| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Route reinstallation in kernel_ipsec_t implementations is not needed anymore. | Tobias Brunner | 2012-05-02 | 2 | -12/+2 | |
| | | ||||||
| * | Reinstall routes in kernel-netlink plugin, if interfaces get reactivated or ↵ | Tobias Brunner | 2012-05-02 | 1 | -4/+206 | |
| | | | | | IPs reappear. | |||||
| * | Keep track of installed source routes in kernel-netlink plugin. | Tobias Brunner | 2012-05-02 | 1 | -8/+141 | |
| | | ||||||
| * | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 3 | -108/+57 | |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | |||||
| | * | Use single DBG2 statements in kernel_netlink plugin (i.e. ignore mark.value). | Tobias Brunner | 2012-03-27 | 1 | -86/+26 | |
| | | | ||||||
| | * | Define a special XFRM mark_t.value that dynamically uses the CHILD_SA reqid | Martin Willi | 2012-03-22 | 1 | -0/+5 | |
| | | | ||||||
| | * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 3 | -22/+26 | |
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | |||||
| | | * | Be less verbose when deleting SAs triggered by a hard expire | Martin Willi | 2012-03-20 | 2 | -22/+24 | |
| | | | | ||||||
| | | * | Added not-yet used sa_payload parameters used in IKEv1 | Martin Willi | 2012-03-20 | 1 | -0/+2 | |
| | | | | ||||||
| * | | | Make resolvconf interface prefix configurable. | Tobias Brunner | 2012-03-27 | 1 | -2/+10 | |
| | | | | ||||||
| * | | | Added support for the resolvconf framework in resolve plugin. | Tobias Brunner | 2012-03-27 | 1 | -52/+149 | |
| |/ / | | | | | | | | | If /sbin/resolvconf is found nameservers are not written directly to /etc/resolv.conf but instead resolvconf is invoked. | |||||
| * | | Be less verbose if we don't have a local address for a tunnel | Martin Willi | 2012-03-06 | 1 | -1/+1 | |
| | | | ||||||
| * | | Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595. | Tobias Brunner | 2012-02-27 | 1 | -3/+21 | |
| | | | | | | | | | This requires a Linux kernel >= 2.6.33. | |||||
| * | | Android 4 requires LOCAL_MODULE_TAGS to be set for all modules. | Tobias Brunner | 2012-01-12 | 1 | -0/+2 | |
| | | | | | | | | | | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically. | |||||
| * | | Fixed additional typos in comments and log messages. | Tobias Brunner | 2012-01-12 | 2 | -2/+2 | |
| | | | ||||||
| * | | Always unlock mutex for installed policies in kernel-netlink plugin. | Thomas Egerer | 2011-12-14 | 1 | -1/+5 | |
| | | | ||||||
| * | | Fix copy'n'paste error in libhydra's netlink interface | Thomas Jarosch | 2011-11-21 | 1 | -1/+1 | |
| | | | | | | | | | Detected by cppcheck. | |||||
| * | | Fix network interface deletion handling in kernel-netlink plugin. | Mirko Parthey | 2011-11-14 | 1 | -3/+7 | |
| |/ | | | | | | | | | | | | | | | | | | When the kernel reports the deletion of an interface (RTM_DELLINK), the cached interface attributes, including ifindex, become invalid and must be forgotten. Interface link state changes ("up" and "down") show up as RTM_NEWLINK, so they will not cause a cached entry to be removed or prevent listening to address change notifications. Once an interface has been deleted, the kernel ought to stop sending notifications for it. If the interface gets recreated with the same name later, the kernel again reports RTM_NEWLINK, which causes a new cache entry to be created. There should be no reason to keep a stale cache entry around, as was claimed in the comment. | |||||
| * | Fix 'ipsec pool --status' for empty pools. | Tobias Brunner | 2011-11-04 | 1 | -1/+7 | |
| | | ||||||
| * | Memwipe request after sa update, too | Thomas Egerer | 2011-11-04 | 1 | -0/+1 | |
| | | ||||||
| * | Extend xfrm_attr_type_names by newly added enum values | Thomas Egerer | 2011-11-04 | 1 | -2/+6 | |
| | | ||||||
| * | Silently install route again, even if it did not change. | Tobias Brunner | 2011-11-04 | 2 | -2/+12 | |
| | | | | | | Address/interface changes can cause the route to disappear. Afterwards the route might look the same but that does not mean it is still installed. | |||||
| * | Compile warning fixed in kernel interfaces. | Tobias Brunner | 2011-11-04 | 2 | -2/+2 | |
| | | ||||||
| * | The kernel-klips plugin does currently not support SAD/SPD flushing. | Tobias Brunner | 2011-10-21 | 1 | -0/+2 | |
| | | ||||||
| * | Implemented flushing of SAD and SPD entries via PF_KEY. | Tobias Brunner | 2011-10-21 | 1 | -0/+68 | |
| | | ||||||
| * | Implemented flushing of states and policies via XFRM. | Tobias Brunner | 2011-10-21 | 1 | -0/+56 | |
| | | ||||||
| * | Defined functions in the kernel interface to flush SAD and SPD entries. | Tobias Brunner | 2011-10-21 | 3 | -0/+50 | |
| | | ||||||
| * | Source files in Android.mk updated. | Tobias Brunner | 2011-10-14 | 1 | -1/+1 | |
| | | ||||||
| * | Add features support to kernel-klips plugin | Martin Willi | 2011-10-14 | 1 | -5/+12 | |
| | | ||||||
| * | Add features support to kernel-pfroute plugin | Martin Willi | 2011-10-14 | 1 | -5/+12 | |
| | | ||||||
| * | Add features support to kernel-pfkey plugin | Martin Willi | 2011-10-14 | 1 | -5/+12 | |
| | | ||||||
| * | Add features support to kernel-netlink plugin | Martin Willi | 2011-10-14 | 1 | -9/+14 | |
| | | ||||||
| * | Added kernel_ipsec/net plugin feature loading callbacks | Martin Willi | 2011-10-14 | 5 | -1/+88 | |
| | | ||||||
| * | Check for RTA_TABLE in configure. | Tobias Brunner | 2011-10-04 | 1 | -0/+2 | |
| | | ||||||
| * | Migrated attribute_manager to INIT/METHOD macros | Andreas Steffen | 2011-10-02 | 1 | -76/+48 | |
| | | ||||||
| * | Migrated sql_attribute to INIT/METHOD macros | Andreas Steffen | 2011-09-29 | 1 | -29/+25 | |
| | | ||||||
| * | Migrated netlink_socket to INIT/METHOD macros | Andreas Steffen | 2011-09-29 | 1 | -23/+18 | |
| | | ||||||
| * | Migrated resolve_handler to INIT/METHOD macros | Andreas Steffen | 2011-09-29 | 1 | -33/+27 | |
| | | ||||||
| * | Destroy kernel interface during deregistration, as the plugin goes afterwards | Martin Willi | 2011-09-12 | 1 | -2/+22 | |
| | | ||||||
| * | shortened XAUTH and UNITY attribute short names | Andreas Steffen | 2011-08-16 | 1 | -21/+21 | |
| | | ||||||
| * | Disable policy history for pluto.4.5.3 | Tobias Brunner | 2011-08-02 | 1 | -21/+46 | |
| | | | | | pluto tracks usage of policies already in its own way. | |||||
| * | Allow routing table IDs > 255 when filtering them. | Tobias Brunner | 2011-07-29 | 1 | -3/+10 | |
| | | ||||||
| * | Install fallback drop policies to avoid transmitting unencrypted packets. | Tobias Brunner | 2011-07-27 | 3 | -0/+8 | |
| | | | | | | | | During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy is first uninstalled and then the new one is installed. In the short time in between, where no policy is available in the kernel, unencrypted packets could have been transmitted. | |||||
| * | Remove policies in kernel interfaces based on their priority. | Tobias Brunner | 2011-07-27 | 6 | -51/+101 | |
| | | | | | | | This allows to unroute a connection while the same connection is currently established. In this case both CHILD_SAs share the same reqid but the installed policies have different priorities. | |||||
| * | Fixed common misspellings. | Tobias Brunner | 2011-07-20 | 3 | -3/+3 | |
| | | | | | Mostly found by 'codespell'. | |||||
| * | removed stray code | Andreas Steffen | 2011-07-18 | 1 | -2/+1 | |
| | | ||||||
| * | added log and status output for ESN | Andreas Steffen | 2011-07-16 | 1 | -1/+5 | |
| | | ||||||
| * | added HOME_AGENT_ADDRESS CP attribute type | Andreas Steffen | 2011-07-14 | 2 | -7/+10 | |
| | | ||||||
| * | Record usage history of policies in PF_KEY kernel interface. | Tobias Brunner | 2011-07-06 | 1 | -169/+457 | |
| | | | | | The implementation is nearly the same as in the Netlink kernel interface. | |||||
| * | Simplified destruction of policy_sa_t objects in Netlink interface. | Tobias Brunner | 2011-07-06 | 1 | -12/+7 | |
| | | ||||||
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |