aboutsummaryrefslogtreecommitdiffstats
path: root/src/libipsec
Commit message (Collapse)AuthorAgeFilesLines
...
* Fixed ip_packet_t if IPv6 is not availableTobias Brunner2012-08-081-0/+4
|
* Added IPsec processor which is responsible for handling in- and outbound packetsTobias Brunner2012-08-086-0/+449
| | | | | | Two callbacks can be registered that get called when new inbound plaintext and outbound ESP packets have been processed. Inbound ESP and outbound plaintext packets can be queued for processing with two other methods.
* Represent the payload of an ESP packet as ip_packet_t instead of a chunk_tTobias Brunner2012-08-082-41/+76
|
* IPsec policies can be looked up based on an IP packetTobias Brunner2012-08-084-1/+62
|
* ip_packet_t parses the header of IP packetsTobias Brunner2012-08-084-0/+286
|
* Order IPsec policies by a pseudo-priority based on the traffic selectorsTobias Brunner2012-08-081-28/+127
| | | | | This allows a simple lookup, i.e. just use the first policy that matches a given IP packet.
* Implemented a checkout/checkin mechanism for IPsec SAsTobias Brunner2012-08-082-25/+285
| | | | | SAs can only be checked out by a single thread and all other threads block until the SA is checked in again.
* IPsec policy manager addedTobias Brunner2012-08-086-0/+278
| | | | This version only provides the very simplest management functions.
* Method added to easily compare IPsec policiesTobias Brunner2012-08-082-0/+29
|
* Class representing an IPsec policy addedTobias Brunner2012-08-084-0/+302
|
* Schedule and relay expiration events for created IPsec SAsTobias Brunner2012-08-081-0/+95
|
* Added class to relay IPsec events (like expiration) to listenersTobias Brunner2012-08-087-0/+332
| | | | | Currently, only expiration of IPsec SAs is supported. Later other events for e.g. acquires or changed NAT endpoints could be added.
* Added IPsec SA managerTobias Brunner2012-08-086-7/+458
|
* Add methods to easily compare IPsec SAsTobias Brunner2012-08-082-0/+51
|
* Class representing an IPsec SA addedTobias Brunner2012-08-084-2/+356
| | | | The IPsec SA also manages the respective ESP context.
* Moved types used by kernel_ipsec_t interface (and libipsec) to libstrongswanTobias Brunner2012-08-082-4/+2
| | | | This avoids a dependency of libipsec to libhydra.
* esp_packet_t implements packet_t interfaceTobias Brunner2012-08-082-66/+100
| | | | This should allow to avoid unnecessary cloning of packet data.
* Headers from libhydra (kernel interface related) are required in libipsecTobias Brunner2012-08-081-1/+3
|
* ESP packet wrapper added, handles encryption/decryption/verification etc.Tobias Brunner2012-08-084-2/+554
|
* Adding class to manage ESP context (crypto, sequence numbers)Tobias Brunner2012-08-084-2/+414
|
* Stub library for user space IPsec implementation added.Tobias Brunner2012-08-084-0/+174