| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | kernel-pfkey: install route along with input, not forward policies | Martin Willi | 2013-05-06 | 1 | -20/+20 | |
| | | | | | | | As forwarding policies are not available on all systems (OS X), using the forward policy to attach the route is a bad pick. Using input policies allows OS X to install routes. | |||||
| * | kernel-pfkey: use an int to set esp_port with a sysctl on OS X | Martin Willi | 2013-05-06 | 1 | -2/+4 | |
| | | ||||||
| * | kernel-pfkey: remove obsolete pluto specific behavior | Martin Willi | 2013-05-06 | 1 | -5/+1 | |
| | | ||||||
| * | Pass correclty sized pointer to lookup_algorithm() in PF_KEY | Martin Willi | 2013-03-14 | 1 | -1/+1 | |
| | | ||||||
| * | kernel_ipsec_t.query_sa() additionally returns the number of processed packets | Martin Willi | 2013-03-14 | 1 | -2/+11 | |
| | | ||||||
| * | Use a complete port range in traffic_selector_create_from_{subnet,cidr} | Martin Willi | 2013-02-21 | 1 | -2/+2 | |
| | | ||||||
| * | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 | |
| | | ||||||
| * | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -2/+2 | |
| | | ||||||
| * | Moved host_t and host_resolver_t to a new networking subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 | |
| | | ||||||
| * | Added missing break statements in NAT-T mapping handling in PF_KEY plugin | Tobias Brunner | 2012-09-28 | 1 | -0/+2 | |
| | | ||||||
| * | Make sure the if_name member of cached route entries is initialized to NULL | Tobias Brunner | 2012-09-22 | 1 | -2/+5 | |
| | | ||||||
| * | Make it easy to check if an address is locally usable via changed ↵ | Tobias Brunner | 2012-09-21 | 1 | -4/+3 | |
| | | | | | get_interface() method | |||||
| * | Use source address in get_nexthop() call | Tobias Brunner | 2012-09-21 | 1 | -1/+2 | |
| | | | | | | Otherwise the nexthop returned might belong to a different route than the one actually used with the current source address. | |||||
| * | Added algorithm lookup via kernel_interface_t to the various kernel interfaces | Tobias Brunner | 2012-09-13 | 1 | -4/+20 | |
| | | ||||||
| * | Let kernel interfaces decide how to enable UDP decapsulation of ESP packets. | Tobias Brunner | 2012-08-08 | 1 | -0/+42 | |
| | | ||||||
| * | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 1 | -12/+4 | |
| | | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
| * | Don't compare ports when comparing cached routes. | Tobias Brunner | 2012-06-15 | 1 | -2/+2 | |
| | | | | | At least src_ip has a port set sometimes. | |||||
| * | Disabled listening for kernel events in starter. | Tobias Brunner | 2012-06-08 | 1 | -18/+26 | |
| | | ||||||
| * | Properly install policies with ports in PF_KEY kernel interface. | Tobias Brunner | 2012-06-07 | 1 | -27/+28 | |
| | | ||||||
| * | Route reinstallation in kernel_ipsec_t implementations is not needed anymore. | Tobias Brunner | 2012-05-02 | 1 | -6/+1 | |
| | | ||||||
| * | Silently install route again, even if it did not change. | Tobias Brunner | 2011-11-04 | 1 | -1/+6 | |
| | | | | | | Address/interface changes can cause the route to disappear. Afterwards the route might look the same but that does not mean it is still installed. | |||||
| * | Compile warning fixed in kernel interfaces. | Tobias Brunner | 2011-11-04 | 1 | -1/+1 | |
| | | ||||||
| * | Implemented flushing of SAD and SPD entries via PF_KEY. | Tobias Brunner | 2011-10-21 | 1 | -0/+68 | |
| | | ||||||
| * | Add features support to kernel-pfkey plugin | Martin Willi | 2011-10-14 | 1 | -5/+12 | |
| | | ||||||
| * | Install fallback drop policies to avoid transmitting unencrypted packets. | Tobias Brunner | 2011-07-27 | 1 | -0/+3 | |
| | | | | | | | | During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy is first uninstalled and then the new one is installed. In the short time in between, where no policy is available in the kernel, unencrypted packets could have been transmitted. | |||||
| * | Remove policies in kernel interfaces based on their priority. | Tobias Brunner | 2011-07-27 | 1 | -17/+34 | |
| | | | | | | | This allows to unroute a connection while the same connection is currently established. In this case both CHILD_SAs share the same reqid but the installed policies have different priorities. | |||||
| * | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 1 | -1/+1 | |
| | | | | | Mostly found by 'codespell'. | |||||
| * | Record usage history of policies in PF_KEY kernel interface. | Tobias Brunner | 2011-07-06 | 1 | -169/+457 | |
| | | | | | The implementation is nearly the same as in the Netlink kernel interface. | |||||
| * | Some code cleanup in PF_KEY kernel interface. | Tobias Brunner | 2011-07-06 | 1 | -118/+142 | |
| | | ||||||
| * | Add the reqid to kernel_ipsec_t.del_policy. | Tobias Brunner | 2011-07-06 | 1 | -2/+2 | |
| | | ||||||
| * | Cache the most recent reqid in the PF_KEY kernel interface. | Tobias Brunner | 2011-07-06 | 1 | -1/+2 | |
| | | | | | | This makes the PF_KEY kernel interface behave the same as the Netlink kernel interface. | |||||
| * | install PASS and DROP shunt policies via PFKEYv2 interface | Andreas Steffen | 2011-07-05 | 1 | -1/+12 | |
| | | ||||||
| * | Use CRITICAL job priority class for long running dispatcher jobs | Martin Willi | 2011-05-16 | 1 | -2/+2 | |
| | | ||||||
| * | Added an esn parameter to the kernel interface add_sa functions | Martin Willi | 2011-04-20 | 1 | -1/+1 | |
| | | ||||||
| * | Added a (not yet implemented) plugin_t method to reload plugin configuration | Martin Willi | 2011-04-15 | 1 | -0/+1 | |
| | | ||||||
| * | Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵ | Martin Willi | 2011-04-15 | 1 | -0/+7 | |
| | | | | | over plugin_t | |||||
| * | added missing tfc argument to kernel_pfkey_ipsec interface | Andreas Steffen | 2010-12-27 | 1 | -1/+1 | |
| | | ||||||
| * | Include the destination net in the policy priority calculation. | Tobias Brunner | 2010-12-07 | 1 | -6/+9 | |
| | | | | | | | | | | | | | | The resulting priorities are as follows: IPv6 IPv4 routed normal routed normal max 4096(+3) 2048(+3) 4096(+3) 2048(+3) min 3072 1024 3840 1792 Where min is for a policy between two single hosts and max is for /0 on both ends (lower priorities are preferred by the kernel). (+3) applies for cases where no protocol and no ports are defined. | |||||
| * | Migrated kernel_pfkey_plugin_t to INIT/METHOD macros | Andreas Steffen | 2010-11-25 | 1 | -8/+11 | |
| | | ||||||
| * | Do not install routes for pluto. | Tobias Brunner | 2010-09-02 | 1 | -0/+5 | |
| | | | | | | There are some incompatibilities with e.g. passthrough policies. Pluto installs required source routes via updown script. | |||||
| * | Charon specific strongswan.conf options generalized. | Tobias Brunner | 2010-09-02 | 1 | -1/+2 | |
| | | ||||||
| * | Fixing installation of trap policies (SPI=0) in kernel interface. | Tobias Brunner | 2010-09-02 | 1 | -9/+8 | |
| | | ||||||
| * | Added an option to specify the type of a policy to kernel_ipsec.add_policy. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | | | | | | This will later allow us to support pluto's passthrough and drop policies in charon. | |||||
| * | Replaced the protocol argument in add_policy with an optional SPI for an AH SA. | Tobias Brunner | 2010-09-02 | 1 | -2/+2 | |
| | | ||||||
| * | Refer to scheduler and processor via lib and not hydra. | Tobias Brunner | 2010-09-02 | 1 | -1/+1 | |
| | | ||||||
| * | Moved all kernel plugins to libhydra. | Tobias Brunner | 2010-09-02 | 5 | -0/+2336 | |
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |