| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Moved host_t and host_resolver_t to a new networking subfolder | Tobias Brunner | 2012-10-24 | 4 | -4/+4 | |
| | | ||||||
| * | Use a helper function to add milliseconds to timeval structs | Tobias Brunner | 2012-10-18 | 2 | -18/+3 | |
| | | ||||||
| * | Use proper offset when adding mark attribute in kernel-netlink plugin | Tobias Brunner | 2012-10-15 | 1 | -1/+1 | |
| | | ||||||
| * | Also add mark when querying current replay state in kernel-netlink plugin | Tobias Brunner | 2012-10-15 | 1 | -2/+21 | |
| | | ||||||
| * | Fixed update_sa in kernel-netlink plugin if marks are used | Tobias Brunner | 2012-10-11 | 1 | -0/+18 | |
| | | ||||||
| * | Added missing break statements in NAT-T mapping handling in PF_KEY plugin | Tobias Brunner | 2012-09-28 | 1 | -0/+2 | |
| | | ||||||
| * | Make sure we successfully opened xfrm_acq_expires | Tobias Brunner | 2012-09-28 | 1 | -1/+1 | |
| | | ||||||
| * | Clarified code when hashing/comparing cached policies in kernel-netlink | Tobias Brunner | 2012-09-28 | 1 | -5/+4 | |
| | | ||||||
| * | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 1 | -3/+3 | |
| | | ||||||
| * | Ensure that pipe is closed when calling resolvconf(8) | Tobias Brunner | 2012-09-28 | 1 | -2/+4 | |
| | | ||||||
| * | Use proper argument for sizeof when copying replay state | Tobias Brunner | 2012-09-28 | 1 | -1/+1 | |
| | | ||||||
| * | Algorithm names are not always static anymore, avoid string overflows | Tobias Brunner | 2012-09-28 | 1 | -5/+10 | |
| | | ||||||
| * | Allow replay windows smaller than the default of 32 | Tobias Brunner | 2012-09-27 | 1 | -4/+6 | |
| | | ||||||
| * | Properly initialize cached address map in kernel-pfroute plugin | Tobias Brunner | 2012-09-27 | 1 | -0/+1 | |
| | | ||||||
| * | Fixed compilation of kernel-pfroute plugin | Tobias Brunner | 2012-09-27 | 1 | -4/+6 | |
| | | ||||||
| * | Make sure the if_name member of cached route entries is initialized to NULL | Tobias Brunner | 2012-09-22 | 2 | -4/+10 | |
| | | ||||||
| * | Use an rwlock in kernel-pfroute too | Tobias Brunner | 2012-09-21 | 1 | -13/+14 | |
| | | ||||||
| * | Use rwlock and rwlock_condvar to increase concurrency in kernel-netlink plugin | Tobias Brunner | 2012-09-21 | 1 | -58/+55 | |
| | | ||||||
| * | Use a separate mutex for cached routes in kernel-netlink plugin | Tobias Brunner | 2012-09-21 | 1 | -8/+15 | |
| | | ||||||
| * | Use a lock to safely check and update the time for the next roam event | Tobias Brunner | 2012-09-21 | 1 | -16/+28 | |
| | | ||||||
| * | Added an option to configure the interface on which virtual IP addresses are ↵ | Tobias Brunner | 2012-09-21 | 1 | -19/+29 | |
| | | | | | installed | |||||
| * | Changed how kernel-netlink handles virtual IP addresses | Tobias Brunner | 2012-09-21 | 1 | -248/+308 | |
| | | | | | Also tried to avoid the use of enumerators. | |||||
| * | Made IP address enumeration more flexible | Tobias Brunner | 2012-09-21 | 2 | -31/+17 | |
| | | | | | Also added an option to enumerate addresses on ignored interfaces. | |||||
| * | Use a hashtable to quickly check for usable IP addresses/interfaces | Tobias Brunner | 2012-09-21 | 2 | -85/+284 | |
| | | ||||||
| * | Filter ignored interfaces in kernel interfaces (for events, address ↵ | Tobias Brunner | 2012-09-21 | 2 | -59/+130 | |
| | | | | | enumeration, etc.) | |||||
| * | %any is never on a local interface | Tobias Brunner | 2012-09-21 | 2 | -0/+10 | |
| | | ||||||
| * | Make it easy to check if an address is locally usable via changed ↵ | Tobias Brunner | 2012-09-21 | 5 | -40/+44 | |
| | | | | | get_interface() method | |||||
| * | Don't ignore loopback devices and allow addresses on them being enumerated | Tobias Brunner | 2012-09-21 | 2 | -16/+16 | |
| | | ||||||
| * | Use source address in get_nexthop() call | Tobias Brunner | 2012-09-21 | 5 | -6/+8 | |
| | | | | | | Otherwise the nexthop returned might belong to a different route than the one actually used with the current source address. | |||||
| * | Source address lookup refactored | Tobias Brunner | 2012-09-21 | 1 | -146/+221 | |
| | | | | | | | | Routes matching the destination are now first parsed and sorted by network prefix length. This list is then used to search for the best route with a matching preferred source address (if one is specified). This makes sure we really check all routes for that address. | |||||
| * | Check routes with equal prefix if preferred source is specified | Tobias Brunner | 2012-09-21 | 1 | -2/+4 | |
| | | ||||||
| * | Try to find preferred source on interface if returned source does not match | Tobias Brunner | 2012-09-21 | 1 | -10/+29 | |
| | | ||||||
| * | Try to keep the given source address when looking up routes | Tobias Brunner | 2012-09-21 | 1 | -6/+32 | |
| | | | | | | | This allows to pin the local end of an IKE_SA to an address that is not the physical address of an interface. Without this patch the local address would change to the physical address when roam events occur. | |||||
| * | Added algorithm lookup via kernel_interface_t to the various kernel interfaces | Tobias Brunner | 2012-09-13 | 3 | -16/+67 | |
| | | ||||||
| * | Consistently log XFRM mark masks with 0 prefix in kernel-netlink plugin | Tobias Brunner | 2012-09-12 | 1 | -13/+13 | |
| | | ||||||
| * | Pass full pool list to release_address | Martin Willi | 2012-09-11 | 1 | -12/+23 | |
| | | ||||||
| * | Pass the full list of pools to acquire_address, enumerate in providers | Martin Willi | 2012-09-11 | 1 | -8/+33 | |
| | | | | | | | | | If the provider has access to the full pool list, it can enumerate them twice, for example to search for existing leases first, and only search for new leases in a second step. Fixes lease enumeration in attr-sql using multiple pools. | |||||
| * | Use the proper types for comma separated attributes read from strongswan.conf | Tobias Brunner | 2012-09-10 | 1 | -27/+25 | |
| | | | | | | | Attributes of different address families previously were mapped to the same attribute type (the one derived from the address family of the first address). | |||||
| * | Don't parse comma separated pool names in attr-sql | Martin Willi | 2012-08-30 | 1 | -77/+26 | |
| | | | | | | We now handle multiple pools at a deeper level, making that special handling obsolete. Comma separated pools are parsed in stroke. | |||||
| * | Pass all configured pool names to attribute provider enumerator | Martin Willi | 2012-08-30 | 2 | -9/+9 | |
| | | ||||||
| * | Pass a list instead of a single virtual IP to attribute enumerators | Martin Willi | 2012-08-30 | 3 | -30/+55 | |
| | | ||||||
| * | Increased log level when listing interfaces and IP addresses during startup | Tobias Brunner | 2012-08-16 | 2 | -6/+6 | |
| | | | | | | This avoids confusing log messages in starter and ipsec statusall already lists the available addresses anyway. | |||||
| * | Let kernel interfaces decide how to enable UDP decapsulation of ESP packets. | Tobias Brunner | 2012-08-08 | 3 | -8/+74 | |
| | | ||||||
| * | Support Unity split-include/exclude options in attr plugin | Martin Willi | 2012-07-20 | 1 | -7/+9 | |
| | | ||||||
| * | Check rng return value when generating SPIs in kernel-klips plugin | Tobias Brunner | 2012-07-16 | 1 | -3/+3 | |
| | | ||||||
| * | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 5 | -60/+19 | |
| | | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
| * | Fixed IPv6 source address lookup | Tobias Brunner | 2012-06-25 | 1 | -5/+43 | |
| | | | | | | | | | | | | | | Because Linux kernels prior to 3.0 do not support RTA_PREFSRC for IPv6 routes we didn't use NLM_F_DUMP to get all routes. Still routes installed with policies are installed also for IPv6. So since only one route is returned without DUMP, and we ignore all routes from our own routing table, no source address was found during roaming if DST of the installed route included the IKE peer. With newer kernels we can now use DUMP as we did for IPv4 already, for older kernels we do so if our own routes are installed in a separate routing table, otherwise we still use GET. | |||||
| * | NLM_F_DUMP includes NLM_F_ROOT. | Tobias Brunner | 2012-06-15 | 1 | -1/+1 | |
| | | ||||||
| * | Don't create roam jobs based on cached/cloned routes. | Tobias Brunner | 2012-06-15 | 1 | -0/+4 | |
| | | ||||||
| * | Don't compare ports when comparing cached routes. | Tobias Brunner | 2012-06-15 | 3 | -6/+6 | |
| | | | | | At least src_ip has a port set sometimes. | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |