Martin Willi | 2014-05-16 | 1 | -3/+23 | |
| | ||||||
* | ike: Add an additional but separate AEAD proposal to CHILD config | Martin Willi | 2014-05-16 | 6 | -2/+16 | |
| | | | | | | | This currently has no effect: We don't include AEAD algorithms in the default ESP proposal, as we don't know if it is supported by the backend. But as we hopefully get an algorithm query mechanism on kernel interfaces some day, we add the appropriate functionality nonetheless. | |||||
* | ike: Add an additional but separate AEAD proposal to IKE config, if supported | Martin Willi | 2014-05-16 | 7 | -10/+32 | |
| | ||||||
* | child-cfg: Allow passing NULL as proposal to add_proposal() | Martin Willi | 2014-05-16 | 2 | -4/+7 | |
| | | | | Making the API consistent to the one of ike_cfg. | |||||
* | ike-cfg: Allow passing NULL to add_proposal() | Martin Willi | 2014-05-16 | 2 | -3/+7 | |
| | | | | | This simplifies adding default proposals with constructors potentially returning NULL. |