| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | Add a constructor to create in-memory pools from an address range | Martin Willi | 2013-03-11 | 2 | -3/+58 | |
| |/ | ||||||
| * | Fix maximum size of a mem_pool_t | Tobias Brunner | 2013-03-07 | 1 | -2/+2 | |
| | | ||||||
| * | Fix some apidoc in mem_pool.h | Martin Willi | 2013-03-06 | 1 | -3/+3 | |
| | | ||||||
| * | Merge branch 'ikev1-rekeying' | Martin Willi | 2013-03-01 | 1 | -0/+4 | |
| |\ | | | | | | | | | Migrates Quick Modes to the new Main Mode if an IKEv1 reauthentication replaces the old Main Mode having a uniqueids=replace policy. | |||||
| | * | After IKEv1 reauthentication, reinstall VIP routes after migrating CHILD_SAs | Martin Willi | 2013-02-20 | 1 | -0/+4 | |
| | | | | | | | | | | | | | During IKEv1 reauthentication, the virtual IP gets removed, then reinstalled. The CHILD_SAs get migrated, but any associated route gets removed from the kernel. Reinstall routes after adding the virtual IP again. | |||||
| * | | Merge branch 'vip-shunts' | Martin Willi | 2013-03-01 | 1 | -4/+13 | |
| |\ \ | | | | | | | | | | | | | | | | | | | | | | | | | Installs bypass policies for the physical address if a virtual address is assigned, and installs a proper source route to actually use the physical address for bypassed destinations. Conflicts: src/libcharon/plugins/unity/unity_handler.c | |||||
| | * | | Install a route for shunt policies | Martin Willi | 2013-02-20 | 1 | -5/+13 | |
| | |/ | | | | | | | | | | | | | If we install a virtual IP, its source route would render the shunt policy useless, as locally generated traffic wouldn't match. Having a route for each shunt policy with higher priority chooses the correct source address for bypassed destinations. | |||||
| * | | Merge branch 'opaque-ports' | Martin Willi | 2013-03-01 | 2 | -3/+3 | |
| |\ \ | | | | | | | | | | | | | Adds a %opaque port option and support for port ranges in left/rightprotoport. Currently not supported by any of our kernel backends. | |||||
| | * | | Use a complete port range in traffic_selector_create_from_{subnet,cidr} | Martin Willi | 2013-02-21 | 2 | -4/+3 | |
| | |/ | ||||||
| * | | Indicate support for processing ESPv3 TFC padding in Netlink IPsec backend | Martin Willi | 2013-03-01 | 1 | -1/+7 | |
| | | | ||||||
| * | | Introduce "features" for the kernel backends returning kernel capabilities | Martin Willi | 2013-03-01 | 4 | -1/+52 | |
| |/ | ||||||
| * | kernel-netlinks get_interface() considers virtual IPs, too | Martin Willi | 2012-12-17 | 1 | -0/+13 | |
| | | | | | | | | When using load-tester, we can install tunnel outer addresses on demand. As these are installed as "virtual", we have to consider virtual IPs in the get_interface() lookup to install "real" virtual IPs to these dynamic external addresses. | |||||
| * | Don't wait while removing external IPs used for load testing | Martin Willi | 2012-11-29 | 5 | -7/+13 | |
| | | ||||||
| * | Install virtual IPs via interface name, and use an interface lookup where ↵ | Martin Willi | 2012-11-29 | 5 | -18/+10 | |
| | | | | | required | |||||
| * | Add an optional kernel-interface parameter to install IPs with a custom prefix | Martin Willi | 2012-11-29 | 5 | -16/+23 | |
| | | ||||||
| * | libhydra can be initialized more than once | Martin Willi | 2012-11-14 | 2 | -3/+30 | |
| | | ||||||
| * | Limit recursion when searching for source addresses | Tobias Brunner | 2012-11-13 | 1 | -5/+14 | |
| | | | | | | This could be required if e.g. two default routes list gateways but the corresponding outbound interfaces do not have any IP addresses on them. | |||||
| * | Don't call get_route recursively if a route's gateway matches the destination | Tobias Brunner | 2012-11-13 | 1 | -2/+5 | |
| | | ||||||
| * | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 15 | -15/+15 | |
| | | ||||||
| * | Moved enum_name_t to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 | |
| | | ||||||
| * | Moved chunk_t to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 | |
| | | ||||||
| * | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 12 | -17/+17 | |
| | | ||||||
| * | Moved host_t and host_resolver_t to a new networking subfolder | Tobias Brunner | 2012-10-24 | 10 | -10/+10 | |
| | | ||||||
| * | Use a helper function to add milliseconds to timeval structs | Tobias Brunner | 2012-10-18 | 2 | -18/+3 | |
| | | ||||||
| * | Use proper offset when adding mark attribute in kernel-netlink plugin | Tobias Brunner | 2012-10-15 | 1 | -1/+1 | |
| | | ||||||
| * | Also add mark when querying current replay state in kernel-netlink plugin | Tobias Brunner | 2012-10-15 | 1 | -2/+21 | |
| | | ||||||
| * | Fixed update_sa in kernel-netlink plugin if marks are used | Tobias Brunner | 2012-10-11 | 1 | -0/+18 | |
| | | ||||||
| * | Added missing break statements in NAT-T mapping handling in PF_KEY plugin | Tobias Brunner | 2012-09-28 | 1 | -0/+2 | |
| | | ||||||
| * | Make sure we successfully opened xfrm_acq_expires | Tobias Brunner | 2012-09-28 | 1 | -1/+1 | |
| | | ||||||
| * | Clarified code when hashing/comparing cached policies in kernel-netlink | Tobias Brunner | 2012-09-28 | 1 | -5/+4 | |
| | | ||||||
| * | Make sure first argument is an int when using %.*s to print e.g. chunks | Tobias Brunner | 2012-09-28 | 1 | -3/+3 | |
| | | ||||||
| * | Ensure that pipe is closed when calling resolvconf(8) | Tobias Brunner | 2012-09-28 | 1 | -2/+4 | |
| | | ||||||
| * | Use proper argument for sizeof when copying replay state | Tobias Brunner | 2012-09-28 | 1 | -1/+1 | |
| | | ||||||
| * | Algorithm names are not always static anymore, avoid string overflows | Tobias Brunner | 2012-09-28 | 1 | -5/+10 | |
| | | ||||||
| * | Allow replay windows smaller than the default of 32 | Tobias Brunner | 2012-09-27 | 1 | -4/+6 | |
| | | ||||||
| * | Properly initialize cached address map in kernel-pfroute plugin | Tobias Brunner | 2012-09-27 | 1 | -0/+1 | |
| | | ||||||
| * | Fixed compilation of kernel-pfroute plugin | Tobias Brunner | 2012-09-27 | 1 | -4/+6 | |
| | | ||||||
| * | Don't check interface of inbound message if interfaces are not filtered | Tobias Brunner | 2012-09-24 | 2 | -5/+16 | |
| | | | | | | We don't have a proper kernel-net interface on Android yet, so the check for a usable interface does not work there. | |||||
| * | Make sure the if_name member of cached route entries is initialized to NULL | Tobias Brunner | 2012-09-22 | 2 | -4/+10 | |
| | | ||||||
| * | Use an rwlock in kernel-pfroute too | Tobias Brunner | 2012-09-21 | 1 | -13/+14 | |
| | | ||||||
| * | Use rwlock and rwlock_condvar to increase concurrency in kernel-netlink plugin | Tobias Brunner | 2012-09-21 | 1 | -58/+55 | |
| | | ||||||
| * | Use a separate mutex for cached routes in kernel-netlink plugin | Tobias Brunner | 2012-09-21 | 1 | -8/+15 | |
| | | ||||||
| * | Use a lock to safely check and update the time for the next roam event | Tobias Brunner | 2012-09-21 | 1 | -16/+28 | |
| | | ||||||
| * | Added an option to configure the interface on which virtual IP addresses are ↵ | Tobias Brunner | 2012-09-21 | 1 | -19/+29 | |
| | | | | | installed | |||||
| * | Changed how kernel-netlink handles virtual IP addresses | Tobias Brunner | 2012-09-21 | 1 | -248/+308 | |
| | | | | | Also tried to avoid the use of enumerators. | |||||
| * | Made IP address enumeration more flexible | Tobias Brunner | 2012-09-21 | 5 | -48/+45 | |
| | | | | | Also added an option to enumerate addresses on ignored interfaces. | |||||
| * | Use a hashtable to quickly check for usable IP addresses/interfaces | Tobias Brunner | 2012-09-21 | 2 | -85/+284 | |
| | | ||||||
| * | Filter ignored interfaces in kernel interfaces (for events, address ↵ | Tobias Brunner | 2012-09-21 | 4 | -61/+134 | |
| | | | | | enumeration, etc.) | |||||
| * | %any is never on a local interface | Tobias Brunner | 2012-09-21 | 2 | -0/+10 | |
| | | ||||||
| * | Make it easy to check if an address is locally usable via changed ↵ | Tobias Brunner | 2012-09-21 | 8 | -47/+53 | |
| | | | | | get_interface() method | |||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |