tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	Don't wait while removing external IPs used for load testing	Martin Willi	2012-11-29	3	-4/+8
\|
*	Install virtual IPs via interface name, and use an interface lookup where ↵	Martin Willi	2012-11-29	3	-8/+6
\| \| \| \|	required
*	Add an optional kernel-interface parameter to install IPs with a custom prefix	Martin Willi	2012-11-29	3	-8/+13
\|
*	Moved debug.[ch] to utils folder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	Moved data structures to new collections subfolder	Tobias Brunner	2012-10-24	2	-2/+2
\|
*	Moved host_t and host_resolver_t to a new networking subfolder	Tobias Brunner	2012-10-24	4	-4/+4
\|
*	Don't check interface of inbound message if interfaces are not filtered	Tobias Brunner	2012-09-24	2	-5/+16
\| \| \| \| \|	We don't have a proper kernel-net interface on Android yet, so the check for a usable interface does not work there.
*	Made IP address enumeration more flexible	Tobias Brunner	2012-09-21	3	-17/+28
\| \| \| \|	Also added an option to enumerate addresses on ignored interfaces.
*	Filter ignored interfaces in kernel interfaces (for events, address ↵	Tobias Brunner	2012-09-21	2	-2/+4
\| \| \| \|	enumeration, etc.)
*	Make it easy to check if an address is locally usable via changed ↵	Tobias Brunner	2012-09-21	3	-7/+9
\| \| \| \|	get_interface() method
*	Don't ignore loopback devices and allow addresses on them being enumerated	Tobias Brunner	2012-09-21	3	-8/+12
\|
*	Added options and a lookup function that will allow filtering of network ↵	Tobias Brunner	2012-09-21	2	-2/+70
\| \| \| \|	interfaces
*	Use source address in get_nexthop() call	Tobias Brunner	2012-09-21	3	-6/+11
\| \| \| \| \|	Otherwise the nexthop returned might belong to a different route than the one actually used with the current source address.
*	Added possibility to register custom kernel algorithms to kernel interface	Tobias Brunner	2012-09-13	2	-1/+172
\|
*	Moved types used by kernel_ipsec_t interface (and libipsec) to libstrongswan	Tobias Brunner	2012-08-08	2	-168/+1
\| \| \| \|	This avoids a dependency of libipsec to libhydra.
*	Let kernel interfaces decide how to enable UDP decapsulation of ESP packets.	Tobias Brunner	2012-08-08	3	-4/+38
\|
*	Avoid SIGSEGV during shutdown if charon is not started as root	Tobias Brunner	2012-06-25	1	-2/+2
\|
*	Define a special XFRM mark_t.value that dynamically uses the CHILD_SA reqid	Martin Willi	2012-03-22	1	-0/+5
\|
*	Merge branch 'ikev1-clean' into ikev1-master	Martin Willi	2012-03-20	1	-0/+2
\|\ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins.
\| *	Added not-yet used sa_payload parameters used in IKEv1	Martin Willi	2012-03-20	1	-0/+2
\| \|
* \|	Be less verbose if we don't have a local address for a tunnel	Martin Willi	2012-03-06	1	-1/+1
\|/
*	Defined functions in the kernel interface to flush SAD and SPD entries.	Tobias Brunner	2011-10-21	3	-0/+50
\|
*	Added kernel_ipsec/net plugin feature loading callbacks	Martin Willi	2011-10-14	4	-0/+87
\|
*	Destroy kernel interface during deregistration, as the plugin goes afterwards	Martin Willi	2011-09-12	1	-2/+22
\|
*	Install fallback drop policies to avoid transmitting unencrypted packets.	Tobias Brunner	2011-07-27	1	-0/+2
\| \| \| \| \| \| \|	During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy is first uninstalled and then the new one is installed. In the short time in between, where no policy is available in the kernel, unencrypted packets could have been transmitted.
*	Remove policies in kernel interfaces based on their priority.	Tobias Brunner	2011-07-27	3	-12/+25
\| \| \| \| \| \|	This allows to unroute a connection while the same connection is currently established. In this case both CHILD_SAs share the same reqid but the installed policies have different priorities.
*	Fixed common misspellings.	Tobias Brunner	2011-07-20	1	-1/+1
\| \| \| \|	Mostly found by 'codespell'.
*	Add the reqid to kernel_ipsec_t.del_policy.	Tobias Brunner	2011-07-06	3	-10/+12
\|
*	implemented PASS and DROP shunt policies	Andreas Steffen	2011-06-28	2	-1/+7
\|
*	Added an esn parameter to the kernel interface add_sa functions	Martin Willi	2011-04-20	3	-5/+7
\|
*	Implemented Traffic Flow Confidentiality padding in kernel_interface	Martin Willi	2010-12-20	3	-6/+8
\|
*	Fixing installation of trap policies (SPI=0) in kernel interface.	Tobias Brunner	2010-09-02	3	-23/+32
\|
*	Added an option to specify the type of a policy to kernel_ipsec.add_policy.	Tobias Brunner	2010-09-02	3	-6/+22
\| \| \| \| \|	This will later allow us to support pluto's passthrough and drop policies in charon.
*	Replaced the protocol argument in add_policy with an optional SPI for an AH SA.	Tobias Brunner	2010-09-02	3	-8/+8
\|
*	Moved ipsec_transform_t to kernel_ipsec.h in libhydra.	Tobias Brunner	2010-09-02	2	-1/+26
\| \| \| \| \|	Because of this libfreeswan, pluto, starter etc. now depend on that file (and libhydra). This resolved some duplicate declarations.
*	Moved kernel interface to libhydra.	Tobias Brunner	2010-09-02	6	-0/+1594