| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Don't ignore loopback devices and allow addresses on them being enumerated | Tobias Brunner | 2012-09-21 | 5 | -24/+28 | |
| | | ||||||
| * | Added options and a lookup function that will allow filtering of network ↵ | Tobias Brunner | 2012-09-21 | 3 | -3/+72 | |
| | | | | | interfaces | |||||
| * | Use source address in get_nexthop() call | Tobias Brunner | 2012-09-21 | 8 | -12/+19 | |
| | | | | | | Otherwise the nexthop returned might belong to a different route than the one actually used with the current source address. | |||||
| * | Source address lookup refactored | Tobias Brunner | 2012-09-21 | 1 | -146/+221 | |
| | | | | | | | | Routes matching the destination are now first parsed and sorted by network prefix length. This list is then used to search for the best route with a matching preferred source address (if one is specified). This makes sure we really check all routes for that address. | |||||
| * | Check routes with equal prefix if preferred source is specified | Tobias Brunner | 2012-09-21 | 1 | -2/+4 | |
| | | ||||||
| * | Try to find preferred source on interface if returned source does not match | Tobias Brunner | 2012-09-21 | 1 | -10/+29 | |
| | | ||||||
| * | Try to keep the given source address when looking up routes | Tobias Brunner | 2012-09-21 | 1 | -6/+32 | |
| | | | | | | | This allows to pin the local end of an IKE_SA to an address that is not the physical address of an interface. Without this patch the local address would change to the physical address when roam events occur. | |||||
| * | In mem_pool, check for an existing ID entry before creating a new one | Martin Willi | 2012-09-20 | 1 | -7/+10 | |
| | | ||||||
| * | Added algorithm lookup via kernel_interface_t to the various kernel interfaces | Tobias Brunner | 2012-09-13 | 3 | -16/+67 | |
| | | ||||||
| * | Added possibility to register custom kernel algorithms to kernel interface | Tobias Brunner | 2012-09-13 | 2 | -1/+172 | |
| | | ||||||
| * | Consistently log XFRM mark masks with 0 prefix in kernel-netlink plugin | Tobias Brunner | 2012-09-12 | 1 | -13/+13 | |
| | | ||||||
| * | Use uintptr_t in mem pool to avoid compiler warning if sizeof(void*) != ↵ | Martin Willi | 2012-09-12 | 1 | -3/+2 | |
| | | | | | sizeof(int) | |||||
| * | Check for an existing lease in all stroke pools before creating a new one | Martin Willi | 2012-09-11 | 2 | -76/+149 | |
| | | ||||||
| * | Pass full pool list to release_address | Martin Willi | 2012-09-11 | 4 | -18/+31 | |
| | | ||||||
| * | Pass the full list of pools to acquire_address, enumerate in providers | Martin Willi | 2012-09-11 | 4 | -15/+40 | |
| | | | | | | | | | If the provider has access to the full pool list, it can enumerate them twice, for example to search for existing leases first, and only search for new leases in a second step. Fixes lease enumeration in attr-sql using multiple pools. | |||||
| * | Use the proper types for comma separated attributes read from strongswan.conf | Tobias Brunner | 2012-09-10 | 1 | -27/+25 | |
| | | | | | | | Attributes of different address families previously were mapped to the same attribute type (the one derived from the address family of the first address). | |||||
| * | Properly remove broadcast address from mem pools | Tobias Brunner | 2012-09-10 | 1 | -1/+1 | |
| | | ||||||
| * | Be less verbose if IP allocation for a single pool fails | Martin Willi | 2012-08-30 | 1 | -4/+0 | |
| | | ||||||
| * | Strictly enforce address family match while acquiring mem_pool IPs | Martin Willi | 2012-08-30 | 1 | -3/+1 | |
| | | ||||||
| * | Don't parse comma separated pool names in attr-sql | Martin Willi | 2012-08-30 | 1 | -77/+26 | |
| | | | | | | We now handle multiple pools at a deeper level, making that special handling obsolete. Comma separated pools are parsed in stroke. | |||||
| * | Pass all configured pool names to attribute provider enumerator | Martin Willi | 2012-08-30 | 5 | -19/+21 | |
| | | ||||||
| * | Pass a list instead of a single virtual IP to attribute enumerators | Martin Willi | 2012-08-30 | 7 | -60/+90 | |
| | | ||||||
| * | Support multiple address pools configured on a peer_cfg | Martin Willi | 2012-08-30 | 2 | -6/+4 | |
| | | ||||||
| * | Add a getter for the mem_pool_t base address | Martin Willi | 2012-08-24 | 2 | -0/+14 | |
| | | ||||||
| * | Increased log level when listing interfaces and IP addresses during startup | Tobias Brunner | 2012-08-16 | 2 | -6/+6 | |
| | | | | | | This avoids confusing log messages in starter and ipsec statusall already lists the available addresses anyway. | |||||
| * | Validate netmask in mem_pool_create | Tobias Brunner | 2012-08-13 | 1 | -0/+1 | |
| | | ||||||
| * | Moved types used by kernel_ipsec_t interface (and libipsec) to libstrongswan | Tobias Brunner | 2012-08-08 | 2 | -168/+1 | |
| | | | | | This avoids a dependency of libipsec to libhydra. | |||||
| * | Let kernel interfaces decide how to enable UDP decapsulation of ESP packets. | Tobias Brunner | 2012-08-08 | 6 | -12/+112 | |
| | | ||||||
| * | Support Unity split-include/exclude options in attr plugin | Martin Willi | 2012-07-20 | 1 | -7/+9 | |
| | | ||||||
| * | Check rng return value when generating SPIs in kernel-klips plugin | Tobias Brunner | 2012-07-16 | 1 | -3/+3 | |
| | | ||||||
| * | Avoid SIGSEGV during shutdown if charon is not started as root | Tobias Brunner | 2012-06-25 | 1 | -2/+2 | |
| | | ||||||
| * | Centralized thread cancellation in processor_t | Tobias Brunner | 2012-06-25 | 5 | -60/+19 | |
| | | | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation. | |||||
| * | Fixed IPv6 source address lookup | Tobias Brunner | 2012-06-25 | 1 | -5/+43 | |
| | | | | | | | | | | | | | | Because Linux kernels prior to 3.0 do not support RTA_PREFSRC for IPv6 routes we didn't use NLM_F_DUMP to get all routes. Still routes installed with policies are installed also for IPv6. So since only one route is returned without DUMP, and we ignore all routes from our own routing table, no source address was found during roaming if DST of the installed route included the IKE peer. With newer kernels we can now use DUMP as we did for IPv4 already, for older kernels we do so if our own routes are installed in a separate routing table, otherwise we still use GET. | |||||
| * | NLM_F_DUMP includes NLM_F_ROOT. | Tobias Brunner | 2012-06-15 | 1 | -1/+1 | |
| | | ||||||
| * | Don't create roam jobs based on cached/cloned routes. | Tobias Brunner | 2012-06-15 | 1 | -0/+4 | |
| | | ||||||
| * | Don't compare ports when comparing cached routes. | Tobias Brunner | 2012-06-15 | 3 | -6/+6 | |
| | | | | | At least src_ip has a port set sometimes. | |||||
| * | Disabled listening for kernel events in starter. | Tobias Brunner | 2012-06-08 | 4 | -74/+110 | |
| | | ||||||
| * | Properly install policies with ports in PF_KEY kernel interface. | Tobias Brunner | 2012-06-07 | 1 | -27/+28 | |
| | | ||||||
| * | Destroy Netlink socket only after deleting remaining source routes. | Tobias Brunner | 2012-05-21 | 1 | -2/+1 | |
| | | ||||||
| * | Fix route reinstallation if preferred source IP is not on outgoing interface. | Tobias Brunner | 2012-05-07 | 1 | -30/+18 | |
| | | ||||||
| * | Route reinstallation in kernel_ipsec_t implementations is not needed anymore. | Tobias Brunner | 2012-05-02 | 2 | -12/+2 | |
| | | ||||||
| * | Reinstall routes in kernel-netlink plugin, if interfaces get reactivated or ↵ | Tobias Brunner | 2012-05-02 | 1 | -4/+206 | |
| | | | | | IPs reappear. | |||||
| * | Keep track of installed source routes in kernel-netlink plugin. | Tobias Brunner | 2012-05-02 | 1 | -8/+141 | |
| | | ||||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 3 | -108/+57 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Use single DBG2 statements in kernel_netlink plugin (i.e. ignore mark.value). | Tobias Brunner | 2012-03-27 | 1 | -86/+26 | |
| | | | ||||||
| | * | Define a special XFRM mark_t.value that dynamically uses the CHILD_SA reqid | Martin Willi | 2012-03-22 | 1 | -0/+5 | |
| | | | ||||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 3 | -22/+26 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Be less verbose when deleting SAs triggered by a hard expire | Martin Willi | 2012-03-20 | 2 | -22/+24 | |
| | | | | ||||||
| | | * | Added not-yet used sa_payload parameters used in IKEv1 | Martin Willi | 2012-03-20 | 1 | -0/+2 | |
| | | | | ||||||
| * | | | Make resolvconf interface prefix configurable. | Tobias Brunner | 2012-03-27 | 1 | -2/+10 | |
| | | | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |