aboutsummaryrefslogtreecommitdiffstats
path: root/src/libhydra/plugins/kernel_netlink/kernel_netlink_ipsec.c
Commit message (Expand)AuthorAgeFilesLines
* Clarified code when hashing/comparing cached policies in kernel-netlinkTobias Brunner2012-09-281-5/+4
* Use proper argument for sizeof when copying replay stateTobias Brunner2012-09-281-1/+1
* Algorithm names are not always static anymore, avoid string overflowsTobias Brunner2012-09-281-5/+10
* Allow replay windows smaller than the default of 32Tobias Brunner2012-09-271-4/+6
* Make sure the if_name member of cached route entries is initialized to NULLTobias Brunner2012-09-221-2/+5
* Make it easy to check if an address is locally usable via changed get_interfa...Tobias Brunner2012-09-211-4/+3
* Use source address in get_nexthop() callTobias Brunner2012-09-211-1/+2
* Added algorithm lookup via kernel_interface_t to the various kernel interfacesTobias Brunner2012-09-131-8/+27
* Consistently log XFRM mark masks with 0 prefix in kernel-netlink pluginTobias Brunner2012-09-121-13/+13
* Let kernel interfaces decide how to enable UDP decapsulation of ESP packets.Tobias Brunner2012-08-081-0/+28
* Centralized thread cancellation in processor_tTobias Brunner2012-06-251-12/+4
* Don't compare ports when comparing cached routes.Tobias Brunner2012-06-151-2/+2
* Disabled listening for kernel events in starter.Tobias Brunner2012-06-081-22/+31
* Route reinstallation in kernel_ipsec_t implementations is not needed anymore.Tobias Brunner2012-05-021-6/+1
* Use single DBG2 statements in kernel_netlink plugin (i.e. ignore mark.value).Tobias Brunner2012-03-271-86/+26
* Merge branch 'ikev1-clean' into ikev1-masterMartin Willi2012-03-201-22/+19
|\
| * Be less verbose when deleting SAs triggered by a hard expireMartin Willi2012-03-201-22/+19
* | Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595.Tobias Brunner2012-02-271-3/+21
* | Always unlock mutex for installed policies in kernel-netlink plugin.Thomas Egerer2011-12-141-1/+5
|/
* Memwipe request after sa update, tooThomas Egerer2011-11-041-0/+1
* Extend xfrm_attr_type_names by newly added enum valuesThomas Egerer2011-11-041-2/+6
* Silently install route again, even if it did not change.Tobias Brunner2011-11-041-1/+6
* Compile warning fixed in kernel interfaces.Tobias Brunner2011-11-041-1/+1
* Implemented flushing of states and policies via XFRM.Tobias Brunner2011-10-211-0/+56
* Disable policy history for pluto.4.5.3Tobias Brunner2011-08-021-21/+46
* Install fallback drop policies to avoid transmitting unencrypted packets.Tobias Brunner2011-07-271-0/+3
* Remove policies in kernel interfaces based on their priority.Tobias Brunner2011-07-271-15/+32
* removed stray codeAndreas Steffen2011-07-181-2/+1
* added log and status output for ESNAndreas Steffen2011-07-161-1/+5
* Simplified destruction of policy_sa_t objects in Netlink interface.Tobias Brunner2011-07-061-12/+7
* Some code cleanup in Netlink kernel interface.Tobias Brunner2011-07-061-108/+119
* Reduce memory usage of policy history caching.Tobias Brunner2011-07-061-131/+270
* Keep the mutex locked as long as possible when deleting policies.Tobias Brunner2011-07-061-61/+57
* Properly unlock the policy if no change in the kernel is required.Tobias Brunner2011-07-061-0/+1
* Make sure access to policy is thread-safe during installation of route.Tobias Brunner2011-07-061-2/+17
* Record the history of a policy installed in the kernel.Tobias Brunner2011-07-061-141/+317
* Add the reqid to kernel_ipsec_t.del_policy.Tobias Brunner2011-07-061-2/+2
* Use CRITICAL job priority class for long running dispatcher jobsMartin Willi2011-05-161-2/+2
* Return correct status code in kernel_netlink_ipsec_t.query_sa.Tobias Brunner2011-05-101-1/+1
* Wipe memory after using key material (incomplete, to be continued)Martin Willi2011-05-091-19/+29
* Copy ESN enabled replay state during update_sa, if supportedMartin Willi2011-04-201-48/+77
* Add ESN support to kernel netlink plugin, including custom replay windowsMartin Willi2011-04-201-3/+47
* Added an esn parameter to the kernel interface add_sa functionsMartin Willi2011-04-201-2/+2
* Align netlink attributes properly if rta_len not a multiple of RTA_ALIGNTOMartin Willi2011-03-021-16/+16
* Implemented Traffic Flow Confidentiality padding in kernel_interfaceMartin Willi2010-12-201-2/+20
* Install selectors on transport mode IPsec SAs.Jiri Bohac2010-12-131-0/+1
* Include the destination net in the policy priority calculation.Tobias Brunner2010-12-071-6/+11
* Print full source route on DBG2 that gets installedMartin Willi2010-11-111-0/+2
* added non-standard SERPENT and TWOFISH support to kernel_netlink pluginAndreas Steffen2010-09-081-0/+2
* Do not install routes for pluto.Tobias Brunner2010-09-021-0/+5