aboutsummaryrefslogtreecommitdiffstats
path: root/src/libhydra
Commit message (Collapse)AuthorAgeFilesLines
...
* Allow replay windows smaller than the default of 32Tobias Brunner2012-09-271-4/+6
|
* Properly initialize cached address map in kernel-pfroute pluginTobias Brunner2012-09-271-0/+1
|
* Fixed compilation of kernel-pfroute pluginTobias Brunner2012-09-271-4/+6
|
* Don't check interface of inbound message if interfaces are not filteredTobias Brunner2012-09-242-5/+16
| | | | | We don't have a proper kernel-net interface on Android yet, so the check for a usable interface does not work there.
* Make sure the if_name member of cached route entries is initialized to NULLTobias Brunner2012-09-222-4/+10
|
* Use an rwlock in kernel-pfroute tooTobias Brunner2012-09-211-13/+14
|
* Use rwlock and rwlock_condvar to increase concurrency in kernel-netlink pluginTobias Brunner2012-09-211-58/+55
|
* Use a separate mutex for cached routes in kernel-netlink pluginTobias Brunner2012-09-211-8/+15
|
* Use a lock to safely check and update the time for the next roam eventTobias Brunner2012-09-211-16/+28
|
* Added an option to configure the interface on which virtual IP addresses are ↵Tobias Brunner2012-09-211-19/+29
| | | | installed
* Changed how kernel-netlink handles virtual IP addressesTobias Brunner2012-09-211-248/+308
| | | | Also tried to avoid the use of enumerators.
* Made IP address enumeration more flexibleTobias Brunner2012-09-215-48/+45
| | | | Also added an option to enumerate addresses on ignored interfaces.
* Use a hashtable to quickly check for usable IP addresses/interfacesTobias Brunner2012-09-212-85/+284
|
* Filter ignored interfaces in kernel interfaces (for events, address ↵Tobias Brunner2012-09-214-61/+134
| | | | enumeration, etc.)
* %any is never on a local interfaceTobias Brunner2012-09-212-0/+10
|
* Make it easy to check if an address is locally usable via changed ↵Tobias Brunner2012-09-218-47/+53
| | | | get_interface() method
* Don't ignore loopback devices and allow addresses on them being enumeratedTobias Brunner2012-09-215-24/+28
|
* Added options and a lookup function that will allow filtering of network ↵Tobias Brunner2012-09-213-3/+72
| | | | interfaces
* Use source address in get_nexthop() callTobias Brunner2012-09-218-12/+19
| | | | | Otherwise the nexthop returned might belong to a different route than the one actually used with the current source address.
* Source address lookup refactoredTobias Brunner2012-09-211-146/+221
| | | | | | | Routes matching the destination are now first parsed and sorted by network prefix length. This list is then used to search for the best route with a matching preferred source address (if one is specified). This makes sure we really check all routes for that address.
* Check routes with equal prefix if preferred source is specifiedTobias Brunner2012-09-211-2/+4
|
* Try to find preferred source on interface if returned source does not matchTobias Brunner2012-09-211-10/+29
|
* Try to keep the given source address when looking up routesTobias Brunner2012-09-211-6/+32
| | | | | | This allows to pin the local end of an IKE_SA to an address that is not the physical address of an interface. Without this patch the local address would change to the physical address when roam events occur.
* In mem_pool, check for an existing ID entry before creating a new oneMartin Willi2012-09-201-7/+10
|
* Added algorithm lookup via kernel_interface_t to the various kernel interfacesTobias Brunner2012-09-133-16/+67
|
* Added possibility to register custom kernel algorithms to kernel interfaceTobias Brunner2012-09-132-1/+172
|
* Consistently log XFRM mark masks with 0 prefix in kernel-netlink pluginTobias Brunner2012-09-121-13/+13
|
* Use uintptr_t in mem pool to avoid compiler warning if sizeof(void*) != ↵Martin Willi2012-09-121-3/+2
| | | | sizeof(int)
* Check for an existing lease in all stroke pools before creating a new oneMartin Willi2012-09-112-76/+149
|
* Pass full pool list to release_addressMartin Willi2012-09-114-18/+31
|
* Pass the full list of pools to acquire_address, enumerate in providersMartin Willi2012-09-114-15/+40
| | | | | | | | If the provider has access to the full pool list, it can enumerate them twice, for example to search for existing leases first, and only search for new leases in a second step. Fixes lease enumeration in attr-sql using multiple pools.
* Use the proper types for comma separated attributes read from strongswan.confTobias Brunner2012-09-101-27/+25
| | | | | | Attributes of different address families previously were mapped to the same attribute type (the one derived from the address family of the first address).
* Properly remove broadcast address from mem poolsTobias Brunner2012-09-101-1/+1
|
* Be less verbose if IP allocation for a single pool failsMartin Willi2012-08-301-4/+0
|
* Strictly enforce address family match while acquiring mem_pool IPsMartin Willi2012-08-301-3/+1
|
* Don't parse comma separated pool names in attr-sqlMartin Willi2012-08-301-77/+26
| | | | | We now handle multiple pools at a deeper level, making that special handling obsolete. Comma separated pools are parsed in stroke.
* Pass all configured pool names to attribute provider enumeratorMartin Willi2012-08-305-19/+21
|
* Pass a list instead of a single virtual IP to attribute enumeratorsMartin Willi2012-08-307-60/+90
|
* Support multiple address pools configured on a peer_cfgMartin Willi2012-08-302-6/+4
|
* Add a getter for the mem_pool_t base addressMartin Willi2012-08-242-0/+14
|
* Increased log level when listing interfaces and IP addresses during startupTobias Brunner2012-08-162-6/+6
| | | | | This avoids confusing log messages in starter and ipsec statusall already lists the available addresses anyway.
* Validate netmask in mem_pool_createTobias Brunner2012-08-131-0/+1
|
* Moved types used by kernel_ipsec_t interface (and libipsec) to libstrongswanTobias Brunner2012-08-082-168/+1
| | | | This avoids a dependency of libipsec to libhydra.
* Let kernel interfaces decide how to enable UDP decapsulation of ESP packets.Tobias Brunner2012-08-086-12/+112
|
* Support Unity split-include/exclude options in attr pluginMartin Willi2012-07-201-7/+9
|
* Check rng return value when generating SPIs in kernel-klips pluginTobias Brunner2012-07-161-3/+3
|
* Avoid SIGSEGV during shutdown if charon is not started as rootTobias Brunner2012-06-251-2/+2
|
* Centralized thread cancellation in processor_tTobias Brunner2012-06-255-60/+19
| | | | | | | | | | This ensures that no threads are active when plugins and the rest of the daemon are unloaded. callback_job_t was simplified a lot in the process as its main functionality is now contained in processor_t. The parent-child relationships were abandoned as these were only needed to simplify job cancellation.
* Fixed IPv6 source address lookupTobias Brunner2012-06-251-5/+43
| | | | | | | | | | | | | Because Linux kernels prior to 3.0 do not support RTA_PREFSRC for IPv6 routes we didn't use NLM_F_DUMP to get all routes. Still routes installed with policies are installed also for IPv6. So since only one route is returned without DUMP, and we ignore all routes from our own routing table, no source address was found during roaming if DST of the installed route included the IKE peer. With newer kernels we can now use DUMP as we did for IPv4 already, for older kernels we do so if our own routes are installed in a separate routing table, otherwise we still use GET.
* NLM_F_DUMP includes NLM_F_ROOT.Tobias Brunner2012-06-151-1/+1
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-05 07:50:50 +0000